On 08/12/2011 07:15 PM, Jan Provazník wrote:
...
So there are two options here:
1) conductor switches to warden - this shouldn't be so difficult as we
can copy from Katello :). Also Omniauth is not packaged in Fedora,
Warden is.
2) both Katello and Conductor switch to Omniauth. I'm not sure if this
is required or optional step, Ken: you suggested switching to Omniauth,
could you please reply with your opinion about warden/omniauth (or point
me to older discussion)?
Jan
Few findings I didn't mention yet:
- warden is in fedora repo, omniauth not
- for using warden in rails app, it's also required warden_rails gem,
this gem is packaged as rpm in katello repository (not in fedora repo)
- only disadvantage of warden I found as far is that it has to handle
password hashing and ldap auth itself, so it means we will have to
copy/duplicate some code (lib/ldap, lib/util/password) and maintain it
on two places, omniauth _maybe_ (didn't check it) has builtin support
for this
Jan