Re: [Bodington-developers] SP testing on wiki

[Sean M. <se...@sm...>]

Err, Colin, it doesn't need to come out of head, it merely comes out  
of the branch when we split the code.


s


On 5 Jul 2006, at 13:58, Colin Tatham wrote:

> Although I agree with most of what you say (I think) it doesn't  
> seem to address what I was
> suggesting/asking? (Maybe it wasn't supposed to :-) )
>
> 1) Can the SP bit be turned off by default, or re-configured so  
> that the *Shibb* route is via a
> different URL?
> 2) Is the SP code already in HEAD?
>
> Although I agree having a different login route for Shibb isn't as  
> good as a Shunnel(!) releasing
> 2.8 with different URL Shibb is better than not including it at  
> all, especially if we have to take
> the code out of HEAD?
>
> Colin
>
> Alistair Young wrote:
>> Let me clarify first, that the issue is with bod itself, not with
>> what Atif has produced as a shibb module. I suspect the hand of
>> politics involved and as we all know, developers are it's servants.
>>
>> It would seem that local demands have impinged upon the gx philosophy
>> of minimal disruption. e.g. the bod IdP runs without normal users'
>> knowledge and the SP should do the same. We, the gx project as a
>> whole, could have caught this earlier if we'd known about it but we
>> didn't so we couldn't. As the gx project is not about custom coding
>> to local demands then I would say it's fair to ask Atif or someone
>> Leeds can nominate to remove the implications of those local demands
>> and bring bod in line with the minimal philosophy.
>>
>> This means providing a separate shibb route into bod. We've seen it
>> before with webauth etc so it's possible and is arguably the way it
>> should have been.
>>
>> As it stands, it's unacceptable to change the way an institution's
>> users work just so that a feature of the vle can be tested. When
>> opening your vle to shibbed users means inconveniencing your own
>> users, then we have failed. It's bad practice and bad publicity that
>> will only harm bod in the long run.
>>
>> The Guanxi and SOCKET projects enjoy a symbiotic relationship so
>> let's not disturb that. Instead, let's find a way out of this that is
>> benficial to all concerned. Whether that means subcontracting to
>> someone who knows enough about bod to implement this is a matter for
>> discussion.
>>
>> Indeed, we know of someone who is currently available and is fresh
>> from testing bod and has some shibb knowledge to boot ;)
>>
>> Alistair
>>
>>
>> On 5 Jul 2006, at 12:57, Colin Tatham wrote:
>>
>>
>>> Sean Mehan wrote:
>>>
>>>> well, what it does mean is that
>>>>
>>>> 1) GX isn't done, still;
>>>> 2) 2.8 will ship with no SP support unless we delay the 2.8 release
>>>> for an indeterminate amount of time.
>>>
>>> Are the problems with the SP that bad that we remove it for 2.8?
>>> I think the main one is the fact that you can't use the same login
>>> route for Shibb and normal Bod
>>> auth (and the fact that sysadmin has to go via /opensite/). If it's
>>> possible to release it with the
>>> SP stuff turned off, it will work as normal, and if people want to
>>> test the SP, they follow some
>>> short instructions to enable it (and find out that they have to now
>>> login via /opensite/ as sysadmin)?
>>>
>>> Colin
>>>
>>>
>>>
>>>> If it is the case that we still haven't finished GX (with the SP in
>>>> bod being a component of that), then, I suppose that we are  
>>>> beholden
>>>> to Leeds to find the time for
>>>> their current project, which is still giving them money, in  
>>>> order to
>>>> complete a project for which they received all of their money some
>>>> time ago.
>>>>
>>>> As for 2, all things being equal, its a ++2 from me to ship Bod 2.8
>>>> with no SP support.
>>>>
>>>> s
>>>>
>>>>
>>>> On 5 Jul 2006, at 12:13, Alistair Young wrote:
>>>>
>>>>
>>>>
>>>>> nae probs wee man!
>>>>>
>>>>> On 5 Jul 2006, at 12:16, Atif Suleman wrote:
>>>>>
>>>>>
>>>>>
>>>>>> Thanks Alistair for the feedback:
>>>>>> http://www.bodington.org/wiki/index.php?
>>>>>> title=TestRel2.8#Shibboleth_Functionality
>>>>>>
>>>>>> Any work on bodington-sp will have to wait until Socket  
>>>>>> project is
>>>>>> finished at the end of the month.
>>>>>>
>>>>>> Ta
>>>>>> Atif.
>>>>>>
>>>>>>
>>>>>> Sean Mehan wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>> On the SP side, Atif, can you fix the things Al has found there,
>>>>>>> including the documentation? We really need the SP to work as a
>>>>>>> final
>>>>>>> output for GX.
>>>>>>>
>>>>>>> Thanks,
>>>>>>> S
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On 5 Jul 2006, at 10:38, Alistair Young wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> I've updated the testing page:
>>>>>>>> http://www.bodington.org/wiki/index.php?
>>>>>>>> title=TestRel2.8#Shibboleth_Functionality
>>>>>>>>
>>>>>>>> Good work Atif on the sp module but bod itself just isn't ready
>>>>>>>> to be
>>>>>>>> an sp IMHO.
>>>>>>>>
>>>>>>>> Alistair
>>>>>>>>
>>>
>>> -- 
>>> ____________________________________
>>> Colin Tatham
>>> VLE Team
>>> Oxford University Computing Services
>>>
>>> http://www.oucs.ox.ac.uk/ltg/vle/
>>> http://bodington.org
>>>
>>> Using Tomcat but need to do more? Need to support web services,
>>> security?
>>> Get stuff done quickly with pre-integrated technology to make your
>>> job easier
>>> Download IBM WebSphere Application Server v.1.0.1 based on Apache
>>> Geronimo
>>> http://sel.as-us.falkag.net/sel?
>>> cmd=lnk&kid=120709&bid=263057&dat=121642
>>> _______________________________________________
>>> Bodington-developers mailing list
>>> Bod...@li...
>>> https://lists.sourceforge.net/lists/listinfo/bodington-developers
>>
>>
>>
>> Using Tomcat but need to do more? Need to support web services,  
>> security?
>> Get stuff done quickly with pre-integrated technology to make your  
>> job easier
>> Download IBM WebSphere Application Server v.1.0.1 based on Apache  
>> Geronimo
>> http://sel.as-us.falkag.net/sel? 
>> cmd=lnk&kid=120709&bid=263057&dat=121642
>> _______________________________________________
>> Bodington-developers mailing list
>> Bod...@li...
>> https://lists.sourceforge.net/lists/listinfo/bodington-developers
>>
>>
>
>
> -- 
> ____________________________________
> Colin Tatham
> VLE Team
> Oxford University Computing Services
>
> http://www.oucs.ox.ac.uk/ltg/vle/
> http://bodington.org
>
> Using Tomcat but need to do more? Need to support web services,  
> security?
> Get stuff done quickly with pre-integrated technology to make your  
> job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache  
> Geronimo
> http://sel.as-us.falkag.net/sel? 
> cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Bodington-developers mailing list
> Bod...@li...
> https://lists.sourceforge.net/lists/listinfo/bodington-developers
>