Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

Cantor, Scott cantor.2 at osu.edu
Mon Mar 3 21:46:34 UTC 2014


On 3/3/14, 4:27 PM, "Russ Allbery" <rra at debian.org> wrote:
>
>Could you explain a bit more about what the use case is?  I think I
>understand, but I'm not sure.  You're using libshibsp5, and you want the
>standard configuration files, but you aren't using Apache so you don't
>want libapache2-mod-shib2?  (Or, I guess, to be more precise, you don't
>want the apache2-api-20120211 dependency, since the extra files in
>libapache2-mod-shib2 are harmless.)
>
>Do you want shibd?

I would prefer that shibd be included, because it is possible in theory if
not necessarily in current fact to configure the use of things like
Moonshot and SAML-EC to use shibd in some cases.

In other respects, yes, the code in Moonshot is linked to the SP libraries
but isn't necessarily using the Apache module.

>The configuration files obviously can't go into libshibsp5 (see Debian
>Policy 8.2), so I need to understand the use case better to figure out how
>to properly split the packages up.  I know that shibd can be run on a
>separate host from the Apache module, but this isn't currently supported
>by the package breakdown.  Maybe this is a similar sort of case?

Probably would be similar in make up, but not for that purpose.

-- Scott



More information about the Pkg-shibboleth-devel mailing list