Can no longer install net.shibboleth.idp.plugin.authn.duo.nimbus plugin in IdP 4.3.1

[Philip Smart]

Brian,

Thanks for confirming.

Phil

On 19 May 2023, at 01:08, Brian Moon <bmoon at scu.edu> wrote:

You don't often get email from bmoon at scu.edu. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello Phil,

I can indeed confirm that all is working well with the following in IdP 4.3.1:

  *   net.shibboleth.oidc.common version 2.2.0
  *   net.shibboleth.idp.plugin.oidc.config version 1.0.1
  *   net.shibboleth.idp.plugin.oidc.op version 3.4.0
  *   net.shibboleth.idp.plugin.authn.duo.nimbus version 1.4.0

Thank you again for your prompt support here.

Cheers!

Brian Moon
Senior System Administrator, Enterprise Systems
Santa Clara University


On Thu, May 18, 2023 at 10:11 AM Philip Smart <Philip.Smart at jisc.ac.uk<mailto:Philip.Smart at jisc.ac.uk>> wrote:
Hi Brian,

We’ve now released V1.4.0 of the Duo plugin which is compatible with the latest oidc-common version (and hence the new RP and the current OP). If you can try that and let me know if it works for you, that would be great.

Phil

> On 18 May 2023, at 18:06, Brian Moon <bmoon at scu.edu<mailto:bmoon at scu.edu>> wrote:
>
> You don't often get email from bmoon at scu.edu<mailto:bmoon at scu.edu>. Learn why this is important
> Thank you so much for the prompt response, Phil!  I can confirm that oidc-common V2.1.0 will install successfully in 4.3.1.  And thank you for updating the Duo plugin so quickly so that it will work with oidc-common V2.2.0.
>
> Cheers!
>
> Brian Moon
> Senior System Administrator, Enterprise Systems
> Santa Clara University
>
>
> On Thu, May 18, 2023 at 5:44 AM Philip Smart via users <users at shibboleth.net<mailto:users at shibboleth.net>> wrote:
> Hi Brian,
>
> We reverted the max supported IdP version of oidc-common V2.1.0 back to < IdP V5. So you should now be able to install the older commons version. I am currently updating the Duo plugin to support the new commons version, that should get released soon.
>
> Phil
>
> > On 18 May 2023, at 09:28, Philip Smart <Philip.Smart at jisc.ac.uk<mailto:Philip.Smart at jisc.ac.uk>> wrote:
> >
> > Hi Brian,
> >
> > Thanks for reporting this. As you’ve found, there are two issues here:
> >
> > 1. When we released the new version of oidc-common V2.2.0 (on the 15th), we restricted the supported IdP version for V2.1.0. to IdP < 4.3.0. Given the current version of Duo requires it, and it was previously supported, this was a mistake, but I will check with the others.
> > 2. Duo has not been updated to support the latest version of oidc-common. I will check compatibility ASAP and run it through the standard tests. If compatible, it probably makes sense to release a compatible Duo version also ASAP.
> >
> > Phil
>
>
>
> Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
>
>
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
>
>
> Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
>
>
> For more details on how Jisc handles your data see our privacy notice here: https://urldefense.com/v3/__https://www.jisc.ac.uk/website/privacy-notice__;!!MLMg-p0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq2PpR6dU$
> --
> For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!MLMg-p0Z!GrWnWD1JajS4q9ETAdFsLosfr-TzLPafRTvXl4sOy-DcPsEX3oYa04saWV8eQuGZ5GsjbFZq-UPDibo$
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230519/2b92dfaa/attachment.htm>