[prev in list] [next in list] [prev in thread] [next in thread]
List: shibboleth-users
Subject: Re: Can no longer install net.shibboleth.idp.plugin.authn.duo.nimbus plugin in IdP 4.3.1
From: Philip Smart via users <users () shibboleth ! net>
Date: 2023-05-19 8:15:53
Message-ID: 844D42DC-4805-4A65-8CB2-0EA27FB11C1E () jisc ! ac ! uk
[Download RAW message or body]
[Attachment #2 (text/plain)]
Brian,
Thanks for confirming.
Phil
On 19 May 2023, at 01:08, Brian Moon <bmoon@scu.edu> wrote:
You don't often get email from bmoon@scu.edu. Learn why this is \
important<https://aka.ms/LearnAboutSenderIdentification> Hello Phil,
I can indeed confirm that all is working well with the following in IdP 4.3.1:
* net.shibboleth.oidc.common version 2.2.0
* net.shibboleth.idp.plugin.oidc.config version 1.0.1
* net.shibboleth.idp.plugin.oidc.op version 3.4.0
* net.shibboleth.idp.plugin.authn.duo.nimbus version 1.4.0
Thank you again for your prompt support here.
Cheers!
Brian Moon
Senior System Administrator, Enterprise Systems
Santa Clara University
On Thu, May 18, 2023 at 10:11 AM Philip Smart \
<Philip.Smart@jisc.ac.uk<mailto:Philip.Smart@jisc.ac.uk>> wrote: Hi Brian,
We've now released V1.4.0 of the Duo plugin which is compatible with the latest \
oidc-common version (and hence the new RP and the current OP). If you can try that \
and let me know if it works for you, that would be great.
Phil
> On 18 May 2023, at 18:06, Brian Moon <bmoon@scu.edu<mailto:bmoon@scu.edu>> wrote:
>
> You don't often get email from bmoon@scu.edu<mailto:bmoon@scu.edu>. Learn why this \
> is important Thank you so much for the prompt response, Phil! I can confirm that \
> oidc-common V2.1.0 will install successfully in 4.3.1. And thank you for updating \
> the Duo plugin so quickly so that it will work with oidc-common V2.2.0.
> Cheers!
>
> Brian Moon
> Senior System Administrator, Enterprise Systems
> Santa Clara University
>
>
> On Thu, May 18, 2023 at 5:44 AM Philip Smart via users \
> <users@shibboleth.net<mailto:users@shibboleth.net>> wrote: Hi Brian,
>
> We reverted the max supported IdP version of oidc-common V2.1.0 back to < IdP V5. \
> So you should now be able to install the older commons version. I am currently \
> updating the Duo plugin to support the new commons version, that should get \
> released soon.
> Phil
>
> > On 18 May 2023, at 09:28, Philip Smart \
> > <Philip.Smart@jisc.ac.uk<mailto:Philip.Smart@jisc.ac.uk>> wrote:
> > Hi Brian,
> >
> > Thanks for reporting this. As you've found, there are two issues here:
> >
> > 1. When we released the new version of oidc-common V2.2.0 (on the 15th), we \
> > restricted the supported IdP version for V2.1.0. to IdP < 4.3.0. Given the \
> > current version of Duo requires it, and it was previously supported, this was a \
> > mistake, but I will check with the others. 2. Duo has not been updated to support \
> > the latest version of oidc-common. I will check compatibility ASAP and run it \
> > through the standard tests. If compatible, it probably makes sense to release a \
> > compatible Duo version also ASAP.
> > Phil
>
>
>
> Jisc is a registered charity (number 1149740) and a company limited by guarantee \
> which is registered in England under company number. 05747339, VAT number GB 197 \
> 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 \
> 5800.
>
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by \
> guarantee which is registered in England under company number 02881024, VAT number \
> GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 \
> 697 5800.
>
> Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by \
> shares which is registered in England under company number 09316933, VAT number GB \
> 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 \
> 697 5800.
>
> For more details on how Jisc handles your data see our privacy notice here: \
> https://urldefense.com/v3/__https://www.jisc.ac.uk/website/privacy-notice__;!!MLMg-p \
> 0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq2PpR6dU$
>
> --
> For Consortium Member technical support, see \
> https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!MLMg- \
> p0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq-UPDibo$
> To unsubscribe from this list send an email to \
> users-unsubscribe@shibboleth.net<mailto:users-unsubscribe@shibboleth.net>
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: \
after-white-space;"> <div>Brian, </div>
<div><br>
</div>
Thanks for confirming.
<div><br>
</div>
<div>Phil<br>
<div><br>
<blockquote type="cite">
<div>On 19 May 2023, at 01:08, Brian Moon <bmoon@scu.edu> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div>
<table border="0" cellspacing="0" cellpadding="0" width="100%" \
style="cellpadding:0;border:0;cellspacing:0;display:table;width:100%;table-layout:fixed;border-collapse:seperate;float:none;" \
align="left"> <tbody style="display:block;">
<tr>
<td valign="middle" width="1px" bgcolor="#A6A6A6" cellpadding="7px 2px 7px 2px" \
style="padding:7px 2px 7px 2px;background-color:#A6A6A6;valign:middle"> </td>
<td valign="middle" width="100%" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 15px" \
style="width:100%;background-color:#EAEAEA;padding:7px 5px 7px \
15px;font-family:wf_segoe-ui_normal,Segoe UI,Segoe WP,Tahoma,Arial, \
sans-serif;font-size:12px;font-weight:normal;color:#212121;text-align:left;word-wrap:break-word;">
<div>You don't often get email from bmoon@scu.edu. <a \
href="https://aka.ms/LearnAboutSenderIdentification"> Learn why this is \
important</a></div> </td>
<td valign="middle" align="left" width="75px" bgcolor="#EAEAEA" cellpadding="7px 5px \
7px 5px" style="width:75px;background-color:#EAEAEA;padding:7px 5px 7px \
5px;font-family:wf_segoe-ui_normal,Segoe UI,Segoe WP,Tahoma,Arial, \
sans-serif;font-size:12px;font-weight:normal;color:#212121;text-align:left;word-wrap:break-word;align:left">
</td>
</tr>
</tbody>
</table>
<div>
<div dir="ltr">
<div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> Hello Phil,</div>
<div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> <br>
</div>
<div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> I can indeed confirm \
that all is working well with the following in IdP 4.3.1:</div> <div \
class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"> \
<ul> <li>net.shibboleth.oidc.common version \
2.2.0</li><li>net.shibboleth.idp.plugin.oidc.config version \
1.0.1</li><li>net.shibboleth.idp.plugin.oidc.op version \
3.4.0</li><li>net.shibboleth.idp.plugin.authn.duo.nimbus version 1.4.0</li></ul> \
</div> <div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> Thank you again for \
your prompt support here.</div> <div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> <br>
</div>
<div class="gmail_default" \
style="font-family:arial,helvetica,sans-serif;font-size:small"> Cheers!</div>
<div>
<div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div dir="ltr"><font face="arial, helvetica, sans-serif"><br>
Brian Moon<br>
<font size="1">Senior System Administrator, Enterprise Systems</font></font></div>
<div dir="ltr"><font size="1"><font face="arial, helvetica, sans-serif">Santa Clara \
University</font></font></div> </div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, May 18, 2023 at 10:11 AM Philip Smart \
<<a href="mailto:Philip.Smart@jisc.ac.uk">Philip.Smart@jisc.ac.uk</a>> \
wrote:<br> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex"> Hi Brian,<br>
<br>
We've now released V1.4.0 of the Duo plugin which is compatible with the latest \
oidc-common version (and hence the new RP and the current OP). If you can try that \
and let me know if it works for you, that would be great.<br> <br>
Phil<br>
<br>
> On 18 May 2023, at 18:06, Brian Moon <<a href="mailto:bmoon@scu.edu" \
target="_blank">bmoon@scu.edu</a>> wrote:<br> > <br>
> You don't often get email from <a href="mailto:bmoon@scu.edu" \
target="_blank">bmoon@scu.edu</a>. Learn why this is important<br> > Thank you so \
much for the prompt response, Phil! I can confirm that oidc-common V2.1.0 will \
install successfully in 4.3.1. And thank you for updating the Duo plugin so \
quickly so that it will work with oidc-common V2.2.0.<br> > <br>
> Cheers!<br>
> <br>
> Brian Moon<br>
> Senior System Administrator, Enterprise Systems<br>
> Santa Clara University<br>
> <br>
> <br>
> On Thu, May 18, 2023 at 5:44 AM Philip Smart via users <<a \
href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> \
wrote:<br> > Hi Brian,<br>
> <br>
> We reverted the max supported IdP version of oidc-common V2.1.0 back to < IdP \
V5. So you should now be able to install the older commons version. I am currently \
updating the Duo plugin to support the new commons version, that should get released \
soon.<br> > <br>
> Phil<br>
> <br>
> > On 18 May 2023, at 09:28, Philip Smart <<a \
href="mailto:Philip.Smart@jisc.ac.uk" target="_blank">Philip.Smart@jisc.ac.uk</a>> \
wrote:<br> > ><br>
> > Hi Brian,<br>
> ><br>
> > Thanks for reporting this. As you've found, there are two issues here:<br>
> ><br>
> > 1. When we released the new version of oidc-common V2.2.0 (on the 15th), we \
restricted the supported IdP version for V2.1.0. to IdP < 4.3.0. Given the current \
version of Duo requires it, and it was previously supported, this was a mistake, but \
I will check with the others.<br>
> > 2. Duo has not been updated to support the latest version of oidc-common. I \
will check compatibility ASAP and run it through the standard tests. If compatible, \
it probably makes sense to release a compatible Duo version also ASAP.<br> > \
><br> > > Phil<br>
> <br>
> <br>
> <br>
> Jisc is a registered charity (number 1149740) and a company limited by guarantee \
which is registered in England under company number. 05747339, VAT number GB 197 0632 \
86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 \
5800.<br> > <br>
> <br>
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by \
guarantee which is registered in England under company number 02881024, VAT number GB \
197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 \
5800.<br> > <br>
> <br>
> Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited \
by shares which is registered in England under company number 09316933, VAT number GB \
197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 \
5800.<br> > <br>
> <br>
> For more details on how Jisc handles your data see our privacy notice here: <a \
href="https://urldefense.com/v3/__https://www.jisc.ac.uk/website/privacy-notice__;!!ML \
Mg-p0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq2PpR6dU$" \
rel="noreferrer" target="_blank"> \
https://urldefense.com/v3/__https://www.jisc.ac.uk/website/privacy-notice__;!!MLMg-p0Z \
!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq2PpR6dU$</a> \
<br> > -- <br>
> For Consortium Member technical support, see <a \
href="https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!M \
LMg-p0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq-UPDibo$" \
rel="noreferrer" target="_blank"> \
https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!MLMg-p0 \
Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq-UPDibo$</a>
<br>
> To unsubscribe from this list send an email to <a \
href="mailto:users-unsubscribe@shibboleth.net" target="_blank"> \
users-unsubscribe@shibboleth.net</a><br> <br>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
--===============3190903199498902222==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic