Releases for Shibboleth authentication

Release notes

Bug fixes since -rc6

• Support GET parameters throughout redirects
• Don't assign roles while linking
• Don't overwrite custom emails on linking
• Handle 'Cancel' on consent update
• Fix improper use of link hook
• #1253174: Logout URL relative to site, not server
• Filter XSS on every possible user-supplied input
• Fix redirect issues
• #1320902: Error: 'E-mail address is already used'
• #1279186: Roles not always assigned (Role assignment with memcached)

Improvements / New features since -rc6

• Save only assigned roles to a rule
• Code cleanups, code standardisation, cosmetics
• Rewritten rule list to use themetable
• #1308502: Undefined index on devel user switch (PHP notice)
• Redirect users away from user/login
• Improved internal config handling
• #1302312: Display shib_auth variables on debug Display module config on debug
• Handle disappearing mail attribute (when custom mail is disabled and the attribute can not be fetched)

Release notes

This is a bugfix pre-release version for 4.0. Unless major bugs are to be found, this is the final release candidate before 4.0.

Fixed bugs since -rc1:

• Support parameters in URLs #1107746: Linking with arguments, #1094276: A malformed logout URL can be formed by shib_auth module.
• Fix passive session initiation (isPassive)
• Fix dynamic roles / permissions problem #1127202: Dynamic rules permission problem

Release notes

This is a bugfix pre-release version for 4.0.

Fixed bugs since -rc4:

• #1077180: Allow linking of accounts if shib_auth email and existing account email are identical
• #1078130: rc1 linked users unable to login in to rc4 via shib_auth
• #1077188: IDP email not enforced during linking if custom email is disabled.
• #1094276: A malformed logout URL can be formed by shib_auth module.
• Avoid PHP notices (#1094292: shib_auth should check for existence of some $_SERVER variables before using these in condtionals.)

Release notes

This is a nightly built development release of the module. Use at your own risk.

Before upgrading the module, please read the documentation of this development version. Note that this is a development snapshot, therefore it is not yet recommended for production.

For questions and support requests, please use our shib_auth users mailing list, for filing bug reports, please use the bugtracker here in drupal.org.

Release notes

This is a release candidate. Community tests are very much appreciated.

Upgrade instructions:

1. Read the documentation
2. Ensure that you can login as administrator using a password. Upgrading/configuring the new version might fail if you're using the module to log in.
3. Back up your database.. We can't stress this enough.
4. After overwriting module files, run update.php (It's also necessary if you are upgrading from 4.0-rc1.)

Release notes

This is a nightly built development release of the module. Use at your own risk.

Before upgrading the module, please read the documentation of this development version. Upon updating module files, don't forget to update your database tables running INSTALL_URL/update.php (not necessary if you are upgrading from 4.0-rc*)

For questions and support requests, please use our shib_auth users mailing list, for filing bug reports, please use the bugtracker here in drupal.org.

Release notes

This release fixes SA-CONTRIB-070

Other bug fixes since version 6.x-3.1:

• #442170: shib_auth incompatible with caching (even normal mode)
• #508378: Module does not work with caching unless you used drupal's login block
• #493502: Session Expiration warning is worded a bit strongly... :)

Important note: please disable and then re-enable the module after upgrading.

Release notes

This release is containing a lot of bug fixes and requested features. It is highly recommended to upgrade your module!

- added authorisation (aka 'auto-group') feature
- Following coding standards, add doxygen documentation and even a small Install fix
- Redesign the whole login procedure
- Make debug mode available without going offline-Using custom DEBUG path
- Fix 'Access Denied' after being redirected back to Drupal
- Allow admins to change logout redirect url
- Optionally destroy Drupal session on Shibboleth session expiry.
- Remove shib_auth created user from authmap when deleting user and some additional help message to the administrator
- Deny creating the user account if the email is already used
- IIS bugfix, See issue 361610
- Change some default value to more adequate one's
- Fix keeping session in case of local user account while destroy drupal session with idp session is enabled
- Hungarian translation

Release notes

- backported automatic role assignment based on Shibboleth attributes 6.x series
- improved code style
- optimalized code