[haiku-web] dev.haiku-os.org account issues

Hi guys,

Because I would like to start the Trac move as soon as possible to the
new server, there is one more issue to debate/resolve. This is the
issue of how to authenticate users. Currently authentication is done
through a connection with the websites user database. On the new
server this is no longer available. There are three ways that I
thought of to counter this on the short term, as we will try to work
out a centralized user account system on the longer term. Until that's
done, these are the options:

1. Give Trac its own user accounts. There is a plugin for that, which
I have tested. I have also written a script that can fetch all the
users that ever logged into Trac, generate a password for them and
mail this password to them. New users can register through a web
interface.

2. Set up mysql on the new server and upload the user account data
through an ssh tunnel every now and then. Disadvantage: another piece
of software to administer on the new installation.

3. Write a script that processes all the mysql user accounts on the
website, and publishes this in a postgresql database on the trac
server.

My personal preference is for #1, since it will require the least
dependence on other services. If a 'account.haiku-os.org' sollution
ever comes out, I think we will be able to merge the accounts back
together. #2 and #3 are good options, and keep the status quo, but
they break easily (like Jorge said). The final option - which I've
ruled out for you - is authenticating through an xmlrpc service. I
think this is not a good idea though, because of security reasons.
Sending the username and password over the web (even if it is through
ssl) will pose a security risk.

So what do you think? Remi, Ryan, Axel, anyone else?

N.
-----------------------------------------------------------------------
haiku-web@xxxxxxxxxxxxx - Haiku Web & Developer Support Discussion List

Other related posts: