- feide-updates - lister.unit.no

[Feide Updates] Feide IdP update Thursday 24th of September at 13:00
by Jaime Perez Crespo 23 Sep '15

23 Sep '15

Hi, Tomorrow, Thursday 24th of September, we will add two more servers in production. No downtime is expected as part of that process. Work is scheduled to start at 13:00, and the new servers should be fully operational a few minutes after that time. Regards, -- Jaime Pérez UNINETT / Feide mail: jaime.perez(a)uninett.no xmpp: jaime(a)jabber.uninett.no "Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference." - Robert Frost

1 0

[Feide Updates] Feide IdP update Wednesday 2nd of September at 13:00
by Jaime Perez Crespo 31 Aug '15

31 Aug '15

Hi, We will be deploying an IdP update on Wednesday 2nd of September, at 13:00. This update changes a little bit the text messages received for two-factor authentication, putting the random code first. It also introduces the eduPersonAssurance attribute (1) for those users authenticated with two-factor, allowing service providers to get the level of assurance used during authentication. Schema information has also been removed from innsyn.feide.no. Regards, (1) http://software.internet2.edu/eduperson/internet2-mace-dir-eduperson-201310… -- Jaime Pérez UNINETT / Feide mail: jaime.perez(a)uninett.no xmpp: jaime(a)jabber.uninett.no "Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference." - Robert Frost

1 0

[Feide Updates] Feide IdP update Thursday 6th of August at 13:30
by Jaime Perez Crespo 06 Aug '15

06 Aug '15

Hi, We will be deploying an IdP update tomorrow, Thursday 6th of August, at 13:30. This update is only related to the upcoming two-factor authentication functionality in Feide, and it will have no side effects for our users. It will basically make it possible for our institutions in Feide to control themselves the two-factor authentication methods they can use, which services will they use it with, and for whom it should be enforced. More information about this will be provided when two-factor authentication is coming into production. Regards, -- Jaime Pérez UNINETT / Feide mail: jaime.perez(a)uninett.no xmpp: jaime(a)jabber.uninett.no "Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference." - Robert Frost

1 1

[Feide Updates] Feide IdP update Thursday 9th of July at 13:00
by Olav Morken 09 Jul '15

09 Jul '15

Hi, we will upgrade our IdP software on Thursday 9th of July at 13:00. This update has the following changes: * Preliminary support for new two-factor from version 1.6 of the norEdu* schema. * Some layout improvements on the two-factor authentication pages. * Added preliminary support for version 1.6 of the norEdu* schema in the user attribute viewer. * Start gathering statistics about JavaScript support. This update is currently deployed to our test system. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Tuesday 30th of June at 13:00
by Olav Morken 30 Jun '15

30 Jun '15

Hi, we will upgrade the version of the SimpleSAMLphp library that we use on the Feide IdP next week. We are deploying version 1.13.2. This update is currently deployed to our test system. There should not be any changes to the SAML messages that we send to the service provider as a result of this upgrade, however if you have a service provider connected to our test system, you are still encouraged to do a quick check to verify that both login and logout still works. (We are planning another update in a couple of weeks to get in preliminary support for version 1.6 of the norEduPerson schema, as well as new attributes for two-factor authentication.) Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP server restart Tuesday 11 May at 13:00
by Olav Morken 12 Mai '15

12 Mai '15

Hi, we are going to replace the https-certificates at the administration interfaces of our production servers tomorrow at 13:00. To activate the new certificates, the web server processes need to be restarted. The servers will be restarted one-by-one, so no downtime is required. The certificates replaced are on our administration interfaces. These are not interfaces accessed by anything than internal tools and for administration purposes, so the change is not visible to anything else. Best regards, Olav Morken UNINETT / Feide

1 1

Re: [Feide Updates] Updates to load balancers and performance testing on April 11
by Snorre Løvås 14 Apr '15

14 Apr '15

The switch to the new load balancers went well, and we are now running with those on the production system The subsequent performance testing went as expected. The short version is that there should not be any performance issues the coming semesters with the current setup and configuration. We have identified a some bottlenecks we would like to eliminate. Snorre On 07.04.15, 15.37, "Snorre Løvås" <snorre.lovas(a)uninett.no> wrote: >We will install new load balancers for the Feide production system on Saturday the 11th of April. The login service will run on our secondary system while we are working, so no end users should be affected. The new load balancers have been handling the test system for a month now. > >After the new load balancers are operational, we will run a series of performance tests before returning the login service to the production system. > >Usually, we run the performance tests up to a predefined level based on the number of logins per minute/second we expect in the coming period and with a considerable safety margin. In the performance test on Saturday, our intention is to test the limits of the current setup and look for potential bottlenecks. > > > >Snorre > >-- >Snorre Løvås >UNINETT / Feide > >

1 0

[Feide Updates] Updates to load balancers and performance testing on April 11
by Snorre Løvås 07 Apr '15

07 Apr '15

We will install new load balancers for the Feide production system on Saturday the 11th of April. The login service will run on our secondary system while we are working, so no end users should be affected. The new load balancers have been handling the test system for a month now. After the new load balancers are operational, we will run a series of performance tests before returning the login service to the production system. Usually, we run the performance tests up to a predefined level based on the number of logins per minute/second we expect in the coming period and with a considerable safety margin. In the performance test on Saturday, our intention is to test the limits of the current setup and look for potential bottlenecks. Snorre -- Snorre Løvås UNINETT / Feide

1 0

[Feide Updates] Feide IdP update Thursday 26th of March at 13:30
by Jaime Perez Crespo 26 Mar '15

26 Mar '15

Hi, We will deploy an IdP update on Thursday 26th of March at 13:30. This update provides several improvements, mostly related to two-factor authentication: * New SMS provider. This should alleviate a problem we have observed occasionally about excessively long delivery times. * Phone numbers are anonymized now when displayed through the two-factor authentication pages. * Disable autocompletion on the two-factor authentication input forms. * Support fully-compliant JWE tokens for use with Google Authenticator. * Better logging for two-factor authentication. This will allow us to debug issues more easily. * Other minor fixes and enhancements to the Feide code. This update has been running for a while in the testing infrastructure and no issues has been observed so far. Regards, -- Jaime Pérez UNINETT / Feide mail: jaime.perez(a)uninett.no xmpp: jaime(a)jabber.uninett.no "Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference." - Robert Frost

1 1

[Feide Updates] Feide load balancer change Tuesday 24 February at 14:00
by Olav Morken 09 Mar '15

09 Mar '15

Hi, as part of the process of replacing our current load balancer hardware, we will move our test system to new load balancers Tuesday 24 February at 14:00. Moving the test system to the new load balancers requires a configuration change on our existing load balancers, which is also hosting our production system. However, we do not expect the removal of the test system from the load balancers to have any effect on the production system. Once we have run our test system on the new load balancers for a while, we will transition the production system to the new load balancers as well. We will send a separate notification about that change when we decide on a time for moving the production system. Best regards, Olav Morken UNINETT / Feide

1 3