http://www.oclc.org/ezproxy/support/166285 EZproxy Enhancements Recent enhancements and updates 2012-02-16T11:51:46-05:00 OCLC webcontent@oclc.org http://www.oclc.org/common/images/logos/oclc/oclc_rss.gif http://www.oclc.org/common/images/logos/oclc/oclc_rss.gif Copyright (c) 2012, OCLC <div>EZproxy5.5</div> http://www.oclc.org/ezproxy/support/enhancements/270263 2011-12-14T05:44:00-05:00

EZproxy Changes for V5.5

Enhancements for Shibboleth implementations:

  1. Shibboleth 2.3's default settings for IdPs are now compatible with EZproxy.
  2. The NameIdentifier (non-persistent ID) is now exposed through the expression variable auth:nameid.
  3. HTTP POST data can now be in excess of 64 k bytes for Shibboleth. Other HTTP POST data remains limited to 64k bytes.
  4. Shibboleth 1.3 authentication no longer creates the "SAMLResponse no encrypted Assertion elements" message to the messages.txt file unnecessarily.
  5. Shibboleth authentication now successful for institutions in the UK Access Federation, instead of logging potential message "SAML received assertion without a status of success, denying access."
  6. In cases where XDebug directive is used, or if the -D command line argument is used; and there is no "shibuser.txt" file; then, Shibboleth processing will no longer be disabled.

General bug fixes:

  1. Removed extraneous messages in the messages.txt file about "License Validation."
  2. The string concatenation operator is interpreted as a character belonging to the neighboring textual constant rather than as a concatenation operator for the following namespaces.

       auth:, group:, http:, cookie:

    This longstanding behavior will be fixed in 5.5.x for only the following namespaces.

       login:, env:, ParseName:, session:, db:, re:

    If you see this problem, the workaround is to insert a space around the concatenation operator. For example, this syntax works:

       UserFile("groups/" . login:instNumber.".txt")

    While this syntax does not: 

       UserFile("groups/".login:instNumber.".txt")
  3. Long lines greater than approximately 8192 characters written to messages.txt are now accepted.
  4. The EZproxy "stopall" command line argument will stop all processes named "ezproxy".  It will then remove the ".ipc" and ".lck" files for the EZproxy directory from which the executable was run.  The ".ipc" and ".lck" files for other execution directories are left unchanged.  This may require that you manually remove them from those directories.
  5. A number of additional security issues were also addressed in this release.
]]>