[opensuse-buildservice] iChain works for you?
Hi, we have iChain running for a couple of days now as the authentication system for the buildservice. I might have missed something on other communication channels, but there was only a little feedback on the switch to iChain. I assume that everything works so far for everybody. That's cool :-) Other experiences? Klaas -- Klaas Freitag Novell - SUSE R&D - Internal Tools --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Thu, Oct 19, 2006 at 11:10:19AM +0200, Klaas Freitag wrote:
Hi,
we have iChain running for a couple of days now as the authentication system for the buildservice. I might have missed something on other communication channels, but there was only a little feedback on the switch to iChain. I assume that everything works so far for everybody.
That's cool :-) Other experiences?
I had some typical iChain 500 errors this morning. :/ Ciao, Marcus --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Thursday 19 October 2006 11:10, Klaas Freitag spoke thusly:
:-)
The authentication works well, thanks for good work :-) The only slightly disturbing moment is the fact that the iChain tends to disconnect after some time of inactivity, so if I keep the OSB open in a window, do something else and then do refresh, I need to re-login. But that is understandable from security point of view, so OK. Best regards, Jiri Dluhos -- Jiri Dluhos, LSB development jdluhos@suse.cz SUSE LINUX, s.r.o. http://www.suse.cz Lihovarska 1060/12 +420 296 542 384 190 00 Praha 9 Czech Republic --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Thu, Oct 19, 2006 at 11:17:00AM +0200, Jiri Dluhos wrote:
The only slightly disturbing moment is the fact that the iChain tends to disconnect after some time of inactivity, so if I keep the OSB open in a window, do something else and then do refresh, I need to re-login.
But that is understandable from security point of view, so OK.
Isn't this a bit questional, where browsers are capable of (and used for) saving and filling-in passwords? It is rather an inconvenience, IMO. Regards, Peter -- SUSE LINUX Products GmbH Bug, bogey, bugbear, bugaboo: Research & Development A malevolent monster (not true?); Some mischief microbic; What makes someone phobic; The work one does not want to do. From: Chris Young (The Omnificent English Dictionary In Limerick Form)
On Thu, Oct 19, 2006 at 11:29:38AM +0200, Dr. Peter Poeml wrote:
On Thu, Oct 19, 2006 at 11:17:00AM +0200, Jiri Dluhos wrote:
The only slightly disturbing moment is the fact that the iChain tends to disconnect after some time of inactivity, so if I keep the OSB open in a window, do something else and then do refresh, I need to re-login.
But that is understandable from security point of view, so OK.
Isn't this a bit questional, where browsers are capable of (and used for) saving and filling-in passwords?
It is rather an inconvenience, IMO.
I second this. Mike (Fabian) asked mls to support also build.opensuse.org via rudin proxy because of this inconvenience. He told him, that these relogins shouldn't be required. Otherwise it wouldn't be a bug in the implementation. I don't know more details. Hmm ... Best regards, Stefan Public Key available ------------------------------------------------------ Stefan Dirsch (Res. & Dev.) SUSE LINUX Products GmbH Tel: 0911-740 53 0 Maxfeldstraße 5 FAX: 0911-740 53 479 D-90409 Nürnberg http://www.suse.de Germany ------------------------------------------------------ --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
On Thu, Oct 19, 2006 at 11:29:38AM +0200, Dr. Peter Poeml wrote:
On Thu, Oct 19, 2006 at 11:17:00AM +0200, Jiri Dluhos wrote:
The only slightly disturbing moment is the fact that the iChain tends to disconnect after some time of inactivity, so if I keep the OSB open in a window, do something else and then do refresh, I need to re-login.
But that is understandable from security point of view, so OK.
Isn't this a bit questional, where browsers are capable of (and used for) saving and filling-in passwords?
It is rather an inconvenience, IMO.
I have to restate this. I visit the pages occasionally only, so I need to log in _each_ time. I confess: it utterly sucks. Peter -- SUSE LINUX Products GmbH Bug, bogey, bugbear, bugaboo: Research & Development A malevolent monster (not true?); Some mischief microbic; What makes someone phobic; The work one does not want to do. From: Chris Young (The Omnificent English Dictionary In Limerick Form)
On Sun, Oct 22, 2006 at 12:03:51AM +0200, Dr. Peter Poeml wrote:
to log in _each_ time. I confess: it utterly sucks.
It would suck a bit less, if the redirection would work... so after logging in I'm sent to the page I wanted to see, and not to the start page. ;) Peter -- SUSE LINUX Products GmbH Bug, bogey, bugbear, bugaboo: Research & Development A malevolent monster (not true?); Some mischief microbic; What makes someone phobic; The work one does not want to do. From: Chris Young (The Omnificent English Dictionary In Limerick Form)
Hello, Am Sonntag, 22. Oktober 2006 00:20 schrieb Dr. Peter Poeml:
On Sun, Oct 22, 2006 at 12:03:51AM +0200, Dr. Peter Poeml wrote:
to log in _each_ time. I confess: it utterly sucks.
It would suck a bit less, if the redirection would work... so after logging in I'm sent to the page I wanted to see, and not to the start page. ;)
+100 (to avoid 99 other "me too" mails ;-) Just an idea to avoid the need for logging in: does iChain support auto-login with SSL client certificates? If yes, it would probably be a good altenative to entering passwords ;-) Regards, Christian Boltz -- Swapping horses in the middle of a river... ah no the wrong citate... changing package managers in the middle of a beta was a very bad decision, specifically as it was not read for production use when being introduced. [Ulrich Windl in opensuse] --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
Dne Sunday 22 October 2006 23:51 Christian Boltz napsal(a):
Hello,
Am Sonntag, 22. Oktober 2006 00:20 schrieb Dr. Peter Poeml:
On Sun, Oct 22, 2006 at 12:03:51AM +0200, Dr. Peter Poeml wrote:
to log in _each_ time. I confess: it utterly sucks.
It would suck a bit less, if the redirection would work... so after logging in I'm sent to the page I wanted to see, and not to the start page. ;)
+100 (to avoid 99 other "me too" mails ;-)
I think this is bug. It is possible to fix it? Pavel -- Pavel Nemec package-maintainer http://en.opensuse.org/Czech_Packagers_Team --------------------------------------------------------------------- SuSE CR, s.r.o. e-mail: pnemec@suse.cz Lihovarska 1060/12 tel:+420 2 9654 2373 190 00 Praha 9 fax:+420 2 9654 2374 Ceska republika http://www.suse.cz
On Thu, Oct 19, 2006 at 11:17:00AM +0200, Jiri Dluhos wrote:
But that is understandable from security point of view, so OK.
Nah, it's just a bad setting. I hope the timeout will be set to something sensible in the future. Cheers, Michael. -- Michael Schroeder mls@suse.de main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
Klaas Freitag wrote:
we have iChain running for a couple of days now as the authentication system for the buildservice. I might have missed something on other communication channels, but there was only a little feedback on the switch to iChain. I assume that everything works so far for everybody.
That's cool :-) Other experiences?
iChain is broken when it comes to the SSL part. It simply doesn't answer to TLS requests and therefore every browser based on newer versions of NSS (Firefox 2.0, SeaMonkey 1.1) will suffer from timeouts before the iChain page comes up at all. Please note that I've opened a bug once to the iChain team but they didn't understand the problem :-( The Mozilla guys fixed that issue on their side by reducing the timeout for this special case. Before this change the browser would have waited for two minutes before the page loaded. This is now around 15 seconds but it's still a bug in the SSL implementation of iChain. References: https://bugzilla.mozilla.org/show_bug.cgi?id=340359 I don't have Novell's BugID anymore because I can't access it nowadays. Wolfgang --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org
participants (9)
-
Christian Boltz
-
Dr. Peter Poeml
-
Jiri Dluhos
-
Klaas Freitag
-
Marcus Meissner
-
Michael Schroeder
-
Pavel Nemec
-
Stefan Dirsch
-
Wolfgang Rosenauer