Shibboleth Developer's Meeting, 2021-11-19

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2021-12-03. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

• Releasing the patched maven-javadoc-plugin:

  • What version should I use? I was going to keep it at 3.3.0 so it matches the official version I based it off. But, as Rod noted, the existing patched one will be cached in .m2 repos, so I need to change the version really (and update idp-parent). Suggestions are:

    • 3.3.0-SOMETHING (where SOMETHING does not break the enforcer plugin)

    • 3.3.<HighBaseNumber>

    • Others?

• Maven+Central : build (releases by developers and snapshots by Jenkins) offline (yes/no) ? (Tom)
  If so, we should discuss how ( e.g. Docker with --network none or ? )

• Further need for ec2.shibboleth.net snapshots or instance? Answer: NO

Attendees:

Brent

• IDP-1870: Detect duplicate entityIDs when ingesting metadataClosed

  • Draft impl of this, need to test out to prove works as intended.

Daniel

Henri

Ian

• RHEL/CentOS/Rocky 8.5 are all available now.

  • CentOS 8.5 dies at the end of the year.

  • New with 8.5: Java 17.

    • No RHEL 7 support indicated

    • Supported until October 2027.

  • Reminder: Java 8 supported under RHEL 7 and 8. EOL 2026.

  • Reminder: Java 11 supported under RHEL 7 and 8, EOL 2024 (yes, before 8).

  • Question: declare support for RH Java 17 under RHEL 8 (I think so).

  • Question: do we want to start testing that combination (less clear).

  • Question: we’re still testing under real RHEL 8 (although we have never said that we will). Can we at least switch and save money now that Rocky 8 is available?

John

• Trying to track down Docker images for CentOS 8.5

• Still poking at Fargate/Jenkins

Marvin

Phil

• Further tinker to JCOMOIDC-23: Add OpenID Provider Configuration Document ResolverOpen

  • But parked that now.

• Back to the OIDC-RP flow

Rod

• Lots of minor tidy up stuff

• JPAR-190: Investigate an enforcer to check all jars and poms ~/.m2/.... towards the end of a buildClosed

• Can someone create a java-mvn-enforcer project in Jira (using JPAR is cumbersome and we are beginning to accumulate little bugs)

Scott

• Finalizing SP release, next week at this point.

• Some early research into OAuth requirements

• Documentation cleanup

  • IDP space is free of tabs

  • SP3 space still needs to be converted and de-tabbed

Tom

• Working through removing <repositories> from the POMs and into settings.xml, Eclipse seems to work fine.

• Working through removing Nexus from the public internet and deploying via SSH tunnel (seems fine).

Other