search

EarthSystemCoG / COG

COG source code
BSD 3-Clause "New" or "Revised" License
8 stars 16 forks source link

OpenIDs from CEDA registering as LLNL #1310

Open murphysj opened 8 years ago

murphysj commented 8 years ago

WHO: Sylvia

When you look at the list of system users, the home node for folks with ceda openIDs is listed as PCMDI.

LucaCinquini commented 8 years ago

As a starter, CEDA configured their account creation so that the user is always redirected to the CEDA IdP, which is a custom IdP implementation. As a consequence, user account are never created in an ESGF database at that location.

In such a situation, you would expect that the user is assigned as "home node" the first CoG where they login with their openid. But - it seems that if they use that openid to log first into CEDA, then into CU, two different CoG accounts are created, with different home nodes. This may be due to the fact that URLs of the following:

https://esgf-index1.ceda.ac.uk/share/user/?openid=https://ceda.ac.uk/openid/Luca.Cinquini2

are returning empty documents.... still investigating...

murphysj commented 7 years ago

Guy responsible is on vacation, moving to a later release.

LucaCinquini commented 7 years ago

More testing. Performed the following actions:

o Create an account at CEDA: username: lucacinquini002 assigned openid: https://ceda.ac.uk/openid/Luca.Cinquini3

o Was able to login at CEDA web portal

o Was able to login at ESGF/CEDA node with openid=https://ceda.ac.uk/openid/Luca.Cinquini3 Had to re-enter all personal information because attributes are not transmitted via openid AX Home site appears to be: Home Node ESGF-INDEX1.CEDA.AC.UK See: https://esgf-index1.ceda.ac.uk/user/detail/920/

o The I tried the same openid to login into ESGF/JPL. I was sucessfull but I had to enter my information all over again, and eventually the home node for that account showed up as JPL:

https://esgf-node.jpl.nasa.gov/user/detail/319/

o Again I think this is because the CEDA CoG fails to deliver basic user information for registered users:

https://esgf-index1.ceda.ac.uk/share/user/?openid=https://ceda.ac.uk/openid/Luca.Cinquini3