Shibboleth Developer's Meeting, May 3, 2013
Attendees:
Call Administrivia
Next call is next Friday.
60 to 90 minute call window.
Brent
Refactoring message handlers. Porting v2 messaging layer components, decoders and encoders, security policy rules, to v3.
Harmonizing security policy rules, probably will turn into message handlers. Lower them in the stack.
Daniel
RDMBSParser committed last night. RDBMS/LDAPDC Parsers are probably 80% done. Next, look at StoredId database.
AI : Tom should send note regarding next steps for security configuration.
Scott : support for multiple symmetric keys in data sealer ?
Summing up LDAP and DB stuff, they are about in the same place. Still need Velocity templates and caching.
Ian
Anyone aware of a deployment using xmlsectool or aware of a federation doing metadata signing, wondering if they have plans to move to SHA256.
- Wrap up documentation regarding scope extension, semi-formalize as a specification.
- Triage aggregator issues.
Marvin
Working on converting CAS protocol actions to Scott's new opensaml AbstractProfileAction.
Rod
- Retrofitting Coding guidlines (ongoing)
- Attribute Encoders
- Next : attribute filters
- Then: ???
Scott
Tom
Committed a first pass at idp-distribution. Our Maven release profile is not exactly compatible with what I did, AI. Also, want to give a go at Marvin's monolithic Jetty XML configuration file style, since the default jetty-ssl.xml is somewhat incompatible with absolute paths. And I would like to see if it is possible to replace the need for jetty9-dta-ssl using the Jetty DSL.
Anyway, in idp-distribution run 'mvn package', then 'java -jar start.jar' in target/idp-distribution/jetty, and browse to the IdP StatusServlet URL.
Next, I would like to include the attribute-cli in idp-distribution, as well as toy with idp-shell to generate metadata and credentials after unpacking.
For some reason, I wrote a script to checkout our source via svn, and then committed it to https://github.com/tomzeller/helpers :-/ I have a rule to not write shell scripts, but I did.
Topics
Decisions
Coding convention : getLdapUrl or getLDAPURL
Decide ?