Shibboleth Developer's Meeting, October 04, 2013

Attendees:

Call Administrivia

Dial-in attendee identification.

Next call is next Friday. Any reason not to meet ?

60 to 90 minute call window.

Brent

Finished (mostly) the refactoring of existing metadata providers to new MetadataResolver API. Outstanding is providing support for Predicates and associated filtering Iterable in a way similar to the v2 CredentialResolvers.
Worked on closing out a bunch of low-hanging-fruit issues for java-support.
Worked on guts of abstract dynamic metadata resolver, going ok. Hope to have some working concrete implementation(s) soon. Will address some detailed technical issues on dev list.

Daniel

Added v2 support for ResultsCaching to the LDAP and RDBMS parsers.

Ian

Rod

Mostly travelling/vacation.
Refresh across the IdP's maven dependencies.
Started playing with typing errors. Learnt so far:
- Do not start the learning process at the bottom of the dependency stack!
- Eclipse will find more errors than just -Xlink:unchecked.
- The use of AttributeValue vs AttributeValue<?> is a mess. This will require a wide ranging checkin when I get back from my travels.

Can the meeting get closure on Interfaces/BaseClass discussion, also which interfaces can now be renamed IdPXXXX ?

Scott

Stable IdPSession and ServiceSession interfaces

Working implementation of a SessionManager/SessionResolver based on StorageService, continuing to add unit tests. Built in option to limit impact of storage errors, and enable/disable service session tracking/indexing.

Not sure we need a single-node in-memory version just to make it faster for people running one server

TODOs:

SAML2ServiceSession extension class and serializer
How to manage cookie capture of session ID in the server-side storage case? Inside or outside SessionManager/Resolver?
How to manage cookie-based StorageService? Maybe a Java filter?
Complete some of the stubbed out session-related profile actions (depends somewhat on the previous two bullets)
Probably want at least two other storage back-ends ideally, JDBC and memcache maybe?

Confluence 5.3 is out, so need to test that. It apparently supports user account renames now.

Tom

+ vt-crypt

Need input from Daniel and Marvin, and Brent.

+ rename java-parent-project-v3 to java-parent-project

Need Brent's help with svn mechanics and advice.

+ idp front end

+ Rod : When you have time

IdPv2 issue and porting to v3, tests.

Annotate and clean up idp-attribute-*-spring.

Test contributed v3 attribute-filter.xml files.

+ Attribute -> IdPAttribute

+ AttributeDefinition, DataConnector, BaseResolverPlugin interfaces

+ Abstract* and Base* naming convention

+ Infrastructure

Nexus upgrade - no luck with previous contact.

Jenkins : Ian, when do you have time again ? Later ?

Remove unsubscribe footer from mail lists ?

Remove /confluence from path ?

+ Tomcat7/8 dta-ssl contribution

https://github.com/Unicon/shibboleth-tomcat-dta-ssl

http://marc.info/?l=shibboleth-dev&m=138065948329556&w=2

Other

Browser not supported