[Gluster-infra] Google OpenID Connect support for Gerrit?
firemanxbr at fedoraproject.org
Wed Mar 11 19:25:49 UTC 2015
Sorry my delay, but I was some problems with gluster in my datacenters,
now that's okay.
About OpenID support in Gerrit:
We have four native Gerrit options:
(not to mention any HTTP auth hacks, with some magic in your reverse
1) Migrate to LDAP authentication scheme
** Advantage: no messing around with OpenID (and friends) any more
** Disadvantage: migration overhead
2) Switch to other OpenID provider
Force your users to link to other OpenID identity. The instructions how
to link mulple
OpenID identities to the same Gerrit account are provided here . Also
after the needed changes were cherry-picked, 2.10.1 is going to be
available in near
future that dropped deprecated OpenID provider from the login form and
** Advantage: no intervention from admin side is needed
** Disadvantage: all users have to move to other OpenID provider(s)
3) Use Gerrit GitHub plugin
** Advantage: Supported upstream
** Disadvantage: all users have to sign in to GitHub. New created GitHub
must be manually linked to the existing Gerrit account.
4) Use experimental OAuth authentication scheme  with Google OAuth
See the explanation how it works  and how to set it up: 
** Advantage: Users can use their Google accounts
** Disadvantage: Gerrit must be patched. Manually linking OAuth Google
existing Gerrit accounts is needed (linking of multiple identities is not
I would like to see the project with Gluster own accounts all on the
FreeIPA, thus detach it from us in any other form of authentication,
creating value for the project, I imagine in our page one how to register.
On Mon, Mar 9, 2015 at 11:55 AM, Justin Clift <justin at gluster.org> wrote:
> Hi Marcelo,
> Any idea if Gerrit supports OpenID Connect?
> Google's current OpenID 2.0 support expires on April 20th,
> to be replaced by "OpenID Connect":
> We'll need a migration plan for our existing Gerrit accounts
> (400+ of them), to either get them using OpenID Connect,
> or migrate them to something else.
> It's kind of urgent too (next month)... so ugh.
> Regards and best wishes,
> Justin Clift
> GlusterFS - http://www.gluster.org
> An open source, distributed file system scaling to several
> petabytes, and handling thousands of clients.
> My personal twitter: twitter.com/realjustinclift
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Gluster-infra