/
2013-10-04

2013-10-04

Jul 29, 2021

Shibboleth Developer's Meeting, October 04, 2013

Attendees: 

Call Administrivia

Dial-in attendee identification.

Next call is next Friday. Any reason not to meet ?

60 to 90 minute call window.



Brent

  • Finished (mostly) the refactoring of existing metadata providers to new MetadataResolver API. Outstanding is providing support for Predicates and associated filtering Iterable in a way similar to the v2 CredentialResolvers.

  • Worked on closing out a bunch of low-hanging-fruit issues for java-support.

  • Worked on guts of abstract dynamic metadata resolver, going ok.  Hope to have some working concrete implementation(s) soon.  Will address some detailed technical issues on dev list.

 

Daniel

  • Added v2 support for ResultsCaching to the LDAP and RDBMS parsers.

Ian

 

Rod

  • Mostly travelling/vacation. 

  • Refresh across the IdP's maven dependencies.

  • Started playing with typing errors. Learnt so far:

    • Do not start the learning process at the bottom of the dependency stack!

    • Eclipse will find more errors than just -Xlink:unchecked.

    • The use of AttributeValue vs AttributeValue<?> is a mess.  This will require a wide ranging checkin when I get back from my travels.

Can the meeting get closure on Interfaces/BaseClass discussion, also which interfaces can now be renamed IdPXXXX ?

Scott

Stable IdPSession and ServiceSession interfaces

Working implementation of a SessionManager/SessionResolver based on StorageService, continuing to add unit tests. Built in option to limit impact of storage errors, and enable/disable service session tracking/indexing.

Not sure we need a single-node in-memory version just to make it faster for people running one server

TODOs:

  • SAML2ServiceSession extension class and serializer

  • How to manage cookie capture of session ID in the server-side storage case? Inside or outside SessionManager/Resolver?

  • How to manage cookie-based StorageService? Maybe a Java filter?

  • Complete some of the stubbed out session-related profile actions (depends somewhat on the previous two bullets)

  • Probably want at least two other storage back-ends ideally, JDBC and memcache maybe?

 

Confluence 5.3 is out, so need to test that. It apparently supports user account renames now.

Tom

+ vt-crypt

Need input from Daniel and Marvin, and Brent.

 

+ rename java-parent-project-v3 to java-parent-project

Need Brent's help with svn mechanics and advice.

 

+ idp front end

 

+ Rod : When you have time

IdPv2 issue and porting to v3, tests.

Annotate and clean up idp-attribute-*-spring.

Test contributed v3 attribute-filter.xml files.

 

+ Attribute -> IdPAttribute

 

 

+ AttributeDefinition, DataConnector, BaseResolverPlugin interfaces

 

+ Abstract* and Base* naming convention

 

+ Infrastructure

Nexus upgrade - no luck with previous contact.

Jenkins : Ian, when do you have time again ? Later ?

Remove unsubscribe footer from mail lists ?

Remove /confluence from path ?

 

+ Tomcat7/8 dta-ssl contribution

https://github.com/Unicon/shibboleth-tomcat-dta-ssl

http://marc.info/?l=shibboleth-dev&m=138065948329556&w=2

 

Other