Keyboard Monkeys Source

03/26/2010

03:15 AM Community-ID Support: RE: Possible security hole in CommunityId + mod_auth_openid?

Confirmed -- I upgraded to 1.2, and the problem appears to be resolved. Thanks!

03/22/2010

01:27 AM Community-ID Support: (RESOLVED) Possible security hole in CommunityId + mod_auth_openid?

Charles Roth, occasional CommunityId documentation helper, here. I am seeing a possible security problem when using CommunityId with the apache module mod_auth_openid (from http://trac.butterfat.net/public/mod_auth_openid). Briefly, one valid ...

02/15/2010

11:39 PM Community-ID Development: RE: Importing users from other applications

So, for example, suppose I want to "import" the authentication credentials for a batch of users, from application X, into C-Id. I'm assuming here that I have set up a C-Id provider that lets me use the _name_.myprovider.com syntax, where "name" i...

11:15 PM Community-ID Development: RE: Importing users from other applications

Bingo! Thanks. To be precise, if my full openid is 'http://roth.myopenidprovider.com/', and my password is 'sunshine', then the hash can be computed in MySQL as: SELECT md5('http://roth.myopenidprovider.com/sunshine'); That's the last bi...

09:39 PM Community-ID Development: Importing users from other applications

I am in the process of switching a large (> 10,000 users) application from its iternal authentication system, to OpenId/C-Id. I'd like to have a nice, simple, programmatic way to create users in C-Id. In fact, tinkering with the MySQL tables, ...

09/07/2009

04:03 PM Community-ID Bug #196 (Closed): installation documentation refers to wrong config file

Thanks. I have corrected this in the install documentation. I'll keep my eye open for other small corrections. A pleasure to be of assistance.

04:00 PM Community-ID Wiki edit: How_to_install_Community-ID_under_Linux (#23)

04:08 AM Community-ID Bug #196: installation documentation refers to wrong config file

The installation documentation at http://source.keyboard-monkeys.org/wiki/communityid/How_to_install_Community-ID_under_Linux, section 4.5, refers to changing the permission of config.ini. I believe this should say "config.php" instead. In gen...

03:57 AM Community-ID Bug #195: installation documentation missing "allow override all"

The installation documentation at http://source.keyboard-monkeys.org/wiki/communityid/How_to_install_Community-ID_under_Linux, section 4.2, should probably note that the directory where communityid/webdir is located, should have "AllowOverride All...

03:47 AM Community-ID Bug #194: installation documentation missing short_open_tag setting

The installation documentation at http://source.keyboard-monkeys.org/wiki/communityid/How_to_install_Community-ID_under_Linux does not mention the the required setting of "short_open_tag = On" in /etc/php.ini. This is somewhat confusing, and ge...