Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Shibboleth Developer's Meeting, 2021-02-05

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2021-02-19. Any reason to deviate from this?

60 to 90 minute call window.


Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.


AGENDA

  1. AWS permissions
  2. New Duo plugin release for testing?
  3. 4.1 schedule
    1. when do we need all the JDKs and AMIs in CI ? (Tom)
    2. when do we freeze Jetty ? (Tom)

Attendees:


Brent

  • Jira Legacy
    serverShibboleth JIRA
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId180d847f-bce4-36b2-9964-771bff586829
    keyOSJ-75

    • This turned out to be very easy
  • Jira Legacy
    serverShibboleth JIRA
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId180d847f-bce4-36b2-9964-771bff586829
    keyOSJ-118
    • Done, although still chewing over whether should by default support 30 legacy curves that SunEC currently supports, but which are deprecated and require a system prop in Java 15+.
  • Jira Legacy
    serverShibboleth JIRA
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId180d847f-bce4-36b2-9964-771bff586829
    keyOSJ-82
    • Not quite done on this yet, sidetracked on other things.  All that remains is EncryptionParametersResolver.
  • Jira Legacy
    serverShibboleth JIRA
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId180d847f-bce4-36b2-9964-771bff586829
    keyOSJ-328
    • Pretty sure Scott is right about race condition.  Actually more worried about the related conditions in LazyList, etc.

...

  • automation
    • trying to work through task backlog by scripting
      • takes longer now, hopefully pays off later
      • for example :
        • linux : shell script to install Java, OpenJDK, and Coretto of various versions
          • don't really want to commit scripts to parent because that triggers a stack rebuild
        • windows : PoC running commands on Windows via a Jenkins Pipeline
          • Example :

            Code Block
            languagegroovy
            titleJenkins declarative Pipeline
            collapsetrue
               agent {
                    label 'Windows'
                }
            
                stages {
                    stage('Hello') {
                        steps {
                            echo 'Hello World'
                        }
                    }
                    stage('Display Java version') {
                        steps {
                            bat "c:\\opt\\java\\jdk-11\\bin\\java.exe -version"
                        }
                    }
                }
            }
          • would like to try the Windows Installer from the command line
            • need the command line with all the args
            • (RDW) This should do it (I don't want to document this since it then becomes API):

              Code Block
              languagebash
              titleRuninstallandtest.cmd
              collapsetrue
              start /wait msiexec /q /lv* log.log /i IDP-4.0.1.1-x64.msi INSTALL_JETTY=TRUE DNSNAME=idp.example.com IDP_SCOPE=example.scope
              cd "c:\program files (x86)\shibboleth\
              :loop
              timeout /t 11
              if not exist idp\logs\idp-process.log goto loop
              timeout /t 10
              idp\bin\status.bat
              echo %ERRORLEVEL%
        • working with AWS CLI to start / stop instances and create images
          • should be possible to automate AMI updates via a Pipeline
        • seems easy enough to run Jenkins locally for testing / development of test themselves
          • only takes a few minutes to add and set up the Amazon EC2 Plugin
  • backlog :
    • consent tests
    • update AMIs (CentOS, RHEL, and Windows)
    • kernel update
    • document how to change your password
    • troubleshoot Henri's Nexus access permissions
    • experiment with --Dsurefire.useFile=false in CI to log errors to console
  • Not real happy about IDP-1660, the consent sort-before-hash issue, dropped the ball on that one

...