packaging shibboleth identity provider

Csillag Tamas cstamas at digitus.itk.ppke.hu
Tue Jul 26 16:09:41 UTC 2011


Hi,

Today there was a plan mentioned during the lecture give by DSAs at
Debconf11.

It was about improving the websites with some kind of SSO solution
and Shibboleth was mentioned explicitly.

I told them that I operate a Shibboleth identity provider at work (a
Hungarian University) and if needed I can help them. One of them (sorry
I do not remember the name) told me that currently the blocker is that
the identity provider (which is written in java) is not available in
Debian, only the service provider which is an apache module. They told
me to talk to java packagers about that. (If it becomes available
they will request a backport and we can move on.)

I talked to Sylvestre Ledru (I hope I get the name right) and he said
he does not know any specific problems with it and told me to just
mail the java list (so here I am :).

I also cc the shibboleth packagers
(http://wiki.debian.org/Teams/DebianShibboleth)

In Hungary the NIIF (which operates the Hungarian research network)
made some enhancement to it http://software.niif.hu/ so if *this* gets
packaged our university can also benefit from it otherwise if the
official (http://shibboleth.internet2.edu/) it is good for a start.

Now we use it with tomcat6 and there is an apache2 instance proxying
incoming requests, but maybe Jetty is easier from a packager
objective, I do not know (Jetty looks more promising to me anyways).
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJetty7Prepare

Thanks for you reply.
(I will mail a pointer to the DSAs, when this appears in the archive.)

Regards,
  cstamas
-- 
CSILLAG Tamas (cstamas) - http://digitus.itk.ppke.hu/~cstamas




More information about the Pkg-shibboleth-devel mailing list