OpenID server (Heraldry PIP) needs work before deployment

[Asheesh Laroia]

Software installed and set up in ~/software/pip/ . Apache is configured to map *.id.freeculture.org and id.freeculture.org -> localhost:8000.

A mongrel_rails line that runs it is:

mongrel_rails start -p 8000 -e development -S config/mongrel.conf -a 127.0.0.1

We need to:

(a) skin the OpenID server,
(b) copy some user accounts,
(c) set sane defaults (like a default trust profile that says share data with *.freeculture.org),
(d) optionally stop disabling the cross-site-scripting vulnerability check.

[Abhay Kumar (abhayk)]

why is this being run in a development environment? it's going to me memory hungry and slow.

I'd also like to setup a mongrel cluster as one mongrel is never a good idea. we'd need apache to loadbalance for us as well but unless we're using apache 2.2, i would suggest moving load balancing to another application like pound, balance or pen.

[REQ] For someone with sudo rights.

sudo gem install mongrel_cluster

cd /home/freecult/software/pip
sudo chown -R mongrel:mongrel .
sudo mongrel_rails cluster::configure -p 8000 -N 3 -e production -a 127.0.0.1 -c /home/freecult/software/pip --user=mongrel --group=mongrel
sudo mongrel_rails cluster::start

sudo mkdir /etc/mongrel_cluster
sudo ln -s /home/freecult/software/pip/config/mongrel_cluster.yml /etc/mongrel_cluster/pip.yml
sudo cp /usr/lib/ruby/gems/1.8/gems/mongrel_cluster-0.2.1/resources/mongrel_cluster /etc/init.d/
sudo chmod +x /etc/init.d/mongrel_cluster
sudo update-rc.d -f mongrel_cluster defaults

[Asheesh Laroia (paulproteus)]

On Thu, 26 Apr 2007, Abhay Kumar wrote:

> why is this being run in a development environment? it's going to me
> memory hungry and slow.

Duh, 'cause we haven't finished customizing it. The dev environment stuff
helped me figure out what XSS checks to comment out. (-:

> I'd also like to setup a mongrel cluster as one mongrel is never a good
> idea. we'd need apache to loadbalance for us as well but unless we're
> using apache 2.2, i would suggest moving load balancing to another
> application like pound, balance or pen.

[rest snipped]

Sounds fine, whatever, you do it. (-;

-- Asheesh.

--
One possible reason that things aren't going according to plan
is that there never was a plan in the first place.

[Abhay Kumar (abhayk)]

i think it may be good to change the ids to:

http://id.freeculture.org/<name>

[Asheesh Laroia (paulproteus)]

On Tue, 1 May 2007, Abhay Kumar wrote:

> i think it may be good to change the ids to:
>
> http://id.freeculture.org/<name>

Abhay's going to try today to write his own in Ruby on Rails. We'll see
how that goes and if it's worth the time to do it that way rather than
skin PIP.

-- Asheesh.

--
He who loses, wins the race,
And parallel lines meet in space.
   -- John Boyd, "Last Starship from Earth"

[Gavin Baker (naufragio-deactivatedaccount)]

I'm told this one is really easy to set up -- and from the look of the instructions, it is:

http://wiki.guruj.net/Clamshell!Documentation

[Asheesh Laroia (paulproteus)]

On Thu, 6 Sep 2007, Gavin Baker wrote:

> I'm told this one is really easy to set up -- and from the look of the
> instructions, it is:
>
> http://wiki.guruj.net/Clamshell!Documentation

Thanks for the pointer - it looks interesting.

I actually successfully wrote a custom one that integrates (evilly!) with
our MediaWiki users. We could modify Clamshell to integrate with MW
pretty easily, too, though.

I'm holding off on deploying it because none of our services accept
OpenIDs right now anyway.

-- Asheesh.

[Gavin Baker (naufragio-deactivatedaccount)]

Can we quanity which services we run, and their OpenID support?

Support for WordPress: http://blog.verselogic.net/projects/wordpress/wordpress-openid-plugin/
(Don't know about Lyceum support.)

Even if none of our services currently supported OpenID, we could deploy now and start planning how to use it. The day when people in FC.o have FC.o identifiers is a day when we can start to build stuff that makes life easier.

[Gavin Baker (naufragio-deactivatedaccount)]

(OT: But why Lyceum and not WordPress MU, especially since Lyceum seems to have given us a fair amount of trouble?)