Trouble starting shibboleth after upgrade

[Peter Schober]

* Keith Osborne <keith at tdrnetworks.com> [2013-06-24 16:29]:
> I recently upgraded from 2.4.3  branch under Debian backports to the 
> 2.5.2 branch from the Switch.ch sources so that I could deploy the 
> HttpOnly cookieProps attribute.

The cookieProps attribute has been around for a while and you can well
add anything you like to it, including "HttpOnly", with the 2.4 SP:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions

> root at www:/etc/init.d# shibd -t
> 2013-06-24 14:12:51 WARN Shibboleth.AttributeExtractor.XML : attribute 
> mappings are reloadable; be sure to restart web server when adding new 
> attribute IDs
> overall configuration is loadable, check console for non-fatal problems

You can chose to disable reloading of the attribute map which makes
this warning go away.

* Cantor, Scott <cantor.2 at osu.edu> [2013-06-24 16:36]:
> I have no idea what you mean by "SWITCH sources". The only *source*
> code should come from the official location, there's no reason to
> ever use sources from anybody else.

SWITCHaai provides a repository of unofficial set of current packages
of the Shibboleth SP and dendencies (for Debian GNU/Linux 6.0 and 7.0
as well as Ubuntu 12.04 LTS) to the SWITCH community.

If/Once current packages of the Shib SP have entered the relevant
backports I expect these to be obsoleted and potentially removed.

* Keith Osborne <keith at tdrnetworks.com> [2013-06-24 16:45]:
> The switch sources are unofficial packaged debs - currently only 2.4.3 
> is available by Debian backports.  To get 2.5.x you are forced into 
> experimental packages or using:
> 
> https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.5/sp/deployment/?os=debian

You're certainly not forced to use third party packages. You can
always build from source (which is supported by the Shibboleth
project, AFAIK) or create your own set of packages.

Also the existing disclaimer that SWITCH does not support these
packages for use outside of their community should not be read to mean
that the someone else (esp. the Shibboleth project) would support these
packages.
-peter