[08:20] <JamesTait> Good morning all! Happy Friday, Happy Endangered Species Day and Happy World Information Society Day! :-D
[12:59] <Saviq> hi all, I seem to be unable to log into U1, I'm getting an "Authentication failed: OpenID authentication failed: Bad signature" error
[13:01] <ralsina> Saviq: random check, is your date correct?
[13:02] <Saviq> ralsina, mine is, yes
[13:02] <ralsina> Saviq: version number?
[13:02] <ralsina> Saviq: and version of ubuntu
[13:02] <Saviq> ralsina, I meant to the website, sorry
[13:02] <ralsina> Saviq: ah, ok!
[13:02] <ralsina> beuno: ^
[13:02] <Saviq> ralsina, and I can log in to other Ubuntu SSO-backed services
[13:05] <JamesTait> Saviq, hi!
[13:05] <Saviq> JamesTait, hey
[13:06] <JamesTait> So you can log into Launchpad, etc, but U1 is failing the OpenID signature check?  Interesting.
[13:07] <Saviq> JamesTait, yes
[13:08] <JamesTait> Saviq, I'm mulling this over, because I'm wary of locking you out of more services. :)
[13:09] <Saviq> JamesTait, tried in a private browser session just to make sure, no go
[13:10] <JamesTait> Saviq, good thinking.  Taking that route, I presume you had to click the Login/Sign Up link in U1 and enter your credentials in login.ubuntu.com, right?
[13:11] <Saviq> JamesTait, yes
[13:12] <JamesTait> Saviq, bear with me a moment, let me check something.
[13:12] <Saviq> my u1 account seems to be haunted ;)
[13:12] <JamesTait> Spooky. :)
[13:16] <JamesTait> Saviq, my gut is telling me that both launchpad and u1 will be using the exact same OpenID library, but I'm trying to confirm that.
[13:19] <JamesTait> Saviq, my gut is also telling me that a bad signature for a single user is probably down to some weird encoding issue on that account.  Do you have any "strange" characters in your login.ubuntu.com account? i.e. in your name, e-mail address or team memberships?
[13:19] <Saviq> JamesTait, my name is Michał
[13:19] <JamesTait> Saviq, also, could you tell me your launchpad username?
[13:20] <Saviq> JamesTait, is same - savq
[13:20] <Saviq> saviq
[13:20] <JamesTait> Thanks
[13:20] <Saviq> JamesTait, didn't have problems like that before...
[13:20] <Saviq> and I didn't change my name since ;)
[13:20]  * Saviq tries to get rid of the ł
[13:21] <dobey> launchpad is special. it's not a good comparitive test case
[13:21] <JamesTait> Saviq, we recently rolled out an update to SSO that may have introduced this.
[13:21] <JamesTait> dobey, "special"?
[13:21] <JamesTait> :)
[13:21] <Saviq> JamesTait, removing "ł" didn't help
[13:21] <dobey> JamesTait: launchpad doesn't use login.ubuntu.com. it has it's own copy of it
[13:22] <JamesTait> dobey, true, but I think it's using the same code? I'm not sure, tbh.
[13:22] <Saviq> JamesTait, nothing funky in my memberships that I can find
[13:23] <dobey> JamesTait: mostly, yeah. wiki.ubuntu.com or similar, or a canonical service for employees that uses sso, would be a generally better comparison test though
[13:25] <JamesTait> dobey, good point - Saviq could you try wiki.ubuntu.com please?
[13:26] <JamesTait> I did just manage to hit a bug locally relating to that ł in my name, but not a signature verification failure.
[13:26] <Saviq> JamesTait, worked fine
[13:26] <Saviq> JamesTait, logged out and back in, no password entry though, 'cause was logged into SSO
[13:27] <JamesTait> Yeah, that's normal.  It should result in the same post back to the relying party.
[13:27] <Saviq> JamesTait, ah
[13:27] <Saviq> JamesTait, I changed my name on login.ubuntu.com
[13:27] <Saviq> logged in to U1 fine
[13:27] <Saviq> checking if that's the culprit again
[13:28] <JamesTait> OK, that's "good", for a certain definition of "good". ;)
[13:28] <Saviq> JamesTait, yes, your gut was righ
[13:28] <Saviq> t
[13:28] <Saviq> but I checked wrong
[13:28] <JamesTait> :)
[13:29] <Saviq> JamesTait, yeah, the "ł" in my name is what makes it die
[13:29] <JamesTait> Saviq, want me to raise the bug against canonial-identity-provider, or will you?  I'll get working on the fix straight away.
[13:30] <Saviq> JamesTait, launchpad?
[13:30] <Saviq> JamesTait, doing
[13:30] <JamesTait> Saviq, thanks. :)
[13:31] <Saviq> JamesTait, https://bugs.launchpad.net/canonical-identity-provider/+bug/1181229
[13:31] <Saviq> JamesTait, thanks
[13:31] <JamesTait> So something in the handling of OpenID Attribute Exchange is not properly encoding things that Simple Registration was.
[13:31] <JamesTait> Saviq, thank *you*
[14:23]  * JamesTait -> school run