Shibboleth Developers

[Scott Cantor <>]

I've packed up three binary distributions and put them in the usual place on 
wayf:

http://wayf.internet2.edu/shibboleth/shib_target_1.0_rh72_gcc304.tar.gz

http://wayf.internet2.edu/shibboleth/shib_target_1.0_rh72_gcc32.tar.gz

http://wayf.internet2.edu/shibboleth/shib_target_1.0_sol8_gcc32.tar.gz 

The Sun version is built on sunra, the Linux /w gcc 3.04 version on shib2, 
and the Linux w/ gcc 3.2.2 on shib1. I build out of my
home directory on each machine, so Derek or whomever could su to cantor and 
just update the build out of cvs that way if it's
easiest.

Each box has an excludes file in my home directory, so I just create the 
files with:

tar -cvzf ~/<filename> -X ~/excludes /opt/shibboleth

The gcc 3.2 version should be used on any RH Linux past 7, and probably most 
other Linux brands. You'll need the latest libstdc++
for it.

The configuration out of the box uses a local sites.xml and trust.xml that 
support the shibdev.edu origin on shib2, and eventually
the example.edu origin on wayf once it's updated. The trust file includes the 
primary CAs people have been using, mapped against
sites that begin with "urn:mace:incommon:pilot".

Bob or Walter can fill folks in on the reason we had to change the URIs from 
InCommon to incommon. We'll have to change the
attribute URIs as well to adhere to Keith's mace URN draft. Once the new URIs 
are chosen, no code in the target will change, but
you'll need to update the shibboleth.ini, AAP.xml, and apache.config files to 
reflect the new attribute names. (I know, it should be
one place, but we'll fix that post 1.0 by moving more of the configuration 
into XML.)

A complete list of binary dependencies for 1.0 follows:

        OpenSSL 0.9.7a (0.9.6 on Linux)
        libcurl 7.10.3 (included)
        Xerces 2.2 (included)
        Apache xml-security-c 0.2.0 (included)
        log4cpp 0.3.4b (included)
        libapreq 1.1 (included)

For most of them, newer versions probably don't work, definitely not in some 
cases, like Xerces.

Hopefully I'll be in and out of touch, so if there are bugs, file 'em and 
I'll look at them as I can.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--