Shibboleth and openLDAP

Wed Feb 28 01:16:33 UTC 2024

Hi Mat,

We weren't aware of that. 
Thanks for the hint.
Will investigate further.

Regards
Gary

Gary Lipscomb
Technical Officer, Systems 
IT Infrastructure & Security | Division of Information Technology

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Mat Houser via users
Sent: Wednesday, February 28, 2024 12:04 PM
To: users at shibboleth.net
Cc: Mat Houser <mhouser at uwm.edu>
Subject: Re: Shibboleth and openLDAP

We just recently upgraded our openLDAP servers from RHEL7 to RHEL8 using the leapp upgrade tool. According to 'dnf provides slapd' there's an openldap-servers package in our codeready-builder-for-rhel-8-x86_64-rpms
and @System.

I don't have a RHEL9 box to poke at, but my Rocky 9 system has openldap-servers provided by the epel repo.

My understanding was that Red Hat was going to remove openLDAP in RHEL 8 to push people towards 389-ds, but it's possible that they reconsidered or something, since it does appear to be in our satellite repos, and we're currently running distro supplied openLDAP in RHEL 8.

On 27/02/2024 17:23, Lipscomb, Gary via users wrote:
> Hi Phaneeshwar,
> 
> Thanks for the update.
> That is one of the options we are considering.
> 
> Regards
> Gary
> 
> Gary Lipscomb
> Technical Officer, Systems
> IT Infrastructure & Security | Division of Information Technology
> 
> From: Phanieshwar Nalluri <nalluri at bc.edu>
> Sent: Wednesday, February 28, 2024 10:08 AM
> To: Shib Users <users at shibboleth.net>
> Cc: Lipscomb, Gary <glipscomb at csu.edu.au>
> Subject: Re: Shibboleth and openLDAP
> 
> Gary,
> 
> I am from Boston College and we migrated from Oracle DSEE to Symas OpenLDAP. We opted for Symas support and installation, Symas helped on data conversion, Indexing, installation, configuration in Dev/QA and Prod. It has been close to 3 years since migrating to OpenLDAP and we haven't encountered any issues. Symas OpenLDAP has been reliable in terms of performance and support (Urgent to 24 hours buffer).
> 
> I hope that helps, also we use RHEL8 currently and Shibboleth 4.3.1 
> with Symsa OpenLDAP 2.5. Symas Repo - 
> https://repo/
> .symas.com%2Fsoldap2.5%2F&data=05%7C02%7Cglipscomb%40csu.edu.au%7Cc929
> 8641cffd49a86a7208dc37f92602%7Cf0f76207a6104fc0b4a35d797fe5283c%7C0%7C
> 0%7C638446790435312816%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ
> QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=JHf82CH
> IH1hYJjUA7hhtZ%2FXH5ShYurjxjORMJC62dZM%3D&reserved=0<https://aus01.saf/
> elinks.protection.outlook.com/?url=https%3A%2F%2Frepo.symas.com%2Fsold
> ap2.5%2F&data=05%7C02%7Cglipscomb%40csu.edu.au%7Cc9298641cffd49a86a720
> 8dc37f92602%7Cf0f76207a6104fc0b4a35d797fe5283c%7C0%7C0%7C6384467904353
> 12816%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJB
> TiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=JHf82CHIH1hYJjUA7hhtZ%2F
> XH5ShYurjxjORMJC62dZM%3D&reserved=0>
> 
> Regards,
> Phaneeshwar Nalluri
> Middleware Systems Administrator
> Certified Scrum Master, Product Owner
> Phone - 617-552-4883; email - nalluri at bc.edu<mailto:nalluri at bc.edu>
> Boston College - ITS Middleware | Enterprise Architecture
> 
> On Tue, Feb 27, 2024 at 5:49 PM Lipscomb, Gary via users <users at shibboleth.net<mailto:users at shibboleth.net>> wrote:
> Hi all,
> 
> Just after some recommendations.
> We currently use openldap as our user repository for Shibboleth running on a RHEL7 server.
> RHEL7 is EOL 30th June 2024 and openldap is not provided by Redhat for RHEL8. Also openldap is not included in the extended support option for RHEL7.
> 
> If any are running openldap on RHEL8 where are you sourcing the software from, openldap.org<http://openldap.org/>, Symas, LDAP Tool Box etc,  and  are you self-supporting or getting paid support?
> 
> Regards
> 
> Gary
> 
> Gary Lipscomb
> Technical Officer, Systems
> IT Infrastructure & Security | Division of Information Technology
> 
> 
> Charles Sturt University, Bathurst, NSW 2795
> Ph: 02 6338 6533
> Email: glipscomb at csu.edu.au<mailto:glipscomb at csu.edu.au>
> csu.edu.au<http://www.csu.edu.au/>
> 
> 
> 
> 
> [cid:image001.png at 01DA6A30.0DC61230]<http://www.csu.edu.au/>
> 
> |  ALBURY-WODONGA  |  BATHURST  |  CANBERRA  |  DUBBO  |  GOULBURN  |  
> | ORANGE  |  PARRAMATTA  |  PORT MACQUARIE  |  WAGGA WAGGA  |
> 
> ________________________________
> LEGAL NOTICE
> This email (and any attachment) is confidential and is intended for the use of the addressee(s) only. If you are not the intended recipient of this email, you must not copy, distribute, take any action in reliance on it or disclose it to anyone. Any confidentiality is not waived or lost by reason of mistaken delivery. Email should be checked for viruses and defects before opening. Charles Sturt University does not accept liability for viruses or any consequence which arise as a result of this email transmission. Email communications with Charles Sturt University may be subject to automated email filtering, which could result in the delay or deletion of a legitimate email before it is read at Charles Sturt University. The views expressed in this email are not necessarily those of Charles Sturt University.
> 
> Charles Sturt University in Australia<http://www.csu.edu.au/> The Grange Chancellery, Panorama Avenue, Bathurst NSW Australia 2795 (ABN: 83 878 708 551). Charles Sturt University - TEQSA Provider Identification: PRV12018 (Australian University). CRICOS Provider: 00005F.
> 
> Consider the environment before printing this email.
> --
> For Consortium Member technical support, see 
> https://shib/
> boleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C02%7Cglipscomb%40cs
> u.edu.au%7Cc9298641cffd49a86a7208dc37f92602%7Cf0f76207a6104fc0b4a35d79
> 7fe5283c%7C0%7C0%7C638446790435312816%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7
> C&sdata=73cHJqw%2Bm4gpeLi%2B7phIKTvTLlk5KErJEZrkVrPXTww%3D&reserved=0<
> https://shib/
> boleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C02%7Cglipscomb%40cs
> u.edu.au%7Cc9298641cffd49a86a7208dc37f92602%7Cf0f76207a6104fc0b4a35d79
> 7fe5283c%7C0%7C0%7C638446790435312816%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi
> MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7
> C&sdata=73cHJqw%2Bm4gpeLi%2B7phIKTvTLlk5KErJEZrkVrPXTww%3D&reserved=0>
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.n
> et>
> 
> 

--
-------------
mat:houser
mhouser at uwm.edu
uwm:uits:iam-support
he/him
-------------

--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net