Assistance with IDP upgrade - LDAP source

[Cantor, Scott]

On 1/14/19, 10:00 AM, "users on behalf of Joel Saunders" <users-bounces at shibboleth.net on behalf of Joel.Saunders at zones.com> wrote:

>              Ensuring that the same attributes are returned to relying partners as in V2

You have to either not upgrade the old system (that's the biggest mistake you can start with and it's quite common) or change something deliberately to generally end up with different attributes. That's a red flag, basically.
 
The biggest materially changed configuration for an upgraded system is authentication (and the login page), which was unavoidable, and it's not a conversion, it's "start from scratch" generally, though using JAAS gets one a good chunk of the way there in most cases (note that you chose not to, you switched to native LDAP). Nothing else needs to change much initially until one starts remediating old settings, which is something to do after the upgrade, not during. We've gone several years before starting work on a version that even removes any of the older settings.

> I had to hunt and peck around and finally had to join the user list to ask.   It would’ve been nice to have a one-stop
>-shop for info on what changed, what needs to be addressed and examples of how to accomplish that.

There's https://wiki.shibboleth.net/confluence/display/IDP30/UpgradingFromV2  
but since V2 is years dead now, it's not something we're likely to spend much more time on.
 
> I can only speak from my experience, but the goal for me was to not spend a significant amount of time to accomplish
> this.

Speaking for myself, that is not a realistic goal, though future major upgrades are unlikely to be as disruptive for most.

> It didn’t help that I also had to upgrade tomcat and java for the same install.

I don't believe that V2 was incapable of running on current versions of either one, but I could be wrong about that, it's been a long time.
 
> I guess that I’m old school, but I prefer functional “cookbook” type docs vs. what we see now in the industry.

Unfortunately the person stuck writing most of the docs doesn't know how to write anything like that but my impression is most of the industry tries to do that sort of thing, so I don't think you're the outlier, I am. Bad luck for everybody else I guess, but I can't write differently than I know how to, and nobody else is offering.

-- Scott