Copyright issue with shibboleth-resolver, getting an original tarball

Cantor, Scott cantor.2 at osu.edu
Mon Aug 25 19:06:08 UTC 2014


On 8/25/14, 2:54 PM, "Sam Hartman" <hartmans at debian.org> wrote:

>The notice file says that the resolver library contains LGPLed code.
>As best I can tell that's not true.
>Also, there's no I2 or Shibboleth consortium copyright, only a JANET
>copyright.
>
>1) Are there any LGPL components in the resolver?

The logging APIs are LGPL, but I agree that that's a bit questionable. I
don't know why I considered that to apply the rest of the libraries, but
it dates back many years,

>2) Are there any additional copyrights that should be in the notice
>file?

All of the work was done on contract to Janet. I don't believe that using
or extending APIs implies that the copyright on the APIs applies to the
new code. If it did, you'd have your answer re: LGPL above, it would have
to be included.

-- Scott




More information about the Pkg-shibboleth-devel mailing list