<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Thanks, it works now.</p>
<p>However I can't get
<a class="moz-txt-link-freetext" href="https://testidpshibbpleth.irf.se/idp/profile/admin/webauthn-management">https://testidpshibbpleth.irf.se/idp/profile/admin/webauthn-management</a>
to work.</p>
<p>It's not a software issue. The reason is that I have not enough
knowledge to configure the admin users. As I understand that
should be done in access-control.xml.<br>
The policy name is by default AccessByAdmin. How should that be
configured in access-controll.xml.</p>
<p>/Regards Mats<br>
</p>
<div class="moz-cite-prefix">On 2024-10-29 11:35, Philip Smart
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DE59B879-3A2D-41F1-92D0-3D474B564E96@jisc.ac.uk">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Ah yes. Please see <a
href="https://shibboleth.net/pipermail/dev/2024-September/011213.html"
moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.net/pipermail/dev/2024-September/011213.html</a>.
Specifically, <a
href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing"
moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing</a>.
<div><br>
</div>
<div>As you will be downloading directly from Nexus, you will need
to first download (and trust) the Jenkins key (
<a
href="https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS"
moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS</a>). </div>
<div><br>
</div>
<div>Which you can then use with the latest build of the SNAPSHOT:</div>
<div><br>
</div>
<div><span
style="white-space: pre-wrap; color: rgb(29, 28, 29); font-family: Monaco, Menlo, Consolas, "Courier New", monospace; font-variant-ligatures: none; orphans: 2; widows: 2; background-color: rgba(29, 28, 29, 0.04); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">shibboleth-idp/bin/plugin.sh
--noCheck --truststore SHIBBOLETH_SNAPSHOT_PGP_KEYS -i <URL or filename of latest snapshot></span></div>
<div><br>
</div>
<div>
<div>Phil</div>
<div><br>
<blockquote type="cite">
<div>On 29 Oct 2024, at 10:05, Mats Luspa via dev
<a class="moz-txt-link-rfc2396E" href="mailto:dev@shibboleth.net"><dev@shibboleth.net></a> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div>
<p>Hello!</p>
<p>Thanks for the clarification. <br>
</p>
<p>But I don't know how to download those
snapshot-versions. I got that I miss a key in the
truststore.<br>
Are there instructions on how to download these
versions or are you going to make a new prerelease
version that is downloadable without key?</p>
<p>/Regards Mats<br>
</p>
<div class="moz-cite-prefix">On 2024-10-29 10:58, Philip
Smart via dev wrote:<br>
</div>
<blockquote type="cite"
cite="mid:741B3EDB-5977-4C55-B355-8FD6C53DF025@jisc.ac.uk">
Hi Mats,
<div><br>
</div>
<div>Sorry for the confusion, but version 0.0.3 is not
the latest version of the plugin, I should probably
remove that. The current release candidate is
0.9.0-SNAPSHOT, see <a
href="https://shibboleth.net/cgi-bin/projstatus.cgi"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://shibboleth.net/cgi-bin/projstatus.cgi</a>.
That should be up to date and include the fixed
version of the Yubico metadata library that deals
gracefully with unrecognised fields. </div>
<div><br>
</div>
<div>Please note that the release candidate (version
0.9.0) differs slightly from the earlier beta
version (0.0.3). So it would be best to remove the
old one and install the new one fresh. </div>
<div><br>
</div>
<div>Phil<br id="lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On 29 Oct 2024, at 06:31, Mats Luspa via
dev <a class="moz-txt-link-rfc2396E"
href="mailto:dev@shibboleth.net"
moz-do-not-send="true">
<dev@shibboleth.net></a> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div>Hello!<br>
<br>
I've installed webauthn plugin version 0.0.3
(downloadable pre-release) and I tried to
use Fido metadata service.<br>
<br>
However I got the following error message:<br>
<br>
at
net.shibboleth.idp.plugin.authn.webauthn.metadata.FidoMetadataServiceFactory.getObject(FidoMetadataServiceFactory.java:121)^M<br>
Caused by:
com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException:
Unrecognized field "iAPARThreshold" (class
com.yubico.fido.metadata.BiometricAccuracyDescriptor$BiometricAccuracyDescriptorBuilder),
not marked as ignorable (5 known properties:
"blockSlowdown", "maxRetries",
"maxTemplates", "selfAttestedFRR",
"selfAttestedFAR"])<br>
<br>
It seems the field "iAPARThreshold" in the
metadata is not recognized.<br>
<br>
When I disable the use of Fido metadata
service the registration process works, but
of course I want to use the service.<br>
<br>
Is it possible to work around this with some
configuration?<br>
<br>
/Regards Mats<br>
<br>
-- <br>
--<br>
Mats Luspa<br>
Phone: +46 (0)980 79 022<br>
Cellular phone: +46 (0)725813330<br>
Institutet för rymdfysik Fax:
+46 (0)980 79 050<br>
Swedish Institute of Space Physics
email: <a
class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:matsl@irf.se"
moz-do-not-send="true">
matsl@irf.se</a><br>
Visiting/Delivery address: Bengt Hultqvists
väg 1, SE-981 92 Kiruna<br>
Postal address: Box 812, SE-981 28 Kiruna<br>
--<br>
PGP Public Key: <a
class="moz-txt-link-freetext"
href="https://www.irf.se/pgp/matsl"
moz-do-not-send="true">
https://www.irf.se/pgp/matsl</a><br>
Digital vcard: <a
class="moz-txt-link-freetext"
href="https://www.irf.se/vcard/mats.luspa"
moz-do-not-send="true">
https://www.irf.se/vcard/mats.luspa</a><br>
<br>
-- <br>
To unsubscribe from this list send an email
to <a
class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:dev-unsubscribe@shibboleth.net" moz-do-not-send="true">
dev-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<mc type="body"><font size="1"><font face="Corbel"><br>
<p>Jisc is a registered charity (number 1149740)
and a company limited by guarantee which is
registered in England under company number.
05747339, VAT number GB 197 0632 86. Jisc’s
registered office is: 4 Portwall Lane,
Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Services Limited is a wholly owned Jisc
subsidiary and a company limited by guarantee
which is registered in England under company
number 02881024, VAT number GB 197 0632 86.
The registered office is: 4 Portwall Lane,
Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Commercial Limited is a wholly owned
Jisc subsidiary and a company limited by
shares which is registered in England under
company number 09316933, VAT number GB 197
0632 86. The registered office is: 4 Portwall
Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>For more details on how Jisc handles your
data see our privacy notice here: <a
class="moz-txt-link-freetext"
href="https://www.jisc.ac.uk/website/privacy-notice"
moz-do-not-send="true">
https://www.jisc.ac.uk/website/privacy-notice</a></p>
</font></font></mc><br>
<fieldset class="moz-mime-attachment-header"></fieldset>
</blockquote>
<pre class="moz-signature" cols="72">--
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik Fax: +46 (0)980 79 050
Swedish Institute of Space Physics email: <a
class="moz-txt-link-abbreviated moz-txt-link-freetext"
href="mailto:matsl@irf.se" moz-do-not-send="true">matsl@irf.se</a>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: <a class="moz-txt-link-freetext"
href="https://www.irf.se/pgp/matsl"
moz-do-not-send="true">https://www.irf.se/pgp/matsl</a>
Digital vcard: <a class="moz-txt-link-freetext"
href="https://www.irf.se/vcard/mats.luspa"
moz-do-not-send="true">https://www.irf.se/vcard/mats.luspa</a></pre>
</div>
-- <br>
To unsubscribe from this list send an email to
<a class="moz-txt-link-abbreviated" href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<pre class="moz-signature" cols="72">--
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik Fax: +46 (0)980 79 050
Swedish Institute of Space Physics email: <a class="moz-txt-link-abbreviated" href="mailto:matsl@irf.se">matsl@irf.se</a>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: <a class="moz-txt-link-freetext" href="https://www.irf.se/pgp/matsl">https://www.irf.se/pgp/matsl</a>
Digital vcard: <a class="moz-txt-link-freetext" href="https://www.irf.se/vcard/mats.luspa">https://www.irf.se/vcard/mats.luspa</a></pre>
</body>
</html>