Opened 4 years ago
Closed 2 years ago
#939 closed task (fixed)
Re-do authentication system
Reported by: | pferreir | Owned by: | arescope |
---|---|---|---|
Priority: | critical | Milestone: | v1.2 |
Component: | General | Version: | 0.98-dev |
Keywords: | Cc: |
Description
The whole thing is just a mess. We should refactor it considering that:
- People will want to extend it, and we should allow so without changes in the application code (plugin?);
- We want to use LDAP even for what we currently call "CERN SSO", so, we should see if we can get rid of all those SOAP calls;
- We should make the Shibboleth plugin (SSO) configurable (not CERN-only);
Change History (12)
comment:1 Changed 3 years ago by arescope
- Owner set to arescope
- Status changed from new to assigned
comment:2 Changed 3 years ago by pferreir
comment:3 Changed 3 years ago by arescope
- Status changed from assigned to awaiting_merge
comment:4 Changed 3 years ago by jbenito
- Milestone changed from v1.0 to v1.1
comment:5 Changed 3 years ago by jbenito
- Status changed from awaiting_merge to merging
comment:6 Changed 2 years ago by jbenito
- Milestone changed from v1.1 to v1.2
comment:7 Changed 2 years ago by jbenito
- Status changed from merging to assigned
comment:8 Changed 2 years ago by jbenito
- Owner changed from arescope to arescepe
- Priority changed from normal to critical
- Add cache to LDAP/Soap calls (especially to check if a user belongs to an egroup).
comment:9 Changed 2 years ago by arescope
- Owner changed from arescepe to arescope
comment:10 Changed 2 years ago by arescope
- Status changed from assigned to awaiting_merge
comment:11 Changed 2 years ago by jbenito
- Status changed from awaiting_merge to merging
comment:12 Changed 2 years ago by jbenito
- Resolution set to fixed
- Status changed from merging to closed
Note: See
TracTickets for help on using
tickets.
Also, find a way to let server admins configure each authenticator's name (or something similar), since "LDAP", etc... is probably not the most user-friendly term.