Upgrading to IdP 5 Deprecation Issues

[Matt Brennan]

Hi Folks,

  I'm finally trying to get myself into IdP 5 (I know, way behind). I'm
working through all the deprecations in 4.3.3, but I've got two that I'm
struggling to find docs that explain how to fix this.

1: "XML Element 'LDAPProperty java.naming.referral', (LDAPConnector): ...
replacement is (replacement depends on property)"

I know what this is referring to. I've silenced it by commenting out the
line right now, and I'll be doing testing to determine if we actually need
to follow referrals. Though I'm not sure what the default behavior is, or
how to change it. If someone can just point me to the property / attribute
that modifies the behavior.

2: "Java class method 'apply', (on Predicate objects): ... replacement is
test"

Again, I know were the problem is. I have built a number of intercept
profiles that check if someone is a member of an LDAP group before allowing
them to proceed. This is to block sign-in for unauthorized users to poorly
behaved SPs which do JITP with no conditions. I can see a number of
references to intecepts on the Wiki, and indications that I need to use
Predicate.test() instead of .apply(), but I'm still unclear what the line
should be converted to. For example, one offending block looks like this:

<decision-state id="CheckContext">
        <if
test="ContextCheckPredicate.apply(opensamlProfileRequestContext)"
            then="proceed" else="ContextCheckDenied" />
    </decision-state>

    <bean-import
resource="../../../flows/intercept/employees-only/employees-only-beans.xml"
/>

I see the ContextCheckInterceptConfiguration on the Wiki. I just don't see
how to implement it in this use case.

Thanks for any help.

-Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250602/37a8d128/attachment.htm>