repoze.who==2.0 required by ckan, but repoze.who==1.0.18 required by ckanext-saml2

[adborden]

There's a version mismatch in our dependencies. For production environments, we want to use saml2 authentication and therefore need repoze.who==1.0.18. For development, we don't want saml2 and therefore need repoze.who==2.0. Hopefully we can update ckanext-saml2 which will work with repoze.who==2.0. For now, we're locking the version to 1.0.18 in production environments and then as a post-install task, installing 2.0 for development environments.

[adborden]

Running into this with Inventory. I think that using the latest version of ckanext-saml2 and making sure it works with recent versions of repoze.who (2.0) GSA/data.gov#414 is the right fix for this.

[adborden]

We dropped ckanext-saml2, this is resolved.