[Mageia-sysadm] Users authentication on forums

[Buchan Milne]

On Sunday, 1 May 2011 20:48:20 Buchan Milne wrote:
> >From the start, the intention was to be able provide an OpenID provider on
> >mageia.org, authenticating against LDAP. so that contributors could use
> >their mageia identity on other open-source platforms.
> >
> > Or decide that we need to open and let go a bit more and design all
> > our services in a more modular/flexible way, yet secure. And if
> > needed, ask for help on the outside, among people that would be
> > willing to help (not only volunteers, but companies whose interest
> > could align with dedicating some employees time with the project). For
> > instance, continuing as it is today, but accepting to set up an OAuth
> > provider service in a given perimeter, plugging it in LDAP with the
> > auth part still in mageia.org, and see how things go from there?
> > 
> > Note that I'm not arguing against the team or anyone here, but for a
> > different take on how some services may be provided in a more flexible
> > way. :-) I'm sure a set of beers and a whiteboard would help a lot
> > here but all we have for now is this text-based thing.
> > 
> > (that's not a binary switch - I discussed with some of af83 engineers
> > about one of their project they demonstrated at WebWorkersCamp past
> > week-end (https://github.com/AF83/auth_server ) - and it seems they
> > would be happy to help with this - that's in part why I suggest a bit
> > more about this)
> 
> My plan was to use something like https://identity.mageia.org/openid as an
> OpenID provider, using some of the existing Perl modules that provide some
> OpenID support (e.g.
> http://search.cpan.org/~lyokato/OpenID-Lite-0.01_04/lib/OpenID/Lite/Provid
> er.pm), but unfortunately I have 1)been a bit busy with a new baby in the
> house, 2)very limited bandwidth at home, 3)new responsibilities at work.

I just saw: http://search.cpan.org/~zdk/CatalystX-OAuth2-
Provider-0.0002/lib/CatalystX/OAuth2/Provider.pm

But, now the question is, what technologies do the other web apps we want 
support? OpenID? Oauth1? Oauth2?

Regards,
Buchan