Developer DB, gpg and stuf..
Hi all,
As part of the Developer database project we are going to be having an
email gateway that allows modification of many of the fields based on
signed messages. To test the basic setup of this I have setup an address
called ping@db.debian.org.
If you send a pgp signed email to that address you will receive a response
like I have included below indicating your public ldap record. In future
adresses will be provided to allow you to reset a lost password via pgp
signed email, change some fields and maybe a few other things as they come
up.
How the service works is it accepts the signed message and feeds it
through GPG. GPG then tells it who signed it which is then used to
determine which LDAP record to use. It then connects to the database and
sends the text message back from it. The ping address ignores the content
of the mail, others will require a particular format. The response will be
sent instantly.
New for our PGP type services is a replay cache. Particularly for things
like changing passwords you don't want someone re-sending your messages so
the server protects against this. It should never accept the same message
twice - please test this :> Part of that also means your clock will have
to be accurate to at least one week.
Since it uses GPG it will accept basically any signature you throw at it,
including the DSA ones (a GPG key).
You can email me if there is some [important] incorrect information I'll
update things by hand for the moment.
Thanks,
Jason
---------------------------------
Hello Jason Gunthorpe <jgg@debian.org>!
Here is a list of all the public fields associated with your LDAP entry:
c: ca
cn: Jason
createtimestamp: 19990425035220Z
creatorsname: uid=admin2,ou=users,dc=debian,dc=org
emailforward: jgg@ualberta.ca
gecos: Jason Gunthorpe,,,,
gidnumber: 800
homedirectory: /debian/home/jgg
ircnick: Culus
keyfingerprint: 64BE1319CCF6D393BF87FF9358A6D4EE
l: Edmonton, Alberta
labeledurl: http://www.debian.org/~jgg
loginshell: /bin/bash
modifiersname: uid=jgg,ou=users,dc=debian,dc=org
modifytimestamp: 19990503040420Z
shadowlastchange: 10568
shadowmax: 99999
shadowmin: 0
sn: Gunthorpe
supplementarygid: adm
supplementarygid: distmnt
uid: jgg
uidnumber: 1083
Please email admin@db.debian.org if you have any questions.
Reply to: