...
We could “throw the switch” and shut down the old IdPs and bring up the new IdPs during one scheduled short down time. This would require a short interruption of service. If there are problems with the 2.x IdPs it will mean there will be other interruptions of service.
Phase Two: Transition TouchstoneNetwork.net IdPs
...
All of the work to be done to migrate the core IdPs is also applicable to the TouchstoneNetwork IdPs, with the exception to the work required to eliminate Stanford WebAuth from the core IdPs. We expect that once the core IdPs have been transitioned, it will simply be a matter of applying nearly the same configurations to the new CAMS IdP machines, and testing them. I expect that this phase of the transition can be done in approximately two weeks of time.
Phase Three: improve SP registration
SP registration currently requires a person to send mail to an RT queue for processing. The person has to understand what type of information is required. Someone (Bob) has to edit the MIT-metadata.xml file with the submitted information in order for the registration to become effective.
Phase four: Misc
a. InCommon is strongly advocating the use of inline certificates, i.e. inline in the metadata. This will mean that if MIT SP use a single certificate for the user facing SSL and for Shibboleth, when the certificate has to be renewed, the system administrators will also have to register the new certificate in the MIT, and potentially the InCommon Federation, metadata.
Projected timeline
...
Week of October 26 (~3 days available)·
- Request new VMs from NIST
...
- Remove the artifact query support from the MIT metadata.
...
- Schedule CAMS restart with new Moira WS settings
...
- Work on new login pages (elimination of Stanford WebAuth)
...
- (2 days on Athena)
Week of November 2nd (4 days available)·
- Work on new login pages (elimination of Stanford WebAuth)
...
- (1 day on Athena)
Week of November 9 (3 days available)·
- Work on new login pages (elimination of Stanford WebAuth)
...
- Work on Apache rebuild for RHEL3
...
- (2 day on Athena)
Week of November 16 (3 days available)·
- Work on Apache rebuild for RHEL3
...
- Install second instance of 1.3 IdP on idp2-dev.mit.edu
...
- (2 days on Athena)
Week of November November 23 (1 day available)·
- TH and Friday holidays
...
- Wed travel?
...
- (1 day on Athena)
...
- Idp2-dev configuration and testing
Week of of November 30 (2 days available)·
- Start Terracotta investigation
...
- (3 days on Athena)
Week of December 7 (0 days)·
- (5 days on Athena)
Week of December 21 (2 days available?)·
- Terracotta
...
- (Athena)
...
- (Holidays)
Week of December 28 ( 3 days available?)·
- Terracotta
...
- (
...
- 1 Day Athena)
Week of January 4th (5 days available)·
- Terracotta
- Start testing needs more detailed planning
Deploy · Start testing Deploy week of January January 25th
Deploy to CAMS week of February 22 22