| mhall119 | pleia2: I was reading through the email thread on https://lists.ubuntu.com/archives/ubuntu-doc/2016-January/019674.html and you said you weren't sure about the feasibility of 2-factor auth, was that because you didn't know if it could be enabled, or because you didn't know if casual editors would have a 2-factor device/app? | 17:48 |
|---|---|---|
| pleia2 | mhall119: it's just not my call, it may be tolerable on the community side but I don't know all the stakeholders here | 17:49 |
| pleia2 | I think it would be ok to enable 2-factor on *just* the wikis maybe, it would be a barrier but tolerable, that's not something I think IS would do for *all* SSO things though (lots of people in the world using Ubuntu's SSO) | 17:50 |
| pleia2 | certainly would be a lot better than what we have now :) | 17:50 |
| mhall119 | yeah, but SSO already has the ability for individual sites to request/require 2-factor on login | 17:51 |
| pleia2 | yep, it does exist | 17:51 |
| pleia2 | I don't use it | 17:51 |
| mhall119 | I don't know if the moin auth stuff has that ability though | 17:51 |
| pleia2 | I do a lot of work with openstack and it's not all awesome with 2-factor | 17:51 |
| pleia2 | (we are moving off of Launchpad/Ubuntu SSO some day...) | 17:51 |
| pleia2 | anyway, yeah, I don't know either re: moin | 17:52 |
| mhall119 | not to github I hope :) | 17:52 |
| pleia2 | no, we can't use proprietary software in our infra, we have our own openstackid project+service | 17:52 |
| mhall119 | ah, cool | 17:53 |
| pleia2 | and I'm pretty sure captcha was one of the ideas in the ticket | 17:53 |
| pleia2 | we have lots of ideas, but no feedback loop from IS about what's reasonable to expect | 17:53 |
| mhall119 | anyway, I worked on SSO and 2FA while in ISD, so if you want me to look more info the feasibility of it for the wiki I'd be happy to | 17:53 |
| pleia2 | if IS thinks that's the path to follow, I think it would be fine | 17:54 |
| mhall119 | ack, popey and I are continuing to poke people in IS about it | 17:54 |
| pleia2 | just don't want anyone wasting their time if it won't pan out because $reasons | 17:54 |
| pleia2 | like, political reasons | 17:54 |
| knome | mhall119, i acknowledge it's a side issue, but re: the logging in issue; no, it was not fixed "many years ago", it was not until recently that ubuntu sso accounts had a username (without having been linked with launchpad) | 18:25 |
| mhall119 | knome: I had to deal with this in summit (and LTP I think) which I've barely touched in the last 3 years, so unless we're talking about different things, it was a while ago | 18:26 |
| knome | this affected logins to the wikis and the qa trackers at least, it had a recent IS ticket | 18:28 |
| knome | pleia2 can confirm | 18:28 |
| knome | or might have a handy link to the ticket or sth | 18:28 |
| pleia2 | I think loco.ubuntu.com too, but I could never properly confirm with someone who cared enough and had never logged in | 18:28 |
| knome | this totally wasn't "many years ago" | 18:28 |
| knome | so maybe it has something to do with this issue | 18:29 |
| * pleia2 nods | 18:29 | |
| mhall119 | pleia2: knome: can you see ifyou can edit help.ubuntu.com/community/ now? | 20:19 |
| mhall119 | or, rather, that the people who could edit itbefore it was locked down can edit it agian? | 20:21 |
| pleia2 | will have to ask someone not in the https://help.ubuntu.com/community/EditorGroup (or AdminGroup) | 21:20 |
| pleia2 | (I am) | 21:20 |
| pleia2 | mhall119: you could try :) | 21:27 |
| mhall119 | do I have the right set of permissions (and non-permission)? | 21:37 |
| pleia2 | I don't know, I don't know what you're trying to get by asking me to edit a page (I already know I can) | 21:38 |
| pleia2 | I assumed IS had made a change :) | 21:38 |
| pleia2 | since January 4th, only people in https://help.ubuntu.com/community/EditorGroup and AdminGroup can edit | 21:39 |
| pleia2 | that's only a few of us, so for the past month and a half the wiki has only been edited by those people, and people sending us diffs and things on the mailing list (very tedious, I don't have time for this) | 21:39 |
| pleia2 | since both EditorGroup and AdminGroup give administrative access, we don't want to just hand this out to everyone (the team has a process in place for building up a body of work as a trusted contributor for admin powers) | 21:40 |
| mhall119 | pleia2: I was poking IS and was told: 15:16 < neale> mhall119: known users now have read/write | 21:41 |
| pleia2 | I don't know what "known users" are | 21:41 |
| mhall119 | so I just wanted to have someone here check that it was all back to how it was | 21:41 |
| mhall119 | pleia2: I'm guessing people with accounts already on the wiki | 21:41 |
| pleia2 | I assume he means EditorGroup and AdminGroup? We got no word back on the non administrative ContributorGroup that we requested in the ticket | 21:42 |
| mhall119 | not sure what that means for new accounts though | 21:42 |
| pleia2 | we should probably figure out what they mean, there's been no communication in the ticket | 21:42 |
| mhall119 | ack, I'll ask neale to update the ticket | 21:43 |
| pleia2 | thanks | 21:43 |
| mhall119 | hmmm, they all show as ImmutablePage to me | 21:44 |
| pleia2 | so you're not a "known user", whatever that means :) | 21:45 |
| mhall119 | it means IS is pretending they don't know me :) | 21:49 |
| mhall119 | pleia2: In theory, a new user should be able to edit https://help.ubuntu.com/community/Lubuntu/Documentation right? | 21:51 |
| pleia2 | mhall119: not since the lockdown | 21:53 |
| pleia2 | mhall119: but in a properly functioning wiki, like we want back, yes | 21:53 |
| pleia2 | just like wiki.ubuntu.com | 21:54 |
| pleia2 | mhall119: update from neale just now indicates you (normal people) should be able to edit pages now | 22:00 |
| pleia2 | it's heavily cached, so may need to do a hard refresh when logging in to see things Edit-able | 22:00 |
| mhall119 | pleia2: yeah, something was wonky for a bit, but I can edit pages now | 22:00 |
| pleia2 | if it continues to be Immutable, welcome to our world, it's a nightmare | 22:01 |
| pleia2 | \o/ | 22:01 |
| pleia2 | this gets us to our second topic, moinmoin sucks and is slow and is wonky :) | 22:01 |
| mhall119 | keep an eye out for more spam, but hopefully they've all moved on by now | 22:01 |
| * pleia2 nods | 22:01 | |
| mhall119 | yes,but moinmoin is editable again, baby steps :) | 22:01 |
| pleia2 | \o/ | 22:01 |
| pleia2 | not sure I want to do a splashy announcement on ubuntu-doc in case spammers are watching :\ | 22:02 |
| pleia2 | maybe people will just start to notice they can edit again | 22:02 |
| mhall119 | yeah, I was thinking that same thing, let the folks who regularly edit know it's back | 22:02 |
| mhall119 | but otherwise not advertise it too much | 22:03 |
| pmatulis | wiki.ubuntu.com was attacked just a few days ago. it will probabl happen again to the help wiki | 23:33 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!