Web Sign On SSOClient and supported java versions

4 posts 0 followers RSS feed

1. A guest user

   #1 15:56, Mon 13 Sep 2010

   Hi all, A quick post to clarify our position on the versions of java on which we support the use of SSOClient and UserLookup: Oracle’s currently supported version of Java is Java 6 (see http://www.oracle.com/technetwork/java/eol-135779.html ). Support for java 1.4 ended in 2008, and java 5 ended in 2009. Because of this, we are not in a position to run and maintain a test environment for a JRE version prior to Java 6. Therefore, we can’t guarantee that a particular version of SSOClient will function correctly on Java < 6. Recent versions of SSOClient are known *not* to work on Java 1.4, and we do not support the use of SSOClient on this platform. We would strongly advise anyone using Java 1.4 to update urgently (not only for SSOClient reasons, but because 1.4 is known to have significant security vulnerabilities). To the best of our knowledge, the current version of SSOClient (1.81) works with Java 5; We avoid using Java 6-only features in the project. If and when Java-5 related problems are identified, we will do what we can to allow the library to work correctly on this platform. However, as mentioned above we do not test on Java 5 before release, so users who are still on this version should take this into account and ensure that they test adequately themselves before deploying into production. We would also strongly recommend that users on Java 5 should upgrade to a supported version as soon as is practical. HTH Chris
   0 likes
    
2. A guest user

   #2 16:05, Mon 13 Sep 2010

   Re: SSOClient and supported java versions

   Thanks for letting us know the SSO situation on this.
   0 likes
    
3. A guest user

   #3 15:20, Thu 16 Sep 2010

   Re: SSOClient and supported java versions

   Is there any advantage in upgrading our apps to the latest SSO client? (Some are still at e.g. 1.63).
   0 likes
    
4. A guest user

   #4 16:07, Thu 16 Sep 2010

   Re: SSOClient and supported java versions

   As far as I know, there’s nothing /desperately/ urgent between 1.63 and now, but: a) There are a bunch of bug fixes of one sort and another – especially around performance under high load. If you’re not seeing performance problems you don’t need to update, but updating now will prevent you from seeing them in the future b) There’s better handling of server errors; you can distinguish between a user which is anonymous because you couldn’t verify them, and one which is anonymous because they’re not logged in. Similarly for empty webgroups. c) 1.63 doesn’t have any of the OAuth stuff in, so if you want to integrate with the portal you’ll need to update You can browse the changes here if you like.
   0 likes