Hi,
So as you might be aware, on 18. May Micro Focus finally cuts us off
from their infra, and that obviously also means new account system. SUSE
is preparing something themselves, but from what has been relayed to us,
it doesn't fulfill all of our requirements. So we need your help in some
areas while we transition to our own solution.
We have deployed:
* FreeIPA, as a backend to all of the other systems internally
* Ipsilon, to provide us with sso capabilities to FreeIPA accounts
https://sso.opensuse.org
* Noggin, as a self-service portal, so people can register and modify
their FreeIPA accounts https://accounts.opensuse.org (behind VPN for
now, just so we don't get any random people signing up)
The solution already works, albeit without the previous accounts, which
will be imported once we have recieved a cut-down dump of user data from
SUSE.
However to get there, we need your help with getting all of the
usernames of the users that ever logged into any and all openSUSE
services. This dump will be sent to SUSE and based on it we will recieve
the final dump which we will import into this system.
When all of the data is imported, we will send out password recovery
emails to all of the email addresses provided in the dump.
From the implementation perspective in the applications themselves,
there is mod_auth_mellon and mod_auth_openidc for the applications that
do not support SAML, OpenID or OpenID Connect themselves. We do
recommend using those technologies over mod_auth methods, but we are
also aware this is not always possible. For requesting the metadata
required to setup those methods, please email admin(a)opensuse.org and we
will get it to you as quickly as possible. Also email us in case of any
other issues, we will try our best to help you out as quickly as
possible.
We do welcome creating accounts and testing with the deployment, but
keep in mind all of the data there will be destroyed.
Depending on how ready we will be over the next few weeks, we will
switch when it will be convinient for all of us, but remember we are
actually not able to continue using Micro Focus' system after 18. May.
That's a hard, unmovable DEADline.
We have a nice new shining setup of forums that already is using the
system, and this will become the new forums, until we can figure out a
sane migration path to Discourse. Forums will have to be transferred
way earlier, and kept offline, since Provo migration is happening
alongside SUSE's switch to their new system and forums on 4. May. This
does mean depending on the speed at which we can implement solutions,
Forums might be offline for 2 weeks, which is unfortunate.
So, let us know what is most comfortable for you, and don't be afraid
to ask for any help, and we hope to get this show on the road before
it's too late.
LCP [Stasiek]
https://lcp.world
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
On Mon 2020-04-27, Christian Boltz wrote:
> Now we "only" need to move the forums and bugzilla (and of course
> also openid), but that are different stories for the next weeks ;-)
Moving bugzilla.opensuse.org/bugzilla.suse.com is in the works,
with the migration away from Micro Focus planned for May.
That one is more tricky since Micro Focus (Novell,...), SUSE, and
openSUSE all share one database instance and part of the carve out
is to separate out openSUSE and SUSE issues from all others with
surgical precision.
Christian and one or two others already helped test an earlier
export. Thank you! Now there is a public instance available at
https://bugzilla-opensuse-devel.suse.de/index.cgi
If you spot any REGRESSION (that is, something no longer works)
please let me know here TODAY (yes, very tight) and I'll relay.
Gerald
PS: Full focus is on moving this off Micro Focus, not updating,
enhancing, improving yet. So let's focus in the move for now.
--
Dr. Gerald Pfeifer <gp(a)suse.com>, CTO @SUSE + chair @openSUSE
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hello,
since some minutes, www.opensuse.org gets served from Nuremberg.
This move is somewhat symbolic - www.opensuse.org is a static page,
which made moving it quite easy.
Well, mostly - the /openid/ part is still living in Provo, and the
servers in Nuremberg proxy these requests to Provo. Configuring that was
funny[tm] - thanks Darix and Stasiek for your help with the haproxy
config and the testing!
Now we "only" need to move the forums and bugzilla (and of course also
openid), but that are different stories for the next weeks ;-)
Regards,
Christian Boltz
--
And lets face it, a password protected screen saver is a de-facto
control even for desktops in many settings. I may be the only person
in the house, but what if the cat decides to sleep on the keyboard?
[Anton Aylward in opensuse-factory]
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hello folks!
Let me say thanks for the setup of our own jitsi instance! Kudos! :)
I would like to inform you that as per today, the instance is missing
the impressum and the privacy policy.
Here[0] you can find a useful guide for adding it. It's in German but I
suppose should be fine. ;)
The impressum/imprint is here[1]. For the privacy policy I suppose
this[2] should be ok.
[0]
https://www.kuketz-blog.de/jitsi-meet-vorlage-fuer-datenschutzerklaerung/
[1] https://en.opensuse.org/Imprint
[2] https://en.opensuse.org/Terms_of_site
Thanks again for all your great efforts in taking care of our openSUSE
infra.
Have a lot of fun,
Marina
--
Marina Latini
Maintenance Release Coordination Engineer
SUSE Software Solutions Germany GmbH
Maxfeldstr. 5, 90409 Nürnberg, Germany
(HRB 36809, AG Nürnberg)
Managing Director: Felix Imendörffer
#ThePowerOfMany #DareToBeDifferent #HaveALotOfFun
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
I did a search for issues with status Closed and assigned to me - the
list I got back had many issues with a different assignee ?
--
Per Jessen, Zürich (14.4°C)
Member, openSUSE Heroes
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hello,
as you might have seen on IRC in the last days, I'm working on moving
www.opensuse.org to Nuremberg.
The website itsself is "boring" - just a few lines in salt to deploy a
github repo on narwal*.
www.o.o/openid/ is more interesting[tm] - to avoid that it blocks the
move, I configured haproxy to forward /openid/ to the current server in
Provo. It was a bit tricky, but seems to work now. (Thanks Darix and
Stasiek for the help!)
Does someone know if www.o.o has more special cases like /openid/ that
need a special handling?
You can test the moved page at www-new.opensuse.org. If you want to test
/openid/, I'd recommend to override www.o.o in your /etc/hosts so that
it points to the Nuremberg IP.
If nobody objects, I'll switch over www.o.o on monday.
Bonus question: Is it possible to have an access_log in haproxy? If yes,
can someone who knows how to do that ;-) please enable it for the
www_openid backend? That would help us to get an idea how much /openid/
gets used.
FYI: since today, nearly all domains handled by proxy.o.o get redirected
from http to https. The only exception is conncheck.o.o because I don't
know if/how the NetworkManager applet "survives" a redirect.
Regards,
Christian Boltz
--
> > Windows dagegen ist eher eine Play-Mobil-Ritterburg.
> Es gibt immer Sachen, bei denen man mit einer Ritterburg besser
> bedient ist ;)
Burgfräulein?
Das ist aber eine totale Übertreibung für "Karl Klammer".
[> Martin Falley und Matthias Houdek in suse-linux]
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hi,
We are changing the development model of Chameleon so it is more reliable. https://github.com/openSUSE/chameleon/issues/18
The master branch (https://static.opensuse.org/chameleon/) is the stable branch, well tested and won't be updated frequently. Used by all production sites.
The dev branch, which we would like to deploy at https://static.opensuse.org/chameleon-dev/ , is the unstable version for testing and can break now and then. Used for testing sites and local development environment.
Need your help to set up the cron job to pull dev branch. Thanks!
--
Guo Yunhe / @guoyunhe / guoyunhe.me
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
I can't work with those am/pm/km/bm/mm :-)
--
Per Jessen, Zürich (18.1°C)
Member, openSUSE Heroes
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hi openSUSE Community,
We have been using Redmine as a ticketing system for a very long time.
The previous server had Redmine 2.4.5 from 2014 installed on an old
SLE 11 SP4 server.
And finally we have successfully migrated to a newer Redmine version.
Currently running Redmine 3.4.12 on a brand new server with Leap 15.1.
This is a long awaited step in a long, long journey. Much time was
spent fixing broken plugins, configuration and the database to match
the new Redmine version. And we have a new theme to make it look fresh
[1].
Thank you to all people who helped this migration run smoothly.
Estu
[1] https://progress.opensuse.org/
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
