Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-11-17 Thread Terrence Enger
On Thu, 2012-11-15 at 21:13 -0700, Yi Fan Jiang wrote:
> Hi Terry,
> 
> To make it simple, have you ever used these to login *successfully* 
> to other openid supported site? I am still prone to think the ids are not 
> valid.

No, this is my first attempt.  (The other site I would like to use is
http://ask.libreoffice.org/questions/, but it only offers to work with
a finite set of OpenID providers.)

@Sandy:

Does EasyDNS perchance have a fake known-working id for testing?  This
seems like a wrongheaded thing to ask, but it might provide a way of
localizing the problem.

The alternative seems to be that I should learn rather more than I
want to know about how OpenID works.  I am not sure that the game is
worth the candle.

Thanks,
Terry.

> 
> Best wishes,
> Yifan
> 
> >>> Terrence Enger  11/15/12 7:24 PM >>>
> On Wed, 2012-11-14 at 22:52 -0700, Yi Fan Jiang wrote:
> > Hi Terry,
> > 
> > Don't worry about the delay :)
> > 
> > I wasn't aware of problems could be brought of the underscore. However can 
> > I confirm the
> > actual OpenID you are using again because I have never seen an OpenID looks 
> > like
> > lo...@iseries-guru.com. AFAIK the OpenID should be a requestable *URL*. 
> > Otherwise did I
> > misunderstand anything? Thanks!
> 
> The results are the same for ...
> lo...@iseries-guru.com
> http://lo...@iseries-guru.com
> https://lo...@iseries-guru.com
> 
> The hyphen in my domain name has occasionally caused some problems at
> some sites.  (I learned long ago not to type it in camel-case, even
> though IBM used to write 'iSeries' back before they decided they had
> to rename the world finest business computer again.)
> 
> Terry.
> 
> 
> > 
> > Best wishes,
> > Yifan
> > 
> > >>> Terrence Enger  11/15/12 7:15 AM >>>
> > All,
> > 
> > I am sorry for the long delay.  I lost my internet connection.  It is
> > back now, and I have tons of catching up to do.  Sigh.
> > 
> > 
> > Yifan,
> > 
> > I have been in touch with my OpenID provider, and they have fixed one 
> > mistake that I made in setting it up, writing ...
> > 
> > On Fri, 2012-10-26 at 12:08 -0400, Les via RT wrote:
> > > Hi Terrence,
> > > 
> > > Sorry for the delay in getting back to you.
> > > 
> > > Can you try it now?
> > > 
> > > Underscores in CNAMEs for your account needed to be enabled via the 
> > > PREFERENCES link on the left hand side.
> > > 
> > > This was off by default. 
> > > 
> > > This has been enabled for you, and we changed the TTL to force a reload of
> > > the zone. 
> > > 
> > > It works now:
> > > 
> > 
> > However, when I try to sign on, my message is ...
> > 
> > OpenID failed
> > 
> > OpenID discovery error: Error fetching XRDS document: (28,
> > 'connect() timed out!')
> > 
> > Could the underscore be causing a problem at your end, I wonder?
> > 
> > Suggestions welcome.
> > 
> > Thanks,
> > Terry.
> > 
> > 
> > On Thu, 2012-10-11 at 07:20 -0600, Yi Fan Jiang wrote:
> > > Hi Terry,
> > > 
> > > Thanks for trying out!
> > > 
> > > Yes you are right, it is probably caused by the id provided. 
> > > AFAIK, the OpenID does not typically use email address as and identifier, 
> > > though it has not define a restricted way to how an id should look like :)
> > > 
> > > Are you sure your mail provider is an openid provider as well? In that 
> > > case
> > > you may checkout help from the service provider. (I didn't search out 
> > > relevant information  yet..)
> > > 
> > > In addition, the OpenID is distributed everywhere and you can get more
> > > description here:
> > > 
> > > http://openid.net/get-an-openid/
> > > 
> > > It actually spent me some time to understand how they exactly work. But I 
> > > think to
> > > use it, just keep in mind your email address is usually NOT your OpenID, 
> > > instead
> > > the provider often used a uniform way( a url either with or without 
> > > "username")
> > > to define an OpenID like what you quoted :)
> > > 
> > > Best wishes,
> > > Yifan
> > > 
> > > >>> Terrence Enger  10/11/12 8:13 PM >>>
> > > On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> > > > Hey people,
> > > > 
> > > > I have brought OpenID to Moztrap this week, the following is the test
> > > page for login:
> > > > 
> > > > http://vm12.documentfoundation.org/openid/login/
> > > > 
> > > > Login example:
> > > > 
> > > >   Google user:   https://www.google.com/accounts/o8/id
> > > >   Yahoo user: https://me.yahoo.com
> > > >   Wordpress user: $your_username.wordpress.com
> > > >   
> > > 
> > > My attempt to login as lo...@iseries-guru.com failed with message
> > > 
> > > OpenID discovery error: HTTP Response status from identity URL
> > > host is not 200. Got status 401
> > > 
> > > Does this mean I have mistyped my id?  I have never used it before;
> > > the forum login page only offers icons for a finite set of id
> > > providers.
> > > 
> > > Terry.


___
List Name: Libreoffice-qa mailing list
Mail address: L

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-11-15 Thread Yi Fan Jiang
Hi Terry,

To make it simple, have you ever used these to login *successfully* 
to other openid supported site? I am still prone to think the ids are not valid.

Best wishes,
Yifan

>>> Terrence Enger  11/15/12 7:24 PM >>>
On Wed, 2012-11-14 at 22:52 -0700, Yi Fan Jiang wrote:
> Hi Terry,
> 
> Don't worry about the delay :)
> 
> I wasn't aware of problems could be brought of the underscore. However can I 
> confirm the
> actual OpenID you are using again because I have never seen an OpenID looks 
> like
> lo...@iseries-guru.com. AFAIK the OpenID should be a requestable *URL*. 
> Otherwise did I
> misunderstand anything? Thanks!

The results are the same for ...
lo...@iseries-guru.com
http://lo...@iseries-guru.com
https://lo...@iseries-guru.com

The hyphen in my domain name has occasionally caused some problems at
some sites.  (I learned long ago not to type it in camel-case, even
though IBM used to write 'iSeries' back before they decided they had
to rename the world finest business computer again.)

Terry.


> 
> Best wishes,
> Yifan
> 
> >>> Terrence Enger  11/15/12 7:15 AM >>>
> All,
> 
> I am sorry for the long delay.  I lost my internet connection.  It is
> back now, and I have tons of catching up to do.  Sigh.
> 
> 
> Yifan,
> 
> I have been in touch with my OpenID provider, and they have fixed one mistake 
> that I made in setting it up, writing ...
> 
> On Fri, 2012-10-26 at 12:08 -0400, Les via RT wrote:
> > Hi Terrence,
> > 
> > Sorry for the delay in getting back to you.
> > 
> > Can you try it now?
> > 
> > Underscores in CNAMEs for your account needed to be enabled via the 
> > PREFERENCES link on the left hand side.
> > 
> > This was off by default. 
> > 
> > This has been enabled for you, and we changed the TTL to force a reload of
> > the zone. 
> > 
> > It works now:
> > 
> 
> However, when I try to sign on, my message is ...
> 
> OpenID failed
> 
> OpenID discovery error: Error fetching XRDS document: (28,
> 'connect() timed out!')
> 
> Could the underscore be causing a problem at your end, I wonder?
> 
> Suggestions welcome.
> 
> Thanks,
> Terry.
> 
> 
> On Thu, 2012-10-11 at 07:20 -0600, Yi Fan Jiang wrote:
> > Hi Terry,
> > 
> > Thanks for trying out!
> > 
> > Yes you are right, it is probably caused by the id provided. 
> > AFAIK, the OpenID does not typically use email address as and identifier, 
> > though it has not define a restricted way to how an id should look like :)
> > 
> > Are you sure your mail provider is an openid provider as well? In that case
> > you may checkout help from the service provider. (I didn't search out 
> > relevant information  yet..)
> > 
> > In addition, the OpenID is distributed everywhere and you can get more
> > description here:
> > 
> > http://openid.net/get-an-openid/
> > 
> > It actually spent me some time to understand how they exactly work. But I 
> > think to
> > use it, just keep in mind your email address is usually NOT your OpenID, 
> > instead
> > the provider often used a uniform way( a url either with or without 
> > "username")
> > to define an OpenID like what you quoted :)
> > 
> > Best wishes,
> > Yifan
> > 
> > >>> Terrence Enger  10/11/12 8:13 PM >>>
> > On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> > > Hey people,
> > > 
> > > I have brought OpenID to Moztrap this week, the following is the test
> > page for login:
> > > 
> > > http://vm12.documentfoundation.org/openid/login/
> > > 
> > > Login example:
> > > 
> > >   Google user:   https://www.google.com/accounts/o8/id
> > >   Yahoo user: https://me.yahoo.com
> > >   Wordpress user: $your_username.wordpress.com
> > >   
> > 
> > My attempt to login as lo...@iseries-guru.com failed with message
> > 
> > OpenID discovery error: HTTP Response status from identity URL
> > host is not 200. Got status 401
> > 
> > Does this mean I have mistyped my id?  I have never used it before;
> > the forum login page only offers icons for a finite set of id
> > providers.
> > 
> > Terry.
> 
> 
> ___
> List Name: Libreoffice-qa mailing list
> Mail address: Libreoffice-qa@lists.freedesktop.org
> Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://lists.freedesktop.org/archives/libreoffice-qa/
> 
> 
> 
> ___
> List Name: Libreoffice-qa mailing list
> Mail address: Libreoffice-qa@lists.freedesktop.org
> Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://lists.freedesktop.org/archives/libreoffice-qa/
> 

___

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-11-15 Thread Terrence Enger
On Wed, 2012-11-14 at 22:52 -0700, Yi Fan Jiang wrote:
> Hi Terry,
> 
> Don't worry about the delay :)
> 
> I wasn't aware of problems could be brought of the underscore. However can I 
> confirm the
> actual OpenID you are using again because I have never seen an OpenID looks 
> like
> lo...@iseries-guru.com. AFAIK the OpenID should be a requestable *URL*. 
> Otherwise did I
> misunderstand anything? Thanks!

The results are the same for ...
lo...@iseries-guru.com
http://lo...@iseries-guru.com
https://lo...@iseries-guru.com

The hyphen in my domain name has occasionally caused some problems at
some sites.  (I learned long ago not to type it in camel-case, even
though IBM used to write 'iSeries' back before they decided they had
to rename the world finest business computer again.)

Terry.


> 
> Best wishes,
> Yifan
> 
> >>> Terrence Enger  11/15/12 7:15 AM >>>
> All,
> 
> I am sorry for the long delay.  I lost my internet connection.  It is
> back now, and I have tons of catching up to do.  Sigh.
> 
> 
> Yifan,
> 
> I have been in touch with my OpenID provider, and they have fixed one mistake 
> that I made in setting it up, writing ...
> 
> On Fri, 2012-10-26 at 12:08 -0400, Les via RT wrote:
> > Hi Terrence,
> > 
> > Sorry for the delay in getting back to you.
> > 
> > Can you try it now?
> > 
> > Underscores in CNAMEs for your account needed to be enabled via the 
> > PREFERENCES link on the left hand side.
> > 
> > This was off by default. 
> > 
> > This has been enabled for you, and we changed the TTL to force a reload of
> > the zone. 
> > 
> > It works now:
> > 
> 
> However, when I try to sign on, my message is ...
> 
> OpenID failed
> 
> OpenID discovery error: Error fetching XRDS document: (28,
> 'connect() timed out!')
> 
> Could the underscore be causing a problem at your end, I wonder?
> 
> Suggestions welcome.
> 
> Thanks,
> Terry.
> 
> 
> On Thu, 2012-10-11 at 07:20 -0600, Yi Fan Jiang wrote:
> > Hi Terry,
> > 
> > Thanks for trying out!
> > 
> > Yes you are right, it is probably caused by the id provided. 
> > AFAIK, the OpenID does not typically use email address as and identifier, 
> > though it has not define a restricted way to how an id should look like :)
> > 
> > Are you sure your mail provider is an openid provider as well? In that case
> > you may checkout help from the service provider. (I didn't search out 
> > relevant information  yet..)
> > 
> > In addition, the OpenID is distributed everywhere and you can get more
> > description here:
> > 
> > http://openid.net/get-an-openid/
> > 
> > It actually spent me some time to understand how they exactly work. But I 
> > think to
> > use it, just keep in mind your email address is usually NOT your OpenID, 
> > instead
> > the provider often used a uniform way( a url either with or without 
> > "username")
> > to define an OpenID like what you quoted :)
> > 
> > Best wishes,
> > Yifan
> > 
> > >>> Terrence Enger  10/11/12 8:13 PM >>>
> > On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> > > Hey people,
> > > 
> > > I have brought OpenID to Moztrap this week, the following is the test
> > page for login:
> > > 
> > > http://vm12.documentfoundation.org/openid/login/
> > > 
> > > Login example:
> > > 
> > >   Google user:   https://www.google.com/accounts/o8/id
> > >   Yahoo user: https://me.yahoo.com
> > >   Wordpress user: $your_username.wordpress.com
> > >   
> > 
> > My attempt to login as lo...@iseries-guru.com failed with message
> > 
> > OpenID discovery error: HTTP Response status from identity URL
> > host is not 200. Got status 401
> > 
> > Does this mean I have mistyped my id?  I have never used it before;
> > the forum login page only offers icons for a finite set of id
> > providers.
> > 
> > Terry.
> 
> 
> ___
> List Name: Libreoffice-qa mailing list
> Mail address: Libreoffice-qa@lists.freedesktop.org
> Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://lists.freedesktop.org/archives/libreoffice-qa/
> 
> 
> 
> ___
> List Name: Libreoffice-qa mailing list
> Mail address: Libreoffice-qa@lists.freedesktop.org
> Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
> Problems? 
> http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://lists.freedesktop.org/archives/libreoffice-qa/
> 

___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mail

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-11-14 Thread Yi Fan Jiang
Hi Terry,

Don't worry about the delay :)

I wasn't aware of problems could be brought of the underscore. However can I 
confirm the
actual OpenID you are using again because I have never seen an OpenID looks like
lo...@iseries-guru.com. AFAIK the OpenID should be a requestable *URL*. 
Otherwise did I
misunderstand anything? Thanks!

Best wishes,
Yifan

>>> Terrence Enger  11/15/12 7:15 AM >>>
All,

I am sorry for the long delay.  I lost my internet connection.  It is
back now, and I have tons of catching up to do.  Sigh.


Yifan,

I have been in touch with my OpenID provider, and they have fixed one mistake 
that I made in setting it up, writing ...

On Fri, 2012-10-26 at 12:08 -0400, Les via RT wrote:
> Hi Terrence,
> 
> Sorry for the delay in getting back to you.
> 
> Can you try it now?
> 
> Underscores in CNAMEs for your account needed to be enabled via the 
> PREFERENCES link on the left hand side.
> 
> This was off by default. 
> 
> This has been enabled for you, and we changed the TTL to force a reload of
> the zone. 
> 
> It works now:
> 

However, when I try to sign on, my message is ...

OpenID failed

OpenID discovery error: Error fetching XRDS document: (28,
'connect() timed out!')

Could the underscore be causing a problem at your end, I wonder?

Suggestions welcome.

Thanks,
Terry.


On Thu, 2012-10-11 at 07:20 -0600, Yi Fan Jiang wrote:
> Hi Terry,
> 
> Thanks for trying out!
> 
> Yes you are right, it is probably caused by the id provided. 
> AFAIK, the OpenID does not typically use email address as and identifier, 
> though it has not define a restricted way to how an id should look like :)
> 
> Are you sure your mail provider is an openid provider as well? In that case
> you may checkout help from the service provider. (I didn't search out 
> relevant information  yet..)
> 
> In addition, the OpenID is distributed everywhere and you can get more
> description here:
> 
> http://openid.net/get-an-openid/
> 
> It actually spent me some time to understand how they exactly work. But I 
> think to
> use it, just keep in mind your email address is usually NOT your OpenID, 
> instead
> the provider often used a uniform way( a url either with or without 
> "username")
> to define an OpenID like what you quoted :)
> 
> Best wishes,
> Yifan
> 
> >>> Terrence Enger  10/11/12 8:13 PM >>>
> On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> > Hey people,
> > 
> > I have brought OpenID to Moztrap this week, the following is the test
> page for login:
> > 
> > http://vm12.documentfoundation.org/openid/login/
> > 
> > Login example:
> > 
> >   Google user:   https://www.google.com/accounts/o8/id
> >   Yahoo user: https://me.yahoo.com
> >   Wordpress user: $your_username.wordpress.com
> >   
> 
> My attempt to login as lo...@iseries-guru.com failed with message
> 
> OpenID discovery error: HTTP Response status from identity URL
> host is not 200. Got status 401
> 
> Does this mean I have mistyped my id?  I have never used it before;
> the forum login page only offers icons for a finite set of id
> providers.
> 
> Terry.


___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/



___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-11-14 Thread Terrence Enger
All,

I am sorry for the long delay.  I lost my internet connection.  It is
back now, and I have tons of catching up to do.  Sigh.


Yifan,

I have been in touch with my OpenID provider, and they have fixed one mistake 
that I made in setting it up, writing ...

On Fri, 2012-10-26 at 12:08 -0400, Les via RT wrote:
> Hi Terrence,
> 
> Sorry for the delay in getting back to you.
> 
> Can you try it now?
> 
> Underscores in CNAMEs for your account needed to be enabled via the 
> PREFERENCES link on the left hand side.
> 
> This was off by default. 
> 
> This has been enabled for you, and we changed the TTL to force a reload of
> the zone. 
> 
> It works now:
> 

However, when I try to sign on, my message is ...

OpenID failed

OpenID discovery error: Error fetching XRDS document: (28,
'connect() timed out!')

Could the underscore be causing a problem at your end, I wonder?

Suggestions welcome.

Thanks,
Terry.


On Thu, 2012-10-11 at 07:20 -0600, Yi Fan Jiang wrote:
> Hi Terry,
> 
> Thanks for trying out!
> 
> Yes you are right, it is probably caused by the id provided. 
> AFAIK, the OpenID does not typically use email address as and identifier, 
> though it has not define a restricted way to how an id should look like :)
> 
> Are you sure your mail provider is an openid provider as well? In that case
> you may checkout help from the service provider. (I didn't search out 
> relevant information  yet..)
> 
> In addition, the OpenID is distributed everywhere and you can get more
> description here:
> 
> http://openid.net/get-an-openid/
> 
> It actually spent me some time to understand how they exactly work. But I 
> think to
> use it, just keep in mind your email address is usually NOT your OpenID, 
> instead
> the provider often used a uniform way( a url either with or without 
> "username")
> to define an OpenID like what you quoted :)
> 
> Best wishes,
> Yifan
> 
> >>> Terrence Enger  10/11/12 8:13 PM >>>
> On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> > Hey people,
> > 
> > I have brought OpenID to Moztrap this week, the following is the test
> page for login:
> > 
> > http://vm12.documentfoundation.org/openid/login/
> > 
> > Login example:
> > 
> >   Google user:   https://www.google.com/accounts/o8/id
> >   Yahoo user: https://me.yahoo.com
> >   Wordpress user: $your_username.wordpress.com
> >   
> 
> My attempt to login as lo...@iseries-guru.com failed with message
> 
> OpenID discovery error: HTTP Response status from identity URL
> host is not 200. Got status 401
> 
> Does this mean I have mistyped my id?  I have never used it before;
> the forum login page only offers icons for a finite set of id
> providers.
> 
> Terry.


___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/


Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hi,

Sigh, this doesn't yet make things clear, let me clarify it.

Actually the native registraion user and Persona  are exactly the
same thing inside Moztrap.

So when a Moztrap user either already has natviely registrated or has
Mozilla Persona logged in. The OpenID using the same email will not be
able to login at the moment because of the temporary security patch :(

Moreover the native user registration/login and Mozilla Persona login 
should not be affected.

Best wishes
Yifan

>>> Yi Fan Jiang 10/11/12 10:50 PM >>>
Hi Pedro,

Thanks for trying :) The native registration user  compatibilty was
available just for a short while until Rimas reported the severe
security issue as being discussed. So the exceptional stack is just as
expected because of patch the hole. We'll need to fully fix this any
way.

BTW. Mozilla Persona should not be affected anywhere.

Best wishes,
Yifan

>>> Pedro  10/11/12 10:30 PM >>>
Yi Fan Jiang wrote
> I have brought OpenID to Moztrap this week, the following is the test page
> for login:
> 
> http://vm12.documentfoundation.org/openid/login/
> 
> Login example:
> 
>   Google user:   https://www.google.com/accounts/o8/id
>   Yahoo user: https://me.yahoo.com
>   Wordpress user: $your_username.wordpress.com

I tried with the same Google account I use for Mozilla Persona. I got

"IntegrityError at /openid/complete/

(1062, "Duplicate entry 'pedlino.browse...@gmail.com' for key 'email'")

(there is a whole page of code and messages I can send you, if you wish...)

Regards,
Pedro



--
View this message in context: 
http://nabble.documentfoundation.org/Libreoffice-qa-Moztrap-OpenID-support-go-for-testing-tp4012643p4012715.html
Sent from the QA mailing list archive at Nabble.com.
___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/



___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hi Pedro,

Thanks for trying :) The native registration user  compatibilty was
available just for a short while until Rimas reported the severe
security issue as being discussed. So the exceptional stack is just as
expected because of patch the hole. We'll need to fully fix this any
way.

BTW. Mozilla Persona should not be affected anywhere.

Best wishes,
Yifan

>>> Pedro  10/11/12 10:30 PM >>>
Yi Fan Jiang wrote
> I have brought OpenID to Moztrap this week, the following is the test page
> for login:
> 
> http://vm12.documentfoundation.org/openid/login/
> 
> Login example:
> 
>   Google user:   https://www.google.com/accounts/o8/id
>   Yahoo user: https://me.yahoo.com
>   Wordpress user: $your_username.wordpress.com

I tried with the same Google account I use for Mozilla Persona. I got

"IntegrityError at /openid/complete/

(1062, "Duplicate entry 'pedlino.browse...@gmail.com' for key 'email'")

(there is a whole page of code and messages I can send you, if you wish...)

Regards,
Pedro



--
View this message in context: 
http://nabble.documentfoundation.org/Libreoffice-qa-Moztrap-OpenID-support-go-for-testing-tp4012643p4012715.html
Sent from the QA mailing list archive at Nabble.com.
___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/



___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Pedro
Yi Fan Jiang wrote
> I have brought OpenID to Moztrap this week, the following is the test page
> for login:
> 
> http://vm12.documentfoundation.org/openid/login/
> 
> Login example:
> 
>   Google user:   https://www.google.com/accounts/o8/id
>   Yahoo user: https://me.yahoo.com
>   Wordpress user: $your_username.wordpress.com

I tried with the same Google account I use for Mozilla Persona. I got

"IntegrityError at /openid/complete/

(1062, "Duplicate entry 'pedlino.browse...@gmail.com' for key 'email'")

(there is a whole page of code and messages I can send you, if you wish...)

Regards,
Pedro



--
View this message in context: 
http://nabble.documentfoundation.org/Libreoffice-qa-Moztrap-OpenID-support-go-for-testing-tp4012643p4012715.html
Sent from the QA mailing list archive at Nabble.com.
___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/


Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hi Terry,

Thanks for trying out!

Yes you are right, it is probably caused by the id provided. 
AFAIK, the OpenID does not typically use email address as and identifier, 
though it has not define a restricted way to how an id should look like :)

Are you sure your mail provider is an openid provider as well? In that case
you may checkout help from the service provider. (I didn't search out 
relevant information  yet..)

In addition, the OpenID is distributed everywhere and you can get more
description here:

http://openid.net/get-an-openid/

It actually spent me some time to understand how they exactly work. But I think 
to
use it, just keep in mind your email address is usually NOT your OpenID, instead
the provider often used a uniform way( a url either with or without "username")
to define an OpenID like what you quoted :)

Best wishes,
Yifan

>>> Terrence Enger  10/11/12 8:13 PM >>>
On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> Hey people,
> 
> I have brought OpenID to Moztrap this week, the following is the test
page for login:
> 
> http://vm12.documentfoundation.org/openid/login/
> 
> Login example:
> 
>   Google user:   https://www.google.com/accounts/o8/id
>   Yahoo user: https://me.yahoo.com
>   Wordpress user: $your_username.wordpress.com
>   

My attempt to login as lo...@iseries-guru.com failed with message

OpenID discovery error: HTTP Response status from identity URL
host is not 200. Got status 401

Does this mean I have mistyped my id?  I have never used it before;
the forum login page only offers icons for a finite set of id
providers.

Terry.





___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Terrence Enger
On Thu, 2012-10-11 at 03:43 -0600, Yi Fan Jiang wrote:
> Hey people,
> 
> I have brought OpenID to Moztrap this week, the following is the test
page for login:
> 
> http://vm12.documentfoundation.org/openid/login/
> 
> Login example:
> 
>   Google user:   https://www.google.com/accounts/o8/id
>   Yahoo user: https://me.yahoo.com
>   Wordpress user: $your_username.wordpress.com
>   

My attempt to login as lo...@iseries-guru.com failed with message

OpenID discovery error: HTTP Response status from identity URL
host is not 200. Got status 401

Does this mean I have mistyped my id?  I have never used it before;
the forum login page only offers icons for a finite set of id
providers.

Terry.


___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/


Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hi,

I just seal the hole by disabling the duplicated email :) 
Yes...the email account backward-compatibility should be rethought.

@Rimas, would you help to try out that any methods 
can do the bad thing again? I need to make sure the current secure 
level takes effect.

Best wishes,
Yifan

>>> Yi Fan Jiang 10/11/12 6:18 PM >>>
Hi Rimas,

Ouch...great catch!! I'll definitely look into it.

Best wishes,
Yifan

>>> Rimas Kudelis  10/11/12 6:08 PM >>>
Hi Yifan!

2012.10.11 12:43, Yi Fan Jiang rašė:
> I have brought OpenID to Moztrap this week, the following is the test
> page for login:
>
> http://vm12.documentfoundation.org/openid/login/

thats awesome!

> I will update the main login page to add openid support next weekend
> if no critical issue found.
>
> Functions currently supported (testing required)
> 
>
> * Based on EMAIL address, native login/Mozilla Persona/OpenID are all
> mapped to the same user in Moztrap now, so they should be seamlessly
> worked together. Those details as follows.
>
> - If you have a native registered moztrap user or ever used Mozilla
> Persona to login, and your openid provides an exact same EMAIL of such
> an account, the original user and openid user will be treated exactly
> identical.
>
> Actually you should feel nothing changed except inputting password is no
> longer needed :)

Great! Except here's a critical issue for you: I have just managed to
log on to MozTrap as you!!!

Here's the proof: http://i.imgur.com/eF0Cl.png .

In case you're wondering how I did this: I logged on to my weblog, set
my email in my profile to yfji...@suse.com, and used its OpenID provider
to log in to the test website. Since I don't need to proove to my weblog
or the demo site that the email is indeed mine, I basically have full
control over MozTrap now. So, not a good thing. This needs some
rethinking. Most obvious option would be to use the OpenID URL (or
whatever it is that OpenID provides as the identifier) as id when
logging in using OpenID. This would also have a nice "side effect" that
the user could change their primary email, and still be able to log in
with the same user id and permissions.

Regards!
Rimas



___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Rimas Kudelis
Hi Yifan!

2012.10.11 12:43, Yi Fan Jiang rašė:
> I have brought OpenID to Moztrap this week, the following is the test
> page for login:
>
> http://vm12.documentfoundation.org/openid/login/

thats awesome!

> I will update the main login page to add openid support next weekend
> if no critical issue found.
>
> Functions currently supported (testing required)
> 
>
> * Based on EMAIL address, native login/Mozilla Persona/OpenID are all
> mapped to the same user in Moztrap now, so they should be seamlessly
> worked together. Those details as follows.
>
> - If you have a native registered moztrap user or ever used Mozilla
> Persona to login, and your openid provides an exact same EMAIL of such
> an account, the original user and openid user will be treated exactly
> identical.
>
> Actually you should feel nothing changed except inputting password is no
> longer needed :)

Great! Except here's a critical issue for you: I have just managed to
log on to MozTrap as you!!!

Here's the proof: http://i.imgur.com/eF0Cl.png .

In case you're wondering how I did this: I logged on to my weblog, set
my email in my profile to yfji...@suse.com, and used its OpenID provider
to log in to the test website. Since I don't need to proove to my weblog
or the demo site that the email is indeed mine, I basically have full
control over MozTrap now. So, not a good thing. This needs some
rethinking. Most obvious option would be to use the OpenID URL (or
whatever it is that OpenID provides as the identifier) as id when
logging in using OpenID. This would also have a nice "side effect" that
the user could change their primary email, and still be able to log in
with the same user id and permissions.

Regards!
Rimas
___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Re: [Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hi Rimas,

Ouch...great catch!! I'll definitely look into it.

Best wishes,
Yifan

>>> Rimas Kudelis  10/11/12 6:08 PM >>>
Hi Yifan!

2012.10.11 12:43, Yi Fan Jiang rašė:
> I have brought OpenID to Moztrap this week, the following is the test
> page for login:
>
> http://vm12.documentfoundation.org/openid/login/

thats awesome!

> I will update the main login page to add openid support next weekend
> if no critical issue found.
>
> Functions currently supported (testing required)
> 
>
> * Based on EMAIL address, native login/Mozilla Persona/OpenID are all
> mapped to the same user in Moztrap now, so they should be seamlessly
> worked together. Those details as follows.
>
> - If you have a native registered moztrap user or ever used Mozilla
> Persona to login, and your openid provides an exact same EMAIL of such
> an account, the original user and openid user will be treated exactly
> identical.
>
> Actually you should feel nothing changed except inputting password is no
> longer needed :)

Great! Except here's a critical issue for you: I have just managed to
log on to MozTrap as you!!!

Here's the proof: http://i.imgur.com/eF0Cl.png .

In case you're wondering how I did this: I logged on to my weblog, set
my email in my profile to yfji...@suse.com, and used its OpenID provider
to log in to the test website. Since I don't need to proove to my weblog
or the demo site that the email is indeed mine, I basically have full
control over MozTrap now. So, not a good thing. This needs some
rethinking. Most obvious option would be to use the OpenID URL (or
whatever it is that OpenID provides as the identifier) as id when
logging in using OpenID. This would also have a nice "side effect" that
the user could change their primary email, and still be able to log in
with the same user id and permissions.

Regards!
Rimas



___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

[Libreoffice-qa] Moztrap OpenID support - go for testing!

2012-10-11 Thread Yi Fan Jiang
Hey people,

I have brought OpenID to Moztrap this week, the following is the test page for 
login:

http://vm12.documentfoundation.org/openid/login/

Login example:

  Google user:   https://www.google.com/accounts/o8/id
  Yahoo user: https://me.yahoo.com
  Wordpress user: $your_username.wordpress.com
  

More about openid can be found here:

  http://openid.net/get-an-openid/

As a rookie OpenID user, I tested it by myself for 3-4 hours 
(wasted much time by the depressing net speed). 

I will update the main login page to add openid support next weekend 
if no critical issue found.

Functions currently supported (testing required)


* Based on EMAIL address, native login/Mozilla Persona/OpenID are all
  mapped to the same user in Moztrap now, so they should be seamlessly
  worked together. Those details as follows.

  - If you have a native registered moztrap user or ever used Mozilla
Persona to login, and your openid provides an exact same EMAIL of such
an account, the original user and openid user will be treated exactly
identical.

Actually you should feel nothing changed except inputting password is no
longer needed :)

* If you never register or login with Persona, you may simply directly use
  OpenID to login.

  - The new user should be assigned to a "tester" by default, so you should
be able to run tests without any specail permission.

As I known, you have the chance to keep everything private when
providing OpenID, but at least a readable user name is preferred to
provide in case people want to find you. Providing an email is highly
appreciated as well.

In the case when you don't provide a  name, an ugly user name like
"openiduser1" "openiduser2" will be spontaneously assigned for your
 account :)

* You should not meet any "CSRF failure" issues (I was concerning the
  openid module will happened to such an issue again).


Best wishes,
Yifan

-- 
  Yifan Jiang
  Libreoffice / SuSE
  Contact: yifan - irc.freenode.net/libreoffice
  =  
  http://www.libreoffice.org/
  http://www.documentfoundation.org/

___
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/