On Wed, 20 Nov 2013 11:59:46 +1000 Nick Coghlan ncoghlan@redhat.com wrote:
Unless/until we fix the storage of passwords for Beaker's native password-based auth, I'd like to explicitly warn people away from relying on that configuration in the docs.
OK, good to know. Thanks for the heads up.
However, our own solution to that problem is to let mod_auth_kerb do the heavy lifting, which isn't going to be applicable to something like beaker.fedoraproject.org
Yeah, beaker.fp.o will eventually need to auth against FAS which currently supports OpenID and will shortly support Persona [1]. I haven't gotten around to figuring out the best way to get that done yet.
[1] http://www.mozilla.org/en-US/persona/
Has anyone tried to use mod_auth_oauth at all? I'm wondering if that may be a more upstream-friendly alternative that still avoids relying on the currently-not-suitable-for-production-use-on-the-big-bad-internet password based auth.
I can't speak for anyone else, but mod_auth_oauth wouldn't work immediately for fedora just because FAS doesn't support it.
I am, however, interested in looking at something like mod_authnz_persona [2] and may poke at that a bit once FAS has a persona provider.
[2] https://github.com/mozilla/mod_authnz_persona
Tim