Mailinglist Archive: opensuse-project (502 mails)

< Previous Next >
Re: [opensuse-project] iChain or iPain?
On Wed, Apr 20, 2011 at 2:02 PM, Pascal Bleser
<pascal.bleser@xxxxxxxxxxxx> wrote:
On 2011-04-18 11:02:49 (+0200), Andreas Jaeger <aj@xxxxxxxxxx> wrote:
[...]
The build service team has been developing a completely new proxy server that
uses ldap directly to get rid of the broken ichain proxy. The systems is
ready
but we would have loved to give it some more testing and had hoped that
ichain
would be with us a few more days...

On a side note ...

Let me first state this, just to try to avoid being
misunderstood: thanks a lot to the OBS team at Novell to come up
with a solution [1].

[1] which is most probably this, looks cool:
https://gitorious.org/opensuse/apache-mod_auth_memcookie

But it is yet another example of something being developed as an
in-breed solution in a couple of offices at Maxtorgraben, 5 in
N├╝rnberg.

Pascal, I suspect this is one time where you got it wrong. Or at
least not as "right" as you think.

=============== details with timeline

The iChain/iPain problem only became critical a month or so ago.

Looking back at emails on opensuse-buildservice, Mar. 26 is when I see
the first serious complaints.

Then on Apr 5, the OBS team meeting minutes have:
===
* iChain remains to block connections, we work parallel on
- fixing the issue
- workarounding the issue for api.o.o
- getting a long term solution
===
Again, that was sent to opensuse-buildservice,

I don't know if those meetings are open, but it says the following
were present: mls, saschpe, coolo, adrian

So an interested party knew at that point that discussions were
ongoing and who the likely players were. They even had an email they
could reply to if they wanted to get involved or find out more
details.


Then on Apr 16, Lars said "I heard word that this will
be resolved fairly soon and for good. "

On April 17, Gerald said
==
When it's broken, it's broken for everyone.

And, yes, this has attention as high as it gets and should be
addressed really soon now.
==

On April 18, Andreas said
==
The build service team has been developing a completely new proxy server that
uses ldap directly to get rid of the broken ichain proxy. The systems is ready
but we would have loved to give it some more testing and had hoped that ichain
would be with us a few more days...

Adrian is moving the machine from the test environment to the external
environment today and once everything is usable, he'll tell us.
==

Admittedly, it wasn't ultra-public, but neither was it a secret
project. I would guess the biggest reason of lack of publicity is
that it was only about 3 weeks from source of pain, to new
infrastructure rollout.

And as someone else said, the OBS LDAP SSO stuff was community
developed over the last year or two. If this is just taking those
community contributions and rolling them to OBS, I don't see much
reason to complain.

Greg
--
To unsubscribe, e-mail: opensuse-project+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-project+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups