On Mon, 15 Apr 2013 11:30:12 -0600 Kevin Fenzi kevin@scrye.com wrote:

Greetings.

We set today (2013-04-15) as the day to retire our legacy openid provider. See: https://fedoraproject.org/wiki/Legacy-OpenID for more info.

This requires a change to proxy servers as they have the redirect on them, so it requires a freeze break.

+1s?

kevin

# deleted: manifests/nodes/legacy-openid01.phx2.fedoraproject.org.pp # modified: modules/fas/templates/fas-proxy.conf.erb # deleted: modules/openvpn/files/ccd/legacy-openid01.phx2.fedoraproject.org # modified: modules/ssh/files/ssh_known_hosts

diff --git a/modules/fas/templates/fas-proxy.conf.erb b/modules/fas/templates/fas-proxy.conf.erb index 7abe1c8..80caffb 100644 --- a/modules/fas/templates/fas-proxy.conf.erb +++ b/modules/fas/templates/fas-proxy.conf.erb @@ -8,10 +8,5 @@ RewriteRule /accounts/user/dogencert http://fas1/accounts/user/dogencert [P,L] ProxyPassReverse /accounts/user/dogencert http://fas1/

-# This is legacy OpenID -RewriteRule /accounts/openid/(.*)$ http://legacy-openid01/$1 [P,L] -ProxyPassReverse /accounts/openid/ http://legacy-openid01/

ProxyPass <%= path %> <%= proxyurl %>/accounts ProxyPassReverse <%= path %> <%= proxyurl %>/accounts

+1 - but I fully expect the proxies to die in some ridiculous fashion.

-sv