how to upgrade idp 1.3 to idp2.x?

[XiaoXia Dong]

Scott,

I would like to ask a follow up question: Would it be possible just set up a new Shib Idp 2.x and then add those new end points in the InCommon metadata,
So that we could bring both of these two versions of IdP in production. Then SP users could test their instances against IdP 2.x at their own time. Will this work from your experience?

What difference of end points between IdP 1.3 and IdP 2.x?  Would you be able to give an example? Thanks.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of XiaoXia Dong
Sent: Tuesday, May 15, 2012 2:44 PM
To: Shib Users
Subject: RE: how to upgrade idp 1.3 to idp2.x?

Thanks Scott.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, May 15, 2012 11:19 AM
To: Shib Users
Subject: Re: how to upgrade idp 1.3 to idp2.x?

On 5/15/12 11:48 AM, "XiaoXia Dong" <x-dong at northwestern.edu> wrote:

>Dear experts,
> 
>I am in the process of planning upgrade our shibboleth server from idp
>1.3 to Idp 2.x. I am fuzzy on how to do the emulation step.
>How anyone tried to configure idp 2.x to look like idp 1.3 successfully 
>from your experience? What does it take to get that working?

I believe it's impossible, or at least very complex. The opposite, OTOH, is quite simple, so that's what I did.

> 
>If none of the above is possible, could someone share what needs to be 
>done in metadata so that make current Idp 1.3 to be 2.x compatible?

Metadata has nothing to do with it, it just contains the endpoints you happen to have in production. Information on a couple of alternatives for manipulating 1.3 to emulate 2.x is in the wiki in the IdPUpgrade area.

For myself, I manipulated the IdP config and web.xml to use paths that matched the new IdP and deployed that in parallel with the original, and then migrated everything to it. At that point, I could deploy 2.x in place of 1.3 and switch back and forth.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net