Updating <Rule> in shibboleth2.xml (was: Shibboleth 2.x packages updated in unstable)

[Russ Allbery]

Kristof BAJNOK <bajnokk at niif.hu> writes:
> On Tuesday 15 September 2009 21.04.09 Russ Allbery wrote:

>> Should we say something in NEWS.Debian about this?

> I can hardly imagine that sites change this from default too often. (I
> never did.) So if we don't have more powerful means, then yes, mention
> it somewhere in the docs.

We could try to do a dynamic update, but we'd need to be sure we only
changed the correct <Rule> tags, which means that the update script would
need to be XML-aware so that it only got the ones in the right context to
solve the general problem.  Definitely possible, but it would take more
than a few minutes thought to figure out the best way to do it.

I suppose if people never changed the defaults, we could do something
simpler.

> I don't know, how long Scott wants to support the legacy syntax. If it's
> expected to be dropped soon (before squeeze freezes), then we should
> take some more steps to avoid breaking upgrades.

That's a good question.  If it's going to be around for a bit, then I'm
inclined to just leave the note in NEWS.Debian and let people manually
change their configurations when they get around to it.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>