Mailing-List: contact infrastructure-dev-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: infrastructure-dev@apache.org
Received-SPF: pass (athena.apache.org: domain of sebbaz@gmail.com designates
 66.249.92.175 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=qzm5z24c0NMueMe3ViUc5xq0czfuie02fweXvcyzNU/OnEpyUBnfGts2b+egrsogl0
         5qM72ipfobm6gM6fQJGK+cEGDADFjA/N1w8DvcmEE8iSCcQS0vauCjLUDdb0CQ5EiQ3E
         MFGf6uiq0F8n+mD12Sm1Bc81tPcFvA7F4hvgA=
Message-ID: <25aac9fc0811270419x510acfc6n65e7bfbc199d0431@mail.gmail.com>
Date: Thu, 27 Nov 2008 12:19:45 +0000
From: sebb <sebbaz@gmail.com>
To: infrastructure-dev@apache.org
Subject: Re: Centralised authentication/authorisation
In-Reply-To: <1227787207.22393.93.camel@urgyen>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <55ef8e0d508559e7567041e44f6c61d5.squirrel@mail.pc-tony.com>
	 <1227779504.22393.80.camel@urgyen> <492E796D.8080307@sharp.fm>
	 <1227787207.22393.93.camel@urgyen>

On 27/11/2008, Upayavira <uv@odoko.co.uk> wrote:
> On Thu, 2008-11-27 at 12:41 +0200, Graham Leggett wrote:
>  > Upayavira wrote:
>  >
>  > > The biggest issue that I do not yet see resolved is that of username
>  > > namespaces.
>  > >
>  > > Currently, we have a 'committer' namespace, names are allocated, by
>  > > root, based upon requests from the new committer, when their Apache
>  > > account is created.
>  > >
>  > > If we go to an LDAP setup that covers non-committers too, then we have
>  > > to expand our namespace handing to cover names that non-committers might
>  > > choose.
>  > >
>  > > And, we need to work out a way to handle the transition from
>  > > non-committer to committer, in the (likely) case that that involves a
>  > > change in username.
>  > >
>  > > Otherwise, we could get folks snapping up all the best names in the
>  > > @apache.org namespace in the hope that they may one day become a
>  > > committer, rather than having a name selected for them at the point at
>  > > which their account is created.
>  >
>  > I generally approach this by using an email address as the account
>  > identifier.
>  >
>  > When at some future date a user warrants committership, they get a uid
>  > attribute added as appropriate.
>
>
> This starts to get us closer. SVN would of course authenticate against
>  the UID, but that is fine, as it is only relevant to committers.
>  Likewise shell access on people.apache.org.
>
>  Jira, Confluence, Bugzilla should all be able to accept an email address
>  as their unique ID. Moin however will not accept an email address
>  (alphanumeric only), so we'd need to work something else out there
>  (simply strip @ and . from the email address??)
>

However, Moin requires a valid e-mail address when registering (if
not, it should).

Hopefully, this could be used as the key when validating the user.

>  Upayavira
>
>
>
>
>