Starting work on the shibboleth-sp2 packages

[Russ Allbery]

"Scott Cantor" <cantor.2 at osu.edu> writes:

> As an aside, the other tack to take is to change the software to skip
> validation by default in all cases, including the initial load. I had
> meant to make that an option, but never got around to it.
>
> Basically you'd have a separate package people could install if they
> wanted to turn validation on, but leave them out by default.
>
> That's all pretty much "off the top of my head", so for all I know the
> work involved for me isn't that minor, but it's probably not too bad.

That's a great fallback position if we have to use it.  Thank you for
mentioning it!  I hope it doesn't come to that, but it's really good to
know that there's another option for 2.0.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>