Regression identified in Service Provider library, new version pushed

[Cantor, Scott]

On 11/17/17, 10:37 AM, "users on behalf of Robert Bradley" <users-bounces at shibboleth.net on behalf of robert.bradley at it.ox.ac.uk> wrote:

> The Debian policy for packaging is generally that the upstream version
> number of the package remains constant for a given release.
> (Exceptions exist for firefox-esr and the like.)  So, on Debian the
> Shibboleth SP release is 2.6.0 for stretch, and 2.5.3 for jessie.

That's basically why it's untenable for me to support it without changing how we do things. 2.5 has been unsupported for a year.

Red Hat's support is largely a fiction, but in shipping something they're committing to supporting that thing. Whether their customers actually believe it is a different question, but I know I don't support anything they package, I support only what I package.

So if we were to "support Debian", it would have to be a carefully considered position and probably would only apply to members because it would involve supporting code I'd already supplanted.

Or I would have to actually provide packages myself that weren't part of Debian itself but that stayed current and wouldn't alter our policy regarding the versions we support. Given that packaging for Debian does exist that could be copied and that the OBS does have some support for producing them, that's being considered, mainly because we are definitely dropping Solaris support.

-- Scott