Re: App updates for the new AAA solution
On Fri, 2020-04-24 at 16:41 -0700, Brian C. Lane wrote: > On Fri, Apr 24, 2020 at 02:59:16PM -0700, Kevin Fenzi wrote: > > > Doing things this way means that noggin can be much smaller and less > > complex, it's just a interface, it doesn't need to be a complete > > identity provider, and can depend on the already existing and well > > maintained IPA for that. > > Ahh! Thanks for the clarification, I see that we're now talking about > beer ;) whatever the problem, an IPA is *definitely* the solution! -- Adam Williamson Fedora QA Community Monkey IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net http://www.happyassassin.net ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Fri, Apr 24, 2020 at 7:42 PM Brian C. Lane wrote: > > On Fri, Apr 24, 2020 at 02:59:16PM -0700, Kevin Fenzi wrote: > > > Doing things this way means that noggin can be much smaller and less > > complex, it's just a interface, it doesn't need to be a complete > > identity provider, and can depend on the already existing and well > > maintained IPA for that. > > Ahh! Thanks for the clarification, I see that we're now talking about > beer ;) > Whether it's Free or not, it's still beer. ;) -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Fri, Apr 24, 2020 at 02:59:16PM -0700, Kevin Fenzi wrote: > Doing things this way means that noggin can be much smaller and less > complex, it's just a interface, it doesn't need to be a complete > identity provider, and can depend on the already existing and well > maintained IPA for that. Ahh! Thanks for the clarification, I see that we're now talking about beer ;) -- Brian C. Lane (PST8PDT) - weldr.io - lorax - parted - pykickstart ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Fri, Apr 24, 2020 at 01:44:42PM -0400, Stephen John Smoogen wrote: > > The project name is NOT AAA. It is Noggin. The current FAS is actually > Version 2. There was a FAS3 project for about 10 years that got put aside > over and over again due to other priorities. Since the original FAS as a > sort of anti-kerberos/anti-ldap and this is actually a bunch of covers to > kerberos/ldap it felt insulting to call this FAS4. So a completely > different name was decided on. Just to expand on the history here (Because it's somewhat important I think): The reason this isn't fas4 or fas-something is that it's a different approach. fas is a complete account system. It handles the data itself and does everything. Its the 'source of truth' for account data currently, with other things querying it or syncing with it (ipa and ipsilon). Noggin on the other hand is just a frontend. It's source of truth for data is ipa. It talks to ipa and has that handle and store the data, it's just a frontend over that with a api part to allow things to talk to it, and it in turn to talk to ipa. Doing things this way means that noggin can be much smaller and less complex, it's just a interface, it doesn't need to be a complete identity provider, and can depend on the already existing and well maintained IPA for that. kevin signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Fri, 24 Apr 2020 at 13:03, Brian C. Lane wrote: > On Thu, Apr 23, 2020 at 08:54:42PM +0200, Alexander Dalloz wrote: > > Am 23.04.2020 um 19:00 schrieb Richard W.M. Jones: > > > On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > > > > Hi, > > > > > > > > Development work has begun on the API which will give applications > access > > > > to the new AAA solution. As part of our effort to migrate to this > new AAA > > > > solution we need to identify applications which consume the old FAS > API in > > > > some way. > > > > > > "AAA"? > > > > > > I find it good to go with the Economist (a newspaper) style guide > > > which invites writers to define every term before use. > > > > > > Rich. > > > > Triple A is a well known term. > > > > https://en.wikipedia.org/wiki/AAA_(computer_security) > > > > > https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/aaa-local.html > > > > Unless I didn't get you joking. > > That may be true, but whenever I see it mentioned I have no idea what it > means. For example, here in the US we have the AAA - American Automobile > Association (http://aaa.com) so as a name for a new project it's really > overloaded in my brain. > > Why not paint the shed FASv2 :) The project name is NOT AAA. It is Noggin. The current FAS is actually Version 2. There was a FAS3 project for about 10 years that got put aside over and over again due to other priorities. Since the original FAS as a sort of anti-kerberos/anti-ldap and this is actually a bunch of covers to kerberos/ldap it felt insulting to call this FAS4. So a completely different name was decided on. That said, I agree we shouldn't use three letter acronym's without definitions.. the problem is that the terms Authentication, Authorization and Accounting for AAA have been in use at various level since I think the 1990's in security circles and if you are working that all the time, you just short cut it. [The original use I heard in the early 1990s' of AAA was a joke on the fact that it was as ubiquitous as AAA in road services and you probably ended up in AA if you worked too much on it. ] > -- > Stephen J Smoogen. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Thu, Apr 23, 2020 at 08:54:42PM +0200, Alexander Dalloz wrote: > Am 23.04.2020 um 19:00 schrieb Richard W.M. Jones: > > On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > > > Hi, > > > > > > Development work has begun on the API which will give applications access > > > to the new AAA solution. As part of our effort to migrate to this new AAA > > > solution we need to identify applications which consume the old FAS API in > > > some way. > > > > "AAA"? > > > > I find it good to go with the Economist (a newspaper) style guide > > which invites writers to define every term before use. > > > > Rich. > > Triple A is a well known term. > > https://en.wikipedia.org/wiki/AAA_(computer_security) > > https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/aaa-local.html > > Unless I didn't get you joking. That may be true, but whenever I see it mentioned I have no idea what it means. For example, here in the US we have the AAA - American Automobile Association (http://aaa.com) so as a name for a new project it's really overloaded in my brain. Why not paint the shed FASv2 :) Brian -- Brian C. Lane (PST8PDT) - weldr.io - lorax - parted - pykickstart ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
- Original Message - > From: "Ty Young" > To: devel@lists.fedoraproject.org > Sent: Thursday, April 23, 2020 8:54:29 PM > Subject: Re: App updates for the new AAA solution > > > On 4/23/20 12:00 PM, Richard W.M. Jones wrote: > > On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > >> Hi, > >> > >> Development work has begun on the API which will give applications access > >> to the new AAA solution. As part of our effort to migrate to this new AAA > >> solution we need to identify applications which consume the old FAS API in > >> some way. > > "AAA"? > > > > I find it good to go with the Economist (a newspaper) style guide > > which invites writers to define every term before use. > > > Seems to be the same "AAA" as what you'd find in the video gaming space: > something that is high budget and/or high quality. I'm sure is is somehow related to the AAAuto used car dealership. ;-) > > > Hopefully it also doesn't have any surprise mechanics! > > > > > > Rich. > > > ___ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org > ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Thu, 2020-04-23 at 18:00 +0100, Richard W.M. Jones wrote: > On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > > Hi, > > > > Development work has begun on the API which will give applications access > > to the new AAA solution. As part of our effort to migrate to this new AAA > > solution we need to identify applications which consume the old FAS API in > > some way. > > "AAA"? > > I find it good to go with the Economist (a newspaper) style guide > which invites writers to define every term before use. It's the project intended to replace FAS. https://communityblog.fedoraproject.org/aaa-fas-replacement-project-update/ https://communityblog.fedoraproject.org/aaa-fas-replacement-project-update-2/ https://github.com/fedora-infra/freeipa-fas It stands for "Authentication, Authorization, Accounting". -- Adam Williamson Fedora QA Community Monkey IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net http://www.happyassassin.net ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
Am 23.04.2020 um 19:00 schrieb Richard W.M. Jones: On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: Hi, Development work has begun on the API which will give applications access to the new AAA solution. As part of our effort to migrate to this new AAA solution we need to identify applications which consume the old FAS API in some way. "AAA"? I find it good to go with the Economist (a newspaper) style guide which invites writers to define every term before use. Rich. Triple A is a well known term. https://en.wikipedia.org/wiki/AAA_(computer_security) https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/aaa-local.html Unless I didn't get you joking. Alexander ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On 4/23/20 12:00 PM, Richard W.M. Jones wrote: On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: Hi, Development work has begun on the API which will give applications access to the new AAA solution. As part of our effort to migrate to this new AAA solution we need to identify applications which consume the old FAS API in some way. "AAA"? I find it good to go with the Economist (a newspaper) style guide which invites writers to define every term before use. Seems to be the same "AAA" as what you'd find in the video gaming space: something that is high budget and/or high quality. Hopefully it also doesn't have any surprise mechanics! Rich. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
Am Donnerstag, den 23.04.2020, 18:00 +0100 schrieb Richard W.M. Jones: > On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > > Hi, > > > > Development work has begun on the API which will give applications > > access > > to the new AAA solution. As part of our effort to migrate to this > > new AAA > > solution we need to identify applications which consume the old FAS > > API in > > some way. > > "AAA"? > > I find it good to go with the Economist (a newspaper) style guide > which invites writers to define every term before use. I guess "AAA" stands for: Anticipate Awkward Abbrevations *scnr* signature.asc Description: This is a digitally signed message part ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Re: App updates for the new AAA solution
On Thu, Apr 23, 2020 at 05:22:01PM +0100, Stephen Coady wrote: > Hi, > > Development work has begun on the API which will give applications access > to the new AAA solution. As part of our effort to migrate to this new AAA > solution we need to identify applications which consume the old FAS API in > some way. "AAA"? I find it good to go with the Economist (a newspaper) style guide which invites writers to define every term before use. Rich. > I have compiled a list of candidates [1] and would be grateful of any > feedback - including any you feel I have missed. Also, if there is some way > in which you feel you could help with this work then great! Say so in the > corresponding issue and we can take it from there. > > thanks, > scoady > > [1] > https://github.com/fedora-infra/fasjson/issues?q=is%3Aopen+is%3Aissue+label%3A%22API+update%22 > ___ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com virt-builder quickly builds VMs from scratch http://libguestfs.org/virt-builder.1.html ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
