On Thu, Nov 01, 2007 at 09:46:43PM -0000, OSGeo wrote:
Mediawiki LDAP authentication seems well discussed at:
Bare MediaWiki LDAP authentication itself is not a big issue.
BUT first we have to pour all the missing Wiki users into the LDAP
directory (those who don't already have an OSGeo account). Certainly
the funniest part is to find out those users, which use different user
names for the Wiki an OSGeo and to decide how to deal with these.
I myself am such a case .... Cheerio,
Well, now we're in a better situation than before because we now can
read the Wiki user database 
Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------
On Thu, Nov 01, 2007 at 11:24:13PM +0100, Martin Spott wrote:
On Thu, Nov 01, 2007 at 09:46:43PM -0000, OSGeo wrote:
> Mediawiki LDAP authentication seems well discussed at:
Bare MediaWiki LDAP authentication itself is not a big issue.
BUT first we have to pour all the missing Wiki users into the LDAP
directory (those who don't already have an OSGeo account). Certainly
the funniest part is to find out those users, which use different user
names for the Wiki an OSGeo and to decide how to deal with these.
Ah, okay. That's a good point that I hadn't realized: I thought the
barrier was technical, but really, it's social.
Do we really need to do this? i mean, if we change auth mechanisms,
can't we just tell people "Go *here* to get a login if your old one
doesn't work?"
Regards,
--
Christopher Schmidt
MetaCarta
Martin Spott wrote:
On Thu, Nov 01, 2007 at 09:46:43PM -0000, OSGeo wrote:
Mediawiki LDAP authentication seems well discussed at:
Bare MediaWiki LDAP authentication itself is not a big issue.
BUT first we have to pour all the missing Wiki users into the LDAP
directory (those who don't already have an OSGeo account). Certainly
the funniest part is to find out those users, which use different user
names for the Wiki an OSGeo and to decide how to deal with these.
I myself am such a case .... Cheerio,
Well, now we're in a better situation than before because we now can
read the Wiki user database
Martin,
I'm of the opinion that we should flush the existing wiki userids, and
just get people to login with OSGeo userids, with a pointer to where to
get one. I just hate to think of all those extra userids getting dumped
into LDAP.
However, if it is easy to first check the existing userids in mysql, and
then fallback to LDAP that would be great, and minimize the disruption.
Best regards,
--
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush | President OSGeo, http://osgeo.org
I'm of the opinion that we should flush the existing wiki userids,
and just get people to login with OSGeo userids, with a pointer
to where to get one. I just hate to think of all those extra
userids getting dumped into LDAP.
I do too, but isn't this going to screw up all of the user pages, edit
history, etc... all of the goodness that is linked to the wiki user IDs?
I'd love it if there was some way to let users who care type in their
old userid and their new userid and have everthing remapped. Doesn't
sound especially easy though 
Jason
--
---------------------------------------+--------------------------------
---------------------------------------+------
I set the clouds in motion - turn up | Frank Warmerdam,
warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush | President OSGeo,
http://osgeo.org
_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac
Frank, Christopher,
On Thu, Nov 01, 2007 at 07:47:47PM -0400, Frank Warmerdam wrote:
Martin Spott wrote:
>BUT first we have to pour all the missing Wiki users into the LDAP
>directory (those who don't already have an OSGeo account). Certainly
>the funniest part is to find out those users, which use different user
>names for the Wiki an OSGeo and to decide how to deal with these.
I'm of the opinion that we should flush the existing wiki userids, and
just get people to login with OSGeo userids, with a pointer to where to
get one. I just hate to think of all those extra userids getting dumped
into LDAP.
I agree, but I suspect we won't get a clean migration without dealing
with this topic. In fact the Wiki contains a huge edit history and
every edit is related to a unique user name. I would _not_ like to
break these relations. We should at least merge and adapt those Wiki
users which show up in the edit history.
I even offer to take on this - well, no promises right now if this is
going to succeed. In my day job I'm forced to perform unaesthetic
solutions occasionally because customers insist on it. I don't want
repeat this in my spare time ....
Until next week I'm buried with other tasks (customer-, private- and
OSGeo-related). After this period is over I'd attempt to figure how a
solution could look like.
I'm pretty convinced that I'd need a copy of the whole Wiki for
testing. Therefore I will cut the 'wiki.osgeo.net' DNS name which
currently points to the official wili and later use it for testing
purpose. So please never publish the .net name.
I guess I'd start with SSL-encrypted connections for the session
authentication and afterwards deal with making a plan on how to merge
the users. In this context we should think about SSLifying the Trac
login as well. Currently the usernames/passwords are being transferred
in plain text at least during login !!
Cheers,
Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------
Jason Birch wrote:
I'm of the opinion that we should flush the existing wiki userids,
and just get people to login with OSGeo userids, with a pointer
to where to get one. I just hate to think of all those extra
userids getting dumped into LDAP.
I do too, but isn't this going to screw up all of the user pages, edit
history, etc... all of the goodness that is linked to the wiki user IDs?
Jason,
I guess I just am not very attached to that stuff. I don't make much
effort to do the User: links and you can still use the old user page, right?
I'd love it if there was some way to let users who care type in their
old userid and their new userid and have everthing remapped. Doesn't
sound especially easy though
No. Note, the especially concerned could just apply for their old wiki
userid as an OSGeo userid if no one else has taken it.
Best regards,
--
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush | President OSGeo, http://osgeo.org
On 1-Nov-07, at 3:24 PM, Martin Spott wrote:
Well, now we're in a better situation than before because we now can
read the Wiki user database
Any thanks so much for the seamless transition!
On 1-Nov-07, at 4:41 PM, Martin Spott wrote:
I'm of the opinion that we should flush the existing wiki userids, and
just get people to login with OSGeo userids, with a pointer to where to
get one. I just hate to think of all those extra userids getting dumped
into LDAP.
I agree, but I suspect we won't get a clean migration without dealing
with this topic. In fact the Wiki contains a huge edit history and
every edit is related to a unique user name. I would _not_ like to
break these relations. We should at least merge and adapt those Wiki
users which show up in the edit history.
If we can filter out users that have since been blocked, and perhaps have only contributed a certain number (e.g. only 1) of edits - it will help ensure we don't give spammers an osgeo id.
In my opinion, we still need an email confirmation process for generating osgeo user ids. Does anyone know if this has been addressed yet?
Tyler
On Fri, Nov 02, 2007 at 10:56:39AM -0700, Tyler Mitchell (OSGeo) wrote:
On 1-Nov-07, at 3:24 PM, Martin Spott wrote:
>Well, now we're in a better situation than before because we now can
>read the Wiki user database
Any thanks so much for the seamless transition!
My pleasure, my pride
I'm glad you like it,
Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------
Tyler Mitchell (OSGeo) wrote:
In my opinion, we still need an email confirmation process for generating osgeo user ids. Does anyone know if this has been addressed yet?
Tyler,
This has not been implemented. However, since our osgeo login creation
mechanism is adhoc, existing bots don't know how to create OSGeo userids.
I think it is doubtful anyone would create an OSGeo specific userid
creation bot.
Best regards,
--
---------------------------------------+--------------------------------------
I set the clouds in motion - turn up | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush | President OSGeo, http://osgeo.org