[opensuse] Bug-system login gone kah-foo-ii again: please allow user to 'stay logged in' for 30 days or more
W/R/T bugzilla and logging in. Would it be possible to extend the time one is logged-in to 30 days from last activity (with option to 'log off'). I know other secure(https) sites that allow one to remain logged-in, some for multiple months, some without a stated limit, etc. It's a hindrance to people using suse logins to any of the opensuse or suse sites. I wanted to check on a bug's status that I'd updated yesterday, but was already logged out. It wouldn't be so bad if my login+password could be \allowed\ to be remembered as many other secure sites allow (amazon and my HMO's website), but maintaining the "logged-in" state and for how-many days could be a part of a user's profile. But meanwhile, extending the cookie expiration to "current-date+30" every time a user visits the site would be a great help. It would at least allow me to be "logged in", which I don't seem to be able to do, right now (though I was yesterday). Instead, I get taken to "https://esp.microfocus.com/nesp/idff/metadata" where it displays an unstyled XML document beginning with: This XML file does not appear to have any style information associated with it. The document tree is shown below. <md:EntityDescriptor id="0000-11110222-3333" providerID="https://esp.microfocus.com:443/nesp/idff/metadata"> <md:SPDescriptor id="abcde-xyz" protocolSupportEnumeration="urn:liberty:iff:2003-08"> <md:KeyDescriptor use="signing"> ... ---- Perhaps needless to say, but this prevents me from logging in again and has happened more than once in the past, sometimes with it not allowing me to login for months. If bugzilla and other suse+opensuse sites would allow me to remain logged in, then it wouldn't be so much of an issue. Thanks! -linda -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
In case there was any confusion .. I was talking about the bug-system that is bugzilla... ;-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Le 10/01/2017 à 23:31, L A Walsh a écrit :
In case there was any confusion .. I was talking about the bug-system that is bugzilla... ;-)
yes. And it works for meas described in the thread. No idea what can be your problem, but it's probably something local :-( good luck jdd -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 2017-01-10 21:19, L A Walsh wrote:
W/R/T bugzilla and logging in. Would it be possible to extend the time one is logged-in to 30 days from last activity (with option to 'log off').
You are not the first one to ask. The quick answer is "no". This is not the typicall https site. It uses a special authentication backend that Novell sells (I don't remember the name), so that "bugzilla" does not have the control. It is used for all suse/novell/opensuse services, not only bugzilla. It has been proven pretty safe: the frontend has been hacked more than once, but they never got the user/pass list. The same system is also used for the business clients of all Novell web places; apparently security can not be loosened in one place alone, all would be affected. So the timeout and the rules are the same for the entire system. That's more or less what I know. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlh1fF8ACgkQja8UbcUWM1x2YgD/WonFLZY2/Eg8B90p29uMHonc 81W8yCCm+acdlhAy/wQA/37YNLSl4OdcvnUU5ncDwx2Oeu6VdBVIGOW1C7pIg8GR =xcrq -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Carlos E. R.
-
jdd
-
L A Walsh