feide-updates

feide-updates@lister.sikt.no

130 discussions

[Feide Updates] Feide IdP update Thursday 15 January at 14:00
by Olav Morken 15 Jan '15

15 Jan '15

Hi, we will deploy a new IdP update Thursday 15 January at 14:00. The changes since the previous update in November are: - Add a new encrypted Google Authenticator twofactor method. This allows the Google Authenticator secret to be stored encrypted in the user directory. (The old "gatest" method will still work, but will be removed in the future.) - Ensure that the userPassword attribute (which may contain the hashed password of the user) never shows up on https://innsyn.feide.no/ . - Log a _very_ truncated hash of the password, to make it easier to tell if a bunch of failed logins are an attempt at brute forcing the password or if it is a browser failure. The logged hash isn't enough to determine the password (too many passwords will share the same value), but it allows us to see if more than one password was attempted. - Include more information about the original cause of the error in the case of authentication errors. E.g. the LDAP error we got when authenticating with the system user. - Various small twofactor cleanups & fixes: - Fix translation for twofactor SMS web pages. - Fix autofocus on twofactor input fields. - Some more debug logging and statistics wrt. twofactor use. - Consistently redirect on the twofactor-pages, to make sure the language selectors are always present. - Simplify code to make API calls to twofactor SMS providers. - Some code cleanup of the twofactor code. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Thursday 6 November at 13:30
by Olav Morken 06 Nov '14

06 Nov '14

Hi, we will deploy a IdP update Thursday 6 November at 13:30. This update contains a few small fixes: * Adjust the text of the SMS messages sent for twofactor authentication. * Change button order for SMS twofactor page to put the buttons in the most common order expected by users. * Clearer error message to the end user when the login fails due to an error in the user directory. * Add eduPersonOrgUnitDN:norEduOrgAcronym as a attribute that can be displayed on https://innsyn.feide.no/ . * Fix a bug triggering a warning in log files. (The bug didn't affect end users, it only triggered a warning in the log.) The update also adds the HTTP user agent to statistics events generated during login, which will allow us to more easily generate up-to-date statistics on browser usage. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Deactivation of SSL 3.0 in Feide
by Olav Morken 16 Okt '14

16 Okt '14

Hi, a bit before 11:00 today, we deactivated SSL version 3.0 in Feide. This was done to mitigate the "POODLE" attack against SSL 3.0 that was announced yesterday. Since almost nobody uses browsers that are so old that they do not support newer protocols, we do not expect many users to be affected by this change. For those that are affected, the solution is to switch to a more modern browser. See the following announcement (in Norwegian) for more information: https://www.feide.no/nyhet/deaktivering-av-ssl-30-i-feide Best regards, Olav Morken UNINETT / Feide

1 0

[Feide Updates] Feide IdP update Tuesday 16 September at 13:30
by Olav Morken 16 Sep '14

16 Sep '14

Hi, we will deploy a IdP update Tuesday 16 September at 13:30. This update contains several minor fixes and improvements to the Feide IdP. It does not alter the messages sent from the Feide IdP in any way. Changes in this release: * Make sure that the user makes an active choice of home organization on the page where they choose the home organization. This is done by removing the default choice of home organization, so that the user cannot continue unless they make a choice. This should hopefully reduce cases where users just click "continue" and end up contacting the user support for whatever organization happened to be the default when the login fails. * Add a link to the page with support addresses for all user home organizations connected to Feide to the page where the user chooses their home organization. This should give users a place to look if they can't find their home organization. * Increase the threshold for showing the "too short interval" page. Due to prefetching in browsers, this page may sometimes be shown without there being an actual error in the SP. We now allow three logins for the same user to the same SP in a 10 second window before we display that error. * Also improve the text on the that page, so that it is clearer that it is a sort of redirect loop between the service provider and Feide. * Hide the national identity number on https://innsyn.feide.no/ , like we already do for the consent page. The user will now have to click a link before the national identity number is shown. * More statistics data for uses of the organization preselection handler. * A slightly better Feide logo in the "more information" section on the login page. * Add the new hot-standby backup hosts to the configuration files, to make it possible to execute various monitoring commands from those hosts (e.g. firewall checks, so that we can make sure that host organizations allow connections from those hosts to their user directories.) The update has been running on the test system since Monday 8 September. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide IdP update Tuesday 2. September at 13:00
by Snorre Løvås 02 Sep '14

02 Sep '14

Hi, We will deploy an IdP update Tuesday September 2nd at 13:00. The main change in this update is preparation for twofactor authentication in Feide and it¹s pilot project. https://www.feide.no/nyhet/pilot-feide-p%C3%A5logging-med-h%C3%B8yere-sikke rhet Regards, Snorre -- Snorre Løvås UNINETT / Feide

2 1

[Feide Updates] Feide performance test Thursday 10 July
by Olav Morken 08 Jul '14

08 Jul '14

Hi, we will be running some light performance tests against the Feide production system on Thursday. The performance tests will not be very intensive, so they should not affect people logging into the production system. Best regards, Olav Morken UNINETT / Feide

1 0

[Feide Updates] Feide IdP update Tuesday 8 July at 14:00
by Olav Morken 08 Jul '14

08 Jul '14

Hi, we will deploy a IdP update Tuesday 8 July at 14:00. This update removes the old signing key and certificates from the Feide IdP. We are currently signing all messages sent from the IdP using the new key & certificate, so this change doesn't actually directly affect any SPs. The removal of the old key & certificate means that they no longer show up in the metadata for Feide, but that shouln't have any effect on SPs connected to Feide. In addition to removing the old key & certificate, we also do a few minor updates to the IdP software: * Ignore whitespace in the beginning or end of the username. * Update the UNINETT-logo to the new logo. * Update the LDAP validator / error logger to accept "-" as a valid character in domain names, and fix logging of some whitespace errors so that they are only reported once. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Network configuration change for Feide servers Wednesday 2 July at 22:00
by Olav Morken 02 Jul '14

02 Jul '14

Hi, there will be a configuration change on the network for the Feide servers this evening. The configuration change should not have any user-visible effect, except for a few seconds interruption of the network traffic as links are turned deactivated and activated. This change enables better error detection for the links between the switches and routers in the network, so that a failed link will be more reliably detected. This will prevent a repeat of the network error we had on Wednesday 14th of May. Best regards, Olav Morken UNINETT / Feide

1 0

[Feide Updates] Feide IdP update Friday 27 June at 13:00
by Olav Morken 27 Jun '14

27 Jun '14

Hi, we will deploy a IdP update Friday 27 June at 13:00. This update is in preparation for changing the default signing key Tuesday 1 July. The update allows us to set a date and time for which all messages sent by the Feide IdP should be signed using the new signature key. The update has been running on the test system for the last month with no problems. Best regards, Olav Morken UNINETT / Feide

1 1

[Feide Updates] Feide consent database downtime Wednesday 21 May
by Olav Morken 22 Mai '14

22 Mai '14

Hi, in order to perform software upgrades, the Feide consent database will be unavailable for 5-10 minutes this evening, from around 19:45. During this time, logins through Feide will still work, but users will have to give consent for attribute transfer at each login. Best regards, Olav Morken UNINETT / Feide

1 1

← Newer
1
...
6
7
8
9
10
11
12
13
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

feide-updates