================================================================

Jasig's "Spotlight on Open Source"

Central Authentication Service (CAS)

CAS Server 3.4.5 Final Release
Jasig ClearPass Extension for CAS
Jasig CAS Client for Java 3.2.0
Jasig CAS .NET Client 1.0
phpCAS Client 1.2.0
mod_auth_cas 1.0.9.1

uPortal

Update Your "Deployed uPortal"
Tour Yale's Portal

Bedework

Girasole Solutions is now a Jasig Bedework Solutions Provider
Bedework 3.7 Milestone 3
Barry Leibson joins the Bedework Steering Committee
Bishop's University and Bedework

-Jasig and Sakai Discussions Continue
-Infusion 1.3 is here!

================================================================

================================================================

Monday, May 23 through Wednesday, May 25, 2011
Westin Westminster Hotel, Westminster, CO

...Followed by InCommon Advance CAMP: Identity Services Summit 2011, May 25 - 27 (separate registration)

Supplementary half-day Jasig Seminars on Sunday, May 22 and the afternoon of Wednesday, May 25.
Developer Workshops, May 26-27

Call for Proposals now open

Deadline for submission of proposals for half or full day seminars: Friday, January 7, 2011
Deadline for submission of proposals for all other sessions: Friday, January 14, 2011

At Jasig's Spotlight on Open Source you can--

Attend hands-on training for applications from Jasig and from colleagues in other open source communities.
Discuss common problems and solutions with peers from around the world
See how other campuses are deploying the open source applications that are important to you
Learn from inspiring speakers

We invite you to propose talks, seminars, birds-of-a-feather sessions, demos, and poster session displays on open source campus applications, issues facing you and your campus, innovative work that your team has done...

Talks will be presented in one of five tracks:

Jasig Projects
Bedework, CAS, uPortal, Portlets. We're looking for presentations on development, implementation, integration, and governance
The Incubator
For presentations on projects in the Jasig Incubator (OpenRegistry, IT Ecosystem, HelpDesk, Portlets, etc.) and those that would like to be (Yours...?)
Friends and Partners
We welcome proposals from our colleagues at Sakai, Internet2 Middleware, Fluid, OpenCast, Kuali, Duraspace, and other projects that benefit the academic mission
Communities of Interest
Promoting Open Source success (2-3-98), Issues in Identity Management (FIFER), Openness, Agile Processes, Teaching and Learning
Technologies for Open Source
What are the open source technologies that will impact us in the coming years? What new technologies are you using or evaluating for open source development?

Proposals require a title, an abstract (under 1000 words), a presenter profile for each speaker, and some basic affiliation information.

Submit your proposal directly at https://www.concentra-cms.com/cfp/proposal/48

We look forward to seeing you at Spotlight on Open Source!

-The Jasig 2011 Spring Conference Planning Committee

================================================================

================================================================

CAS Server 3.4.5 Final Release

Dear CAS Community,

We're pleased to announce the CAS Server 3.4.5 release. This release includes a new X.509 Regex CredentialsToPrincipalResolver as well as major security enhancement to CAS. Gateway requests are now included as part of the Services Management Tool. A gatewayed service MUST be approved by the Service Management Tool in order for the redirect to happen if there is no valid user. Its recommended that all deployers upgrade.

Thanks to Rich Renomeron and George Hedfors for identifying this security improvement.

It's recommended that all deployers upgrade to this new version to provide an extra layer of security.

The binary release can be found here:http://www.jasig.org/cas_server_3_4_5

The artifacts should be in the Maven Repository shortly and thus available for those using the Maven2 WAR Overlay process.

Thanks
Scott

================================================================

Jasig ClearPass Extension for CAS
The latest ClearPass release provides complete compatibility with the latest CAS Server while adding the ability to encrypt the passwords that CAS stores in its cache.
New Features:

Ability to encrypt passwords in cache
Support for CAS 3.4.4
Bug Fixes:

uPortal Extension fails to report missing clearPasssUrl property

Integration Instructions: https://wiki.jasig.org/display/CASUM/ClearPass

Maven2 Repository:

groupId: org.jasig.cas3.extensions
version: 1.0.6.GA

================================================================

Jasig CAS Client for Java 3.2.0
Version 3.2.0 is the first major CAS client release in a few years. 100% backwards-compatible with the 3.1.x APIs, 3.2.0 finally brings the Java 1.5 syntax and Apache 2 license to the CAS Client for Java. In addition, it introduces new features like the ability to encrypt Proxy Granting Ticket Identifiers when sent over the network to other nodes in the cluster.

New Features:

Ability to encrypt PGTs before they are send in a cluster.
Requires Java 1.5
Apache 2 License
Added ability to disable SAML 1.1 Schema Validation
Fixed example attribute extraction code to extract lists
Documented how to use character encoding filters

Bug Fixes:

Fixed incorrect logging of JNDI configuration
Catch Ehcache exception when a node goes down

Download:

http://downloads.jasig.org/cas-clients/cas-client-3.1.12-release.tar.gz http://downloads.jasig.org/cas-clients/cas-client-3.1.12-release.zip
Maven2 Repository:

groupId: org.jasig.cas.client
version: 3.2.0

================================================================

Jasig CAS .NET Client 1.0
The .NET client development team is proud to announce the 1.0 release
of the CAS client for the .NET Framework. This is the first
production-ready release of this client and represents months of
development and testing. The .NET client provides a feature set
comparable to the Java client including the following:

Features:

Multiprotocol support including CAS 1, CAS 2 (including proxy), and SAML
Single sign-out support
Rich ASP.NET framework integration including Forms authentication
and authorization

Download:

Binary and source release packages are available for download at https://wiki.jasig.org/display/CASC/.Net+Cas+Client, where
documentation and integration instructions are also provided.

================================================================

phpCAS Client 1.2.0
We are pleased to announce the new 1.2.0 release for phpCAS. We have finally made the big leap to PHP5 only and started reworking on some of the core parts of phpCAS.
The new version is compatible with 1.1.x versions with minor exceptions: The bogus functions setCasServerCert() and authenticate() have been removed. All logout* functions with an url parameter have been marked as deprecated for newer cas server versions.

New Features:

PHP5 only (visibility, OO)
improved cookie handling in proxy mode (RFC compliant)
removal of the xml compatibility layer
test framework with phpunit tests
cas 2.0 protocol attribute support (various formats)
php deprecation warnings for outdated functions
callback hooks after authentication and single sign-out
exposure of the proxy chain through the phpcas interface
expose hasAttribute($key) and getAttribute($key) through the phpcas interface

Bug Fixes:

fix redirects behind http proxies
remove the bogus setCasServerCert() function

Download:
http://downloads.jasig.org/cas-clients/php/1.2.0/

================================================================

mod_auth_cas 1.0.9.1
mod_auth_cas 1.0.9.1 is now available, containing a variety of bug fixes
and new features. All users are encouraged to upgrade when
convenient. A detailed list of all changes is available in the README
file.
New Features:

SAML validation support has been provided by David Hawes of Virginia Tech.
libcurl is now used for validating tickets, which results in
improved compatibility with different CAS services
A new directive, CASRootProxiedAs has been added to support
environments where access to mod_auth_cas is reverse proxied.

Bug Fixes:

Various edge case scenarios which may result in crashes have been resolved.
Incorrect per-VirtualHost configuration merging has been fixed.
Download:

https://source.jasig.org/cas-clients/mod_auth_cas/tags/mod_auth_cas-1.0.9.1/

================================================================

Update Your "Deployed uPortal"

The community maintains a list of Deployed uPortals on the wiki:
https://wiki.jasig.org/display/UPC/Deployed+uPortals

This is a tremendous help to others either looking to adopt or scale their own implementation and only takes a few minutes of your time.

If you already have an entry, please take a moment to make sure it is up to date and consider adding a contact so folks can reach out to you directly. If you are not yet listed and have an implementation, we encourage you to add your own entry.

Thanks!

================================================================

Tour Yale's Portal

Take a tour of YaleInfo, Yale University's uPortal application, on Jasig's Vimeo site

================================================================

Girasole Solutions is now a Jasig Bedework Solutions Provider

Jasig affiliate, Girasole Solutions(http://www.girasolesolutions.com/), has been approved as a Bedework Solutions Provider( http://www.jasig.org/jasig-support/solutions-providers). Girasole provides Bedework installation, configuration, and training, among other support services.

================================================================

Bedework 3.7 Milestone 3

Bedework 3.7 milestone 3 release was made available (http://www.jasig.org/bedework-37-milestone-3-available) on November 30th. This will be the last milestone release prior to the production release of Bedework 3.7

================================================================

Barry Leibson joins the Bedework Steering Committee

Barry Leibson is now a member of the Bedework Steering Committee, having accepted the invitation extended by the Bedework SC. Barry first joined the Bedework project as a volunteer, to become familiar with Bedework functionality and technologies. He later became a contributor, a committer, a Jasig affiliate (through his Girasole Consulting) and now a Bedework Solutions Provider. He was an active participant in the Jasig Unconference in October, and brings a very broad perspective on Bedework needs and requirements to go along with his strong Bedework knowledge and practical experience.

The Bedework Steering Committee looks forwarding to working with Barry in our mutual objective of making Bedework an even better product, and a more successful project.

================================================================

Bishop's University and Bedework

In September of 2005, we announced the availability of the first production release of Bedework, Bedework 3.0, for October 2005. Even though there was no Bedework 3.0 release in October 2005, the next month we were contacted by Bishop's University (http://www.ubishops.ca), located in Sherbrooke, Quebec, not far from Montreal. Bishop's decided to implement the still yet to be released Bedework 3.0, and in January 2006, sent their developer, Joel Casse, to "calendar camp" at RPI to learn more about installing Bedework.

Bedework 3.0 was released in March 2006. In April 2006, Bishop's became the second production Bedework site, the first other than RPI.

Now, more than four and a half years later, we are pleased to learn that Bishop's will be joining Jasig as an institutional member. We still have fond recollections, both personally and professionally, of our Bedework collaboration with Bishop's, and look forward to working again with them as a Jasig member.

================================================================

================================================================

The Jasig and Sakai boards have formed a joint committee, consisting of
members from each Board, to facilitate continued discussions around the
bringing together of the two communities. Both boards are excited about
working together more closely in the new year to hash out the details
toward this goal. The joint committee will be providing more details
around the group's objectives and progress early in 2011. We will also be
providing more frequent communications to our communities after that time.

================================================================

The Fluid community is pleased to announce the release of Infusion 1.3, just in time for the holidays!

Infusion 1.3 is a major new release of Fluid's JavaScript application framework. This version includes substantial accessibility improvements, plugin-free HTML 5 support for the Uploader component, and variety of new framework features including the Inversion of Control system for creating highly adaptable and easy-to-test applications.

Create your own custom build of Infusion 1.3 with the new Infusion Builder:http://builder.fluidproject.org

... or download the entire package of Infusion 1.3 at:http://fluidproject.org/index.php/download-infusion

What's new in this release?

Sneak Peek at the new Inversion of Control (IoC) system
Uploader support for HTML 5

Flash-free for modern browsers!
Substantially improved keyboard and screen reader accessibility
Comprehensive automatic progressive enhancement based on browser capabilities

Tons of accessibility improvements

Better feedback for the Progress component
Enhanced screen reader support for the Inline Edit component
Location and movement announcements for the Reorderer component
No wrap option for the Reorderer component

The new Infusion Builder site, which allows you to create custom builds
Renderer improvements
ChangeApplier now supports transactions
Bug fixes
Many improved demos

We have updated our supported browser matrix to harmonize it with the latest Yahoo! A-Grade support. For more information, see our Browser Support documentation at http://wiki.fluidproject.org/display/fluid/Browser+Support

A huge thanks and happy holidays to all our users and everyone in the community for their hard work on this release!

Colin Clark
Technical Lead, Fluid Project

================================================================
================================================================

Editor: Mark Rogers (University of Manitoba)

Online edition at: http://www.jasig.org/jasig-newsletters/december-2010
Past editions of the Jasig Newsletter can also be found in the Jasig wiki at: https://wiki.jasig.org/display/JSG/Newsletter

================================================================
================================================================

Browser not supported