30 Jun
2008
30 Jun
'08
11:19 a.m.
Hi Markus,
On Sun, Jun 29, 2008 at 4:03 PM, Markus Lanthaler
<mark_lanthaler(a)gmx.net> wrote:
Hi!
I just created the page
http://dev.xwiki.org/xwiki/bin/view/Design/SingleSignOn where I'll document
everything regarding my Single Sign-On project.
Since I didn't get any feedback the last time I asked this question I'll ask
it again:
Another question. Just looking at OpenID now. What are the plans for it?
Should it be enabled by default? Should it be possible to turn it off?
I would like to see OpenID support out of the box. I don't know if it makes
sense to turn it off.. What happens with existing OpenID users if someone
turns it off?
I would say if OpenID is turned off then users created for OpenID or
attached to OpenId are unusable to authenticate if they don't have any
XWiki password. The default authenticator does not allows users to log
with empty passwords, this is enough to protect them I think. This
could be used when the administrator want to easily disable wiki
modifications for maintenance for example.
Should we really start with the integration of a big framework like OpenSSO?
Wouldn't it be better to implement OpenID support for example with a
dedicated OpenID
library? We should also consider the fact that ESOE for example simple uses
the OpenID4Java library and OpenSSO doesn't support OpenID (authentication)
at all.
I think it's much easier for the user if everything is bundled with XWiki so
that he doesn't need to install any other component or complex service like
ESOE or OpenSSO.
If we want to support only OpenID, OpenID4Java seems the better way to
do that in the short term for you to be sure to finish your GSOC. Now
in the long term we would surely choose one of the framework available
to easily add other supports latter I think... I seen that ESOE
provide a generic Confluence / Jira Integrator but can't find any
source/description.
If it's OK for you I would start creating the architecture and describe
detailed how I would like to implement OpenID support with a OpenID library
the next days. Then ask for some feedback on that and finally begin to
implement this. My last exam is next Monday (July, 7th) so afterwards I'm
finally free to work exclusively for XWiki :-)
OK great.
Cheers,
Markus
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Thomas Mortagne