CentOS/RHEL packages for - Shibboleth Service Provider Security Advisory [27 February 2018]

[Andy Fleming]

Thanks Cantor.  I've just had the repo config saved for a while and have
been using it since it worked.  I've never had a bit of trouble after the
move from Internet2's repos to OpenSuse, so this was now to me.  I even
looked at my config to see if there was anything in it commented out and
there wasn't.  I hadn't re-downloaded it in quite some time so my copy
didn't have the note

# If the mirrors stop working, change download to downloadcontent...


To answer Perter's question (separate reply), yes depending on if its my
SL6 or CentOS 7 systems, it re-tries from a couple of times to 10 times.
It seems the OpenSuse system does not give out a list of different
hostnames for mirrors, but just one hostname.  Maybe they are doing RR DNS
(but does not look like it) or Anycast or something behind it.  In the case
of most yum repos with mirrors, they seem to send back a list of mirrors,
not just one hostname multiple times.  I didn't mean to imply this was the
Shibboleth project's fault.  Just that I'm having problems, curious if
anyone else is, and if is there a good work around, which there is.  (And I
would have seen if I had downloaded a fresh copy of the repo config.)


One suggestion might be to have an RPM in the repo for configuring the
repo.  I know it sounds strange, but then on say scripted installs, I can
just install that one package with a direct URL that configures the repo.
Then if there are ever any changes (like adding the comment about the
mirrors) the repo config file can also get automatically updated.  I don't
use OpenSuse and this is the only repo in their system I use, so the trick
of changing "download" to "downloadcontent" wasn't common knowledge for
me.





Sincerely,
Andy Fleming
Systems Engineer
[image: KanREN] <http://www.kanren.net/>
[image: phone] 785-856-9820
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
 [image: twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? <support at kanren.net>

On Mon, Mar 5, 2018 at 9:30 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Is anyone else having trouble getting the packages from the repos for
> > RHEL/CentOS?
>
> https://shibboleth.net/downloads/service-provider/2.6.1/RPMS/
>
> Look at the comment in the repo file.
>
> -- Scott
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180305/482e30ad/attachment.html>