Re: Should *.gnome.org use OpenID.net?

[Jeff Waugh <jdub perkypants org>]

<quote who="Thomas Wood">

> Art.gnome.org is currently undergoing a revamp by Bruno Santos as part of
> the Google Summer of Code project. We've been considering what
> authentication system to implement and it has been suggested for a long
> time that it would be good if all gnome.org sites used the same login
> system. We've looked at using OpenID.net, so would it be possible for
> other gnome.org sites to use this system? Could gnomedesktop.org and
> gnomesupport.org also offer OpenID as an alternative?

Blogo (blogs.gnome.org) will be OpenID enabled soon. This doesn't help us
*too* much with SSO for all of gnome.org, unless we set up a GNOME OpenID
provider and not only authenticated against it (that's the easy part) but
did special *authorisation* based on having a gnome.org OpenID... That is
somewhat more complicated. If we allowed people to assoicate a "foreign"
OpenID with a GNOME login, that would be interesting... But would require
even further authorisation hacks to work. 8)

Not saying it's impossible, just pointing out that it's not a silver bullet.

- Jeff

-- 
linux.conf.au 2008: Melbourne, Australia        http://lca2008.linux.org.au/
 
   "When there's public debate and mass hysteria, that's when the patches
                         roll in." - Michael Meeks