| *** zenkuro has quit IRC | 01:24 | |
| *** apevec has joined #softwarefactory | 06:20 | |
| *** jpena|off is now known as jpena | 07:49 | |
| *** sshnaidm|afk is now known as sshnaidm | 08:04 | |
| *** harrymichal has joined #softwarefactory | 08:19 | |
| *** harrymichal has quit IRC | 08:43 | |
| *** harrymichal has joined #softwarefactory | 08:44 | |
| *** zenkuro has joined #softwarefactory | 09:08 | |
| sfbender | Merged software-factory/shake-factory master: Add pythonDocAction to generate pdocumentation https://softwarefactory-project.io/r/19500 | 09:14 |
|---|---|---|
| *** harrymichal has quit IRC | 09:34 | |
| *** jpena is now known as jpena|lunch | 11:35 | |
| *** brendangalloway has joined #softwarefactory | 11:56 | |
| brendangalloway | Hello - we had to change the ldap server that softwarefactory authenticates against. We updated the sfconfig.yaml to point to the new server and ran sfconfig --skip-install. The settings update appears to have worked correctly, but now when we attempt to log in we get " Error: this username is already registered with a different Identity | 11:59 |
| brendangalloway | Provider". Is there some way to migrate the existing users to authenticate against the new server? | 11:59 |
| *** rfolco|ruck has joined #softwarefactory | 12:03 | |
| tristanC | brendangalloway: i think you would need to do a manual database modification to update user's idp. mhu do you recall if we already did such a thing? | 12:09 |
| *** lpeens_netronome has joined #softwarefactory | 12:13 | |
| tristanC | mhu: it seems like username <-> idp relation is defined in the cauth.auth_mapping tables, would an update to set the new idp domain enough to migrate users from one idp to another? | 12:18 |
| *** brendangalloway has quit IRC | 12:18 | |
| mhu | tristanC, what's the use case? I think you'd also have to ensure the uid of the user in the new idp remains the same | 12:20 |
| mhu | this table IIRC is used to manage user changes within sf, like using a different email that the github one for example | 12:21 |
| mhu | so we need a reference to the uid of the user on the idp | 12:21 |
| tristanC | mhu: it's for brendangalloway, it seems like he changed the ldap server and that resulted in loggin to be blocked because of the `this username is already registered with a different idp` error | 12:24 |
| tristanC | mhu: i guess the idp is the same, it's just a different server? | 12:24 |
| *** sshnaidm has quit IRC | 12:25 | |
| mhu | tristanC, right, I didn't see the history | 12:26 |
| mhu | so yeah, if it were me I'd get in the db and alter the affected columns | 12:27 |
| mhu | but that's pretty hacky | 12:27 |
| tristanC | mhu: what other columns would be affected? | 12:28 |
| mhu | column, sorry | 12:28 |
| tristanC | mhu: alright, lets let him know when he comes back | 12:30 |
| mhu | I'm checking cauth to confirm | 12:30 |
| mhu | domain should be set to the "host" value in the LDAP config section | 12:32 |
| mhu | provided, of course, that the users have kept the same ldap uids | 12:32 |
| tristanC | mhu: i guess the core issue is that we use the ldap url as an id instead of a generic name | 12:32 |
| mhu | in case you'd want to authenticate against several LDAP servers | 12:33 |
| mhu | if the uids have changed, they need to match the new dn of the user | 12:33 |
| *** jpena|lunch is now known as jpena | 12:36 | |
| *** sshnaidm has joined #softwarefactory | 12:50 | |
| lpeens_netronome | Hi. Just so there is some closure, I've been working with brendangalloway to fix our cauth issue, updating the idp domain column in the database with the new ldap_url did work for us, thanks for the help. | 13:44 |
| tristanC | lpeens_netronome: thank you for the feedback, glad this fixed your issue :-) | 13:49 |
| *** lpeens_netronome has quit IRC | 13:56 | |
| *** logan- has quit IRC | 14:00 | |
| *** logan_ has joined #softwarefactory | 14:00 | |
| *** logan_ is now known as logan- | 14:00 | |
| *** apevec has quit IRC | 14:12 | |
| *** jpena is now known as jpena|off | 16:56 | |
| *** apevec has joined #softwarefactory | 18:38 | |
| *** apevec has quit IRC | 18:49 | |
| *** rfolco|ruck has quit IRC | 22:51 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!