Shibboleth-SP 3.0.4 update

[Sam Hartman]

>>>>> "Cantor," == Cantor, Scott <cantor.2 at osu.edu> writes:

    Cantor,> On 3/13/19, 12:28 PM, "Etienne Dysli Metref"l
    Cantor,> <etienne.dysli-metref at switch.ch> wrote:

    >> Yeah that one:
    >> https://bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/1776489. The
    >> result is Shibboleth conflicts with about every other Apache
    >> module and is uninstallable together with PHP, for example. This
    >> is the most apparent and painful issue to date (beside security
    >> fixes being ignored)... Pretty good for a LTS release, isn't it?
    >> ;P

    Cantor,> Where I'm at is...is that fixable? Is there some timing
    Cantor,> window in which it becomes impossible to produce "official"
    Cantor,> (whatever that means) packages that would resolve the
    Cantor,> conflict, or is there no such thing as "official" anyway,
    Cantor,> in which case this is just somebody doing the work, or...?

It's definitely fixable (and I believe fixed) for Disco, the upcoming
19.04 release.  I think that has the new packages from Debian that I
think work correctly.

For older releases, even for packages in universe, you need to go
through the Ubuntu stable update procedure.
Ubuntu is sometimes a bit more practical than Debian in this regard, and
might accept a stable update to a new version if it fixed a completely
doesn't work problem.  (Debian would almost certainly just drop the
package in that instance).

You definitely could produce a backport package  of the new upstream
version that someone could enable by enabling Ubuntu backports.  (I did
that to make Moonshot available for existing Ubuntu releases that were
already stable around the time I got it into Debian).

If you are not a Ubuntu MOTU developer, you'll need to get a change
request either to old releases  or backports sponsored, but they are
faster about reviewing those requests than Debian generally is.

Because of their involvement on the Debian side, Etienne would be a fine
choice to submit the Ubuntu requests.