WS-Trust.xsd

[Ferenc Wagner]

Russ Allbery <rra at debian.org> writes:

> "Scott Cantor" <cantor.2 at osu.edu> writes:
>
>>> Scott, can you please confirm that it is safe to remove the reference
>>> to WS-Trust.xsd? If it is then why is it there at all?
>>
>> It's safe if you don't use the ADFS support or if you don't turn on
>> schema validation. If you do both, it will break.
>
> We should probably document that clearly in README.Debian as well and let
> people know that if they want to use ADFS with schema validation, they
> will need to retrieve this file from I2 (or somewhere else) and re-add it
> to the catalog.

As the catalog file is /usr/share/xml/shibboleth/catalog.xml, users
doing so are guarranteed to have their changes obliterated on package
upgrade.  The URL is in the catalog file, though.

It would be better to find out why this problem surfaced with 2.1 and
not with 2.0, and try to enforce the old behaviour by default.  Is it
possible that some default configuration setting was changed?
-- 
Cheers,
Feri.