A Fedora Infra development environment -- tiny-stage
by Ryan Lerch
During the development of Fedora Accounts (freeIPA, freeipa-fas,
noggin, etc), the AAA development team started work on a collection of
Vagrant controlled virtual machines to make it simple to create a dev
environment for working on applications that use Fedora Accounts for
authentication. It was named tiny-stage:
https://github.com/fedora-infra/tiny-stage
By default, it creates machines that set up FreeIPA, Ipsilon, and
FasJSON (the fedora accounts API), and populates the accounts with a
bunch of users and groups, so you can test everything out. For
example, if you currently have a local dev version of an application
that pointed to iddev.fedorainfracloud.org, you create the tinystage
VMs locally, and use ipsilon.tinystage.test/idp
There are also a collection of other VMs that set up some of our
applications (like elections), and are configured to run in the dev
environment out of the box. There is also another VM that implements a
simple OpenID Connect client for devs to use as a sample
implementation.
Long story short, check out and try tiny-stage and see if it is useful to you!
cheers,
ryanlerch
2 years, 10 months
fedimg
by Kevin Fenzi
Hey everyone.
We have a application called fedimg that takes our images and uploads
them to AWS. We have talked about replacing it, but we haven't done so.
However, we now have a request to also upload the ELN images:
https://pagure.io/fedora-infrastructure/issue/9944
Would there be anyone who would like to investigate how to add ElN image
uploads to fedimg? I can do it, but I have a bunch of other things too,
so this might be a nice thing for others to work on to get involved.
https://github.com/fedora-infra/fedimg
Any takers?
kevin
2 years, 10 months
Can't login to weblate, mailling list site and bugzilla with Fedora
Account after enable OTP on FAS
by Shixiong Tian
Hello guys,
Few weeks ago, I add OTP to my account in new FAS.
Now I found that I can't login to our L10n platform[1], mailing list
site[2] and bugzilla[3] by using my FAS id. All of them will redirect me
to authorisation page[4], but once I use my username and password to
login, Weblate will tell me 'Authentication cancelled' and redirect me
to login screen again, mailing list will tell me 'Login cancelled'[5],
bugzilla won't redirect me back, but stays on authorisation page but
saying '401 - Unauthorized, authentication failure'[6].
I suppose the reason might be that the OTP field is not available in the
authorisation page.
[1] https://translate.fedoraproject.org/
[2] https://lists.fedoraproject.org/accounts/login/
[3] https://bugzilla.redhat.com/
[4] https://id.fedoraproject.org/login/gssapi/negotiate
[5] https://lists.fedoraproject.org/accounts/social/login/cancelled/
[6] https://id.fedoraproject.org/saml2/SSO/Continue
--
Regards,
Tiansworld
Fedora Project Contributor
2 years, 10 months
best way to get a non-human Fedora account
by Matthew Miller
For the Fedora Contributor Trends project, Josseline is working on a module
which will gather some information from Fedora Accounts. This needs to
authenticate, and rather than doing it under a human name we'd like to have
a dedicated account. What's the best way to set this up?
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
2 years, 10 months