Bug#540223: RM: shibboleth-sp -- ROM; obsolete, FTBFS

Russ Allbery rra at debian.org
Thu Aug 6 17:03:23 UTC 2009

Package: ftp.debian.org
Severity: normal

shibboleth-sp is the Shibboleth 1.x Apache module.  The current upstream
recommended release is the 2.x series, which is backward-compatible with
Shibboleth 1.x IdPs.

Shibboleth 1.x only gets critical bug fixes and will be going out of
support entirely in June of 2010.  We therefore will not want to include
it in the squeeze release.  Since it does not support Xerces-C 3.x and
some of its dependency libraries (xml-security-c in particular) are
transitioning to Xerces-C 3.x at the request of the Xerces-C maintainer,
it's now uninstallable and unbuildable in unstable.

Maintaining separate packages of its dependency libraries built against
the old Xerces-C isn't worth it when it won't be part of the next stable
release anyway.  Now seems like a good time to remove it.

More information about the Pkg-shibboleth-devel mailing list