Shibboleth Developers

[Bernd Oberknapp <>]

On Tue, 20 Oct 2009, Scott Cantor wrote:

> I would welcome any testing of these packages before any go-live decision is
> made. They are versioned well past anything I've published, the build
> service bumps the release number constantly. So they should all upgrade any
> official releases from me.

I've run some tests with openSUSE 11.0, openSUSE 11.1, SLES 10 SP2 and
SLES 11 (all 64 bit, I haven't tried 32 bit yet).

The new installations worked fine but upgrading from existing RPM
packages didn't work as expected because of the package name changes.
What happens when "update if newer version available" is selected
depends on whether the devel packages are installed (conflict which has
to be resolved by hand, log4shib and xmltooling not deinstalled) or not
(liblog4shib and libxmltooling not installed). Removing log4shib and
xmltooling and adding liblog4shib and libxmltooling worked fine so the
update succeeded. Adding obsoletes dependencies to the renamed packages
probably would allow an automatic update of log4shib and xmltooling,
too.

/etc/init.d/shibd and /etc/apache2/conf.d/shib.conf are replaced during
the update. If the rules for protecting content are added to conf.d/
shib.conf (as the secure example suggests) instead or vhosts.d (which I
would recommend) this might be a problem, at least this should be
documented.

Best regards,
Bernd

-- --------------------------------------------------------------------- --
Dipl.-Math. Bernd Oberknapp          Universitaetsbibliothek Freiburg
Tel: +49-761 / 203-3852              Rempartstrasse 10-16  | Postfach 1629
Fax: +49-761 / 203-3987              79098 Freiburg        | 79016 Freiburg