tickets #81190
closedChecking access to current openSUSE services once more
Added by elfring over 3 years ago. Updated over 3 years ago.
0%
Description
Hello,
I can login with my credentials for “https://myaccount.suse.com/app/UserHome”.
But I am still missing convenient write access to previous openSUSE services.
I was used to their functionality for a while.
I tried to clarify the situation also according to the topic
“SD-16011: Checking access to migrated openSUSE services” before.
Are there any open issues waiting for corresponding solutions?
“Community Account Migration”
https://idp-portal-info.suse.com/
Regards,
Markus
Admin mailing list -- admin@lists.opensuse.org
To unsubscribe, email admin-leave@lists.opensuse.org
List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette
List Archives: https://lists.opensuse.org/archives/list/admin@lists.opensuse.org
Updated by cboltz over 3 years ago
- Category set to Accounts
- Status changed from New to Feedback
myaccount.suse.com uses the OKTA login
The openSUSE services use the community login (https://idp-portal-info.suse.com/ and https://idp-portal.suse.com/) which is independent of the OKTA login. Ideally you should have migrated your accounts months ago, but you can still try a password reset on idp-portal.suse.com. In worst case, you'll have to create a new account.
(Note: If you have to create a new account using the same mail address, you might have problems to login to the forums. In this case, just tell us, and we'll get it sorted out.)
Since you didn't mention the affected services: which are the services where you can't login?
Updated by elfring over 3 years ago
Ideally you should have migrated your accounts months ago,
Was this a manual action?
I assumed an automatic conversion because of notifications for SUSE account changes.
Since you didn't mention the affected services: which are the services where you can't login?
Examples:
- https://forums.opensuse.org/showthread.php/537521-Determination-of-properties-for-selected-network-ports
- https://build.opensuse.org/project/subprojects/home:elfring:semantic_patching
- https://bugzilla.suse.com/show_bug.cgi?id=1153103
I am still looking for synchronisation possibilities for my information system account.
Regards,
Markus
Updated by cboltz over 3 years ago
The examples you mentioned are all using the community login.
The migration needed manual action (logging in on a migration page and setting a new password), but that is no longer possible.
You can try a password reset on https://idp-portal.suse.com/ but I'm not sure if it works.
If it doesn't work, I'm afraid you'll need to create a new account.
Sidenote: If you create a new account and use the same mail address for it, please tell us (that's needed for the forums login).
Updated by elfring over 3 years ago
You can try a password reset on https://idp-portal.suse.com/ but I'm not sure if it works.
Your feedback might be reasonable.
It seems that I stumble still on understanding challenges for involved changes.
I can not directly see so far if my message (from yesterday) was properly registered
by the information system “redmine” (because it expects a login before further data display).I am also unsure for which account a password reset would be attempted here now.
If it doesn't work, I'm afraid you'll need to create a new account.
Is there a distinction between SUSE and openSUSE capabilities supported?
May an “alias” be defined for any additional user identifications?
Regards,
Markus
Updated by cboltz over 3 years ago
Markus.Elfring@web.de wrote:
- I can not directly see so far if my message (from yesterday) was properly registered by the information system “redmine” (because it expects a login before further data display).
It arrived (you should have received a confirmation mail), and you also found the correct mail address for an additional mail directly to me ;-)
The tickets in redmine are non-public by default (because they can contain personal data etc.), which also means you can't see your own tickets you opened by mail to admin@ (unless you use the mail address of your community account as sender, and have logged in in progress.opensuse.org at least once.)
I can make this ticket public. If you want that, please tell me.
- I am also unsure for which account a password reset would be attempted here now.
idp-portal.suse.com is for the community account (for bugzilla, forums, buildservice etc. - basically *.opensuse.org + and bugzilla which is shared between SUSE and openSUSE)
If it doesn't work, I'm afraid you'll need to create a new account.
Is there a distinction between SUSE and openSUSE capabilities supported?
The community account is just that - a community account.
You might have additional permissions tied to an account in specific systems (for example access to SLE bugs in bugzilla), but that's handled in the individual services, and idp-portal.suse.com doesn't know about these additional permissions.
Updated by elfring over 3 years ago
cboltz wrote:
I can make this ticket public. If you want that, please tell me.
Yes, please.
I assume that more people can benefit from discussed information.
Is there a distinction between SUSE and openSUSE capabilities supported?
The community account is just that - a community account.
I imagine that this detail can become clearer another bit.
- I might have got inappropriate impressions according to (open)SUSE organisation evolution.
- A password reset has succeeded for my “community” account a moment ago.
You might have additional permissions tied to an account in specific systems …
It seems that my view was influenced also by the detail that a repeated login is eventually needed for some information systems now while it was nice and convenient to use a single sign-on configuration for years before.
Updated by cboltz over 3 years ago
- Private changed from Yes to No
elfring wrote:
- I might have got inappropriate impressions according to (open)SUSE organisation evolution.
- A password reset has succeeded for my “community” account a moment ago.
Sounds good :-)
So - can you login to bugzilla etc. again?
You might have additional permissions tied to an account in specific systems …
It seems that my view was influenced also by the detail that a repeated login is eventually needed for some information systems now while it was nice and convenient to use a single sign-on configuration for years before.
The login is handled by multiple separate servers depending on the service you use. You can use the same username and password everywhere, but might need to login multiple times. In worst case, that could be a) bugzilla b) buildservice c) everything behind login2.o.o (wikis, forums etc.) and d) services using openID login (for example weblate).
I know that this can be a bit annoying, but it's not too new - for example, the buildservice always needed a separate login.
Updated by elfring over 3 years ago
cboltz wrote:
So - can you login to bugzilla etc. again?
Yes. - I have tried it out once more.
Would you like to add anything to another clarification request for the topic “QT plug-in could not be loaded.” accordingly?
https://bugzilla.opensuse.org/show_bug.cgi?id=1180592
Updated by cboltz over 3 years ago
- Status changed from Feedback to Resolved
I'm glad it works now :-)