...
The extension is hosted (along with other IdP tools) at the DFN-AAI website.
Current version:
You may download the extension (along with documentation and setup instructions) from this direct link:
https://www.aai.dfn.de/fileadmin/tools/unimr-memcached-idp2.4-rev218.tar.gz (330 KB - Revision 218)
Old versions:
https://www.aai.dfn.de/fileadmin/tools/unimr-memcached.tar.gz (329 KB - Revision 151)
An in-depth presentation of the extension (only German, though) was held on the 9. DFN-AAI forum in Berlin (Germany) on 19-Oct-2011. It can be found at this link:
http://www.dfn.de/fileadmin/3Beratung/Betriebstagungen/bt55/forum-aai-haim.pdf (811 KB)
...
This extension has been successfully tested with Shibboleth IdP 2.3 up to 2.34.6.
Some extensions like the x509 login handler and the Kerberos login handler will not work out-of-the-box, as their data objects utilize transient data fields which are not shared during object serialization, thus a workaround still needs to be implemented.
PLEASE NOTE (Revision 151): If using the default UsernamePassword login handler (as supplied with the Shibboleth IdP), you must not preserve the LDAP principals returned by the vt-ldap JAAS login module, as they contain non-serializable data. In other words, just add the following line to your JAAS configuration (login.config):
...
| Code Block | ||||
|---|---|---|---|---|
| ||||
<logger name="unimr.shib2" level="DEBUG" />
<logger name="edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter" level="DEBUG" />
|
(The second logger name was mistakenly adopted from Shibboleth's IdPSessionFilter and may be removed in a future release.)
Finally, restart tomcat.
History
...
Finally, restart tomcat.
History
21-Jul-2011: Revision 151 - First release.
03-Nov-2011: Revision 179 - Second release.
- Updated readme.
- Removed quick-fix for Shibboleth security advisory
http://shibboleth.internet2.edu/secadv/secadv_20110718.txt
(the quick-fix code was never reached AND did not fix the problem).
- Log events are now logged correctly under the respective class names
(unimr.shib2.UniMrMemcachedServletFilter and
unimr.shib2.UniMrMemcachedStorageService).
- Reworked the code (removed copy-paste areas and put the code into
methods, improved log output).
Thanks to Petra Berg from Humboldt University of Berlin, Germany.
16-May-2013: Revision 218 - Current release.
- Fixed an issue with IdP 2.4's new SLO functionality
(the SLO removes the session from the StorageService which lead to
a null-pointer exception in the UniMrMemcachedServletFilter when
retrieving the session, displaying only the default Shibboleth
error page).
License
The IdP Memcached StorageService is released under the Apache License, Version 2.0.
...