> Here is how I plan to change dependencies for opensaml2 and > shibboleth-sp2 (see attached diffs). Is it correct? Is getting xerces up to 3.2 an option (or was that already done)? -- Scott