[Pkg-cas-maintainers] Perl clients - Was: Re: [Fwd: Proposal for collaborative maintenance of CAS related apps in Debian]

[Yves Agostini]

Le mercredi 20 août 2008 à 15:09 +0200, Olivier Berger a écrit :
> Hi again.
> 
> Do you have any idea of the difference between
> libauthen-cas-client-perl/Authen::Cas::Client and
> libauthcas-perl/AuthCAS ?

AuthCAS was released in CPAN on Nov 2006 but tests failed and CPAN
managers complained about the used namespace.
Now a standard "dh-make-perl --build --cpan AuthCAS" always load the
wrong AuthCAS 1.3 and not the new 1.3.1. Upstream author will certainly
need to remove this bad 1.3 release.

Authen::Cas::Client was released by Jason Hord in Nov 2007.
Authen::Cas::Client provide many working tests and AuthCAS only one load
test.
AuthCAS is only better in managing cert files. Authen::Cas::Client use
LWP::UserAgent and Crypt::SSLeay. It's a little bit less simple.
I used CAS.pm (the old AuthCAS.pm) for years in my modules
Apache[2]::AuthCASSimple but when I wanted to put them in CPAN I need to
switch to Authen::Cas::Client.

> The first one seems to indicate that there's some common authentication
> framework in Perl that it may provide a varient of, but I'm not so sure,
> being almost ignorent in terms of Perl.

Many frameworks for one task are not really a problem but duplicate code
could be really bad for security teams.

If AuthCAS can be managed directly from CPAN (1.3 need to be removed)
and upstream are sure to maintain the AuthCAS namespace and a a.b.c
versioning convention, I can maintain it with the pkg-perl group. Else
it will be better to ask for upload to a mentor. ( Are you sure that
your watch file on sourcesup match the good release ? )

Cheers

PS: how about using IRC or a jabber chat room ?

-- 
---------------------------------------------------------------
AGOSTINI Yves             CRI - Université Paul Verlaine - Metz
agostini at univ-metz.fr     http://www.crium.univ-metz.fr
tel: 03 87 31 52 63       fax: 03 87 31 53 33     PGP: 842CC261