virtualbox.org switching to single sign on

This is for discussing general topics about how to use VirtualBox.

Re: virtualbox.org switching to single sign on

Postby Perryg » 22. Aug 2012, 00:40

I believe the nick name should have been tied to the email address you used before. Had you used this nick before the change over?
Perryg
Site Moderator
 
Posts: 34282
Joined: 6. Sep 2008, 22:55
Primary OS: Linux other
VBox Version: OSE self-compiled
Guest OSses: *NIX

Re: virtualbox.org switching to single sign on

Postby MarkCranness » 22. Aug 2012, 00:54

Ah, all fixed now.

Apparently BOTH forum and bug tracker accounts were with ONE email/SSO, and once I signed in using THAT account I have my nick-name correct for both.

The SSO account when I had the problem I used for Oracle support some time ago, and forgot I had two SSO accounts...
MarkCranness
Volunteer
 
Posts: 875
Joined: 10. Oct 2009, 06:27
Primary OS: MS Windows 7
VBox Version: PUEL
Guest OSses: Windows Server 2008 R2; Ubuntu 11.04; Windows 2000 Server; Windows XP

Re: virtualbox.org switching to single sign on

Postby thany » 29. Aug 2012, 14:23

It eliminates the risk of account information theft in the case someone manages to break in.

Because Oracle's single signon is completely unhackable? :?
It actually introduces the risk of compromising both environments when (not if) the OSS system gets broken into.
Running the second-latest Windows desktop OS
thany
 
Posts: 100
Joined: 24. Dec 2008, 02:35

Re: virtualbox.org switching to single sign on

Postby robatino » 16. Mar 2013, 17:34

I created a SSO account when it was first required. A short time ago, I had to change emails, so went to Oracle's site, logged in, and changed username (I was forced to use IE on XP due to a claim that I was running a popup blocker on Firefox, even after I disabled it, but whatever). I can go to https://forums.virtualbox.org/ , login with my SSO, and it shows me logged in as "robatino". So far so good. But if I go to https://www.virtualbox.org/ticket/11529 , it shows me logged out. If I log in again using exactly the same creds, it says "Specify nick name for this SSO account", and if I fill in "robatino" with the password, it says "Error Nick name robatino is already associated with a different user." I tried to use either the old email or "robatino" as the username and neither work. The password was not changed. So AFAICT there is only one SSO account, but I now cannot post a followup to my own bug using the same nickname.

Edit: Also, I didn't get email for the last comment to that bug, so I suspect some email notifications are not working. I'll check this thread in case it's not working here either.

Edit: I also agree with what thany said. I see no way that SSO can increase security. Decrease, certainly. Given how poorly Oracle has implemented this, I'm not surprised they'd think it's a good idea, though. I use a password manager and always use different username/password pairs for different sites when possible.

Edit: I AM getting email notifications for new messages in this forum, just not for the bug tracker, so only that account seems to be broken, although before the email change, I was able to use the same SSO account to access both.
robatino
 
Posts: 126
Joined: 17. Dec 2008, 21:15

Re: virtualbox.org switching to single sign on

Postby robatino » 20. Mar 2013, 20:14

I filed an Oracle ticket

Recently, I changed the username/email of my SSO account (with nickname "robatino") from "[old email]" to "[new email]". This still works properly when logging into the VirtualBox forums - it shows me logged in as "robatino". However, when I attempt to log into the VirtualBox bug tracker, it immediately asks me for a nickname, and when I attempt to use "robatino", it says "Error Nick name robatino is already associated with a different user." even though it is not. (Before the email change, the one SSO worked for accessing both the forums and the bug tracker.) Note: This is a followup to [ticket number] - Account Helpdesk Request_15-MAR-13 Since then I was able to narrow down the problem. Also see my post https://forums.virtualbox.org/viewtopic ... 45#p251514 in the VirtualBox forums.


and they closed it with the reply

Thank you for contacting us. The Support team to which you have raised the ticket deals with the SSO login issues. For the issue which you have encountered, please contact the Administrator of the 'https://www.virtualbox.org/' site. They should be able to assist you further.


Is this in fact correct? I thought the failure of SSO to work properly with the same nickname for both the forum and the bug tracker would be an SSO issue.
robatino
 
Posts: 126
Joined: 17. Dec 2008, 21:15

Re: virtualbox.org switching to single sign on

Postby Perryg » 20. Mar 2013, 20:35

Yes it is. I will forward your request to an administrator. They should contact you as soon as they have resolved the issue.
Perryg
Site Moderator
 
Posts: 34282
Joined: 6. Sep 2008, 22:55
Primary OS: Linux other
VBox Version: OSE self-compiled
Guest OSses: *NIX

Re: virtualbox.org switching to single sign on

Postby klaus » 21. Mar 2013, 11:38

Technically speaking it's an application integration problem - OSSO only takes care of secure user authentication (with the positive side effect that even if someone would break into *.virtualbox.org there would be no way to steal identities). The nickname handling is specific (and unfortunately different) for www and forums. Apparently you're running into unintentional behavior differences which probably means we have to make small changes to the OSSO integration on www.

The Oracle SSO support people won't be able to help, because the problem is outside their control and they gave you the right answer (they could've passed it to us internally, but I never saw that happen).
klaus
Oracle Corporation
 
Posts: 537
Joined: 10. May 2007, 14:57

Re: virtualbox.org switching to single sign on

Postby klaus » 21. Mar 2013, 12:10

Fixed the problem for user robatino, however I discovered that there's a generic problem lurking. No idea why no one else reported it so far. Have to see how fast we can make the OSSO username change work properly with www.virtualbox.org.
klaus
Oracle Corporation
 
Posts: 537
Joined: 10. May 2007, 14:57

Re: virtualbox.org switching to single sign on

Postby robatino » 21. Mar 2013, 12:22

Confirmed fix for me, thanks.
robatino
 
Posts: 126
Joined: 17. Dec 2008, 21:15

Re: virtualbox.org switching to single sign on

Postby aztrix » 1. Aug 2013, 11:30

Howzit Folks?

How do I link my virtualbox a/c to single sign on a/c?

Cheers
Aztrix
aztrix
 
Posts: 2
Joined: 19. Nov 2008, 01:25
Primary OS: openSUSE
VBox Version: PUEL
Guest OSses: Windows XP

Re: virtualbox.org switching to single sign on

Postby mpack » 1. Aug 2013, 14:56

If you're here, and able to post the question, then you already did.
mpack
Site Moderator
 
Posts: 25501
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: virtualbox.org switching to single sign on

Postby Giangi » 13. Nov 2013, 16:05

klaus wrote:Technically speaking it's an application integration problem - OSSO only takes care of secure user authentication (with the positive side effect that even if someone would break into *.virtualbox.org there would be no way to steal identities). The nickname handling is specific (and unfortunately different) for www and forums. Apparently you're running into unintentional behavior differences which probably means we have to make small changes to the OSSO integration on www.

The Oracle SSO support people won't be able to help, because the problem is outside their control and they gave you the right answer (they could've passed it to us internally, but I never saw that happen).


I am in the same scenario, I have changed my email address on OSSO and now I cannot re-use my previous nickname... I have already sent many PMs (to you too) but no one has resolved my problem... :(
Details if ever needed: https://forums.virtualbox.org/viewtopic.php?f=9&t=58169

It's a real nightmare...
Giangi
 
Posts: 43
Joined: 13. Aug 2013, 09:15
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: XP, Seven, Win10

Re: virtualbox.org switching to single sign on

Postby Giangi » 18. Nov 2013, 11:54

Giangi wrote:I am in the same scenario, I have changed my email address on OSSO and now I cannot re-use my previous nickname... I have already sent many PMs (to you too) but no one has resolved my problem... :(
Details if ever needed: https://forums.virtualbox.org/viewtopic.php?f=9&t=58169
It's a real nightmare...


I just would like to un-thank everybody who didn't help me solving this problem. :evil:
I have solved it by myself reverting to the previous email registered with Oracle SSO.
It's embarassing the Oracle's willing-to-help... :?
Giangi
 
Posts: 43
Joined: 13. Aug 2013, 09:15
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: XP, Seven, Win10

Re: virtualbox.org switching to single sign on

Postby AnrDaemon » 19. Aug 2014, 14:50

Unable to use that ASSO in Opera.
Clicking "login" redirect me to "login.oracle.com" with a constant
Error

System error. Please re-try your action. If you continue to get this error, please contact the Administrator.

with no mention of how, or where I can contact these ephemeral administrators.
AnrDaemon
 
Posts: 96
Joined: 7. Feb 2010, 23:41
Primary OS: MS Windows XP
VBox Version: OSE other
Guest OSses: Ubuntu Linux

Re: virtualbox.org switching to single sign on

Postby mpack » 19. Aug 2014, 14:58

Your issue really has nothing to do with these forums. If you have a problem with the Oracle SSO site then you need to go get support from them. The only thing this site does is check that you're logged in.
mpack
Site Moderator
 
Posts: 25501
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

PreviousNext

Return to Using VirtualBox

Who is online

Users browsing this forum: No registered users and 16 guests