Bug 56765 - Remove univention-saml package and configuration from 5.2 and remove references to it from other packages
Remove univention-saml package and configuration from 5.2 and remove referenc...
Status: ASSIGNED
Product: UCS
Classification: Unclassified
Component: SAML
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.2
Assigned To: Julia Bremer
UCS maintainers
:
Depends on:
Blocks: 56134 56824
  Show dependency treegraph
 
Reported: 2023-10-23 20:19 CEST by Julia Bremer
Modified: 2024-03-14 11:21 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Julia Bremer univentionstaff 2023-10-23 20:19:18 CEST
SimpleSAMLphp will not be supported in 5.2 anymore, we need to adjust the defaults and remove obsolete code to switch to Keycloak
Comment 2 Florian Best univentionstaff 2024-03-08 11:12:09 CET
The current commits so far are:

univention-updater (17.0.1)
d4e6b0981806 | fix(updater/preup): disable php7.4 apache mod

univention-updater (16.0.14)
e7f623f67618 | Issue #1885: added keycloak migration check

univention-updater (16.0.12)
99d8d2d2924f | feat(saml): remove saml/* UDM objects

univention-server (17.0.3)
63c160e26eb8 | Bug #56765: Remove univention-saml

univention-saml (9.0.2)
63c160e26eb8 | Bug #56765: Remove univention-saml

univention-samba4 (11.0.4)
e8a6de39ae21 | Bug #56765: Remove samba4-saml-kerberos integration - only used for simpleSAMLphp

univention-management-console-module-diagnostic (8.0.5)
a91b38995b88 | Bug #56765: Switch new UMC default to Keycloak

univention-management-console (14.0.2)
a91b38995b88 | Bug #56765: Switch new UMC default to Keycloak

univention-keycloak (3.0.2)
a91b38995b88 | Bug #56765: Switch new UMC default to Keycloak

univention-errata-level (5.2.0-0)
1371cc49ba13 | Bug #56765: remove php-krb5 sources

univention-dvd (7.0.3)
63c160e26eb8 | Bug #56765: Remove univention-saml

univention-directory-manager-modules (17.0.3)
a91b38995b88 | Bug #56765: Switch new UMC default to Keycloak

ucs-test (12.0.6)
a2db4788cd10 | Issue #1717: make SAML tests compatible with Keycloak
63c160e26eb8 | Bug #56765: Remove univention-saml
4cd2b0a59bef | test(keycloak): changed chrome options
3bf7eaa20a64 | Bug #56765: Adjust keycloak tests to 5.2
afd609c0884b | test(keycloak): Adjust keycloak tests to 5.2

ucs-test (10.0.20-9)
1e9570dc5132 | style(keycloak tests): format with ruff

ucs-test (10.0.20-4)
eca782b22032 | Bug #56765: 82_saml/23_check_permissions.py: make file existence optional

ucs-test (10.0.20-17)
2396a221efe4 | fixup! Revert "Bug #56765: Adjust keycloak tests to 5.2"

ucs-test (10.0.20-16)
67fe94849af3 | Issue #1717: make saml test compatible with keycloak
86e23d073e53 | Bug #56765: Adjust keycloak tests to 5.2

ucs-test (10.0.20-15)
0b3a3f1189c8 | Revert "Bug #56765: Adjust keycloak tests to 5.2"

ucs-test (10.0.19-42)
64038bff649c | fixup! Bug #56765: add basis for keycloak support

ucs-test (10.0.19-39)
57d60151c755 | Bug #56765: add basis for keycloak support

ucs-test (10.0.19-29)
ef97520957d5 | test(saml): fixed hardcoded use of ucs-sso.$domainname

ucs-test (10.0.19-26)
66cf70db3b39 | test(saml): migrate SAML tests to pytest
Comment 3 Florian Best univentionstaff 2024-03-14 10:52:42 CET
> https://univention-dist-jenkins.k8s.knut.univention.de/job/UCS-5.2/job/UCS-5.2-0/job/AutotestJoin/SambaVersion=s4,Systemrolle=master/lastCompletedBuild/testReport/00_checks/81_diagnostic_checks/test_run_diagnostic_checks_31_file_permissions_/ failed.

Fixed by lowercase comparision of domainname:
univention-management-console-module-diagnostic (8.0.9)
b841e4f8fd4c | fix(diagnostic): fix correct path of Keycloak certificates


> https://univention-dist-jenkins.k8s.knut.univention.de/job/UCS-5.2/job/UCS-5.2-0/job/AutotestJoin/SambaVersion=s4,Systemrolle=master/lastCompletedBuild/testReport/81_keycloak/04_misc/test_csp/ failed.

Fixed by lowercase comparision of CSP:
ucs-test (12.0.11)
af0ed062522d | test(keycloak): adjust keycloak tests to respect different case

> https://univention-dist-jenkins.k8s.knut.univention.de/job/UCS-5.2/job/UCS-5.2-0/job/AutotestJoin/SambaVersion=s4,Systemrolle=master/lastCompletedBuild/testReport/60_umc/76_ipchange_ucs_sso/master091/ fails.

Improved by using correct "ucs-sso-ng" name:
ucs-test (12.0.12)
c2a1ee7a890a | test(ipchange): use correct "ucs-sso-ng" prefix
Comment 4 Florian Best univentionstaff 2024-03-14 11:21:36 CET
> https://univention-dist-jenkins.k8s.knut.univention.de/job/UCS-5.2/job/UCS-5.2-0/job/AutotestJoin/SambaVersion=s4,Systemrolle=master-part-II/lastCompletedBuild/testReport/40_mail/48_check_ssl_sni/master091/ failed

Fixed by replacing the name and make comparisions lowercase:

ucs-test (12.0.13)
b5126e0a23f2 | test(mail): use correct "ucs-sso-ng" prefix