From haa at iki.fi Sun Jan 1 18:12:58 2017 From: haa at iki.fi (Hannu Aronsson) Date: Sun, 1 Jan 2017 18:12:58 +0200 Subject: [IKI-aktivistit] OpenID interest? In-Reply-To: References: Message-ID: Hei, We have had discussions on OpenID (or something similar) some time ago in the board, but didn't do anything as it did not seem that useful at the time, due to - not very widely used - email+password seems to have taken over even some places which used OpenID - many places don't allow any provider - a bit unclear which of the standards we should use - the standards seem to be changing, and this should be supported "forever" to avoid losing login access to sites - no volunteer to set it up at the time - we could probably repurpose one of the old servers for this service Technically we planned to do this in the following way: - users could set a separate iki-id password in the web membership pages, we would store a hashed separate password - the xxxID system would use iki-address and the iki-id password for authentication. - We could replicate the username+hashed password to the xxxID server (for independence from the rest of iki) or - the xxxID server could check the member database each time in some suitable way (LDAP/http/something). - you could then use the iki-id URL, username and password to authenticate to sites Practical proposal: Let's organise the next "iki hack evening" on this topic at a time so we can all get together and figure it out? (Voi kommentoida suomeksikin jos haluaa) Yours, Hannu > On 28.12.2016, at 21:32+0200, Pekka Nikander wrote: > > I'm getting tired of google and facebook dominating the ID management market. > > Hereby I am volunteering to setup Iki OpenID server, preferably also with smart card based backend authentication. But I most probably need some help to figure out what software to install. And I currently don't have any access to any of the iki servers. > > So, Kivinen or anyone, any suggestion where to start? Opinions? > > --Pekka > > > > _______________________________________________ > IKI-aktivistit mailing list > IKI-aktivistit at listat.iki.fi > https://listat.iki.fi/mailman/listinfo.cgi/iki-aktivistit -- haa at iki.fi http://www.haa.iki.fi -------------- next part -------------- An HTML attachment was scrubbed... URL: From pekka.nikander at iki.fi Sun Jan 1 20:59:45 2017 From: pekka.nikander at iki.fi (Pekka Nikander) Date: Sun, 1 Jan 2017 20:59:45 +0200 Subject: [IKI-aktivistit] OpenID interest? In-Reply-To: References:

Message-ID: <4C867EDD-F193-4F28-B098-7EB6FF5EA5A2@iki.fi> Moi, Tapaaminen aiheen tiimoilta olisi varmaan hyv?. Minulle tosin sopii paremmin p?iv?ll? kuin illlalla. Jos illalla, vain maanantai-illat sopivat, ja 9.1. on jo varattu. Mutta miten maanantai 16.1. esim. klo 18? --Pekka > On 1 Jan 2017, at 18.12, Hannu Aronsson wrote: > > Hei, > > We have had discussions on OpenID (or something similar) some time ago in the board, but didn't do anything as it did not seem that useful at the time, due to > - not very widely used > - email+password seems to have taken over even some places which used OpenID > - many places don't allow any provider > - a bit unclear which of the standards we should use > - the standards seem to be changing, and this should be supported "forever" to avoid losing login access to sites > - no volunteer to set it up at the time > - we could probably repurpose one of the old servers for this service > > Technically we planned to do this in the following way: > - users could set a separate iki-id password in the web membership pages, we would store a hashed separate password > - the xxxID system would use iki-address and the iki-id password for authentication. > - We could replicate the username+hashed password to the xxxID server (for independence from the rest of iki) or > - the xxxID server could check the member database each time in some suitable way (LDAP/http/something). > - you could then use the iki-id URL, username and password to authenticate to sites > > Practical proposal: Let's organise the next "iki hack evening" on this topic at a time so we can all get together and figure it out? > > (Voi kommentoida suomeksikin jos haluaa) > > Yours, > Hannu > >> On 28.12.2016, at 21:32+0200, Pekka Nikander > wrote: >> >> I'm getting tired of google and facebook dominating the ID management market. >> >> Hereby I am volunteering to setup Iki OpenID server, preferably also with smart card based backend authentication. But I most probably need some help to figure out what software to install. And I currently don't have any access to any of the iki servers. >> >> So, Kivinen or anyone, any suggestion where to start? Opinions? >> >> --Pekka >> >> >> >> _______________________________________________ >> IKI-aktivistit mailing list >> IKI-aktivistit at listat.iki.fi >> https://listat.iki.fi/mailman/listinfo.cgi/iki-aktivistit > > > -- > haa at iki.fi http://www.haa.iki.fi > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From pekka.nikander at iki.fi Wed Jan 11 17:27:48 2017 From: pekka.nikander at iki.fi (Pekka Nikander) Date: Wed, 11 Jan 2017 17:27:48 +0200 Subject: [IKI-aktivistit] Does IKI subdomains support AWS Route 53 subdomains Message-ID: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> I've had pnr.iki.fi hosted at dnspark.net for a long time. But they are now down. As you know, there aren't that many hosted DNS service providers that support subdomains. AWS Route 53 does: http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingNewSubdomain.html However, I'm not sure if they support zone transfer and IIRC Iki subdomains require zone transfer. Hence, does anyone know if I could use AWS Route 53 to manage pnr.iki.fi? And if not, any suggestions where to host it? --Pekka From pekka.nikander at iki.fi Wed Jan 11 20:50:18 2017 From: pekka.nikander at iki.fi (Pekka Nikander) Date: Wed, 11 Jan 2017 20:50:18 +0200 Subject: [IKI-aktivistit] Does IKI subdomains support AWS Route 53 subdomains In-Reply-To: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> References: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> Message-ID: <151347E0-9791-47E6-B068-705DDD1F6B60@iki.fi> > As you know, there aren't that many hosted DNS service providers that support subdomains. I found out that easydns works with iki subdomains. pnr.iki.fi is now hosted there. --Pekka From kivinen at iki.fi Thu Jan 12 14:47:18 2017 From: kivinen at iki.fi (Tero Kivinen) Date: Thu, 12 Jan 2017 14:47:18 +0200 Subject: [IKI-aktivistit] Does IKI subdomains support AWS Route 53 subdomains In-Reply-To: <151347E0-9791-47E6-B068-705DDD1F6B60@iki.fi> References: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> <151347E0-9791-47E6-B068-705DDD1F6B60@iki.fi> Message-ID: <22647.31446.784409.208600@fireball.acr.fi> Pekka Nikander writes: > > As you know, there aren't that many hosted DNS service providers > > that support subdomains. > > I found out that easydns works with iki subdomains. pnr.iki.fi is > now hosted there. It would be nice to have some instructions how to use different provides for iki-subdomains in wiki, so can you write up something how to set it up. Especially if there is something special you need to do. -- kivinen at iki.fi From pekka.nikander at iki.fi Sat Jan 14 19:06:33 2017 From: pekka.nikander at iki.fi (Pekka Nikander) Date: Sat, 14 Jan 2017 19:06:33 +0200 Subject: [IKI-aktivistit] Does IKI subdomains support AWS Route 53 subdomains In-Reply-To: <22647.31446.784409.208600@fireball.acr.fi> References: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> <151347E0-9791-47E6-B068-705DDD1F6B60@iki.fi> <22647.31446.784409.208600@fireball.acr.fi> Message-ID: <55BEE968-A6EA-4873-9B9E-695FB1A34B26@iki.fi> >>> As you know, there aren't that many hosted DNS service providers >>> that support subdomains. >> >> I found out that easydns works with iki subdomains. pnr.iki.fi is >> now hosted there. > > It would be nice to have some instructions how to use different > provides for iki-subdomains in wiki, so can you write up something how > to set it up. Especially if there is something special you need to do. I created the following page (in Finnish): https://ikiwiki.iki.fi/faq/alidomainin_hallinnointi_managing_a_dns_subdomain If it is in an inappropriate place, perhaps you can move it. I didn't know from where to link to it; please add appropriate links. If there is any need, I can add a corresponding English page. --Pekka From kivinen at iki.fi Mon Jan 16 15:56:57 2017 From: kivinen at iki.fi (Tero Kivinen) Date: Mon, 16 Jan 2017 15:56:57 +0200 Subject: [IKI-aktivistit] Does IKI subdomains support AWS Route 53 subdomains In-Reply-To: <55BEE968-A6EA-4873-9B9E-695FB1A34B26@iki.fi> References: <9D615E73-5AAF-473E-B461-D5264570C225@iki.fi> <151347E0-9791-47E6-B068-705DDD1F6B60@iki.fi> <22647.31446.784409.208600@fireball.acr.fi> <55BEE968-A6EA-4873-9B9E-695FB1A34B26@iki.fi> Message-ID: <22652.53545.641098.90447@fireball.acr.fi> Pekka Nikander writes: > >>> As you know, there aren't that many hosted DNS service providers > >>> that support subdomains. > >> > >> I found out that easydns works with iki subdomains. pnr.iki.fi is > >> now hosted there. > > > > It would be nice to have some instructions how to use different > > provides for iki-subdomains in wiki, so can you write up something how > > to set it up. Especially if there is something special you need to do. > > I created the following page (in Finnish): > > https://ikiwiki.iki.fi/faq/alidomainin_hallinnointi_managing_a_dns_subdomain > > If it is in an inappropriate place, perhaps you can move it. That is good place for it. > I didn't know from where to link to it; please add appropriate links. I added it to the main faq index (https://ikiwiki.iki.fi/faqindex/faqindex?&#edistyneet_palvelut) and also to the https://ikiwiki.iki.fi/faq/ikidomain page. > If there is any need, I can add a corresponding English page. The iki is mainly meant to for people who speak finnish, we do not try to offer services to the whole world, we try to help people in Finland (or people somehow related to Finland) to keep in touch through internet. Thats why most of our services are mostly in Finnish. -- kivinen at iki.fi