[Insight] [IMPORTANT] Staging on insight.stg.fp.o now uses REAL FAS

[Paul W. Frields]

Hi all,

According to Toshio, we are OK to start authenticating on the staging
instance (https://insight.stg.fedoraproject.org) to real FAS.  I've
made the appropriate changes:

* Pointed the AuthFAS module at admin.fp.o/accounts
  (In staging, there is magic that makes this actually resolve to
  admin.stg.fp.o -- so when we move to production it will simply keep
  working properly using the real admin.fp.o)

* Turned OFF the "trust invalid SSL certs" option.
  This means if something goes wrong with the SSL certs on the FAS
  server, we'll know about it.  Of course, many other apps will make
  sure other people know about it, so this isn't a problem, just
  providing this info for the sake of being complete. :-)

So -- to reiterate, when you login to insight.stg.fp.o, you will use
your REAL FAS account information, and it should be secured via HTTPS
to the best of everyone's knowledge.

The publictest09 server continues to use FakeFAS.  Our development
there will most likely be piecemeal now, and we'll discuss that next
week at our regular meeting.


-- 
Paul W. Frields                                http://paul.frields.org/
  gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233  5906 ACDB C937 BD11 3717
  http://redhat.com/   -  -  -  -   http://pfrields.fedorapeople.org/
Red Hat Summit/JBossWorld -- Register now!  http://.theredhatsummit.com

[Pascal Calarco]

Thanks for the information, Paul!

Just FYI, I don't have privs to create content on staging; I did check to make sure
that I am a member of cmseditors in the production Fedora Account System.  When you get a
chance could you add me to the appropriate role on staging?  Thanks!

  - pascal
________________________________________
From: logistics-bounces(a)lists.fedoraproject.org
[logistics-bounces(a)lists.fedoraproject.org] On Behalf Of Paul W. Frields
[stickster(a)gmail.com]
Sent: Friday, April 01, 2011 8:57 AM
To: Fedora Logistics List
Cc: Fedora Infrastructure
Subject: [Insight] [IMPORTANT] Staging on insight.stg.fp.o now uses REAL FAS

Hi all,

According to Toshio, we are OK to start authenticating on the staging
instance (https://insight.stg.fedoraproject.org) to real FAS.  I've
made the appropriate changes:

* Pointed the AuthFAS module at admin.fp.o/accounts
  (In staging, there is magic that makes this actually resolve to
  admin.stg.fp.o -- so when we move to production it will simply keep
  working properly using the real admin.fp.o)

* Turned OFF the "trust invalid SSL certs" option.
  This means if something goes wrong with the SSL certs on the FAS
  server, we'll know about it.  Of course, many other apps will make
  sure other people know about it, so this isn't a problem, just
  providing this info for the sake of being complete. :-)

So -- to reiterate, when you login to insight.stg.fp.o, you will use
your REAL FAS account information, and it should be secured via HTTPS
to the best of everyone's knowledge.

The publictest09 server continues to use FakeFAS.  Our development
there will most likely be piecemeal now, and we'll discuss that next
week at our regular meeting.


--
Paul W. Frields                                http://paul.frields.org/
  gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233  5906 ACDB C937 BD11 3717
  http://redhat.com/   -  -  -  -   http://pfrields.fedorapeople.org/
Red Hat Summit/JBossWorld -- Register now!  http://.theredhatsummit.com
_______________________________________________
logistics mailing list
logistics(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/logistics

[Paul W. Frields]

On Fri, Apr 01, 2011 at 09:46:42AM -0400, Pascal Calarco wrote:
>  Thanks for the information, Paul!
>  
>  Just FYI, I don't have privs to create content on staging; I did
>  check to make sure that I am a member of cmseditors in the
>  production Fedora Account System.  When you get a chance could you
>  add me to the appropriate role on staging?  Thanks! 
Certainly.  That would probably mean you haven't applied or been added
to the 'cmseditors' group in the real FAS, although you might have
been in the fake FAS instance.  I can take care of that.

-- 
Paul W. Frields                                http://paul.frields.org/
  gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233  5906 ACDB C937 BD11 3717
  http://redhat.com/   -  -  -  -   http://pfrields.fedorapeople.org/
Red Hat Summit/JBossWorld -- Register now!  http://.theredhatsummit.com