Releases for Shibboleth Authentication

Fixes shib_auth Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-043

This release fixes a Cross-Site Scripting vulnerability (see Shibboleth authentication - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-129)

This release is an update to 6.x-4.2-rc1, which is a bugfix and a feature release.

This release contains all the changes that happened through the last years. There are a couple of bugfixes and some major enhancements, most notably the new profile functionality.

Bug fixes since the previous versions:

See DRUPAL-SA-CONTRIB-2015-028

Bug fixes since -rc3

This is a bugfix pre-release version for 4.0. Although the previous was announced as 'last', now it's clear that for facilitating Drupal6 -> Drupal7 transition, one more -rc is still necessary.

Fixed bug since -rc2:

• #1127780: redirect loop on account linking

This is a bugfix pre-release version for 4.0. Unless major bugs are to be found, this is the final release candidate before 4.0.

Fixed bug since -rc5:

• Support parameters in URLs #1107746: Linking with arguments

First release candidate of the final release for Drupal7. The version number has started from 4.0 to match the Drupal6 version of the module.

This version provides all the functionality of the Drupal6-compatible 4.x prerelease versions (up to -rc4), or is slightly ahead of them. More release notes to be prepared.

4.0-rc3 contained a grave bug, this release only corrects #1076942: Fatal error: Only variables can be passed by reference in /sites/all/modules/shib_auth/shib_auth.module on line 278

-----
For reference, release notes for 4.0-rc3 is repeated:

This is a release candidate. Community tests are very much appreciated.

Upgrade instructions:

1. Read the documentation
2. Ensure that you can login as administrator using a password. Upgrading/configuring the new version might fail if you're using the module to log in.
3. Back up your database.. We can't stress this enough.
4. After overwriting module files, run update.php (It's also necessary if you are upgrading from 4.0-rc1.)

This is a release candidate. Community tests are very much appreciated.

Upgrade instructions from versions 3.x:

1. Read the documentation
2. Ensure that you can login as administrator using a password. Upgrading/configuring the new version might fail if you're using the module to log in.
3. Back up your database.. We can't stress this enough.
4. Run update.php for updating database tables.

This is a minor bugfix release which fixes the module update problem (#605354: Path to get back from IdP to the Drupal site is wrong).
If you have a working installation of 3.2, you do not need to upgrade.

This release fixes SA-CONTRIB-070

Other bug fixes since version 6.x-3.1:

- Implemented the 6.x-3.0-1 functionality (this is a back port)
- Improved admin interface
- Improved code style

Authorization is available. In this new version it is possible to set up automatic grouping options after the Shibboleth given SERVER attributes and the proper regular expressions.

- added authorisation (aka 'auto-group') feature
- Following coding standards, add doxygen documentation and even a small Install fix
- Redesign the whole login procedure
- Make debug mode available without going offline-Using custom DEBUG path
- Fix 'Access Denied' after being redirected back to Drupal
- Allow admins to change logout redirect url
- Optionally destroy Drupal session on Shibboleth session expiry.
- Remove shib_auth created user from authmap when deleting user and some additional help message to the administrator

Add:
- README.txt
- INSTALL.txt
- changeable log-in text

-remove the shib checker code, because there is no documented shib flag to checking the shib service

Add shibboleth service checker.

Backported version of the 6.x branch.

Shibboleth authentication module. Provides a way for a felxible single sign on (SSO) method.