Status of Debian Shibboleth packages for wheezy

Russ Allbery rra at
Fri Jun 22 20:36:39 UTC 2012

Given various earlier discussion about Apache and the log4shib work, I
wanted to give people an update on where the Shibboleth packages stand for
the upcoming Debian 7.0 (wheezy) release.

The short version is that what's currently in Debian testing is what I
plan to release with.  It seems to be a reasonably stable state and is the
latest released version of all of the various packages.  Debian is *not*
attempting to transition to Apache 2.4 for the wheezy release, so having a
Shibboleth implementation that only works with Apache 2.2 is fine.

I've uploaded log4shib and it will release with wheezy, but I do not plan
to upload updated versions of the other packages to link with it.  It's
too late in the release process to make that change at this point, and
we've lived with log4cpp for quite some time, so it doesn't seem to be
urgent.  However, log4shib will be in the wheezy release, which means that
subsequent backported Shibboleth packages will be able to use it without
requiring an additional log4shib backport.

I expect the Apache 2.4 transition to start happening almost immediately
after the wheezy release, which based on prior experience will probably
happen around October or November (or a month or two later if things don't
go well).  By that point, Shibboleth 2.5 should be out with native Apache
2.4 support.  I will build that set of packages against log4shib.

I will probably start staging Shibboleth 2.5 packages built against Apache
2.4 and log4shib in experimental as soon as Shibboleth 2.5 is released.

I unfortunately have no progress to report on packaging the Shibboleth

Russ Allbery (rra at               <>

More information about the Pkg-shibboleth-devel mailing list