IRC Log for #openid on 2008-02-07
Timestamps are in UTC.
- [00:02:38] * rebel_leader (n=Horst@X70f6.x.pppool.de) Quit (Client Quit)
- [00:37:02] * shigeta (n=shigeta@124.32.114.226) has joined #openid
- [00:44:21] * tjohns (n=tjohns@cpe-76-170-58-80.socal.res.rr.com) has joined #openid
- [00:52:49] * danbri (n=danbri@unaffiliated/danbri) has joined #openid
- [00:54:33] * michelp (n=michelp@64.122.195.246) has joined #openid
- [01:04:05] <donomo>
lots of people, no time to attend
- [01:04:19] <donomo>
sessions during the day, sponsored parties at night
- [01:39:50] <kryptos23>
Good morning
- [01:40:19] <kryptos23>
Is there any paper that describes the architecture of openID ?could someone plz point me to a link
- [01:42:14] * danbri (n=danbri@unaffiliated/danbri) Quit ()
- [01:45:53] <tjohns>
kryptos23: http://doi.acm.org/10.1145/1179529.1179532
- [01:47:24] <tjohns>
That's the best article I've found explaining the architecture behind OpenID. Unfortunately, you'll need to have an ACM account (or have access to an account through your university/work) to read it.
- [02:00:48] * kryptos23_ (n=kryptos@59.92.67.208) has joined #openid
- [02:13:35] <kryptos23_>
thank you tjohns
- [02:16:26] * kryptos23 (n=kryptos@freenet/developer/kryptos) Quit (Read error: 110 (Connection timed out))
- [02:18:34] * rorek (n=rorek@c-71-236-228-127.hsd1.or.comcast.net) Quit (Remote closed the connection)
- [02:34:28] * kryptos23_ is now known as kryptos23
- [02:38:08] * SvenDowideit__ (n=SvenDowi@203-214-144-4.perm.iinet.net.au) has joined #openid
- [02:52:51] * stub (n=stub@canonical/launchpad/stub) has joined #openid
- [03:02:06] * SvenDowideit_ (n=SvenDowi@twiki/developer/SvenDowideit) Quit (Read error: 101 (Network is unreachable))
- [03:23:43] * tjohns (n=tjohns@cpe-76-170-58-80.socal.res.rr.com) Quit ()
- [03:28:13] * tjohns (n=tjohns@cpe-76-170-58-80.socal.res.rr.com) has joined #openid
- [03:34:22] * michelp (n=michelp@64.122.195.246) Quit (Remote closed the connection)
- [03:56:28] * stu1 (n=stub@ppp-58-8-6-69.revip2.asianet.co.th) has joined #openid
- [03:56:28] * stub (n=stub@canonical/launchpad/stub) Quit (Nick collision from services.)
- [03:56:40] * stu1 is now known as stub
- [04:41:45] * stub (n=stub@canonical/launchpad/stub) Quit (Connection timed out)
- [05:22:46] * danbri (n=danbri@c-67-188-40-44.hsd1.ca.comcast.net) has joined #openid
- [05:42:31] * kjetil_ (n=kjetil@cm-84.208.172.230.getinternet.no) has joined #openid
- [05:44:13] * SvenDowideit_ (n=SvenDowi@twiki/developer/SvenDowideit) has joined #openid
- [05:59:41] * SvenDowideit (n=SvenDowi@twiki/developer/SvenDowideit) has joined #openid
- [06:00:49] * SvenDowideit__ (n=SvenDowi@203-214-144-4.perm.iinet.net.au) Quit (Read error: 101 (Network is unreachable))
- [06:09:33] * KjetilK (n=kjetil@cm-84.208.172.230.getinternet.no) Quit (Read error: 110 (Connection timed out))
- [06:17:32] * slango (n=nsloan@unaffiliated/iamethos) has joined #openid
- [06:17:34] <slango>
hello
- [06:17:46] * SvenDowideit_ (n=SvenDowi@twiki/developer/SvenDowideit) Quit (Read error: 101 (Network is unreachable))
- [06:32:26] * tjohns (n=tjohns@cpe-76-170-58-80.socal.res.rr.com) Quit ()
- [06:37:40] * slango (n=nsloan@unaffiliated/iamethos) has left #openid
- [07:20:38] * polyonymous (n=hacker@pD9538984.dip0.t-ipconnect.de) Quit (Read error: 110 (Connection timed out))
- [07:23:28] * polyonymous (n=hacker@pD953AB11.dip0.t-ipconnect.de) has joined #openid
- [07:51:15] * SvenDowideit_ (n=SvenDowi@twiki/developer/SvenDowideit) has joined #openid
- [08:09:22] * SvenDowideit (n=SvenDowi@twiki/developer/SvenDowideit) Quit (Read error: 101 (Network is unreachable))
- [08:18:54] * stub (n=stub@ppp-58-8-6-69.revip2.asianet.co.th) has joined #openid
- [08:37:48] * a9913 (n=a9913@unaffiliated/a9913) has joined #openid
- [08:45:20] * SvenDowideit__ (n=SvenDowi@203-158-44-12.dyn.iinet.net.au) has joined #openid
- [08:48:50] * a9913 (n=a9913@unaffiliated/a9913) Quit ("Leaving")
- [08:55:28] * poonam (n=poonam@122.169.41.175) has joined #openid
- [08:55:46] <poonam>
Hi all
- [08:56:18] <poonam>
can anybody tell me how to use openidin drupal
- [08:56:37] <poonam>
I ve installed openid plugin in moodle
- [08:57:27] <poonam>
I can login moodle using openid
- [08:59:43] <poonam>
but i am not getting how to update that
- [09:00:24] <poonam>
i mean after login , on server side i get Nickname,email,country
- [09:00:37] <poonam>
what if I want to add role id
- [09:02:08] * SvenDowideit_ (n=SvenDowi@twiki/developer/SvenDowideit) Quit (Read error: 101 (Network is unreachable))
- [09:05:19] * kanhaiya_kk (n=kanhaiya@freemap.in) has joined #openid
- [09:05:26] <kanhaiya_kk>
poonam: hi
- [09:05:44] * kanhaiya_kk (n=kanhaiya@freemap.in) has left #openid
- [09:12:44] * poonam (n=poonam@122.169.41.175) has left #openid
- [09:13:12] * poonam (n=poonam@122.169.41.175) has joined #openid
- [09:45:47] * isak (n=isak@20.31.227.87.static.dre.siw.siwnet.net) Quit (Remote closed the connection)
- [09:46:13] * isak (n=isak@20.31.227.87.static.dre.siw.siwnet.net) has joined #openid
- [09:47:23] * imajes (n=james@87-194-107-123.bethere.co.uk) Quit ()
- [10:10:21] * danbri (n=danbri@unaffiliated/danbri) Quit ()
- [10:11:36] * hillsy (i=shaunh@npfit2.dh.bytemark.co.uk) has joined #openid
- [10:30:05] * imajes (n=james@87-194-107-123.bethere.co.uk) has joined #openid
- [10:43:09] * a9913 (n=a9913@unaffiliated/a9913) has joined #openid
- [11:09:28] * appcine (n=gs@c213-89-160-188.bredband.comhem.se) Quit (Read error: 104 (Connection reset by peer))
- [11:27:50] * imajes (n=james@87-194-107-123.bethere.co.uk) Quit ()
- [11:29:47] * a9913_ (n=a9913@unaffiliated/a9913) has joined #openid
- [11:33:32] * shigeta (n=shigeta@124.32.114.226) Quit ("Leaving...")
- [11:46:05] * a9913__ (n=a9913@unaffiliated/a9913) has joined #openid
- [11:46:32] * a9913 (n=a9913@unaffiliated/a9913) Quit (Read error: 113 (No route to host))
- [12:03:22] * a9913_ (n=a9913@unaffiliated/a9913) Quit (Read error: 113 (No route to host))
- [12:05:10] * _keturn (n=acapnoti@pdpc/supporter/sustaining/keturn) Quit (Read error: 110 (Connection timed out))
- [12:06:44] * jrbot (n=supybot@c-71-236-228-127.hsd1.or.comcast.net) Quit (Read error: 110 (Connection timed out))
- [12:09:35] * a9913__ (n=a9913@unaffiliated/a9913) Quit ("Leaving")
- [12:32:37] * imajes (n=james@82.211.85.236) has joined #openid
- [12:33:17] * Balder_tc (i=Balder@129.177.48.52) has joined #openid
- [12:37:11] <Balder_tc>
hey.. i was wondering if openid has any "single logout" functionality, or wether this is planned to be implemented in the future?
- [12:40:06] * _keturn (n=acapnoti@pdpc/supporter/sustaining/keturn) has joined #openid
- [12:40:48] * jrbot (n=supybot@c-71-236-228-127.hsd1.or.comcast.net) has joined #openid
- [13:20:49] * forsaken (n=eric@c-71-62-234-185.hsd1.va.comcast.net) Quit (Read error: 110 (Connection timed out))
- [13:32:57] * poonam (n=poonam@122.169.41.175) Quit (Remote closed the connection)
- [13:38:35] * stub (n=stub@canonical/launchpad/stub) Quit (Read error: 113 (No route to host))
- [13:51:05] * Balder_tc (i=Balder@129.177.48.52) Quit ()
- [14:19:27] * dhofstet (n=dho@212-41-98-70.adsl.solnet.ch) has joined #openid
- [14:24:43] * dhofstet (n=dho@212-41-98-70.adsl.solnet.ch) Quit (Remote closed the connection)
- [14:49:51] * Makenshi (n=chaz@pix.vendia-kollegiet.dk) has joined #openid
- [14:52:17] * shills (i=shaunh@npfit2.dh.bytemark.co.uk) has joined #openid
- [14:52:23] * hillsy (i=shaunh@npfit2.dh.bytemark.co.uk) Quit (Remote closed the connection)
- [15:02:40] * henshaw (n=henshaw@host86-133-97-229.range86-133.btcentralplus.com) has joined #openid
- [15:05:53] <Makenshi>
Now I'm all moved and stuff I should start work on that list
- [15:08:54] <henshaw>
hi, I'm trying to set myself an openid with myopenid and have some questions about attribute exchange:
- [15:10:07] <henshaw>
what I want is to have a set of attributes that are sent to 3rd party sites when I join with my openid and a sparser set of attributes that live on my openid page.
- [15:11:40] <henshaw>
is there a way to do that? er, I've just realised that having a private persona that's used for attribute exchange does exactly this. I was thinking that I wanted per-attribute permission, but maybe this is a better idea.
- [15:12:31] <henshaw>
it wasn't clear to me what personas were supposed to be for, is this my fault or is the documentation not explicit enough?
- [15:35:22] * kjetil__ (n=kjetil@cm-84.208.172.230.getinternet.no) has joined #openid
- [15:43:29] * kjetil_ (n=kjetil@cm-84.208.172.230.getinternet.no) Quit (Read error: 110 (Connection timed out))
- [16:22:45] * a9913 (n=a9913@unaffiliated/a9913) has joined #openid
- [16:46:13] * harningt (n=harningt@149.164.193.61) has joined #openid
- [16:46:42] <harningt>
*
- [16:46:42] <harningt>
I have an OpenID provider setup and often run into bad signature errors while using a modified version of the example server. Are there any suggestions on how to fix this? Any ideas on how to simply 'debug' it?
- [16:46:42] <harningt>
*
- [16:46:42] <harningt>
I have the 'buggy' GMP flag set... if that's set and its not buggy... would that also cause problems... or just slow things down?
- [16:47:18] <harningt>
The problem is like this: Log into OpenID consumer site, Bounces to auth to my openid provider, On return I get the signature error
- [16:47:18] <harningt>
At this point, the error is always repeatable for that specific site... so I assume the association got botched...
- [16:47:18] <harningt>
If this is the case, is there any way for my server to detect such a 'botching' and force a renegotiation?
- [16:47:18] <harningt>
I'd strongly rather that the association went fine.. but it seems that this won't always work....
- [16:50:03] * henshaw (n=henshaw@host86-133-97-229.range86-133.btcentralplus.com) Quit (Remote closed the connection)
- [16:50:32] <keturn>
is there any systematic difference between the associations that work and those that don't? a different length, or certain characters?
- [16:52:29] <harningt>
Hrm...
- [16:53:48] <harningt>
not that I can really tell.....
- [16:54:10] <harningt>
well... i cant really separate things out... i guess taking the sqlite database that I captured from a bad setup may reveal something....
- [16:56:05] <harningt>
hrm.. did a length(secret) and am coming up w/ values from 11-18
- [16:56:07] <harningt>
.......
- [16:57:02] <harningt>
I've since moved the server to using Memcached (hoping to help mitigate the issue...)
- [16:58:48] * joevandyk (n=joe@pool-71-188-252-152.sttlwa.fios.verizon.net) has joined #openid
- [17:01:28] * darix- (i=darix@alpha049.server4you.de) has joined #openid
- [17:07:16] * darix (i=darix@irssi/staff/darix) Quit (Read error: 110 (Connection timed out))
- [17:07:16] * darix- is now known as darix
- [17:11:58] * a9913 (n=a9913@unaffiliated/a9913) Quit (Read error: 113 (No route to host))
- [17:24:14] * michelp (n=michelp@64.122.195.246) has joined #openid
- [17:44:09] <harningt>
Note that even though I changed to the Memcached backend.. i ran into the same issue.........
- [17:50:18] * stub (n=stub@ppp-58-8-6-69.revip2.asianet.co.th) has joined #openid
- [18:03:17] <joevandyk>
i tried making a yahoo openid, couldn't sign in to the first four openid sites i tried.
- [18:09:10] * pvandewyngaerde (n=pvandewy@25.91-64-87.adsl-dyn.isp.belgacom.be) has joined #openid
- [18:10:58] * shills (i=shaunh@npfit2.dh.bytemark.co.uk) Quit ("Leaving")
- [18:16:09] * pvandewy1gaerde (n=pvandewy@25.91-64-87.adsl-dyn.isp.belgacom.be) has joined #openid
- [18:16:31] * pvandewy1gaerde (n=pvandewy@25.91-64-87.adsl-dyn.isp.belgacom.be) Quit (Client Quit)
- [18:19:25] * kryptos23 (n=kryptos@freenet/developer/kryptos) Quit ("ChatZilla 0.9.79 [Firefox 2.0.0.11/2007112718]")
- [18:21:53] <_keturn>
joevandyk: it only works with OpenID 2.0 enabled sites. This is currently a minority of the deployed sites out there.
- [18:22:20] <joevandyk>
_keturn: thought it was something like that.
- [18:29:18] * pvandewyngaerde (n=pvandewy@25.91-64-87.adsl-dyn.isp.belgacom.be) Quit (Remote closed the connection)
- [18:32:44] * gazz_ (n=gaz@gateb.mh.bbc.co.uk) has joined #openid
- [18:32:47] <gazz_>
aha
- [18:33:33] <gazz_>
I have a question...regarding the Foundation Board. Is there anyone specific to whom I should speak?
- [18:38:51] <_keturn>
I don't believe any of the board members are in this channel. board@openid.net is a mailing list where you can reach the board.
- [18:41:34] <gazz_>
cool.
- [18:41:39] <gazz_>
ta
- [18:47:10] * MrTopf (i=hidden-u@oecher.info) has joined #openid
- [19:08:08] * stub (n=stub@canonical/launchpad/stub) has left #openid
- [19:19:03] <GabeW>
hah
- [19:19:10] <GabeW>
board members are not here
- [19:19:23] <GabeW>
though we could probably get them here if there was a pressing interest/need
- [19:24:39] * imajes (n=james@82.211.85.236) Quit (Connection timed out)
- [20:30:40] * imajes (n=james@87-194-107-123.bethere.co.uk) has joined #openid
- [20:53:08] * imajes_ (n=james@87-194-107-123.bethere.co.uk) has joined #openid
- [21:00:28] * imajes (n=james@87-194-107-123.bethere.co.uk) Quit (Connection timed out)
- [21:05:35] * imajes_ (n=james@87-194-107-123.bethere.co.uk) Quit ()
- [21:12:33] <donomo>
interesting that the yahoo username is not recommended to be included in the yahoo openid
- [21:12:45] <donomo>
for good reason, it'd be easy to compute the email address
- [21:13:41] <donomo>
the yahoo generated one is AWFUL
- [21:13:52] <donomo>
https://me.yahoo.com/a/jW_FRkdsgNkXUlCwql4ZccJddExzff--
- [21:14:11] * michelp (n=michelp@64.122.195.246) Quit (Remote closed the connection)
- [21:14:13] <donomo>
im really supposed to type that into openid sites??
- [21:16:16] <Makenshi>
What is the problem with knowing someone's email address?
- [21:17:14] * donomo thinks of a certain packaged meat-product
- [21:18:04] <Makenshi>
Spam? That's what spam-filters are for
- [21:18:33] <donomo>
if they worked 100%, i would agree with you.
- [21:18:39] <_keturn>
donomo: no, you're supposed to click the button that says "Y!" on it. Or, if they are so unsophisticated as to not put yahoo advertising on their login page, you can type "yahoo.com"
- [21:19:41] <Makenshi>
I get more spam in my mailbox than i do in my email account
- [21:19:45] <_keturn>
spam, or just unwelcome attention in general. Not everyone wants their contact information to be publically accessible.
- [21:19:48] <Makenshi>
And it's harder to deal with than simply clicking "delete"
- [21:20:14] <Makenshi>
So what, you can just delete it
- [21:20:40] <Makenshi>
No matter how careful you are, someone who really wants it could find it out
- [21:20:48] <donomo>
_keturn: oh right. thats also curious. if im already logged into yahoo, an openid of yahoo.com will do the trick since my cookie will identify me to openid.yahoo.com
- [21:21:56] <donomo>
ha. it also works with 'myopenid.com'
- [21:22:08] <donomo>
wow thats a significant change to the way openid is normally presented.
- [21:22:34] <donomo>
the website only needs to know the url of your provider, not your openid url.
- [21:24:21] * donomo boggles
- [21:24:26] <donomo>
thats a big deal
- [21:24:34] <donomo>
you dont have to remember your own openid url anymore
- [21:25:00] <Makenshi>
The one you use for everything.. yeah i can imagine that is difficult to remember :p
- [21:25:47] <PibbRelay>
<cygnus> Yeah, that's an OpenID 2 feature and as such will only work with OpenID2-compliant providers and RPs.
- [21:26:04] <donomo>
makenshi: my grandma can remember yahoo.com. i doubt she'd remember http://openid.yahoo.com/grannie123
- [21:26:22] <PibbRelay>
<cygnus> and it will be difficult, Makenshi, if it's not the one you use for everything if you use different URLs for different purposes
- [21:26:34] <PibbRelay>
<cygnus> or if the one you *do* want to use is the obfuscated type of identifier.
- [21:26:56] <donomo>
dang. im suprized this wasnt advertised more when 2.0 was finalized
- [21:27:07] <donomo>
thats a big freaking deal as far as usability
- [21:27:39] <Makenshi>
It would be more usable if that entire step was removed
- [21:27:44] <PibbRelay>
<cygnus> unfortunately the finalization per se came far after the feature was added
- [21:28:11] <Makenshi>
I.e., no logon step needed
- [21:28:15] <_keturn>
but, yes, that is perhaps the most significant feature OpenID 2.0 offers
- [21:28:32] <donomo>
Makenshi: i agree. a plugin that could sense the openid login and just log you in. 'seatbelt' will populate the fields but not hit submit.
- [21:29:15] <donomo>
i can stop telling people to remember some long-ish url and say sign up with yahoo (or whoever) and at the openid prompt, say yahoo.com.
- [21:29:30] <donomo>
im repeating myself. sorry.
- [21:30:54] * randomeis (i=d8ba9a75@gateway/web/ajax/mibbit.com/x-15ff20a11f3c5362) has joined #openid
- [21:30:59] * Tobsn (n=luxus@freshmeat.de) Quit (SendQ exceeded)
- [21:31:02] <donomo>
thats freaking cool!!! :)
- [21:31:16] * Tobsn (n=luxus@freshmeat.de) has joined #openid
- [21:32:01] <randomeis>
so with all these sites joining open id, i'm now left with multiple open id idents, is there any way for me to consolidate them?
- [21:33:03] <harningt>
creating a delegation is probably the best route
- [21:33:15] <Makenshi>
randomeis: You should nag the providers to become consumers as well
- [21:33:36] <Makenshi>
The more people that demand it, the more likely it will happen
- [21:33:37] <harningt>
that way you can handle the fact that some OpenID providers could stop providing at some point... you don't want your accounts hanging by their whim
- [21:34:28] <Makenshi>
I use the delegator at www.own-id.com for mine, so far so good :)
- [21:34:43] * kjetil__ is now known as KjetilK
- [21:35:27] <_keturn>
randomeis: not really. If you get a chance to see Joseph Smarr or Chris Messina talk about friends list portability, they have some very practical suggestions about how we can help applications do that sort of consolidation,
- [21:36:06] <_keturn>
but it's not something that's currently in practice.
- [21:36:25] <Makenshi>
The next useful thing will be a way to provide authorized access to one's foaf data to certain applications
- [21:38:04] <randomeis>
so i point the seperate idents to a subdomain of my own site?
- [21:39:03] <Makenshi>
randomeis: you use id.yourdomain as your openid url, and refer it to your chosen openid provider for authentication
- [21:39:52] <randomeis>
i won't get any message saying that it is already in use after my first one?
- [21:40:11] <Makenshi>
Not sure what you mean
- [21:41:38] <randomeis>
would i tie say my LJ, Yahoo, and Google OpenID idents to it?
- [21:41:56] * imajes (n=james@87-194-107-123.bethere.co.uk) has joined #openid
- [21:41:57] <Makenshi>
Ah, no, just one
- [21:42:08] <Makenshi>
The others are irrelevant
- [21:43:31] <randomeis>
so even though they are OpenID Idents, they are kind of just the same as they were before when they were not?
- [21:43:48] <randomeis>
since they were created seperately
- [21:44:32] <Makenshi>
Yes.. the point of openid is generally to have one openid that you use everywhere
- [21:44:48] <Makenshi>
having an openid account on every site would be the same as having a login on every site
- [21:46:06] <randomeis>
so if i made a new openID Ident, I could use it on all of the sites?
- [21:46:37] <Makenshi>
You can use it on any site that supports OpenID as a consumer (or "relying party")
- [21:47:02] <Makenshi>
Unfortunately not all providers do that yet, and some that do treat openid users as second class (looking at you, livejournal)
- [21:47:55] <randomeis>
in a perfect world is that what OpenID is trying to do?
- [21:48:25] <Makenshi>
randomeis: right :)
- [21:48:55] <donomo>
i look forward to when one of the sites i actually use daily adopts openid
- [21:49:04] <donomo>
can you hear me kevin rose?
- [21:51:45] <Makenshi>
Amen.. He said they would support it on digg this time last year
- [21:52:44] * MrTopf (i=hidden-u@oecher.info) Quit ()
- [21:54:49] * ianloic (i=yakk@glub.dreamhostps.com) has joined #openid
- [22:05:19] * randomeis (i=d8ba9a75@gateway/web/ajax/mibbit.com/x-15ff20a11f3c5362) has left #openid
- [23:01:32] * Makenshi (n=chaz@pix.vendia-kollegiet.dk) Quit ("Sleep time")
- [23:01:36] * flaccid (n=flaccid@123-243-80-114.tpgi.com.au) has joined #openid
- [23:09:03] * kylefox (n=kyle@139.142.50.169) has joined #openid
- [23:16:05] <kylefox>
Forgive me if this is a dumb question: how does a Relying Party (ex: ma.gnolia) know that I own the URL I specify as my identifier?
- [23:20:08] <_keturn>
it looks up the URL to see what server it says is authoratitive for it, and then it asks the server that question
- [23:25:02] <flaccid>
check out the spec kylefox :)
- [23:25:30] <kylefox>
yeah, i was reading through it... i think the part i wanted said it's "out of the scope of this document"
- [23:25:54] * michelp (n=michelp@64.122.195.246) has joined #openid
- [23:26:02] <kylefox>
But I didn't realize it's up to the Replying Party to "map" an openID to a user in the database
- [23:26:40] <kylefox>
I wondered how ma.gnolia knew to associate my OpenID with my ma.gnolia account -- but after investigating it, apparently I'd set it up previously and forgotten :)
- [23:26:51] <idnar>
heh
- [23:31:10] * ozamosi (n=ozamosi@85.8.1.10.static.se.wasadata.net) has joined #openid
- [23:31:12] * Tobsn (n=luxus@freshmeat.de) has left #openid
- [23:33:56] <flaccid>
um maybe you missed the html and yardis discovery part, kylefox?
- [23:37:10] <flaccid>
the RP just gets back a response from the OP on if the user was authenticated, then the RP can do whatever implementation they want of course
These logs were automatically created by OpenIDlogbot on
chat.freenode.net
using a modified version of the Java IRC LogBot.