[Shib-Users] Xerces 3.1.0 NOT supported

[Ferenc Wagner]

"Scott Cantor" <cantor.2 at osu.edu> writes:

> FYI, the fix is checked in on the branch and the bug was closed. The
> rollback was the right fix, because the original problem report that led to
> the change wasn't even clearly correct, so it's a risk free change.
>
> However, it does lead me to ask, if in fact Debian were to patch the code,
> whether the version would still be 3.1.0?

As far as I know, yes.

> I can't very well test for that version in configure and block it if Debian
> needs the code to build on top of a fixed version of 3.1.0, or at least I
> can't make it a mandatory check.

If Debian can change its Xerces 3.1.0, surely it can change its
Shibboleth SP as well.  Just please don't obfuscate that configure
check too much. :)

> This was partly why I didn't think such a patch would be forthcoming ahead
> of the next Xerces release...it causes havoc with such tests if the versions
> don't match. I realize that configure tests *should* be functional and not
> based on version, but many tests are based on version in practice, and
> writing functional tests for complex problems is a lot of work and can be
> difficult to rely on in some cases.

If you wrote a functional check for this, we'd appreciate it, but don't
invest significant time into that: it's probably easier for us to patch
the configure check during packaging.  It may not be the nicest option,
but probably the most efficient one.
-- 
Regards,
Feri.