
On Wed, Apr 20, 2011 at 2:02 PM, Pascal Bleser <pascal.bleser@opensuse.org> wrote:
On 2011-04-18 11:02:49 (+0200), Andreas Jaeger <aj@novell.com> wrote: [...]
The build service team has been developing a completely new proxy server that uses ldap directly to get rid of the broken ichain proxy. The systems is ready but we would have loved to give it some more testing and had hoped that ichain would be with us a few more days...
On a side note ...
Let me first state this, just to try to avoid being misunderstood: thanks a lot to the OBS team at Novell to come up with a solution [1].
[1] which is most probably this, looks cool: https://gitorious.org/opensuse/apache-mod_auth_memcookie
But it is yet another example of something being developed as an in-breed solution in a couple of offices at Maxtorgraben, 5 in Nürnberg.
Pascal, I suspect this is one time where you got it wrong. Or at least not as "right" as you think. =============== details with timeline The iChain/iPain problem only became critical a month or so ago. Looking back at emails on opensuse-buildservice, Mar. 26 is when I see the first serious complaints. Then on Apr 5, the OBS team meeting minutes have: === * iChain remains to block connections, we work parallel on - fixing the issue - workarounding the issue for api.o.o - getting a long term solution === Again, that was sent to opensuse-buildservice, I don't know if those meetings are open, but it says the following were present: mls, saschpe, coolo, adrian So an interested party knew at that point that discussions were ongoing and who the likely players were. They even had an email they could reply to if they wanted to get involved or find out more details. Then on Apr 16, Lars said "I heard word that this will be resolved fairly soon and for good. " On April 17, Gerald said == When it's broken, it's broken for everyone. And, yes, this has attention as high as it gets and should be addressed really soon now. == On April 18, Andreas said == The build service team has been developing a completely new proxy server that uses ldap directly to get rid of the broken ichain proxy. The systems is ready but we would have loved to give it some more testing and had hoped that ichain would be with us a few more days... Adrian is moving the machine from the test environment to the external environment today and once everything is usable, he'll tell us. == Admittedly, it wasn't ultra-public, but neither was it a secret project. I would guess the biggest reason of lack of publicity is that it was only about 3 weeks from source of pain, to new infrastructure rollout. And as someone else said, the OBS LDAP SSO stuff was community developed over the last year or two. If this is just taking those community contributions and rolling them to OBS, I don't see much reason to complain. Greg -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org