11 p.m.
Hi, I'm really really new to Ipsilon (like, just started today trying to
use it as an IdP for AWS SSO). One thing that tripped me up was that the
ipsilon packages available in the CentOS7 repos were pretty ancient.
Is there any effort underway to get the more recent code packaged and in
say RHEL 8.1 repos?
And this is one of those questions that might get me flamed, but please
understand my perspective of someone trying to decide an IdP to put effort
into learning/debugging (and not trying to troll anybody): is Ipsilon a
priority for RedHat such that continuing development is expected? Or does
Shibboleth (or some other IdP) have enough mindshare that making another
product work with Kerberos/IPA might be something RH prefers to pursue in
the future? Just...ignore those questions if they're irritating, please.
Thanks,
Jeff
12:25 a.m.
On 04/12/2019 06:00, Jeff Bachtel wrote:
Hi, I'm really really new to Ipsilon (like, just started today
trying to
use it as an IdP for AWS SSO). One thing that tripped me up was that the
ipsilon packages available in the CentOS7 repos were pretty ancient.
Is there any effort underway to get the more recent code packaged and in
say RHEL 8.1 repos?
And this is one of those questions that might get me flamed, but please
understand my perspective of someone trying to decide an IdP to put
effort into learning/debugging (and not trying to troll anybody): is
Ipsilon a priority for RedHat such that continuing development is
expected? Or does Shibboleth (or some other IdP) have enough mindshare
that making another product work with Kerberos/IPA might be something RH
prefers to pursue in the future? Just...ignore those questions if
they're irritating, please.
Thanks,
Jeff
Hi Jeff,
If you read the RHEL documentation, you'll see that Ipsilon was indeed
in rhel7, but marked as Technology Preview (TP), and then was never
bumped, so what you see in CentOS repositories reflects that.
But we use Ipsilon ourselves for CentOS.org infra (on
https://id.centos.org) and we (re)build the package through
cbs.centos.org, so it's there :
https://cbs.centos.org/koji/buildinfo?buildID=20749 , but you can also
find it on koji.fedoraproject.org, as it's also used in the Fedora infra
too :)
It's also clear, from a Red Hat perspective, that they had/have focus on
Keycloak (https://www.keycloak.org/) and so reason why Ipsilon pkg in
RHEL7 was never bumped to new release/NVR, and not even present in RHEL8.
Hope that it answers your question
--
Fabian Arrotin
gpg key: 17F3B7A1 | twitter: @arrfab
3:32 p.m.
That is very helpful, thank you Fabian (I didn't see the TP bit in the
RHEL7 docs but that it didn't come up in random Googling isn't a big
surprise).
I hope the 2.1 release gets accepted by the distros, the experience with
running in an IPA environment was much nicer (no httpd conf conflicts to
remediate).
On Tue, Dec 3, 2019 at 11:25 PM Fabian Arrotin <fabian.arrotin(a)arrfab.net>
wrote:
On 04/12/2019 06:00, Jeff Bachtel wrote:
> Hi, I'm really really new to Ipsilon (like, just started today trying to
> use it as an IdP for AWS SSO). One thing that tripped me up was that the
> ipsilon packages available in the CentOS7 repos were pretty ancient.
>
> Is there any effort underway to get the more recent code packaged and in
> say RHEL 8.1 repos?
>
> And this is one of those questions that might get me flamed, but please
> understand my perspective of someone trying to decide an IdP to put
> effort into learning/debugging (and not trying to troll anybody): is
> Ipsilon a priority for RedHat such that continuing development is
> expected? Or does Shibboleth (or some other IdP) have enough mindshare
> that making another product work with Kerberos/IPA might be something RH
> prefers to pursue in the future? Just...ignore those questions if
> they're irritating, please.
>
> Thanks,
> Jeff
>
Hi Jeff,
If you read the RHEL documentation, you'll see that Ipsilon was indeed
in rhel7, but marked as Technology Preview (TP), and then was never
bumped, so what you see in CentOS repositories reflects that.
But we use Ipsilon ourselves for CentOS.org infra (on
https://id.centos.org) and we (re)build the package through
cbs.centos.org, so it's there :
https://cbs.centos.org/koji/buildinfo?buildID=20749 , but you can also
find it on koji.fedoraproject.org, as it's also used in the Fedora infra
too :)
It's also clear, from a Red Hat perspective, that they had/have focus on
Keycloak (https://www.keycloak.org/) and so reason why Ipsilon pkg in
RHEL7 was never bumped to new release/NVR, and not even present in RHEL8.
Hope that it answers your question
--
Fabian Arrotin
gpg key: 17F3B7A1 | twitter: @arrfab
_______________________________________________
ipsilon mailing list -- ipsilon(a)lists.fedorahosted.org
To unsubscribe send an email to ipsilon-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/ipsilon@lists.fedorahosted.org
1633
days inactive
1633
days old
ipsilon@lists.fedorahosted.org
2 comments
2 participants
participants (2)
-
Fabian Arrotin -
Jeff Bachtel