Thanks, that's a very helpful response. Also nice to know there's active maintenance of Cosign itself happening at Penn, since that's where we are called upon to use it.
While I've got your attention, I'm curious whether there's a single document anywhere that documents the protocol that the Apache cosign module actually implements. Currently there is no implementation in node.js, or for nginx, so we're stuck using Apache as a proxy for cosign projects only. We've already written a node implementation of CAS, and I'm curious whether the cosign protocol - or the part of it that is really used and needed for hosting a site, not a trust source - is similarly straightforward or has hidden cryptographic depths. (: On Tue, Feb 3, 2015 at 8:29 AM, Jorj Bauer <j...@isc.upenn.edu> wrote: > Hi Tom, > > Yes, we're working on a new release. We have a few details in mid-stride > (shifting the repository main from SourceForge to github, moving the website, > changing release managers) and as soon as we've got those nailed down, we > should have a new release. It's been slow progress but we are getting there. > > The repo that you found is valid, and when complete, will be the new home of > our source. Right now it's slightly out of sync with development efforts as > we're moving toward a more github-decentralized style. In particular, see my > repo, in which I'm teasing apart pieces of Penn functionality to support Duo > 2-factor logins, multi-threaded worker support, and some other details: > > https://github.com/JorjBauer/cosign > > As we get close to a release candidate, you'll hear more. Right now we're > knee deep in alligators. > > -- Jorj > > > On Feb 2, 2015, at 7:03 PM, Tom Boutell <t...@punkave.com> wrote: > >> I found it necessary to patch filters/apache2/mod_cosign.c and replace >> all occurrences of remote_ip with client_ip. I was then able to build >> successfully. >> >> I then went looking for a github repository and discovered it is >> already fixed here: >> >> https://github.com/cosignweblogin/cosign/blob/master/filters/apache2/mod_cosign.c >> >> But there are no links to that repo from weblogin.org. >> >> What's the status of the 3.2.1 release? Is there a roadmap? >> >> Thanks! >> >> -- >> >> >> THOMAS BOUTELL, DEV & OPS >> P'UNK AVENUE | (215) 755-1330 | punkave.com >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming. The Go Parallel Website, >> sponsored by Intel and developed in partnership with Slashdot Media, is your >> hub for all things parallel software development, from weekly thought >> leadership blogs to news, videos, case studies, tutorials and more. Take a >> look and join the conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> Cosign-discuss mailing list >> Cosign-discuss@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/cosign-discuss > -- THOMAS BOUTELL, DEV & OPS P'UNK AVENUE | (215) 755-1330 | punkave.com ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Cosign-discuss mailing list Cosign-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cosign-discuss
