Canonical SSO provider

Trust root for SpreadUbuntu

Asked by Evan Boldt

SpreadUbuntu recently received the spreadubuntu.org domain, and is trainsitioning from spreadubuntu.neomenlo.org to the new domain.

New Trust Root:
http://spreadubuntu.org

Question information

Language:
English Edit question
Status:
Solved
For:
Canonical SSO provider Edit question
Assignee:
No assignee Edit question
Solved by:
Stuart Metcalfe
Solved:
Last query:
Last reply:
Revision history for this message
Jelmer Vernooij (jelmer) said : 		#1

Hi Evan,

Congratulations on the new domain. I'm not sure I understand your question. What would you like us to do in Launchpad?

Cheers,

Jelmer

Revision history for this message
Evan Boldt (echowarp) said : 		#2

I'm sorry, I should have been more specific.

We need to be a trusted root for Launchpad OpenID in order for Launchpad single sign on to work with Drupal. Signing in is practically optional with the site, but it allows the users to have more translating abilities and allows for email subscriptions.

This is how I got here:
https://help.launchpad.net/DrupalPlugins

Revision history for this message
Curtis Hovey (sinzui) said : 		#3

Launchpad's OpenID service is provided my Ubuntu's SSO service. They manage the RPs.

Revision history for this message
Stuart Metcalfe (stuartmetcalfe) said : 		#4

Please use Ubuntu SSO - the latest revs of the drupal plugins support Ubuntu SSO as an option. I've requested a new RP for the site, being tracked on RT#42416 and will follow up to this question when it's set up.

Revision history for this message
Evan Boldt (echowarp) said : 		#5

I believe we use this "ubuntu sso"

Copy and pasted from the admin page:

These features together make the site work in Single-Sign-On mode, but you can enable/disable them individually
 Prevent users from accessing 'My Account' functionality
 Keep users' name and email in sync with launchpad
 Prevent users from using the registration form

Revision history for this message
Best Stuart Metcalfe (stuartmetcalfe) said : 		#6

The RP config change has now been done. I notice that you're using login.launchpad.net, not login.ubuntu.com. Please change this in your configuration. There is a one-off migration which you'll need to do to ensure existing users can continue to access their accounts. For Drupal, this is:

 1. Ensure your drupal-launchpad plugin is >= rev.29
 2. Change the server to "Ubuntu SSO" in "Administer / Site configuration / Launchpad Settings"
 3. Run this SQL once:

UPDATE authmap SET authname = replace(authname, "login.launchpad.net", "login.ubuntu.com")

Revision history for this message
Evan Boldt (echowarp) said : 		#7

This appears to have worked. Thank you.

Revision history for this message
Evan Boldt (echowarp) said : 		#8

Thanks Stuart Metcalfe, that solved my question.