Shibboleth Developers

[Derek Atkins <>]

Scott,

Is there some particular reason you chose to use gcc-3.2.2-2 and
libstdc++-3.2.2-2 instead of gcc-3.2-7 and libstdc++-3.2-7?  Is there
some known bug(s) in the 3.2-7 versions, or can I downgrade and
rebuild the packages using the standard RH8 compiler?

-derek

Scott Cantor 
<>
 writes:

> I've packed up three binary distributions and put them in the usual place 
> on wayf:
> 
> http://wayf.internet2.edu/shibboleth/shib_target_1.0_rh72_gcc304.tar.gz
> 
> http://wayf.internet2.edu/shibboleth/shib_target_1.0_rh72_gcc32.tar.gz
> 
> http://wayf.internet2.edu/shibboleth/shib_target_1.0_sol8_gcc32.tar.gz 
> 
> The Sun version is built on sunra, the Linux /w gcc 3.04 version on shib2, 
> and the Linux w/ gcc 3.2.2 on shib1. I build out of my
> home directory on each machine, so Derek or whomever could su to cantor and 
> just update the build out of cvs that way if it's
> easiest.
> 
> Each box has an excludes file in my home directory, so I just create the 
> files with:
> 
> tar -cvzf ~/<filename> -X ~/excludes /opt/shibboleth
> 
> The gcc 3.2 version should be used on any RH Linux past 7, and probably 
> most other Linux brands. You'll need the latest libstdc++
> for it.
> 
> The configuration out of the box uses a local sites.xml and trust.xml that 
> support the shibdev.edu origin on shib2, and eventually
> the example.edu origin on wayf once it's updated. The trust file includes 
> the primary CAs people have been using, mapped against
> sites that begin with "urn:mace:incommon:pilot".
> 
> Bob or Walter can fill folks in on the reason we had to change the URIs 
> from InCommon to incommon. We'll have to change the
> attribute URIs as well to adhere to Keith's mace URN draft. Once the new 
> URIs are chosen, no code in the target will change, but
> you'll need to update the shibboleth.ini, AAP.xml, and apache.config files 
> to reflect the new attribute names. (I know, it should be
> one place, but we'll fix that post 1.0 by moving more of the configuration 
> into XML.)
> 
> A complete list of binary dependencies for 1.0 follows:
> 
>       OpenSSL 0.9.7a (0.9.6 on Linux)
>       libcurl 7.10.3 (included)
>       Xerces 2.2 (included)
>       Apache xml-security-c 0.2.0 (included)
>       log4cpp 0.3.4b (included)
>       libapreq 1.1 (included)
> 
> For most of them, newer versions probably don't work, definitely not in 
> some cases, like Xerces.
> 
> Hopefully I'll be in and out of touch, so if there are bugs, file 'em and 
> I'll look at them as I can.
> 
> -- Scott
> 
> 

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       

                        PGP key available

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--