Re: Authentication in fedpkg

[Kevin Fenzi]

On 7/31/19 12:16 PM, Björn Persson wrote:
>  Fabio Valentini wrote:
> > You can add your "kerberos account" to GNOME online accounts once, and
> > it will automatically renew tickets for you.
> > This way you'll never have to type your FAS password (or run kinit)
> > for this again.
>  
>  First, I don't use Gnome 3 because a software engineer's workstation has
>  other needs than a hand-held Facebook terminal. 
Did you really have to include this? A simple 'I'm sorry, I don't use
Gnome' would have been fine...
>  
>  Second, As I understand what I've been told about Gnome Online Accounts,
>  it would keep me constantly logged in to Fedora servers as long as I'm
>  logged in to my workstation. That's appropriate for a corporate network
>  or a university campus, which I suppose is what Kerberos is designed
>  for. It's not appropriate for a project that I sometimes contribute to
>  when I have time and when something needs doing.
>  
>  Fedora needs an authentication method that authenticates on demand, not
>  proactively, using a keyring that isn't tied to a single desktop. 
Things are moving (all be it slowly) toward OIDC.

Sorry they are all over the place right now...

kevin