Re: Bodhi client prompting for a password

2021-03-04 Thread Pierre-Yves Chibon
On Thu, Mar 04, 2021 at 12:15:53AM +0100, Björn Persson wrote:
> Fabio Valentini wrote:
> > On Wed, Mar 3, 2021 at 9:31 PM Miro Hrončok  wrote:
> > >
> > > On 03. 03. 21 21:08, Florian Weimer wrote:  
> > > > I want to run this command:
> > > >
> > > >bodhi updates trigger-tests FEDORA-2021-279dee1742
> > > >
> > > > But I'm prompted for a username and password.  I have a working Kerberos
> > > > setup for koji/fedpkg, so this is somewhat surprising.  Is this
> > > > expected?  
> > >
> > > Yes, that is how bodhi CLI client works.  
> > 
> > Yes. Sadly, most Fedora projects use different methods for
> > authenticating with your FAS account.
> > 
> > koji uses kerberos, bodhi uses OpenID over HTTP, dist-git uses SSH ...
> 
> It wouldn't be a user interface problem if they'd all fetch the
> passcode from the same keyring. Then the user wouldn't need to know how
> many different protocols are used under the hood.

Well kerberos, FAS, OpenID, OIDC are all using the same password. Only the ssh
key can differ depending on how it was created.


Pierre


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


Re: Bodhi client prompting for a password

2021-03-03 Thread Björn Persson
Fabio Valentini wrote:
> On Wed, Mar 3, 2021 at 9:31 PM Miro Hrončok  wrote:
> >
> > On 03. 03. 21 21:08, Florian Weimer wrote:  
> > > I want to run this command:
> > >
> > >bodhi updates trigger-tests FEDORA-2021-279dee1742
> > >
> > > But I'm prompted for a username and password.  I have a working Kerberos
> > > setup for koji/fedpkg, so this is somewhat surprising.  Is this
> > > expected?  
> >
> > Yes, that is how bodhi CLI client works.  
> 
> Yes. Sadly, most Fedora projects use different methods for
> authenticating with your FAS account.
> 
> koji uses kerberos, bodhi uses OpenID over HTTP, dist-git uses SSH ...

It wouldn't be a user interface problem if they'd all fetch the
passcode from the same keyring. Then the user wouldn't need to know how
many different protocols are used under the hood.

Björn Persson


pgpa5S1G_mGtl.pgp
Description: OpenPGP digital signatur
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


Re: Bodhi client prompting for a password

2021-03-03 Thread Kevin Fenzi
On Wed, Mar 03, 2021 at 11:36:17PM +0100, Fabio Valentini wrote:
> On Wed, Mar 3, 2021 at 9:31 PM Miro Hrončok  wrote:
> >
> > On 03. 03. 21 21:08, Florian Weimer wrote:
> > > I want to run this command:
> > >
> > >bodhi updates trigger-tests FEDORA-2021-279dee1742
> > >
> > > But I'm prompted for a username and password.  I have a working Kerberos
> > > setup for koji/fedpkg, so this is somewhat surprising.  Is this
> > > expected?
> >
> > Yes, that is how bodhi CLI client works.
> 
> Yes. Sadly, most Fedora projects use different methods for
> authenticating with your FAS account.

yep. ;( 

> koji uses kerberos, bodhi uses OpenID over HTTP, dist-git uses SSH ...

dist-git can also use https/OIDC token. 

> Which is why the bodhi client needs to use your username and password
> (because it basically uses a web login form).
> But I don't know how the upcoming switch from FAS2 to noggin will
> affect those things.

Mostly not much, but we are pondering on if we want to change dist-git
ssh some at that point (as it has some anoying side effects). 

kevin


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


Re: Bodhi client prompting for a password

2021-03-03 Thread Fabio Valentini
On Wed, Mar 3, 2021 at 9:31 PM Miro Hrončok  wrote:
>
> On 03. 03. 21 21:08, Florian Weimer wrote:
> > I want to run this command:
> >
> >bodhi updates trigger-tests FEDORA-2021-279dee1742
> >
> > But I'm prompted for a username and password.  I have a working Kerberos
> > setup for koji/fedpkg, so this is somewhat surprising.  Is this
> > expected?
>
> Yes, that is how bodhi CLI client works.

Yes. Sadly, most Fedora projects use different methods for
authenticating with your FAS account.

koji uses kerberos, bodhi uses OpenID over HTTP, dist-git uses SSH ...
Which is why the bodhi client needs to use your username and password
(because it basically uses a web login form).
But I don't know how the upcoming switch from FAS2 to noggin will
affect those things.

Fabio
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


Re: Bodhi client prompting for a password

2021-03-03 Thread Miro Hrončok

On 03. 03. 21 21:08, Florian Weimer wrote:

I want to run this command:

   bodhi updates trigger-tests FEDORA-2021-279dee1742

But I'm prompted for a username and password.  I have a working Kerberos
setup for koji/fedpkg, so this is somewhat surprising.  Is this
expected?


Yes, that is how bodhi CLI client works.

--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


Bodhi client prompting for a password

2021-03-03 Thread Florian Weimer
I want to run this command:

  bodhi updates trigger-tests FEDORA-2021-279dee1742

But I'm prompted for a username and password.  I have a working Kerberos
setup for koji/fedpkg, so this is somewhat surprising.  Is this
expected?

I'm a bit hesitant to enter my Fedora Kerberos password in random
places.

Thanks,
Florian
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure