Hi, I'm really really new to Ipsilon (like, just started today trying to use it as an IdP for AWS SSO). One thing that tripped me up was that the ipsilon packages available in the CentOS7 repos were pretty ancient.
Is there any effort underway to get the more recent code packaged and in say RHEL 8.1 repos?
And this is one of those questions that might get me flamed, but please understand my perspective of someone trying to decide an IdP to put effort into learning/debugging (and not trying to troll anybody): is Ipsilon a priority for RedHat such that continuing development is expected? Or does Shibboleth (or some other IdP) have enough mindshare that making another product work with Kerberos/IPA might be something RH prefers to pursue in the future? Just...ignore those questions if they're irritating, please.
Thanks, Jeff
On 04/12/2019 06:00, Jeff Bachtel wrote:
Hi, I'm really really new to Ipsilon (like, just started today trying to use it as an IdP for AWS SSO). One thing that tripped me up was that the ipsilon packages available in the CentOS7 repos were pretty ancient.
Is there any effort underway to get the more recent code packaged and in say RHEL 8.1 repos?
And this is one of those questions that might get me flamed, but please understand my perspective of someone trying to decide an IdP to put effort into learning/debugging (and not trying to troll anybody): is Ipsilon a priority for RedHat such that continuing development is expected? Or does Shibboleth (or some other IdP) have enough mindshare that making another product work with Kerberos/IPA might be something RH prefers to pursue in the future? Just...ignore those questions if they're irritating, please.
Thanks, Jeff
Hi Jeff,
If you read the RHEL documentation, you'll see that Ipsilon was indeed in rhel7, but marked as Technology Preview (TP), and then was never bumped, so what you see in CentOS repositories reflects that.
But we use Ipsilon ourselves for CentOS.org infra (on https://id.centos.org) and we (re)build the package through cbs.centos.org, so it's there : https://cbs.centos.org/koji/buildinfo?buildID=20749 , but you can also find it on koji.fedoraproject.org, as it's also used in the Fedora infra too :)
It's also clear, from a Red Hat perspective, that they had/have focus on Keycloak (https://www.keycloak.org/) and so reason why Ipsilon pkg in RHEL7 was never bumped to new release/NVR, and not even present in RHEL8.
Hope that it answers your question
That is very helpful, thank you Fabian (I didn't see the TP bit in the RHEL7 docs but that it didn't come up in random Googling isn't a big surprise).
I hope the 2.1 release gets accepted by the distros, the experience with running in an IPA environment was much nicer (no httpd conf conflicts to remediate).
On Tue, Dec 3, 2019 at 11:25 PM Fabian Arrotin fabian.arrotin@arrfab.net wrote:
On 04/12/2019 06:00, Jeff Bachtel wrote:
Hi, I'm really really new to Ipsilon (like, just started today trying to use it as an IdP for AWS SSO). One thing that tripped me up was that the ipsilon packages available in the CentOS7 repos were pretty ancient.
Is there any effort underway to get the more recent code packaged and in say RHEL 8.1 repos?
And this is one of those questions that might get me flamed, but please understand my perspective of someone trying to decide an IdP to put effort into learning/debugging (and not trying to troll anybody): is Ipsilon a priority for RedHat such that continuing development is expected? Or does Shibboleth (or some other IdP) have enough mindshare that making another product work with Kerberos/IPA might be something RH prefers to pursue in the future? Just...ignore those questions if they're irritating, please.
Thanks, Jeff
Hi Jeff,
If you read the RHEL documentation, you'll see that Ipsilon was indeed in rhel7, but marked as Technology Preview (TP), and then was never bumped, so what you see in CentOS repositories reflects that.
But we use Ipsilon ourselves for CentOS.org infra (on https://id.centos.org) and we (re)build the package through cbs.centos.org, so it's there : https://cbs.centos.org/koji/buildinfo?buildID=20749 , but you can also find it on koji.fedoraproject.org, as it's also used in the Fedora infra too :)
It's also clear, from a Red Hat perspective, that they had/have focus on Keycloak (https://www.keycloak.org/) and so reason why Ipsilon pkg in RHEL7 was never bumped to new release/NVR, and not even present in RHEL8.
Hope that it answers your question
-- Fabian Arrotin gpg key: 17F3B7A1 | twitter: @arrfab
ipsilon mailing list -- ipsilon@lists.fedorahosted.org To unsubscribe send an email to ipsilon-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/ipsilon@lists.fedorahosted.org
ipsilon@lists.stg.fedorahosted.org
-
Fabian Arrotin -
Jeff Bachtel