Bug 39310 - Move service provider definition into LDAP
Move service provider definition into LDAP
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.1
Assigned To: Florian Best
Erik Damrose
: interim-1
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-09-04 12:39 CEST by Florian Best
Modified: 2015-11-17 12:12 CET (History)
0 users

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2015-09-04 12:39:25 CEST
Currently the service provider entries for the simplesamlphp identity provider are downloaded each time in a UCR module on all IDP-hosts (i.e. DC backup + DC master) to create the simplesamlphp configuration.

We should change this, that every service provider stores these data on their computer/* object.
A listener module then is able to write the data into the configuration.
Comment 1 Florian Best univentionstaff 2015-09-07 18:45:07 CEST
Implemented. Instead of writing the XML metadata to the computer objects a saml/serviceprovider UDM entry is created in the joinscript of univention-management-console-webserver.
The listener module for saml/serviceprovider has been adapted to allow an (invisble) extra attribute with the raw SAML XML metadata. So we can write the correct simplesamlphp configuration we need for UMC.
Comment 2 Erik Damrose univentionstaff 2015-09-30 15:58:00 CEST
OK, interim bug, no changelog needed
Comment 3 Stefan Gohmann univentionstaff 2015-11-17 12:12:29 CET
UCS 4.1 has been released:
 https://docs.software-univention.de/release-notes-4.1-0-en.html
 https://docs.software-univention.de/release-notes-4.1-0-de.html

If this error occurs again, please use "Clone This Bug".