An open discussion list for topics related to the eduGAIN interfederation service.

[Lukas Hämmerle <lukas.haemmerle AT switch.ch>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02.07.14 11:23, Peter Schober wrote:
> I'm a bit unhappy with some of the (obviously well-intended)
> things happening in the eduGAIN wiki, at 
> https://wiki.edugain.org/isFederatedCheck/ which I discovered just
> now.

It's still work in progress and there is a reason why this tool has
not been widely announced yet :-) So, feedback like this is welcome.


> For one the code seems to be using Organization(DisplayName) even
> for entities having mdui:DisplayName populated

That's not intended, will have a look at the code. MDUI should have
precedence.


> I also don't know why the eduGAIN wiki consumes non-eduGAIN
> metadata from individual federations /at all/ and why Yet Another
> MET-style tool really was necessary

In short purpose is slightly different. For some info the tools
references to MET. But doing checks for several hundred domains
against MET turned out to be very very slow.


> As an aside, the non-eduGAIN metadata URLs used (at least in our
> case) are not correct date, not even matching what we documented in
> the Federation Survey (REFEDS wiki).

That might be, sorry. Will be fixed within an hour.

To be fair, many pages on the Federations Wiki are out-dated. So, a
lot of handwork was needed to get the URLs in some cases (for the
other's including ACONets I used the ones that Brook's catalog uses).


> Finally and most importantly I do NOT want the tool to provide 
> individual *unsigned* entity descriptors from the eduID.at 
> metadata. Example: 
> https://wiki.edugain.org/isFederatedCheck/?path=/aconet/entities/https%3A%2F%2Fopenidp.aco.net%2Fsaml

Good
> 
point. Easy to fix. Main idea was to provide this for debugging
purposes.


> I would strongly suggest to drop that feature.

I removed it.


> Along those same lines I would also prefer for the tool to NOT
> offer URLs to individual federations' metadata, without any mention
> or reference to a signing key, esp. with the link named
> "Download". Noone should download eduID.at (or any other, for that
> matter) based on a URL from the eduGAIN wiki, for whatever reason.

The reason for that was exactly to find the issues you mentioned above
("you are not using our correct metadata"). Option would be to instead
link to an official metadata page where all that information can be found.


Best Regards
Lukas

- -- 
SWITCH
Lukas Hämmerle, Central Solutions
GÉANT Project Task Leader "Enabling Users"
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 05, direct +41 44 268 15 64
lukas.haemmerle AT switch.ch, http://www.switch.ch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=CeWn
-----END PGP SIGNATURE-----