EngineBlock 4.4.3

Minor bugfix release.

• edugain metadata broken: Unrecognized field: publishableInEdugain #159
• Upgraded to Attribute validation v2.2.0:
  • Textual fixes.
  • Added "urn:schac:attribute-def:schacPersonalUniqueCode".
  • Made optional:
    • urn:mace:dir:attribute-def:cn
    • urn:mace:dir:attribute-def:eduPersonAffiliation
    • urn:mace:dir:attribute-def:eduPersonEntitlement
    • urn:mace:dir:attribute-def:eduPersonPrincipalName
    • urn:mace:dir:attribute-def:givenName
    • urn:mace:dir:attribute-def:preferredLanguage
    • urn:mace:dir:attribute-def:sn
    • urn:mace:terena.org:attribute-def:schacHomeOrganizationType
  • Added "faculty", "library-walk-in", "member" to urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation
  • Disallowed values "affiliate" and "alum" and added allowed value "member" to urn:mace:dir:attribute-def:eduPersonAffiliation

EngineBlock 4.4.2

OpenConext EngineBlock v4.4.2 Release Notes

Minor bugfix release.

• Bugfixes for profile.
• Fixed issue #142: Setting NameId from attribute manipulation broken..
• Fixed issue #135: Display Unconnected Connections In Wayf doesn't work.

EngineBlock 4.3.8

OpenConext EngineBlock v4.3.8 Release Notes

Bugfix release:
Fixed issue #142: Setting NameId from attribute manipulation broken..

EngineBlock 4.3.7

OpenConext EngineBlock v4.3.7 Release Notes

Bugfix release:
Improvement to bugfix for Profile index page is slow. Fixed issue #105..

EngineBlock 4.3.6

OpenConext EngineBlock v4.3.6 Release Notes

Bugfix release:
Bugfix for Profile index page is slow. Fixed issue #105..

EngineBlock 4.4.1

Bugfix for fatal error in 4.4.

EngineBlock 4.4.0

Security & Push Metadata release.

Fixes minor security issues found (no known exploits) and introduces support for multiple sources of metadata.
Supported out of the box are:

• OpenConext Stoker
• Janus REST API v1
• Local database. Particulairly useful when filled with Janus Push metadata.

Metadata Repositories can be composed and ordered.

Notable issues resolved with this release:

• Push service configuration to EngineBlock #67
• Open Redirect vulnerabilities in Profile #113
• XSS in HTTP Host header #111
• Make it also possible (and configurable) to use ePPN for the identifier instead of SHO+uid #98
• Disable the loading of external entities in XML documents.

EngineBlock 4.3.5

OpenConext EngineBlock v4.3.5 Release Notes

Forward port of bugfix release:
Fixes #89 Ability to set SSP baseurlpath to specific value #122.

EngineBlock 4.2.11

OpenConext EngineBlock v4.2.11 Release Notes

Bugfix release:
Fixes #89 Ability to set SSP baseurlpath to specific value #122.

See also: 4.2.11 issue list

EngineBlock 4.3.4

OpenConext EngineBlock v4.3.4 Release Notes

Bugfixes:

• /authentication/sp/debug infinite SSO loop
• PHP Warning on missing translate arguments