Re: Google shuts down the OpenID 2.0 on April 20, 2015
Hi, On Monday, 2014-11-10 22:43:42 +0100, David Ostrovsky wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. I wonder if Gerrit could be easily talked into additionally accepting OpenID Connect (OAuth 2.0 login), the successor of OpenID 2.0, see also http://openid.net/connect/ http://openid.net/2014/02/26/the-openid-foundation-launches-the-openid-connect-standard/ Google is explicitly mentioned as one of the implementors and Google is betting big on OpenID Connect because it’s simple for developers to understand and makes it easy to federate with identity providers. (which effectively probably is the reason why they shutdown OpenID 2.0) so the benefit of being already logged into Google (really, you want that?) when login into Gerrit could persist. https://developers.google.com/+/api/auth-migration#timetable says mapping of OpenID 2.0 identifiers to OAuth 2.0 identifiers will continue to work until January 1, 2017. so this might be attractive for those who don't want to sign up with yet another OpenID provider. Btw, for those who don't want a launchpad.net ID for religious reasons there's a fedoraproject.org ID server ;-) And it is always good to have at least two OpenID providers assigned to one account.. as April 20 will tell.. Eike -- LibreOffice Calc developer. Number formatter stricken i18n transpositionizer. GPG key ID: 0x65632D3A - 2265 D7F3 A7B0 95CC 3918 630B 6A6C D5B7 6563 2D3A Care about Free Software, support the FSFE https://fsfe.org/support/?erack pgplso9R2dC9V.pgp Description: PGP signature ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
Le Tue, 11 Nov 2014 10:37:45 +0100, Bjoern Michaelsen bjoern.michael...@canonical.com a écrit: On Tue, Nov 11, 2014 at 08:26:19AM +0200, Tor Lillqvist wrote: There is a list: http://openid.net/get-an-openid/ and chances you already have one of those (including lots of smaller providers like wordpress.com, livejournal). Also note that everyone who ever filed a bug against Ubuntu has an OpenID as launchpad offers one. FTR, stackexchange, editor of many websites (stackoverflow, askubuntu,...) is also providing an OpenID 2.0 service [0], if you deigned to create a login on them :) Regards Mat M [0] https://openid.stackexchange.com ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 2:29 PM, Norbert Thiebaud nthieb...@gmail.com wrote: I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. between fedora, I poked around, but couldn't find any publicly-accessible OpenID service provided by Fedora the OS (I didn't poke at Fedora Commons). launchpad, yahoo, fb, blogger, wordpress, etc... there are already plenty. Lots of people don't trust any of those services. I'm hesitant to require contributors to enter into a trust agreement with a 3rd party such as Canonical or Google as a requirement to contribute to LibreOffice development. If it's at all technically possible, I think our developers should have a choice. In fact it would prolly be best to recommend that people register in their gerrit account more than one openid to protect themselves again single-point-of-failure. True (I'd regard that as an engineering flaw in the design of OpenID :-) Feature #308 (New): single sign-on for bugzilla and redmine https://redmine.documentfoundation.org/issues/308 that is not an infra-related bug.. that is a Bugzilla 'bug'. Insofar as we want to make it easier for people to use our bug tracker (and other project resources), I see it as something of concern to both our QA and Infra teams. there are a couple of seemingly abandoned attempt Yep. I'd like to avoid having Persona for Bugzilla + MozTrap and then a separate OpenID for Gerrit, Ask, Redmine, TDF Wiki, etc.., but perhaps 2 sets of logins are preferable to 8. Best, --R -- Robinson Tryon QA Engineer - The Document Foundation LibreOffice Community Outreach Herald qu...@libreoffice.org ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
Hi, On Tue, Nov 11, 2014 at 09:47:44AM +0200, Tor Lillqvist wrote: I don't have FB account. Yeah, they are notoriously hard to get. There are prople who DO NOT WANT a FB account. If you want to leave all those people (existing and future contributors) behind, sure, do it via FB... Regards, Rene ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
There are prople who DO NOT WANT a FB account. But there are a lot of people who ALREADY HAVE ONE. --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 It's not that they are hard to get but rather that not everyone wants to set up a FB account. At least it is out of the question for me. Another option (at least for the Google users) might be the Google+ Login. AFAIK everyone with a Google Account does have a Google+ Login as well. This is obviously the option that Google recommends ;) And I have to agree that the Yahoo system is horrible. On 11.11.2014 08:47, Tor Lillqvist wrote: I don't have FB account. Yeah, they are notoriously hard to get. --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBAgAGBQJUYc/wAAoJEOXVkNQg9iT4Cd0QAKajm0OVKSVn6QkSBrN1hwu7 7kuaq+OZlqg5qC9D47Z8ueA3XwiP/0G/APOTdRTmnpgF2G8WsSjgudAebk6VSQuN 8WEkuJNAs22CHsv38LTTMl5aV3evd2npuuFCSdGEajtvUcmPBhel3zNO/TeNGeEU WLkWZcuGbxyPm7VAkWpsQ2eIiLMU/1aD6O299hO8bp6D/xNsReE0W7x7vXOkNDH1 fxaUzypV+elTVkNWnxwxYMYT3vsOX0ALxd/J9kp+gbgh8A4WM7Yx+qEuyWV7culQ 0AyNWP3EFv0y7Lx5lWQusqfnDrOdC4kofm0AM+LPRtAgX+B+3PiOavnwlRPstII8 g7uasBYbb2rozj/G6n4o/6YjWKdwroFFmRXTiz+8wsw61DK5jUSIwBQfP2E35Bx8 erwutwHXWmkpMQEXHT98KZiHahx8l/wr4y8/GUmgiisdT+iYngcr1HDAuOuEyNtJ MppUcxkvOkjDFqZ5jV1w4qU/BOw+kqwQ2TjKbygTBx6S4sB28cYST+ZzJWW4x03g 6ZGT1gpEhdt+qJunC0Euti3MBNrTHjuzhK0O8NBkd5CNT8NPz9K2HdjDoWrPeUaZ rfbQSh/lLPddJIqEV9fpqB2qJKMtiHrlFQFOUGLXVjYzHB/32znqcBC8TucxoeHc dhVwr1GLbyDtZaPSWv3n =1ST3 -END PGP SIGNATURE- ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Oh, and btw. Symantec uses a pretty good system for OpenID. It is called Symantec Personal Identity Portal. Might be an option as well. On 11.11.2014 09:59, Stefan Weiberg wrote: It's not that they are hard to get but rather that not everyone wants to set up a FB account. At least it is out of the question for me. Another option (at least for the Google users) might be the Google+ Login. AFAIK everyone with a Google Account does have a Google+ Login as well. This is obviously the option that Google recommends ;) And I have to agree that the Yahoo system is horrible. On 11.11.2014 08:47, Tor Lillqvist wrote: I don't have FB account. Yeah, they are notoriously hard to get. --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBAgAGBQJUYdGXAAoJEOXVkNQg9iT4tLMQAJa8LlWzUHLlSeURgtw/ZEB7 4hj5Z1odqABRTX+Dbcw1+5jlgxMTUd8Ek2XiSkA9CPiFheHl28LBf9CUl0fa+Sc3 pHliwSf3aWQca/57XgfQud01s47r/6eTlAsWkv7cNTY31+lhVVIUg1SgjIp4Z+lf PBuCHXQhQkSo64dZft2Uaavl1zbXFeMCslV/1dmijDm8B6Crz1C3x+C3ueL1qza0 sFRuEeV1PgtP+snpXlowp0rBrx9I02wwmrXqGOJKTlxKaxoNFv+hw+UoTM/zuftw Dh+hPVLif7CEIV54tA+h8uqy/eC1lApTMAYQ3oAWvpgs1xIf+8UYVqiy1V9UPR7K hvIQ4w110dvmMUpS78QxnX1Lvyk8dcgw1wsCodfSj/O5jE0iIpj0py0lfp2T20Lw 58/6M75oXZ9BgXVJTh7o+c92MxsDuDST9oT/Jq2p9fFwbXVJJVO82rzdLRZZ0A2V //nNl4WzpHPzzjvfD1xrDXLljNeFX5TyxRlG/E/gOP3JpEl9QvQIv2+/NOHc91h2 a86XgPNf4d+7atp2AEgLqO4pJktOB23xsurfRYarKg7WH0ka2MK6BmfdlGnZtysn pCNAT/QIh0xpEBYntBnOeZFhagx28GkEJAOnYM1UbVF/BZmG2iZJTgLKIkre5kRO i5lci7dYCKjWlaWu3+t7 =/Fzq -END PGP SIGNATURE- ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There should be no problem using this FB account for OpenID login if it is supported by FB (I don't know because I don't use FB). In my case Symantec PIP as an OpenID provider just works fine and I can use it to register and login to gerrit. On 11.11.2014 09:58, Tor Lillqvist wrote: There are prople who DO NOT WANT a FB account. But there are a lot of people who ALREADY HAVE ONE. --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBAgAGBQJUYdUFAAoJEOXVkNQg9iT4/4QQALoWARvNhqGX9Qjb14P/RHcR qjvYEQp25MZ9tqpqqr8eJDu5Z57+24MhVODbaGv7FnDyxRSdlym5z6r0XVsdVIfq dKCJLTSfUDnEqEEhHJ4P86rJKuBBknO9/SKoLD7k2sKQk0eVkUShOR+r+rhIJas2 qN4/HGftvX99frkpmlhM4G4+4R8WApsYqIeX4BekMaaHlAj/XJ8OVZU/mwtx1MM5 iO5ukajPNPlUHhSyQYNnvEmr9t5/5yGFm+gSmV64J+3jw5b6hZH3vqfdc+9GyQ+J dp8alJk44Soy7ZHxqchB66HeiVePNkor//NOGN4Bv1iQlPRhOZG40y5XBdEJJsP+ DdHp5yWb/4YWF6B5H+ZlbjjeJUm6ZgmKpbVYGiLPBqMLrMF8o+XB2SBfbQVZ8F1Y Gy00IYoA3XZAZXKC8z/+4YpdJRIXMbu79hJcQuCWaCwezEy8lNkI5YsZmFpTreQh s7XxOJOITPJHLPYQrCew5u8bbAUr2yyOcMhdnF3tgh7RY3mJevkZbU6HDNkeWHZp 2sGi9+r9LyRWqm/tAG7+6Jm3b0PM1rnmfKNs4fTqh2e5hAYW9B3CLZcnTFUNbHH4 xG85XBE9dgaIhV9SEiT12WiiDzbjGEs3LetoStdGgN1aVS0yyDsEBansGGwEtmz4 WE8gidhSlZx+GfSj9Tqw =pIA6 -END PGP SIGNATURE- ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
There should be no problem using this FB account for OpenID login if it is supported by FB (I don't know because I don't use FB). I doubt it is. OpenID seems dead or dying anyway, no? --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 08:26:19AM +0200, Tor Lillqvist wrote: Bah. Why not use Facebook? Lets not Flamefest around each and every possible OpenID provider. There is a list: http://openid.net/get-an-openid/ and chances you already have one of those (including lots of smaller providers like wordpress.com, livejournal). Also note that everyone who ever filed a bug against Ubuntu has an OpenID as launchpad offers one. Again: Lets not fight over individual providers as there are enough alternatives. Best, Bjoern ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On 11/11/14 08:56, Rene Engelhard wrote: Hi, On Tue, Nov 11, 2014 at 09:47:44AM +0200, Tor Lillqvist wrote: I don't have FB account. Yeah, they are notoriously hard to get. There are prople who DO NOT WANT a FB account. Count me in that list! Cheers, Wol ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Mon, Nov 10, 2014 at 3:43 PM, David Ostrovsky d.ostrov...@gmx.de wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. I know that some folks use it for Gerrit authentication. Does github has a openid 2.0 service ? does it work with gerrit ? What is the replacement that the gerrit project plan to use (after all a lot of the project is google-centric no ? ) I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. Do you know how to do that ? But more to the point, what is the benefit of having a openid provider for _one_ service... I mean I use the google one because I also use gmail, so by the time I want to go to gerrit I'm already logged-in If that is not the case, how is it better than just handling user/passowrd the good old way (via the web server) ? btw, I think the biggest design problem of gerrit, wrt to Auth, is this all-or-nothing approach. If we could activate openid _and/or_passowrd _and/or_ LDAP We would not have to care much about google dropping openID Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On 11/11/14 15:07, Norbert Thiebaud wrote: On Mon, Nov 10, 2014 at 3:43 PM, David Ostrovsky d.ostrov...@gmx.de wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. I know that some folks use it for Gerrit authentication. Does github has a openid 2.0 service ? does it work with gerrit ? What is the replacement that the gerrit project plan to use (after all a lot of the project is google-centric no ? ) I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. Do you know how to do that ? But more to the point, what is the benefit of having a openid provider for _one_ service... I was thinking along those lines... Would there be any interest amongst other Libre Software projects in maintaining a shared OpenID infrastructure? Cheers, Wol ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 9:19 AM, Wols Lists antli...@youngman.org.uk wrote: On 11/11/14 15:07, Norbert Thiebaud wrote: On Mon, Nov 10, 2014 at 3:43 PM, David Ostrovsky d.ostrov...@gmx.de wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. I know that some folks use it for Gerrit authentication. Does github has a openid 2.0 service ? does it work with gerrit ? What is the replacement that the gerrit project plan to use (after all a lot of the project is google-centric no ? ) I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. Do you know how to do that ? But more to the point, what is the benefit of having a openid provider for _one_ service... I was thinking along those lines... Would there be any interest amongst other Libre Software projects in maintaining a shared OpenID infrastructure? That is not the axes I was describing.. I was not talking about the issue of shrea/duplicated infrastructure but the issue from the user perspective... well from _this_ user perspective. 1/ there is a need of an auth step 2/ that involve a key and/or a user/password 3/ where google openid is a big win for me is that, if I am already logged-in to gmail, then I get gerrit login for 'free' no additional user/password to type. 4/ having a tdf openid (or any other openid for that matter) is negating that benefit unless I am already logged in to another service sharing that openid.. Which I do not. So your mileage may vary, but for me, if it is not gmail centric then there is no difference between openid and a regular user/password scheme. 5/ if it is just a matter of having a 'shared' openid, hosted by an open source project.. then, as Bjoern mentioned, there is already launchpad to fulfill that function. it already exist, is widely used, has to have a well supported and maintained infra behind it that guarantee a very high uptime, and has already strong incentive to make sure the thing is as secured as it can be... I do not see the point of re-inventing the wheel. we have better things to do with our infra than indulge in NIH syndrome. ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 09:07:11AM -0600, Norbert Thiebaud wrote: But more to the point, what is the benefit of having a openid provider for _one_ service... There are other TDF services running with OpenID, ask.libreoffice.org for example. The TDF wiki and Redmine could do the same at some point in time: https://www.mediawiki.org/wiki/Extension:OpenID http://www.redmine.org/issues/699 I, for one, would welcome not having to handle a bazillion different logins in the long run. Best, Bjoern ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
For the record We have 682 distinct gerrit registered user with a google-based openid (out of 810 registered users) unless I screwed up my sql statement, I count 12 account that have another openid provider beside google so that leave 670 people that _need_ to do something before Aprils 2015, or they won;t be able to log-in (and btw fixing that _after_ the fact will be a MAJOR pita.) Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On 11/11/14 16:14, Norbert Thiebaud wrote: so that leave 670 people that _need_ to do something before Aprils 2015, or they won;t be able to log-in (and btw fixing that _after_ the fact will be a MAJOR pita.) Sound like you need to :-( 1) stop accepting new sign-ups with a Google OpenID (allow them to add them, though :-) 2) Start sending nag-mails to people who only have Google OpenID, saying that as soon as they add a second id the nagmails will stop. Yes, it's a pita :-( Cheers, Wol ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 10:48 AM, Wols Lists antli...@youngman.org.uk wrote: On 11/11/14 16:14, Norbert Thiebaud wrote: so that leave 670 people that _need_ to do something before Aprils 2015, or they won;t be able to log-in (and btw fixing that _after_ the fact will be a MAJOR pita.) Sound like you need to :-( 1) stop accepting new sign-ups with a Google OpenID (allow them to add them, though :-) yes in theory.. in practice my best compromized would be to remove the convenient 'link' to google on the login page... to limit it being used by virtue of the principle of least resistance' 2) Start sending nag-mails to people who only have Google OpenID, saying that as soon as they add a second id the nagmails will stop. yes.. I already worked out the sql request to get a list of email to nag. We will try to discuss that at the next ESC to see what the consensus is moving forward. (just because I _have_ access to the emails, does not mean I should feel free to start blasting spam on my own accord :-) ) Yes, it's a pita :-( nah.. that is the easy part.. the pita is what to do when a user only has a google-openid attached to his account after google stop the service... Then the user need to create a new account, and I need to run some home-made sql-statement to 'merge' the new account and the old one... then I need to flush the caches... all in all time consuming, risky and messy. Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Mon, Nov 10, 2014 at 4:43 PM, David Ostrovsky d.ostrov...@gmx.de wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. ... I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. Relevant infrastructure bugs: Feature #65 (Feedback): Investigate TDF-run OpenID server https://redmine.documentfoundation.org/issues/65 Feature #308 (New): single sign-on for bugzilla and redmine https://redmine.documentfoundation.org/issues/308 Best, --R -- Robinson Tryon QA Engineer - The Document Foundation LibreOffice Community Outreach Herald qu...@libreoffice.org ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 10:37:45AM +0100, Bjoern Michaelsen wrote: On Tue, Nov 11, 2014 at 08:26:19AM +0200, Tor Lillqvist wrote: Bah. Why not use Facebook? Lets not Flamefest around each and every possible OpenID provider. There is a list: http://openid.net/get-an-openid/ and chances you already have one of those (including lots of smaller providers like wordpress.com, livejournal). Also note that everyone who ever filed a bug I do. (Google :)) against Ubuntu has an OpenID as launchpad offers one. Even less wanted than Facebook. Regards, Rene ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 9:26 AM, Robinson Tryon bishop.robin...@gmail.com wrote: On Mon, Nov 10, 2014 at 4:43 PM, David Ostrovsky d.ostrov...@gmx.de wrote: Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. ... I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. Relevant infrastructure bugs: Feature #65 (Feedback): Investigate TDF-run OpenID server https://redmine.documentfoundation.org/issues/65 As discussed, I think that would be re-inventing the wheel, and as good as our infra is, having a reliable, secure, scalable, always up, sign-on service is way outside its scope and means. between fedora, launchpad, yahoo, fb, blogger, wordpress, etc... there are already plenty. In fact it would prolly be best to recommend that people register in their gerrit account more than one openid to protect themselves again single-point-of-failure. Feature #308 (New): single sign-on for bugzilla and redmine https://redmine.documentfoundation.org/issues/308 that is not an infra-related bug.. that is a Bugzilla 'bug'. bugzilla does not support open-id login, and no plug-in in existence does either. there are a couple of seemingly abandoned attempt, none of which are remotely close to be usable. Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, Nov 11, 2014 at 2:37 PM, Robinson Tryon bishop.robin...@gmail.com wrote: On Tue, Nov 11, 2014 at 2:29 PM, Norbert Thiebaud nthieb...@gmail.com wrote: I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. between fedora, I poked around, but couldn't find any publicly-accessible OpenID service provided by Fedora the OS (I didn't poke at Fedora Commons). http://fedoraproject.org/wiki/OpenID I have not tried to get one myselft, but I have seen them used to log on to gerrit. launchpad, yahoo, fb, blogger, wordpress, etc... there are already plenty. Lots of people don't trust any of those services. I'm hesitant to require contributors to enter into a trust agreement with a 3rd party such as Canonical or Google as a requirement to contribute to LibreOffice development. If it's at all technically possible, I think our developers should have a choice. That ship has sailed. We _already_ require that. The only problem now is that google is leaving the field. Feature #308 (New): single sign-on for bugzilla and redmine https://redmine.documentfoundation.org/issues/308 that is not an infra-related bug.. that is a Bugzilla 'bug'. Insofar as we want to make it easier for people to use our bug tracker (and other project resources), I see it as something of concern to both our QA and Infra teams. 'Infra' is about providing and infra-structure and insuring its availability, not coding new features in upstream project. there are a couple of seemingly abandoned attempt Yep. I'd like to avoid having Persona for Bugzilla + MozTrap and then a separate OpenID for Gerrit, Ask, Redmine, TDF Wiki, etc.., but perhaps 2 sets of logins are preferable to 8. Having a TDF hosted openid will not solve that issue. and unless there is a universal single-signon method supported by all these tools, this is just the way it is. Solving that problem is an effort to be done upstream, in bugzilla and Moztrap btw: http://www.eweek.com/blogs/security-watch/mozilla-gives-up-on-persona-single-sign-on-for-now.html but if we seriously want a hosted system, the only thing that is know to work is LDAP... I'm not quite fluent in ldap, but I am under the impression that it is not well suited to 'open public registration' kind of scheme Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
but if we seriously want a hosted system, the only thing that is know to work is LDAP... I'm not quite fluent in ldap, but I am under the impression that it is not well suited to 'open public registration' kind of scheme I stumbled upon: https://code.google.com/p/pwm/ so maybe ldap is a workable solution using existing component anyhow.. that is way on a tangent... from the initial and more immediate problem of google openid going away. Norbert ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Google shuts down the OpenID 2.0 on April 20, 2015
Just to inform you, that Google shuts down the OpenID 2.0 service on April 20, 2015, as explained in this announcement [1]. I know that some folks use it for Gerrit authentication. There are two pending issues in Gerrit's issue tracker [2], [3]. One tries to switch to LDAP (sucks for open source projects, obviously), another one to GitHub's OpenID. I never tried Yahoo!, though, but rumor has it that it sucks too. I think that the most promising alternative would be to set up OpenID service on TDF infrastructure. [1] https://developers.google.com/+/api/auth-migration#timetable [2] https://code.google.com/p/gerrit/issues/detail?id=2715 [3] https://code.google.com/p/gerrit/issues/detail?id=2677 David ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
Bah. Why not use Facebook? --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
Hi, What about to use Persona? It also integrates to Bugzilla to. Both are Mozilla related stuff. Üdvözlettel / Best Regards: Kálmán (KAMI) Szalai 2014-11-11 7:26 GMT+01:00 Tor Lillqvist t...@iki.fi: Bah. Why not use Facebook? --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
On Tue, 2014-11-11 at 08:26 +0200, Tor Lillqvist wrote: Bah. Why not use Facebook? I don't have FB account. David ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
Re: Google shuts down the OpenID 2.0 on April 20, 2015
I don't have FB account. Yeah, they are notoriously hard to get. --tml ___ LibreOffice mailing list LibreOffice@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice
