| JamesTait | Good morning all! Happy Friday, Happy Endangered Species Day and Happy World Information Society Day! :-D | 08:20 |
|---|---|---|
| === wedgwood_away is now known as wedgwood | ||
| Saviq | hi all, I seem to be unable to log into U1, I'm getting an "Authentication failed: OpenID authentication failed: Bad signature" error | 12:59 |
| ralsina | Saviq: random check, is your date correct? | 13:01 |
| Saviq | ralsina, mine is, yes | 13:02 |
| ralsina | Saviq: version number? | 13:02 |
| ralsina | Saviq: and version of ubuntu | 13:02 |
| Saviq | ralsina, I meant to the website, sorry | 13:02 |
| ralsina | Saviq: ah, ok! | 13:02 |
| ralsina | beuno: ^ | 13:02 |
| Saviq | ralsina, and I can log in to other Ubuntu SSO-backed services | 13:02 |
| JamesTait | Saviq, hi! | 13:05 |
| Saviq | JamesTait, hey | 13:05 |
| JamesTait | So you can log into Launchpad, etc, but U1 is failing the OpenID signature check? Interesting. | 13:06 |
| Saviq | JamesTait, yes | 13:07 |
| JamesTait | Saviq, I'm mulling this over, because I'm wary of locking you out of more services. :) | 13:08 |
| Saviq | JamesTait, tried in a private browser session just to make sure, no go | 13:09 |
| JamesTait | Saviq, good thinking. Taking that route, I presume you had to click the Login/Sign Up link in U1 and enter your credentials in login.ubuntu.com, right? | 13:10 |
| Saviq | JamesTait, yes | 13:11 |
| JamesTait | Saviq, bear with me a moment, let me check something. | 13:12 |
| Saviq | my u1 account seems to be haunted ;) | 13:12 |
| JamesTait | Spooky. :) | 13:12 |
| JamesTait | Saviq, my gut is telling me that both launchpad and u1 will be using the exact same OpenID library, but I'm trying to confirm that. | 13:16 |
| JamesTait | Saviq, my gut is also telling me that a bad signature for a single user is probably down to some weird encoding issue on that account. Do you have any "strange" characters in your login.ubuntu.com account? i.e. in your name, e-mail address or team memberships? | 13:19 |
| Saviq | JamesTait, my name is Michał | 13:19 |
| JamesTait | Saviq, also, could you tell me your launchpad username? | 13:19 |
| Saviq | JamesTait, is same - savq | 13:20 |
| Saviq | saviq | 13:20 |
| JamesTait | Thanks | 13:20 |
| Saviq | JamesTait, didn't have problems like that before... | 13:20 |
| Saviq | and I didn't change my name since ;) | 13:20 |
| * Saviq tries to get rid of the ł | 13:20 | |
| dobey | launchpad is special. it's not a good comparitive test case | 13:21 |
| JamesTait | Saviq, we recently rolled out an update to SSO that may have introduced this. | 13:21 |
| JamesTait | dobey, "special"? | 13:21 |
| JamesTait | :) | 13:21 |
| Saviq | JamesTait, removing "ł" didn't help | 13:21 |
| dobey | JamesTait: launchpad doesn't use login.ubuntu.com. it has it's own copy of it | 13:21 |
| JamesTait | dobey, true, but I think it's using the same code? I'm not sure, tbh. | 13:22 |
| Saviq | JamesTait, nothing funky in my memberships that I can find | 13:22 |
| dobey | JamesTait: mostly, yeah. wiki.ubuntu.com or similar, or a canonical service for employees that uses sso, would be a generally better comparison test though | 13:23 |
| JamesTait | dobey, good point - Saviq could you try wiki.ubuntu.com please? | 13:25 |
| JamesTait | I did just manage to hit a bug locally relating to that ł in my name, but not a signature verification failure. | 13:26 |
| Saviq | JamesTait, worked fine | 13:26 |
| Saviq | JamesTait, logged out and back in, no password entry though, 'cause was logged into SSO | 13:26 |
| JamesTait | Yeah, that's normal. It should result in the same post back to the relying party. | 13:27 |
| Saviq | JamesTait, ah | 13:27 |
| Saviq | JamesTait, I changed my name on login.ubuntu.com | 13:27 |
| Saviq | logged in to U1 fine | 13:27 |
| Saviq | checking if that's the culprit again | 13:27 |
| JamesTait | OK, that's "good", for a certain definition of "good". ;) | 13:28 |
| Saviq | JamesTait, yes, your gut was righ | 13:28 |
| Saviq | t | 13:28 |
| Saviq | but I checked wrong | 13:28 |
| JamesTait | :) | 13:28 |
| Saviq | JamesTait, yeah, the "ł" in my name is what makes it die | 13:29 |
| JamesTait | Saviq, want me to raise the bug against canonial-identity-provider, or will you? I'll get working on the fix straight away. | 13:29 |
| Saviq | JamesTait, launchpad? | 13:30 |
| Saviq | JamesTait, doing | 13:30 |
| JamesTait | Saviq, thanks. :) | 13:30 |
| Saviq | JamesTait, https://bugs.launchpad.net/canonical-identity-provider/+bug/1181229 | 13:31 |
| ubot5 | Launchpad bug 1181229 in Canonical SSO provider "diacriticts in name result in bad signature when logging in to U1 website" [Undecided,New] | 13:31 |
| Saviq | JamesTait, thanks | 13:31 |
| JamesTait | So something in the handling of OpenID Attribute Exchange is not properly encoding things that Simple Registration was. | 13:31 |
| JamesTait | Saviq, thank *you* | 13:31 |
| * JamesTait -> school run | 14:23 | |
| === gatox is now known as gatox_lunch | ||
| === gatox_lunch is now known as gatox | ||
| === mhall119_ is now known as mhall119 | ||
| === wedgwood is now known as wedgwood_away | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!