Re: [rt.debian.org #8293] Please install libapache2-mod-auth-openidc on wuiet and enable the module
On 23.05.20 20:58, Adam D. Barratt via RT wrote:
> On Sat May 23 08:37:40 2020, pkern wrote:
>> I would like to test converting auth.buildd.d.o to OpenID Connect. It
>> looks like converting to, say, Flask would depend on a Python module
>> that is not in Debian - so the libapache2-mod-auth-openidc module
>> looks like an easy choice assuming that it actually forwards enough
>> information in headers. The documentation isn't great, but I'd like to
>> experiment a bit with it. Could you please install and a2enmod it?
>
> Pre-emptively added to the metapackage, so:
>
> Setting up libcjose0 (0.6.1+dfsg1-1) ...
> Setting up libhiredis0.14:amd64 (0.14.0-3) ...
> Setting up libapache2-mod-auth-openidc (2.3.10.2-1) ...
> apache2_invoke: Enable module auth_openidc
> Setting up debian.org-buildd.debian.org (69~20200523T184958.1) ...
>
>> I might end up trying it out on buildd.d.o instead, to avoid the
>> client certificate requirement.
>
> Sounds interesting. (Most things that aren't client certs do, tbh :-p)
Thanks a lot for the swift action. This was surprisingly easy and it
looks like https://buildd.debian.org/auth/giveback.cgi DTRT. Obviously
that makes using the URL from the console harder but I think the future
might be a more sensible web interface in that case.
Kind regards
Philipp Kern
Reply to: