On 26/07/19 17:19, Laura Arjona Reina wrote: > Sandstorm allows you to define an organization. You can automatically > apply some settings to all members of your organization. Users within > the organization will automatically be able to log in, install apps, and > create grains. > > Organization membership > > [ ] Users authenticated via email address > Domain: ____________ > Users with an email address at this domain will be members of this > server's organization. > > [ ] Users authenticated via Google Apps for Work > Domain: __________ > Users with a Google Apps for Work account under this domain will be > members of this server's organization. > > [ ] Users authenticated via LDAP > Note: disabled because LDAP login is not configured. > > [ ] Users authenticated via SAML > Note: disabled because SAML login is not configured. > > From the above, I've just ticked the "[X] Users authenticated via email > address" and added "debian.org" as domain. > > Can you try if it makes a difference in your experience of login in? >
That may well have solved my annoyance at time restricted access tokens (I have closed and reopened browser and site didn't ask me to log in again). Obviously I should close session and wait until tomorrow to confirm that it still 'works' (and then close this 'ticket') > and > > Would that be enough or would you need people with no @debian.org > address to access too? I suspect that this is enough for now > > About LDAP, I guess Asheesh knows better about that than me (both in the > Sandstorm and in the Debian side) so I didn't dare yet to go and try to > configure the service in Sandstorm (and if it needs some setting in the > machine, I have no permissions there, I just tweak the web interace), > but for the case Asheesh cannot find the time to look at this, I will > try to read the documentation and figure out what can I do (but not > before debconf19 ends, probably...). LDAP may well still be the better option (as opposed to a cookie from a valid d.o email address). What are your and Asheesh's view on the subject? > > Cheers > Many thanks for your help and fast response /Andy
