putmanb [Mon, 6 Jul 2009 18:00:44 +0000 (18:00 +0000)]
Refactor outbound message encoder selection into a distinct method to:
1) consolidate logic and avoid duplication of code
2) check and avoid NPE's if endpoint or binding is null due to misconfiguration
3) allow subclasses to override encoder selection mechanism (re: uPortal work)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2865
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Mon, 6 Jul 2009 05:46:33 +0000 (05:46 +0000)]
Check the inbound SAML message context slot, not the inbound message slot.
This mucks with eventual ECP profile support (e.g. Liberty SSOS).
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2864
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 6 Jul 2009 05:06:58 +0000 (05:06 +0000)]
Parameterize release repository URL
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2863
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Jul 2009 09:29:32 +0000 (09:29 +0000)]
Make user session available via public API, finishes off SIDP-296
Add a few more example information items to login page
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2862
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Jul 2009 05:36:22 +0000 (05:36 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-258
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2861
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 2 Jul 2009 18:32:32 +0000 (18:32 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-281
https://bugs.internet2.edu/jira/browse/SIDP-324
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2860
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 09:23:53 +0000 (09:23 +0000)]
Allow login handler to return an exception and allow that exception to propogate out of the AuthN engine without being rewrapped - SIDP-271
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2859
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:58:10 +0000 (08:58 +0000)]
Forgot to update release notes on last checkin
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2858
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:57:09 +0000 (08:57 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-265
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2857
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 08:12:35 +0000 (08:12 +0000)]
Add # marks before things that aren't metrics to make it easier for scripts to process output
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2856
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 06:54:43 +0000 (06:54 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-292
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2855
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 06:51:39 +0000 (06:51 +0000)]
Provide flags for retaining public and private user credentials, defaults to false so that they are always discarded
Make UsernamePassword login handler alway retain the password as a private credential - SIDP-135
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2854
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Jul 2009 05:24:20 +0000 (05:24 +0000)]
Initial work on new Status handler - SIDP-324
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2853
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 12:33:58 +0000 (12:33 +0000)]
Fix SIDP-261
Update JCE lib version
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2852
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 11:08:18 +0000 (11:08 +0000)]
Fix https://bugs.internet2.edu/jira/browse/SIDP-322
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2851
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 30 Jun 2009 09:17:26 +0000 (09:17 +0000)]
Decrease log level of message - SIDP-318
Clean up some profile handling code and log messages
Make install script executable
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2850
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 23 Jun 2009 16:51:44 +0000 (16:51 +0000)]
Revert change in rev 2833
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2849
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 18 Jun 2009 05:44:05 +0000 (05:44 +0000)]
Add 2 post-processing methods, so subclasses get a chance to process Assertions and Responses.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2848
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 14 May 2009 20:40:56 +0000 (20:40 +0000)]
SIDP-310: Change default relying-party.xml settings for SAML 2 profiles' encryptNameIds parameter from "conditional" to "never"
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2847
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 7 May 2009 15:19:51 +0000 (15:19 +0000)]
Expose servlet init property to enable storing of password in Subject private credential set.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2846
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Thu, 30 Apr 2009 22:48:17 +0000 (22:48 +0000)]
SIDP-306: Remove ClientCertAuth rule from SAML 2 SSO SecurityPolicy in relying-party.xml
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2845
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Tue, 21 Apr 2009 19:38:42 +0000 (19:38 +0000)]
Sync up code broken by recent JOST-28 fix.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2844
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 3 Apr 2009 09:10:55 +0000 (09:10 +0000)]
get rid of really annoying 100 character warning when creating tar files
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2843
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:41:49 +0000 (08:41 +0000)]
fix minor bug that could occur if two null subjects were given by two different login handlers and their results were merged
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2840
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:31:09 +0000 (08:31 +0000)]
Log plan NameID value even if it is encrypted later - SIDP-279
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2839
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 08:21:50 +0000 (08:21 +0000)]
Update libs for 2.1.3 release - SIDP-291
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2838
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 06:15:03 +0000 (06:15 +0000)]
Use $IDP_SCOPE$ to populate IdP scope in conf-tmpl\attribute-resolver.xml - SIDP-285
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2837
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 06:11:45 +0000 (06:11 +0000)]
Add default signing credential to Anonymous relying party config - SIDP-263
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2836
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 3 Mar 2009 06:05:58 +0000 (06:05 +0000)]
Fix incorrect null check - SIDP-277
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2835
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 2 Mar 2009 18:17:33 +0000 (18:17 +0000)]
Quote principal name in database connector in example resolver file. - SIDP-276
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2834
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 2 Mar 2009 18:12:20 +0000 (18:12 +0000)]
Remove reference to external schema file so that the IdP does not try to contact SpringSource when it starts up - SIDP-280
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2833
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Thu, 26 Feb 2009 22:09:23 +0000 (22:09 +0000)]
Set endorsed property based on location of batch file.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2832
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Wed, 25 Feb 2009 23:44:08 +0000 (23:44 +0000)]
Change related to JXT-49.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2831
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Tue, 24 Feb 2009 23:53:15 +0000 (23:53 +0000)]
Partial fix for SIDP-187, use ClassRef in place of DeclRef if setting AuthnContext from AuthnMethod.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2830
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 19 Jan 2009 08:34:55 +0000 (08:34 +0000)]
Implement Serializable
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2829
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 13 Jan 2009 13:52:17 +0000 (13:52 +0000)]
Log JAAS exception occurring during login - SIDP274
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2828
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 23 Dec 2008 07:46:52 +0000 (07:46 +0000)]
Fix module version number
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2827
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Dec 2008 12:38:01 +0000 (12:38 +0000)]
Fix metadata profile handler MIME type - SIDP-262
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2825
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Dec 2008 12:33:11 +0000 (12:33 +0000)]
Note that disabling cookies will cause problems - SIDP-267
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2824
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Dec 2008 12:28:00 +0000 (12:28 +0000)]
Make IdP display its metadata when you hit the entity ID URL - SIDP-268
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2823
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 15 Dec 2008 12:48:59 +0000 (12:48 +0000)]
Fix NPE in container-managed loging error page
Bump version number and grab latest version of shib-common
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2822
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 13 Dec 2008 13:18:47 +0000 (13:18 +0000)]
Optimize collection usage
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2821
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 12 Dec 2008 10:37:40 +0000 (10:37 +0000)]
Optimize collection usage
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2820
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 2 Dec 2008 11:56:06 +0000 (11:56 +0000)]
make sure old library versions are properly cleaned out of IDP_HOME/lib - SIDP-259
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2818
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 1 Dec 2008 12:25:51 +0000 (12:25 +0000)]
Back out last change. This isn't right.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2817
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 1 Dec 2008 06:35:34 +0000 (06:35 +0000)]
Make sure AuthN engine checks that the actual authentication method performed matches SP requirements - SIDP-258
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2816
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Nov 2008 15:46:00 +0000 (15:46 +0000)]
Prevous session is used if the user has an existing session but the SP requests an authentication method that is not currently active. - SIDP-257
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2815
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Nov 2008 13:52:43 +0000 (13:52 +0000)]
Fix case where login handler returns a different authentication method than was used to select it and IdP does not properly create authentication context - SIDP-255
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2814
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Nov 2008 13:24:22 +0000 (13:24 +0000)]
A bit more logging
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2813
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Nov 2008 12:03:08 +0000 (12:03 +0000)]
Bump version numbers to pick up patch levels
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2812
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 27 Nov 2008 09:53:31 +0000 (09:53 +0000)]
Add a bit of logging
Fix NPE that could occur when a login handler overrides the actual authentication method used
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2811
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 26 Nov 2008 14:00:19 +0000 (14:00 +0000)]
Clean up some code so that requests contexts are always available even when message decoding fails - SIDP-251
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2810
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 26 Nov 2008 07:29:14 +0000 (07:29 +0000)]
Signing code in profile handlers and encoders should not just check that a signing credential is supplied, but that a signing key is available in that credential. - SIDP-248
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2809
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 26 Nov 2008 07:23:43 +0000 (07:23 +0000)]
PreviousSession INFO message printed as ERROR message - SIDP-249
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2808
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 26 Nov 2008 07:21:37 +0000 (07:21 +0000)]
AuthenticationEngine::returnToAuthenticationEngine() static method called before servlet init() when clustered. - SIDP 250
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2807
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 26 Nov 2008 07:10:43 +0000 (07:10 +0000)]
IdPSessionFilter throws ArrayIndexOutOfBoundsException on validation of unexpected cookie - SIDP-252
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2806
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Sat, 8 Nov 2008 20:49:36 +0000 (20:49 +0000)]
Fix misnamed role name.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2805
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Mon, 3 Nov 2008 20:29:23 +0000 (20:29 +0000)]
Missing closing tag.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2804
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 3 Nov 2008 09:04:26 +0000 (09:04 +0000)]
fix bug during clean build
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2803
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 3 Nov 2008 08:49:27 +0000 (08:49 +0000)]
wrong dependency scope
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2800
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 3 Nov 2008 08:46:38 +0000 (08:46 +0000)]
Ensure the servlet API (needed by the aacli) is on the classpath but not within the WAR
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2799
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 31 Oct 2008 09:45:06 +0000 (09:45 +0000)]
Undo the move of a public interface, which constitued a public API change, committed in OpenSAML rev 1366
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2796
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 29 Oct 2008 15:00:23 +0000 (15:00 +0000)]
Catch all throwables coming from the JAAS layer in the hopes that Runtime issues don't bubble up to the container
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2795
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
rdw [Wed, 29 Oct 2008 10:20:54 +0000 (10:20 +0000)]
SIDP 243. Quote IDP_HOME when testing for existance. Works for installs to spaces.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2794
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 29 Oct 2008 09:59:00 +0000 (09:59 +0000)]
Remove deserialization work from SAML2 Login context and move it to the SSO profile handler - SIDP-202
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2793
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 29 Oct 2008 08:40:20 +0000 (08:40 +0000)]
Make it easier to use other replication services within the storage service - SIDP-242
Switch to using SHA-1 hash as signatures of session cookies (no longer need a secret key, just an arry of random bytes)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2792
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 28 Oct 2008 07:03:31 +0000 (07:03 +0000)]
ensure the session cookie value are being properly encoded
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2791
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 27 Oct 2008 13:10:18 +0000 (13:10 +0000)]
only apply session filter to profile requests
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2790
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 27 Oct 2008 13:06:17 +0000 (13:06 +0000)]
Add a few logging statements
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2789
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 27 Oct 2008 12:39:12 +0000 (12:39 +0000)]
Add some more info to log
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2788
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 27 Oct 2008 12:28:00 +0000 (12:28 +0000)]
Fix null check and error message
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2787
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 24 Oct 2008 08:32:05 +0000 (08:32 +0000)]
Fix up all unit tests
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2786
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 20 Oct 2008 00:20:08 +0000 (00:20 +0000)]
Switch options so that people aren't confused by what "off" and "all" mean.... sigh....
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2785
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 15 Oct 2008 20:18:56 +0000 (20:18 +0000)]
Attempt to fix address checking when IPv6 addresses are used. - SIDP-235
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2784
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 15 Oct 2008 19:28:35 +0000 (19:28 +0000)]
Fix typo in method signature - SIDP-233
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2783
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 15 Oct 2008 19:24:49 +0000 (19:24 +0000)]
Ensure WAR is regenerated and installed even - SIDP-237
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2782
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 9 Oct 2008 10:40:15 +0000 (10:40 +0000)]
Update to use Q for Eclipse maven plugin
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2781
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 9 Oct 2008 07:57:48 +0000 (07:57 +0000)]
Add RequiredValidUntil filter in to default config
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2780
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 7 Oct 2008 14:47:46 +0000 (14:47 +0000)]
Fix bug introduced with previous fix
Fix memory leak caused by chaining metadata provider incorrectly keeping references to old metadata (and thus not allowing it to be garbage collected)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2779
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 6 Oct 2008 10:48:00 +0000 (10:48 +0000)]
Increase max memory available during tests
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2778
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 6 Oct 2008 07:13:03 +0000 (07:13 +0000)]
Back out changed related to resource backed metadata provider
Update README to note known metadata provider memory leak issue
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2777
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Sun, 5 Oct 2008 04:53:46 +0000 (04:53 +0000)]
SIDP-229: IdP Metadata changes to KeyDescriptor not fully flushed from IdP cache
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2776
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Sun, 5 Oct 2008 04:20:56 +0000 (04:20 +0000)]
SIDP-230: sanity check provided credentials
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2775
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 4 Oct 2008 16:27:37 +0000 (16:27 +0000)]
Add IdP's metadata by default in order to support artifact
More robust metadata provider example using new resource backed provider
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2774
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 2 Oct 2008 16:39:45 +0000 (16:39 +0000)]
Change error message handling around authentication "failures". In specific make sure passive AuthN failures aren't recorded as errors.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2773
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 1 Oct 2008 06:15:44 +0000 (06:15 +0000)]
Update release notes to reflect verified fix of SIDP-212
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2772
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Tue, 30 Sep 2008 00:25:11 +0000 (00:25 +0000)]
SIDP-216: Second of two signed sources of metadata fail after cache expiration
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2771
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Fri, 26 Sep 2008 19:41:44 +0000 (19:41 +0000)]
SIDP-228: Improve error reporting in SAML 2 profile handlers when no encryption key is resolveable for the peer entity ID
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2770
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Fri, 26 Sep 2008 19:16:47 +0000 (19:16 +0000)]
SIDP-27: Default relying-party.xml has SAML2-specific security policy rules included in SAML 1 security policies
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2769
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 23 Sep 2008 03:24:50 +0000 (03:24 +0000)]
Fix class cast exception
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2768
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 22 Sep 2008 13:17:50 +0000 (13:17 +0000)]
Fix typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2767
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 22 Sep 2008 07:09:23 +0000 (07:09 +0000)]
Attempted fix for SIDP-212, still needs to be tested
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2766
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Sep 2008 12:18:16 +0000 (12:18 +0000)]
Include Shib JCE extensions in distribution - SIDP-215
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2765
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Sep 2008 12:04:23 +0000 (12:04 +0000)]
Add optional, but on by default, check to ensure that IdP session cookie comes from the same IP to which it was issued - SIDP-225
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2764
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 19 Sep 2008 11:09:09 +0000 (11:09 +0000)]
Do not take information from request parameters which opens page up to XSS attacks - SIDP-226
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2763
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 16 Sep 2008 09:33:30 +0000 (09:33 +0000)]
Add version and supported specification information into JAR manifiest
Add version class that allows you to execute the library JAR and get the library version number
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2762
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 5 Sep 2008 15:09:13 +0000 (15:09 +0000)]
Excample Terracotta configuration file
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2761
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 3 Sep 2008 09:06:08 +0000 (09:06 +0000)]
Make installer script better handle upgrades
- detect if this particular installer hasn't been run before
- detect if the path given already exists
- copy over new bin and conf files without overwriting old ones
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2760
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 3 Sep 2008 07:00:21 +0000 (07:00 +0000)]
Remove some logging messages
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2759
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 2 Sep 2008 16:34:34 +0000 (16:34 +0000)]
Fix NPEs caused by getting the wrong message from the context
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2758
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca