Plans for Shibboleth SP 2.1 debian packages

Ferenc Wagner wferi at
Sat Nov 29 15:03:52 UTC 2008

Russ Allbery <rra at> writes:

> Patrik Schnellmann <schnellmann at> writes:
>> I can't tell about Red Hat (or Fedora), but the Debian release process
>> makes it almost impossible to have an up-to-date version of Shib in the
>> 'stable' release. Therefore, to me, it is important to have a well
>> maintained package repository for backports that can be installed on the
>> current stable release.  Signed packages would be a plus, though.
> There will definitely be signed 2.1 packages for lenny available from
>, which is fairly official within Debian, shortly after lenny
> releases. hasn't opened for lenny backports yet, for
> obvious reasons, and I'm holding off on uploading 2.1 to unstable until
> after the release freeze is over.
> Assuming plans go forward as currently intended, once lenny releases,
> we'll also be able to upload 2.1 backports for etch to

Thinking about it for a while, it seems like maybe there isn't much
point in releasing 2.0 packages anymore.  Given that a) nobody wants
to use 2.0, b) the Shibboleth package stack is self-contained, c) no
other package depends on them either, d) 2.1 is fully backwards
compatible and e) some people have been using it for months without
issues (end) couldn't we kindly ask the release managers to let it
into Lenny?  Otherwise, the sole point of having 2.0 in Lenny is to be
able to provide official backports...  Of course I may be wrong with
the above points and I have no idea when the release is scheduled now
(but debian-boot makes me feel like it won't happen this year), so had
to put that off my chest.  Please set me straight.

More information about the Pkg-shibboleth-devel mailing list