New Fedora openid provider (fas-openid) in service

Adam Williamson awilliam at redhat.com
Thu Mar 7 03:22:00 UTC 2013


On 06/03/13 06:24 AM, Jaroslav Reznik wrote:
> ----- Original Message -----
>> On 05/03/13 10:39 PM, Kurt Seifried wrote:
>>> can I use my existing openid? kurt.seifried.org
>>> <http://kurt.seifried.org>.
>>
>> That's not really a question that makes sense. Fedora runs an OpenID
>> provider which gives you an OpenID associated with your 'Fedora
>> identity' - ultimately, it's backed by your FAS account. Your own
>> OpenID
>> is a completely different identity. The idea of 'using' your
>> 'existing'
>> OpenID with Fedora's OpenID provider is just not an idea that is
>> compatible with how OpenID works.
>
> A lot of OpenID aware sites offers you possibility to bind your
> OpenID with the local account. And yes, sometimes it leads to
> strange results (based on how bad you implemented it). Last
> time I tried it with one local e-shop I ended in some account
> limbo ;-)

Sure, but that's not at all the same thing as 'using' an OpenID with 
*another* OpenID. That's not a concept that makes any sense. Linking an 
OpenID with an account for some service makes perfect sense; it's really 
just saying 'I declare that this OpenID should be able to authenticate 
to this account'. It would be a Possible Thing for Fedora to say 'you 
can log in to Fedora services using third-party OpenIDs'. We don't do 
that now, but we could. But there's no way we could say 'you can use 
your external OpenID with your Fedora OpenID'. It's like when you try to 
use the rubber duck with the chewing gum in an adventure game, or 
something. The protagonist will just look at you funny and pass a 
sarcastic remark. ;)

(Random thought: Wordpress both acts as an OpenID provider and allows 
you to log in via OpenID. I have not yet been brave enough to see what 
happens if I try to log in to my blog using the OpenID that it provides 
for the admin account. I suspect the answer may be 'The Singularity'...:>)
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora
http://www.happyassassin.net


More information about the devel mailing list