feide-updates

feide-updates@lister.sikt.no

130 discussions

[Feide Updates] Feide IdP update Monday 16 April 2012
by Olav Morken 17 Apr '12

17 Apr '12

We are planning to do an IdP update at 15:00 on Monday. There should be no user-visible changes due to this update, nor will it affect the SAML 2.0 messages sent and received by the IdP. The main changes are: - New statistics infrastructure. - Some internal restructuring of the way the attribute release consent page works. - New LDAP attribute validator code. This update has been running on our test system since 22. March. We have also tested the new attribute validator code with all the test users without any problems. As usual, if you have any questions or concerns wrt. this update, please contact us at support(a)feide.no. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide consent database downtime Sunday, 25 March from 16:00 to 18:00
by Olav Morken 29 Mar '12

29 Mar '12

Hi, due to required database maintenance, the consent database will be down from 16:00 on Sunday 25th March. The maintenance is excepted to take 1-2 hours. As during previous database downtime, it will be possible to log into Feide while the consent database is down, but users will need to give consent for attribute release each time they log in. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Tuesday 7 February 2012
by Olav Morken 07 Feb '12

07 Feb '12

We are planning to do an IdP update at 15:00 on Tuesday. There should be no user-visible changes due to this update, nor will it affect the SAML 2.0 messages sent and received by the IdP. This update will upgrade PHP to the most recent version (5.3.10) to fix a security issue introduced in PHP 5.3.9. If you have any questions or concerns wrt. this update, please contact us at moria-support(a)uninett.no. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Monday 30 January 2012
by Olav Morken 30 Jan '12

30 Jan '12

We are planning to do an IdP update at 15:00 next Monday. There should be no user-visible changes due to this update, nor will it affect the SAML 2.0 messages sent and received by the IdP. This update will upgrade the Apache and PHP installations on the servers to newer versions. The new versions of Apache and PHP have been deployed to idp-test.feide.no, and can be tested using any test SPs connected to Feide, e.g. https://sp-test.feide.no/ . If you have any questions or concerns wrt. this update, please contact us at moria-support(a)uninett.no. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Thursday 12 January 2012
by Olav Morken 12 Jan '12

12 Jan '12

We are planning to do an IdP update at 15:00 next Thursday. There should be no user-visible changes due to this update, nor will it affect the SAML 2.0 messages sent and received by the IdP. This update will add a fix for a user-assisted cross site scripting vulnerability in simpleSAMLphp. In addition there is a minor change in the timeout when connecting to the consent database. (In some rare cases the timeout was not long enough, which would result in the user unnecessarily being asked for consent. We also have a change in the generation of the "feideSchoolList" attribute, which should make it more lenient towards a common error in the user directories. The update will bring us from revision 3000 of simpleSAMLphp to revision 3009. The full changelog can be viewed here: http://code.google.com/p/simplesamlphp/source/list?path=/trunk/&start=3009 Only the change for the cross-site scripting problem should have any effect on the Feide IdP. There are also some changes for properly handling the "pt-BR" language code, but that language is not enabled. The update has been deployed on idp-test.feide.no, and can be tested using any test SPs connected to Feide, e.g. https://sp-test.feide.no/ . If you have any questions or concerns wrt. this update, please contact us at moria-support(a)uninett.no. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Wednesday 21 December 2011
by Olav Morken 21 Des '11

21 Des '11

We are planning to do an IdP update at 15:00 next Wednesday. There should be no user-visible changes due to this update, nor will it affect the SAML 2.0 messages sent and received by the IdP. The update will bring us from revision 2923 of simpleSAMLphp to revision 3000. The full changelog can be viewed here: http://code.google.com/p/simplesamlphp/source/list?path=/trunk/&start=3000 Most of the changes do not affect code that is in use at the IdP. Some notable changes are: - r2998 improves behaviour if we should get unscheduled downtime of the consent database. - r2951-r2953 implements a workaround for a security problem with XML encryption standard. However, this problem only affects SP installations of simpleSAMLphp, so adding the update to idp.feide.no has not been a high priority. - There have been a number of changes in the code that performs SAML 2.0 metadata updates. In Feide, this is used to fetch external metadata feeds from the Kalmar2 federation. We also have a few changes in the Feide-specific code. One of them is to get statistics about a problem where some users create incorrect bookmarks / links to the Feide login page. The update has been deployed on idp-test.feide.no, and can be tested using any test SPs connected to Feide, e.g. https://sp-test.feide.no/ . If you have any questions or concerns wrt. this update, please contact us at moria-support(a)uninett.no. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide consent database maintenance Wednesday, 14 December between 17:00 and 17:30
by Olav Morken 14 Des '11

14 Des '11

Hi, we just received a notification that due to a bug in PostgreSQL, it will be necessary to do maintenance of the consent database tomorrow. The downtime will be for a few minutes at some time between 17:00 and 17:30. As last time, it will be possible to log into Feide while the consent database is down, but users will need to give consent for attribute release each time they log in. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide consent database upgrade Monday, 5 December between 17:00 and 21:00
by Olav Morken 05 Des '11

05 Des '11

Hi, the PostgreSQL cluster hosting the consent database for idp.feide.no will be upgraded Monday, 5 December. The downtime is expected to last for up to two hours starting at some time after 17:00. During the downtime the users will still be able to log into Feide, but they will have to give consent to the transfer of attributes each time they access a service. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Thursday 24 November 2011
by Olav Morken 24 Nov '11

24 Nov '11

We are planning to do another IdP update at 15:00 this thursday. The update will cause some changes in the way organization selection works on the IdP. There are four changes in this update: 1. Instead of just storing the last organization the user logged in from in the organization cookie, we will store the last five organizations. 2. List the most recent organization(s) for the user in the beginning of the organization drop-down list. 3. Only update the organization cookie after a successful login. (We currently update the cookie whenever the user tried to log in.) 4. The "organization preselection" endpoint has been changed to update the organization cookie instead of a separate "preselection"-cookie. The result of this update is that updating the organization from the preselect-endpoint will always take effect. Previously it did not have any effect if the user had logged in using a different organization at some point during the last 180 days. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Thursday 17th November 2011
by Olav Morken 15 Nov '11

15 Nov '11

Hi, we are planning to do a small update of the Feide IdP at Thursday the 17th of November at 15:00. This update will change the layout of various files and directories at the servers hosting idp.feide.no, but will not cause any changes in the code running on the IdP. It should therefore not have any impact on the behaviour of the IdP. The goal of this update is to get a better separation of code updates and configuration updates in the future. After this change we will be able to leave code changes running on idp-test.feide.no while still being able to move configuration changes into the production system. (By configuration changes, we are referring to the modifications to the configuration for organizations connected to idp.feide.no, i.e. LDAP servers, contact information, and system and test account usernames and passwords.) Best regards, Olav Morken UNINETT / Feide

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

feide-updates