2015-02-06

Owned by Ian Young
Last updated: Feb 06, 2015 by Brent Putman

Shibboleth Developer's Meeting, 2015-02-06

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2015-02-20. Any reason to deviate from this?

60 to 90 minute call window.

 

Call Details

This week's call will use the Lync system at OSU. To participate, call:

  • +1 (614) 688-1800 (please use if possible)
  • +1 (800) 678-6114 (use only if you're charged for the 614 number)

The Conference ID is: 738127#

International participants should be able to access the 800 number without charge through Skype.

Attendees:

 

Brent

  •  V2 Release
  • Open Issues
    • OSJ-83 -  HttpClient + TrustEngines
    • OSJ-104 - bug in metadata encryption params resolver
    • SSPCPP-642 and IDP-574 - general "algorithms in metadata" topic - anything to discsus?
  • Research on OpenSAML 2.x + xmlsec 2.x - bug report from CXF/WSS4J/Santuario
  • I have been learning Git - whoohoo!
    • state of Eclipse support? Any gotchas, need-to-knows?
  • Starting to re-familiarize myself with the delegation code.

 

Daniel

  • vt-ldap 3.3.9
    • no longer supports referral chasing with credentials using startTLS
  • ldaptive 1.0.6
    • would like this to make v3.1
  • OSJ-101
    • Incorrect API implementation, working on unit tests
  • OSJ-103
    • Documentation needed for JPAStorage schema, users should not use auto generated

Ian

 

Marvin

  • Nothing to report.

Rod

  • Agenda item: IDP-592
  • Have been working on Documentation and EDS
  • EDS V1.1.  
    • ARIA (screen reader) proceeding very well.  Big thanks to the two Keiths @ Illinois.
    • Final adjustments pending,
    • Peter (Vienna) ran out of time so I need to double test his fixes
    • Would like to run the RC2 on our SPs onces its done. (next week?)

 

Scott

SP

  • log4shib update to fix remote syslog support
  • xml-security update to hopefully fix ECDSA signature support
    • Tried against IdP but had trouble with Java parsing the certificate
  • A couple more bugs to try and reproduce and then it's done

IdP

  • IDP-585, 586 - Resolver bugs around caching while testing the null value fix last weekend
    • Spring parser for ResultCache was getting very hairy so I disabled support for cacheResults, don't know how far back we formally deprecated it
  • IDP-564 - Prevented override of storage plugin for replay and artifact caches
  • IDP-578 - Regression where attribute resolver failure aborted flows, now an option people can control
  • IDP-595 - Forgot to implement WantAssertionsSigned
    • Decided to leave this as a "special" override rather than handle through predicates directly

Would like to look at releasing 3.1 within a couple of weeks if we can get the storage bugs fixed.

Tom

Would like advice regarding the consent related JPA storage service issues OSJ-101 (masking I/O errors) and OSJ-103 (storage record value size).

Started looking deeper at Web/HTML5/Local Storage, doesn't seem to fit our server-side storage service model. Would be good to bounce ideas of off someone.

 

 

Other