committest for SimpleSign added (breaks ADFS IdP:s with Shib SP 2.5+)

2 files changed, 298 insertions, 1 deletions

diff --git a/Makefile b/Makefile
index 49201279..9c0bc213 100644
--- a/Makefile
+++ b/Makefile
@@ -128,8 +128,10 @@ committest: test
 	@for x in `find $(SRCDIRS) -name \*.xml`; do if cat $$x | sed 's;\(</*\)[a-z0-9]*:;\1;g' | xmllint --xpath /EntityDescriptor/IDPSSODescriptor/Extensions/EntityAttributes - 2>/dev/null | grep -q entity-category ; then echo "  $$x" ; fi ; done | grep . && exit 1 || true
 	@echo "Checking for MDUI in EntityDescriptor/Extensions"
 	@for x in `find $(SRCDIRS) -name \*.xml`; do if cat $$x | sed 's;\(</*\)[a-z0-9]*:;\1;g' | xmllint --xpath /EntityDescriptor/Extensions/UIInfo - 2>/dev/null | grep -q . ; then echo "  $$x" ; fi ; done | grep . && exit 1 || true
-	@echo "Checking for invalid geodata"
+	@echo "Checking for invalid geodata (syntax is geo:xx.yy,zz.vv)"
 	@for x in `find $(SRCDIRS) -name \*.xml`; do if cat $$x | sed -n 's;.*<[a-z0-9:]*GeolocationHint>\(.*\)</[a-z0-9:]*GeolocationHint>;\1;p' | grep -q -vE '^$$|^geo:[0-9][0-9][0-9.]*,[0-9][0-9][0-9.]*$$' ; then echo "  $$x" ; fi ; done | grep . && exit 1 || true
+	@echo "Check for new SP:s with SimpleSign (breaks ADFS IdP:s with Shib SP 2.5+)"
+	@for x in `find $(SRCDIRS) -name \*.xml`; do if ! grep -qx `basename $$x` sp-with-simplesign && grep -q HTTP-POST-SimpleSign $$x ; then echo "  $$x" ; fi ; done | grep . && exit 1 || true
 
 commit: tidy committest
 	@git diff --color
diff --git a/sp-with-simplesign b/sp-with-simplesign
new file mode 100644
index 00000000..5ef2fb24
--- /dev/null
+++ b/sp-with-simplesign
@@ -0,0 +1,295 @@
+# Old SP:s with SimpleSign
+# Do not allow new SP:s with SimpleSign enabled
+# Shibboleth SP 2.5+ defaults to SimpleSign, failes on ADFS IdP:s
+# fredrik - 2014-04-08
+account-test.unit.liu.se-shibboleth-sp.xml
+account.liu.se-shibboleth-sp.xml
+account.mdh.se-shibboleth.xml
+accountcheckout.lnu.se.xml
+activate-test.du.se-shibboleth.xml
+akino.hh.se-shibboleth.xml
+akka-anv.uu.se-shibboleth.xml
+akkatest.its.uu.se-shibboleth.xml
+aktivera-test.su.se-shibboleth.sso.xml
+aktivera.ki.se-shibboleth.xml
+aktivera.su.se-shibboleth.sso.xml
+aktivering.db.umu.se-shibboleth.xml
+alpha.kib.ki.se-shibboleth.xml
+amiga.kib.ki.se-shibboleth.xml
+bardo.kib.ki.se-shibboleth.xml
+bedomningshandboken.uhr.se-shibboleth.xml
+beta.kib.ki.se-shibboleth.xml
+beta.lobber.se-shibboleth.xml
+betafoo.nordu.net-shibboleth.xml
+bhb-00.its.umu.se-gui-sp.xml
+bhb-00.its.umu.se-user-idp.xml
+bibliometrics.ki.se-shibboleth.xml
+brainstorm.swami.se-shibboleth.xml
+cambro-staging-next.umdc.umu.se-shibboleth.xml
+cambro-test-26.umdc.umu.se-shibboleth.xml
+cambro-tst1.umdc.umu.se-shibboleth.xml
+cambro-utv1.umdc.umu.se-shibboleth.xml
+captivelan-test.it.su.se-shibboleth.sso.xml
+captivelan.it.su.se-shibboleth.sso.xml
+cas.weblogin.uu.se-cas.xml
+cdn.nordunet.tv-shibboleth.xml
+ci.nordu.net-shibboleth.xml
+coip-test.sunet.se-shibboleth.xml
+confluence-test.it.su.se-shibboleth.sso.xml
+confluence.it.su.se-shibboleth.sso.xml
+connect-beta.sunet.se-shibboleth.xml
+connect-stable.sunet.se-shibboleth.xml
+connect-test.sunet.se-shibboleth.xml
+connect.funet.fi-shibboleth.xml
+connect.sunet.se-shibboleth.xml
+connect.uninett.no-shibboleth.xml
+converis.info-shibboleth.xml
+crowd.nordu.net-shibboleth.xml
+crowdtest.nordu.net-shibboleth.xml
+dev.lobber.se-shibboleth.xml
+download.portal.chalmers.se-shibboleth.xml
+dwidp.nyautb.its.umu.se-dw-idp.xml
+dwidp.testa.antagning.se-dw-idp.xml
+dwidp.testb.antagning.se-dw-idp.xml
+e5.onthehub.com.xml
+ecsidp.testa.antagning.se-ecs-idp.xml
+ecsidp.testb.antagning.se-ecs-idp.xml
+egiswamid.egi.kth.se-shibboleth.xml
+epc.ub.uu.se-shibboleth.xml
+etenta.math.su.se
+expert.antagning.se-ecs-sp.xml
+expert.nyautb.its.umu.se-ecs-sp.xml
+expert.testa.antagning.se-ecs-sp.xml
+expert.testb.antagning.se-ecs-sp.xml
+fordrop.irt.kth.se-shibboleth.xml
+gallus.scilifelab.se-shibboleth.xml
+gihidentity01.ihs.se-idp-shibboleth.xml
+grouper-test.its.uu.se-shibboleth.xml
+grouper-utv.its.uu.se-shibboleth.xml
+grouper.its.uu.se-shibboleth.xml
+hades.slu.se-shibboleth.xml
+hbidp.hb.se-idp-shibboleth.xml
+hr.liu.se-shibboleth.xml
+hr.su.se-shibboleth.xml
+identity.mdh.se-idp-shibboleth.xml
+idp-test.kau.se-idp-shibboleth.xml
+idp-test.nordu.net-idp-shibboleth.xml
+idp.bth.se-idp-shibboleth.xml
+idp.esh.se-idp-shibboleth.xml
+idp.hig.se-idp-shibboleth.xml
+idp.his.se-idp-shibboleth.xml
+idp.hkr.se-idp-shibboleth.xml
+idp.irf.se-idp-shibboleth.xml
+idp.it.gu.se-idp-shibboleth.xml
+idp.it.su.se-idp-shibboleth.xml
+idp.kb.se-idp-shibboleth.xml
+idp.kmh.se-idp-shibboleth.xml
+idp.konstfack.se-idp-shibboleth.xml
+idp.kva.se-idp-shibboleth.xml
+idp.lnu.se-idp-shibboleth.xml
+idp.mah.se-idp-shibboleth.xml
+idp.nordu.net-idp-shibboleth.xml
+idp.rkh.se-idp-shibboleth.xml
+idp.student.bth.se-idp-shibboleth.xml
+idp2-1.slu.se-idp-shibboleth.xml
+idp2-test.slu.se-idp-shibboleth.xml
+idp2.hig.se-idp-shibboleth.xml
+idp2.hv.se-idp-shibboleth.xml
+idp2.kau.se-idp-shibboleth.xml
+idp3.hv.se-idp-shibboleth.xml
+idptest.test.it.gu.se-idp-shibboleth.xml
+ilearn.dsv.su.se-shibboleth.xml
+its-pd0001.ad.umu.se-shibboleth.xml
+its-pd0030.ad.umu.se-shibboleth.xml
+its-pd0062.ad.umu.se-shibboleth-sp.xml
+jabber.nordu.net-shibboleth.xml
+jira-test.it.su.se-shibboleth.sso.xml
+jira.it.su.se-shibboleth.sso.xml
+kib.ki.se-shibboleth.xml
+kiidp.ki.se-idp-shibboleth.xml
+kilw.ki.se-shibboleth.xml
+kilwdev.it.ki.se-shibboleth.xml
+kilwtest.it.ki.se-shibboleth.xml
+kisetest2.user.ki.se-shibboleth.xml
+kitstidp01.tst.ki.se-idp-shibboleth.xml
+kurser.math.su.se-shibboleth.xml
+kurser3.math.su.se-shibboleth.xml
+ladok-test.su.se-shibboleth.sso.xml
+ladok.su.se-shibboleth.sso.xml
+ladok3-00.ladok.umu.se-gui-sp.xml
+ladok3-01.ladok.umu.se-gui-sp.xml
+ladok3-02.ladok.umu.se-gui-sp.xml
+ladok3-03.ladok.umu.se-gui-sp.xml
+ladok3-04.ladok.umu.se-gui-sp.xml
+ladok3-05.ladok.umu.se-gui-sp.xml
+ladok3-06.ladok.umu.se-gui-sp.xml
+ladok3-07.ladok.umu.se-gui-sp.xml
+ladok3-08.ladok.umu.se-gui-sp.xml
+ladok3-09.ladok.umu.se-gui-sp.xml
+ladok3-10.ladok.umu.se-gui-sp.xml
+ladok3-demo-00.its.umu.se-gui-sp.xml
+ladok3-demo-01.its.umu.se-gui-sp.xml
+ladok3-demo-02.its.umu.se-gui-sp.xml
+ladok3-demo-03.its.umu.se-gui-sp.xml
+ladok3-demo-04.its.umu.se-gui-sp.xml
+ladok3-demo-05.its.umu.se-gui-sp.xml
+ladok3-p00.ladok.umu.se-gui-sp.xml
+ladok3.its.umu.se-user-idp.xml
+ladok3test.its.umu.se-gui-sp.xml
+ladok3test.its.umu.se-user-idp.xml
+lartorget.sll.se-shibbolet.xml
+livesrv.ex.vr.se-idp-shibboleth.xml
+login-dev.du.se-idp-shibboleth.xml
+login.du.se-idp-shibboleth.xml
+login.idp.hhs.se-idp-shibboleth.xml
+login.liu.se-idp-shibboleth.xml
+lpw.ki.se-shibboleth.xml
+lpwdev.it.ki.se-shibboleth.xml
+lpwtest.it.ki.se-shibboleth.xml
+mail.su.se-shibboleth.sso.xml
+mailfilter-test.nordu.net-shibboleth.xml
+mailfilter.nordu.net-shibboleth.xml
+mailfilter.sunet.se-shibboleth.xml
+maps.slu.se-shibboleth.xml
+mds-test.sunet.se-shibboleth.xml
+mds.lan.kth.se-shibboleth.xml
+mds.sunet.se-shibboleth.xml
+mds2.nordu.net-shibboleth.xml
+meetingtools.nordu.net-shibboleth.xml
+meta.eduroam.se-shibboleth.xml
+minasidor.ladok.umu.se-shib-sp.xml
+minastudier-test.su.se-shibboleth.sso.xml
+minastudier.ladok.umu.se-user-idp.xml
+minastudier.su.se-shibboleth.sso.xml
+mondo-test.su.se-shibboleth.sso.xml
+mondo.su.se-shibboleth.sso.xml
+monitor.it.su.se-shibboleth.sso.xml
+mp.uu.se-shibboleth.sso.xml
+nacho.adm.gu.se-shibboleth.xml
+nagios-vm.nordu.net-shibboleth.xml
+nagios.nordu.net-shibboleth.xml
+ni.nordu.net-shibboleth.xml
+nordunet.tv-shibboleth.xml
+nordushare-dev.nordu.net-shibboleth.xml
+nya-00.ladok.umu.se-aws-sp-en.xml
+nyainloggning.slu.se-shibboleth-sp.xml
+order.kib.ki.se-shibboleth.xml
+pingpong.chalmers.se-shibboleth.xml
+pingpong.ki.se-shibboleth.xml
+play.hb.se-shibboleth.xml
+play.hig.se-shibboleth.xml
+play.liu.se-shibboleth.xml
+play.lu.se-shibboleth.xml
+play.mah.se-shibboleth.xml
+play.mdh.se-shibboleth.xml
+play.sunet.se-shibboleth.xml
+portal.mdh.se-shibboleth.xml
+portalservices.miun.se-shibboleth.xml
+portalservicesutv.miun.se-shibboleth.xml
+pp-edu-admin.it.su.se-shibboleth.sso.xml
+pp-prod-admin.it.su.se-shibboleth.sso.xml
+pp-test-admin.it.su.se-shibboleth.sso.xml
+problem.math.su.se-shibboleth.xml
+publications.ki.se-shibboleth.xml
+referens-idp.skolfederation.se-idp-shibboleth.xml
+registrera.hb.se-shibboleth.xml
+rt.it.su.se-shibboleth.sso.xml
+samadhi.kib.ki.se-shibboleth.xml
+saml-1.sys.kth.se-idp-shibboleth.xml
+saml.sys.kth.se-idp-shibboleth.xml
+selfservice.hb.se-shibboleth.xml
+selfservice.test.hb.se-shibboleth.xml
+sgw.africa-grid.org-shibboleth.xml
+shib-1-r.referens.sys.kth.se-idp-shibboleth.xml
+shib-idp-1.oru.se-idp-shibboleth.xml
+shib-idp-test.oru.se-idp-shibboleth.xml
+shib1.oru.se-shibboleth.xml
+shibb1.hj.se-idp-shibboleth.xml
+shibbo-test.ltu.se-idp-shibboleth.xml
+shibbo.ltu.se-idp-shibboleth.xml
+shibboleth.antagning.se-shibboleth-idp.xml
+shibboleth.ebscohost.com.xml
+shibboleth.msacademicverify.com-shibboleth-sp.xml
+shibboleth.net.lu.se-idp-shibboleth.xml
+shibboleth.nyautb.its.umu.se-shibboleth-idp.xml
+shibboleth.slu.se-idp-shibboleth.xml
+shibboleth.testa.antagning.se-shibboleth-idp.xml
+shibboleth.testb.antagning.se-shibboleth-idp.xml
+shibboleth.turnitin.com-shibboleth.xml
+shibboleth.uhr.se-idp-shibboleth.xml
+shibboleth.umu.se-test.xml
+shibdev.rsc.org-shibboleth.xml
+sigma-test-localhost-sp-130705.xml
+signon.hh.se-idp-shibboleth.xml
+smd-dev.nordu.net-shibboleth.xml
+smd.du.se-shibboleth.xml
+sp-nya.bth.se-shibboleth.xml
+sp-test.it.su.se-shibboleth.sso.xml
+sp-test.swamid.se-shibboleth.xml
+sp.it.gu.se-shibboleth.xml
+sp.kau.se-shibboleth.xml
+sp.swamid.se-shibboleth.xml
+sp.tools.sunet.se-shibboleth.xml
+sp.wavelan.su.se-shibboleth.sso.xml
+su.avedas.com-shibboleth.xml
+sutest.dsv.su.se-shibboleth.xml
+swamid.shh.se-idp-shibboleth.xml
+swamid.user.uu.se-idp-shibboleth.xml
+swamid2.shh.se-idp-shibboleth.xml
+tcs-test.sunet.se-shibboleth.xml
+test-chalmers.pingpong.net-shibboleth.xml
+test-ki.pingpong.net-shibboleth.xml
+test.mp.uu.se-shibboleth-sso.xml
+testakt.it.ki.se-shibboleth.xml
+testgag.it.ki.se-shibboleth.xml
+testshib.msacademicverify.com-shibboleth-sp.xml
+testshib.user.uu.se-idp-shibboleth.xml
+tta-portal.misc.kth.se-shibboleth.xml
+umdac-olho0001.ad.umu.se-shibboleth.xml
+umdac-stdout.umdc.umu.se-shibboleth.xml
+umdac-strike.ad.umu.se-shibboleth.xml
+umdac-utv1.ad.umu.se-shibboleth.xml
+umdac-utv2.ad.umu.se-shibboleth.xml
+unitcf.se-shibboleth.xml
+uraccess.se-shibboleth-sp.xml
+urn-urkund-shibboleth-sp.xml
+uu.test.diva-portal.org-shibboleth.xml
+vfu-gemdev.it.su.se-shibboleth.sso.xml
+vfu-test.su.se-shibboleth.sso.xml
+vfu.su.se-shibboleth.sso.xml
+vhs-dev01.dyndns.org-shibboleth-sp.xml
+vlab-chemsub.explizit.se-shibboleth.xml
+vmfront.lan.kth.se-shibboleth.xml
+vmidgw3.miun.se-idp-shibboleth.xml
+webapp-utv.ita.mdh.se-shibboleth.xml
+webinar.nordu.net-shibboleth.xml
+weblogin.uu.se-idp-shibboleth.xml
+wiki.its.uu.se-shibboleth.xml
+wl07089.sigma.local-shibboleth.xml
+wp.nordu.net-shibboleth.xml
+ws3.bmc.uu.se-shibboleth.xml
+www-en.nyautb.its.umu.se-aws-sp-en.xml
+www-stage.ladok3.its.umu.se-gui-sp.xml
+www-utb.ladok3.its.umu.se-gui-sp.xml
+www.akademiskahogtider.se-shibboleth.xml
+www.antagning.nyautb.its.umu.se-ecs-sp.xml
+www.antagning.se-aws-sp.xml
+www.antagning.se-ecs-sp.xml
+www.cambro.umu.se-shibboleth.xml
+www.diva-portal.org-shibboleth.xml
+www.ifmsa.se-sp.xml
+www.mit.ladok.se-gui-sp.xml
+www.nyautb.its.umu.se-aws-sp.xml
+www.play.umu.se-shibboleth.xml
+www.servicedesk.its.umu.se-shibboleth.xml
+www.servicedesk.umdac.umu.se-shibboleth.xml
+www.studera.nyautb.its.umu.se-aws-sp.xml
+www.testa.antagning.se-aws-sp.xml
+www.testa.universityadmissions.se-aws-sp-en.xml
+www.testb.antagning.se-aws-sp.xml
+www.testb.universityadmissions.se-aws-sp-en.xml
+www.universityadmissions.se-aws-sp-en.xml
+www.wisum.its.umu.se-shibboleth.xml
+www.wisum.umdac.umu.se-shibboleth.xml
+www07test.sub.su.se.xml
+www4.genuinetext.com-shibboleth.xml