OpenSAML user discussion

[Paul Hethmon <>]

On 6/15/09 10:10 AM, "Craig Setera" 
<>
 wrote:

> 1) My understanding is that OpenSAML 2 is not API compatible with 1.1?
> How difficult is it going to be to switch?  Are there good migration
> instructions anywhere?

Not sure on that one, but if there are, they would be on the wiki. I find
the 2.0 stuff pretty straightforward to work with. At some point, you'll
need to make the migration since it's on an EOL path right now. Shib 1 goes
EOL next June, I would assume that also means OpenSAML 1.1.

> 2) At least at the moment, I've been stepping through code and this
> *seems* to be down in the Apache XML security layer.  Does OpenSAML 2
> continue to use the same underlying libraries?  Makes me wonder if I
> will see a difference?

I have not played with the 1.1 stuff. The 2.0 release requires you to
endorse Xerces and Xalan to replace the base JDK parsers, because of bugs in
them. 

-----
Paul Hethmon
Chief Software Architect
Clareity Security, LLC
865.824.1350 - office
865.250.3517 - mobile
www.clareitysecurity.com
-----

God does not play dice with the universe; He plays an ineffable game of his
own devising, which might be compared, from the perspective of any of the
other players, to being involved in an obscure and complex version of poker
in a pitch dark room, with blank cards, for infinite stakes, with a dealer
who won't tell you the rules, and who smiles all the time.

 -- Terry Pratchett, Good Omens