[08:20] Good morning all! Happy Friday, Happy Endangered Species Day and Happy World Information Society Day! :-D === wedgwood_away is now known as wedgwood [12:59] hi all, I seem to be unable to log into U1, I'm getting an "Authentication failed: OpenID authentication failed: Bad signature" error [13:01] Saviq: random check, is your date correct? [13:02] ralsina, mine is, yes [13:02] Saviq: version number? [13:02] Saviq: and version of ubuntu [13:02] ralsina, I meant to the website, sorry [13:02] Saviq: ah, ok! [13:02] beuno: ^ [13:02] ralsina, and I can log in to other Ubuntu SSO-backed services [13:05] Saviq, hi! [13:05] JamesTait, hey [13:06] So you can log into Launchpad, etc, but U1 is failing the OpenID signature check? Interesting. [13:07] JamesTait, yes [13:08] Saviq, I'm mulling this over, because I'm wary of locking you out of more services. :) [13:09] JamesTait, tried in a private browser session just to make sure, no go [13:10] Saviq, good thinking. Taking that route, I presume you had to click the Login/Sign Up link in U1 and enter your credentials in login.ubuntu.com, right? [13:11] JamesTait, yes [13:12] Saviq, bear with me a moment, let me check something. [13:12] my u1 account seems to be haunted ;) [13:12] Spooky. :) [13:16] Saviq, my gut is telling me that both launchpad and u1 will be using the exact same OpenID library, but I'm trying to confirm that. [13:19] Saviq, my gut is also telling me that a bad signature for a single user is probably down to some weird encoding issue on that account. Do you have any "strange" characters in your login.ubuntu.com account? i.e. in your name, e-mail address or team memberships? [13:19] JamesTait, my name is Michał [13:19] Saviq, also, could you tell me your launchpad username? [13:20] JamesTait, is same - savq [13:20] saviq [13:20] Thanks [13:20] JamesTait, didn't have problems like that before... [13:20] and I didn't change my name since ;) [13:20] * Saviq tries to get rid of the ł [13:21] launchpad is special. it's not a good comparitive test case [13:21] Saviq, we recently rolled out an update to SSO that may have introduced this. [13:21] dobey, "special"? [13:21] :) [13:21] JamesTait, removing "ł" didn't help [13:21] JamesTait: launchpad doesn't use login.ubuntu.com. it has it's own copy of it [13:22] dobey, true, but I think it's using the same code? I'm not sure, tbh. [13:22] JamesTait, nothing funky in my memberships that I can find [13:23] JamesTait: mostly, yeah. wiki.ubuntu.com or similar, or a canonical service for employees that uses sso, would be a generally better comparison test though [13:25] dobey, good point - Saviq could you try wiki.ubuntu.com please? [13:26] I did just manage to hit a bug locally relating to that ł in my name, but not a signature verification failure. [13:26] JamesTait, worked fine [13:26] JamesTait, logged out and back in, no password entry though, 'cause was logged into SSO [13:27] Yeah, that's normal. It should result in the same post back to the relying party. [13:27] JamesTait, ah [13:27] JamesTait, I changed my name on login.ubuntu.com [13:27] logged in to U1 fine [13:27] checking if that's the culprit again [13:28] OK, that's "good", for a certain definition of "good". ;) [13:28] JamesTait, yes, your gut was righ [13:28] t [13:28] but I checked wrong [13:28] :) [13:29] JamesTait, yeah, the "ł" in my name is what makes it die [13:29] Saviq, want me to raise the bug against canonial-identity-provider, or will you? I'll get working on the fix straight away. [13:30] JamesTait, launchpad? [13:30] JamesTait, doing [13:30] Saviq, thanks. :) [13:31] JamesTait, https://bugs.launchpad.net/canonical-identity-provider/+bug/1181229 [13:31] Launchpad bug 1181229 in Canonical SSO provider "diacriticts in name result in bad signature when logging in to U1 website" [Undecided,New] [13:31] JamesTait, thanks [13:31] So something in the handling of OpenID Attribute Exchange is not properly encoding things that Simple Registration was. [13:31] Saviq, thank *you* [14:23] * JamesTait -> school run === gatox is now known as gatox_lunch === gatox_lunch is now known as gatox === mhall119_ is now known as mhall119 === wedgwood is now known as wedgwood_away