wiki.openid.net openid support broken

[Andrew Arnott]

Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Chris Messina]

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private
_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Andrew Arnott]

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Chris Messina]

We use the typical support channels with PBWorks. If you could more specifically identify the bug (based on its appearance with other RPs) perhaps we could provide a more detailed assessment of what they need to do to address the issue?

Just reporting that OpenID doesn't work for you probably isn't enough to help them fix the problem.

Chris

On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...> wrote:

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Andrew Arnott]

I totally understand.  I'm happy to triage the problem to the smallest detail... but I want to be sure it will be routed to the people who can fix it.  the OpenID general mailing list isn't it, I'm sure.  Now that I know I need to report it directly to pbworks.com, I'll do that.

Thanks.
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...> wrote:

We use the typical support channels with PBWorks. If you could more specifically identify the bug (based on its appearance with other RPs) perhaps we could provide a more detailed assessment of what they need to do to address the issue?

Just reporting that OpenID doesn't work for you probably isn't enough to help them fix the problem.

Chris

On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...> wrote:

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Chris Messina]

Great — thanks. Keep us posted and feel free to keep me CC'd.

Chris

On Tue, Oct 20, 2009 at 12:21 PM, Andrew Arnott <andrewarnott@...> wrote:

I totally understand.  I'm happy to triage the problem to the smallest detail... but I want to be sure it will be routed to the people who can fix it.  the OpenID general mailing list isn't it, I'm sure.  Now that I know I need to report it directly to pbworks.com, I'll do that.

Thanks.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...> wrote:

We use the typical support channels with PBWorks. If you could more specifically identify the bug (based on its appearance with other RPs) perhaps we could provide a more detailed assessment of what they need to do to address the issue?

Just reporting that OpenID doesn't work for you probably isn't enough to help them fix the problem.

Chris

On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...> wrote:

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Troy Benjegerdes]

What probably is appropriate to the openid mailing list would be how to
develop a test suite that would (hopefully) eliminate this kind of problem.

For instance, if I ever implement some sort of fancy OpenID provider with
two-factor auth & kerberos integration running on my Palm Pre, how the
heck would I know if it ever worked right?


On Tue, Oct 20, 2009 at 09:21:55AM -0700, Andrew Arnott wrote:

> I totally understand.  I'm happy to triage the problem to the smallest
> detail... but I want to be sure it will be routed to the people who can fix
> it.  the OpenID general mailing list isn't it, I'm sure.  Now that I know I
> need to report it directly to pbworks.com, I'll do that.
> Thanks.
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death
> your right to say it." - S. G. Tallentyre
>
>
> On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...>wrote:
>
> > We use the typical support channels with PBWorks. If you could more
> > specifically identify the bug (based on its appearance with other RPs)
> > perhaps we could provide a more detailed assessment of what they need to do
> > to address the issue?
> > Just reporting that OpenID doesn't work for you probably isn't enough to
> > help them fix the problem.
> >
> > Chris
> >
> >
> > On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...>wrote:
> >
> >> Yes, my delegated identifier works at most other RPs, although this
> >> particular delegation bug pops up at several RPs.  Who is our contact at
> >> PBWorks?
> >> --
> >> Andrew Arnott
> >> "I [may] not agree with what you have to say, but I'll defend to the death
> >> your right to say it." - S. G. Tallentyre
> >>
> >>
> >> On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...>wrote:
> >>
> >>> The wiki is hosted by PBWorks, so we don't have access to the
> >>> sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
> >>> works fine.
> >>>
> >>> Chris
> >>>
> >>> On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...>
> >>> wrote:
> >>> > Can someone upgrade the OpenID login support behind the
> >>> wiki.openid.net site?  I'd sure like to be able to log in as "
> >>> blog.nerdbank.net", but the RP library being used doesn't do delegation
> >>> correctly.
> >>> >
> >>> > --
> >>> > Andrew Arnott
> >>> > "I [may] not agree with what you have to say, but I'll defend to the
> >>> death your right to say it." - S. G. Tallentyre
> >>> >
> >>> >
> >>>
> >>> --
> >>> Chris Messina
> >>> Open Web Advocate
> >>>
> >>> Personal: http://factoryjoe.com
> >>> Follow me on Twitter: http://twitter.com/chrismessina
> >>>
> >>> Citizen Agency: http://citizenagency.com
> >>> Diso Project: http://diso-project.org
> >>> OpenID Foundation: http://openid.net
> >>>
> >>> This email is:   [ ] shareable    [X] ask first   [ ] private
> >>>
> >>
> >>
> >
> >
> > --
> > Chris Messina
> > Open Web Advocate
> >
> > Personal: http://factoryjoe.com
> > Follow me on Twitter: http://twitter.com/chrismessina
> >
> > Citizen Agency: http://citizenagency.com
> > Diso Project: http://diso-project.org
> > OpenID Foundation: http://openid.net
> >
> > This email is:   [ ] shareable    [X] ask first   [ ] private
> >

> _______________________________________________
> general mailing list
> general@...
> http://lists.openid.net/mailman/listinfo/openid-general


--
--------------------------------------------------------------------------
Troy Benjegerdes                'da hozer'                hozer@...  

Unless hours were cups of sack, and minutes capons, and clocks the tongues
of bawds, and dials the signs of leaping houses, and the blessed sun himself
a fair, hot wench in flame-colored taffeta, I see no reason why thou shouldst
be so superfluous to demand the time of the day.  I wasted time and now doth
time waste me.                        -- William Shakespeare
_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[John Bradley-9]

There is a test suite at http://test-id.org  sponsored by OSIS.

the problem is getting people to test.

Yes it needs more tests, it is not complete but with limited resources  
it the best we have.

John B.

On 2009-10-20, at 4:29 PM, Troy Benjegerdes wrote:

> What probably is appropriate to the openid mailing list would be how  
> to
> develop a test suite that would (hopefully) eliminate this kind of  
> problem.
>
> For instance, if I ever implement some sort of fancy OpenID provider  
> with
> two-factor auth & kerberos integration running on my Palm Pre, how the
> heck would I know if it ever worked right?
>
>
> On Tue, Oct 20, 2009 at 09:21:55AM -0700, Andrew Arnott wrote:
>> I totally understand.  I'm happy to triage the problem to the  
>> smallest
>> detail... but I want to be sure it will be routed to the people who  
>> can fix
>> it.  the OpenID general mailing list isn't it, I'm sure.  Now that  
>> I know I
>> need to report it directly to pbworks.com, I'll do that.
>> Thanks.
>> --
>> Andrew Arnott
>> "I [may] not agree with what you have to say, but I'll defend to  
>> the death
>> your right to say it." - S. G. Tallentyre
>>
>>
>> On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...
>> >wrote:
>>
>>> We use the typical support channels with PBWorks. If you could more
>>> specifically identify the bug (based on its appearance with other  
>>> RPs)
>>> perhaps we could provide a more detailed assessment of what they  
>>> need to do
>>> to address the issue?
>>> Just reporting that OpenID doesn't work for you probably isn't  
>>> enough to
>>> help them fix the problem.
>>>
>>> Chris
>>>
>>>
>>> On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...
>>> >wrote:
>>>
>>>> Yes, my delegated identifier works at most other RPs, although this
>>>> particular delegation bug pops up at several RPs.  Who is our  
>>>> contact at
>>>> PBWorks?
>>>> --
>>>> Andrew Arnott
>>>> "I [may] not agree with what you have to say, but I'll defend to  
>>>> the death
>>>> your right to say it." - S. G. Tallentyre
>>>>
>>>>
>>>> On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...
>>>> >wrote:
>>>>
>>>>> The wiki is hosted by PBWorks, so we don't have access to the
>>>>> sourcecode. Are you able to use your delegated OpenID elsewhere?  
>>>>> Mine
>>>>> works fine.
>>>>>
>>>>> Chris
>>>>>
>>>>> On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...
>>>>> >
>>>>> wrote:
>>>>>> Can someone upgrade the OpenID login support behind the
>>>>> wiki.openid.net site?  I'd sure like to be able to log in as "
>>>>> blog.nerdbank.net", but the RP library being used doesn't do  
>>>>> delegation
>>>>> correctly.
>>>>>>
>>>>>> --
>>>>>> Andrew Arnott
>>>>>> "I [may] not agree with what you have to say, but I'll defend  
>>>>>> to the
>>>>> death your right to say it." - S. G. Tallentyre
>>>>>>
>>>>>>
>>>>>
>>>>> --
>>>>> Chris Messina
>>>>> Open Web Advocate
>>>>>
>>>>> Personal: http://factoryjoe.com
>>>>> Follow me on Twitter: http://twitter.com/chrismessina
>>>>>
>>>>> Citizen Agency: http://citizenagency.com
>>>>> Diso Project: http://diso-project.org
>>>>> OpenID Foundation: http://openid.net
>>>>>
>>>>> This email is:   [ ] shareable    [X] ask first   [ ] private
>>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> Chris Messina
>>> Open Web Advocate
>>>
>>> Personal: http://factoryjoe.com
>>> Follow me on Twitter: http://twitter.com/chrismessina
>>>
>>> Citizen Agency: http://citizenagency.com
>>> Diso Project: http://diso-project.org
>>> OpenID Foundation: http://openid.net
>>>
>>> This email is:   [ ] shareable    [X] ask first   [ ] private
>>>
>
>> _______________________________________________
>> general mailing list
>> general@...
>> http://lists.openid.net/mailman/listinfo/openid-general
>
>
> --
> --------------------------------------------------------------------------
> Troy Benjegerdes                'da hozer'                hozer@...
>
> Unless hours were cups of sack, and minutes capons, and clocks the  
> tongues
> of bawds, and dials the signs of leaping houses, and the blessed sun  
> himself
> a fair, hot wench in flame-colored taffeta, I see no reason why thou  
> shouldst
> be so superfluous to demand the time of the day.  I wasted time and  
> now doth
> time waste me.                        -- William Shakespeare
> _______________________________________________
> general mailing list
> general@...
> http://lists.openid.net/mailman/listinfo/openid-general

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Andrew Arnott]

This is what I sent to pbworks via their contact page:

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:40 AM, Chris Messina <chris.messina@...> wrote:

Great — thanks. Keep us posted and feel free to keep me CC'd.

Chris

On Tue, Oct 20, 2009 at 12:21 PM, Andrew Arnott <andrewarnott@...> wrote:

I totally understand.  I'm happy to triage the problem to the smallest detail... but I want to be sure it will be routed to the people who can fix it.  the OpenID general mailing list isn't it, I'm sure.  Now that I know I need to report it directly to pbworks.com, I'll do that.

Thanks.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...> wrote:

We use the typical support channels with PBWorks. If you could more specifically identify the bug (based on its appearance with other RPs) perhaps we could provide a more detailed assessment of what they need to do to address the issue?

Just reporting that OpenID doesn't work for you probably isn't enough to help them fix the problem.

Chris

On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...> wrote:

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Allen Tom-2]

I also delegated my domain to myopenid.com, but I'm able to login to the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/"

YMMV
Allen


Andrew Arnott wrote:

This is what I sent to pbworks via their contact page:

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:40 AM, Chris Messina <chris.messina@...> wrote:

Great — thanks. Keep us posted and feel free to keep me CC'd.

Chris

On Tue, Oct 20, 2009 at 12:21 PM, Andrew Arnott <andrewarnott@...> wrote:

I totally understand.  I'm happy to triage the problem to the smallest detail... but I want to be sure it will be routed to the people who can fix it.  the OpenID general mailing list isn't it, I'm sure.  Now that I know I need to report it directly to pbworks.com, I'll do that.

Thanks.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:16 AM, Chris Messina <chris.messina@...> wrote:

We use the typical support channels with PBWorks. If you could more specifically identify the bug (based on its appearance with other RPs) perhaps we could provide a more detailed assessment of what they need to do to address the issue?

Just reporting that OpenID doesn't work for you probably isn't enough to help them fix the problem.

Chris

On Tue, Oct 20, 2009 at 11:29 AM, Andrew Arnott <andrewarnott@...> wrote:

Yes, my delegated identifier works at most other RPs, although this particular delegation bug pops up at several RPs.  Who is our contact at PBWorks?

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:27 AM, Chris Messina <chris.messina@...> wrote:

The wiki is hosted by PBWorks, so we don't have access to the
sourcecode. Are you able to use your delegated OpenID elsewhere? Mine
works fine.

Chris

On Tuesday, October 20, 2009, Andrew Arnott <andrewarnott@...> wrote:
> Can someone upgrade the OpenID login support behind the wiki.openid.net site?  I'd sure like to be able to log in as "blog.nerdbank.net", but the RP library being used doesn't do delegation correctly.
>
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre
>
>

--
Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

--

Chris Messina
Open Web Advocate

Personal: http://factoryjoe.com
Follow me on Twitter: http://twitter.com/chrismessina

Citizen Agency: http://citizenagency.com
Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] shareable    [X] ask first   [ ] private

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general
  

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Manger, James H]

Some parts of this message have been removed. Learn more about Nabble's security policy.

http://blog.nerdbank.net/ claims to be XHTML but isn’t valid XML. That could be a problem, though http://allentom.com/ also claims to be XHTML but also isn’t valid. They both have lots of unescaped ‘&’ characters so that doesn’t explain the difference, but other XML errors are only in one or the other so that could cause different behaviour.

The <meta http-equiv=’X-XRDS-Location’ content=’https://xri…’> element in http://blog.nerdbank.net/ (without a corresponding HTTP header) may be a more significant difference. Are RPs supposed to notice such a <meta> element?

Other minor differences: ‘ vs “ to quote OpenID <link> attributes; /> vs > to terminate <link> elements; empty path vs / path on delegate URIs.

A more significant difference is that http://blog.nerdbank.net/ includes OpenID v1 and v2 links, while http://allentom.com/ only has v1 links.

 

I am curious about what the actual cause turns out to be.

 

 

James Manger
James.H.Manger@...
Identity and security team — Chief Technology Office — Telstra

 

From: openid-general-bounces@... [mailto:openid-general-bounces@...] On Behalf Of Allen Tom
Sent: Wednesday, 21 October 2009 2:09 PM
To: Andrew Arnott
Cc: general
Subject: Re: [OpenID] wiki.openid.net openid support broken

 

I also delegated my domain to myopenid.com, but I'm able to login to the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/"

YMMV
Allen


Andrew Arnott wrote:

This is what I sent to pbworks via their contact page:

 

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

 

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Andrew Arnott]

Wow, that's a great review, James.

I am convinced that it's Allen's 1.1 endpoint HTML elements whereas I have 2.0 elements.  In OpenID 1.1, delegation is entirely managed by the RP rather than a concert between RP and OP the way it is in 2.0, so delegation was simpler in 1.1 and easier to get right IMO.  
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:46 PM, Manger, James H <James.H.Manger@...> wrote:

http://blog.nerdbank.net/ claims to be XHTML but isn’t valid XML. That could be a problem, though http://allentom.com/ also claims to be XHTML but also isn’t valid. They both have lots of unescaped ‘&’ characters so that doesn’t explain the difference, but other XML errors are only in one or the other so that could cause different behaviour.

The <meta http-equiv=’X-XRDS-Location’ content=’https://xri…’> element in http://blog.nerdbank.net/ (without a corresponding HTTP header) may be a more significant difference. Are RPs supposed to notice such a <meta> element?

Other minor differences: ‘ vs “ to quote OpenID <link> attributes; /> vs > to terminate <link> elements; empty path vs / path on delegate URIs.

A more significant difference is that http://blog.nerdbank.net/ includes OpenID v1 and v2 links, while http://allentom.com/ only has v1 links.

 

I am curious about what the actual cause turns out to be.

 

 

James Manger
James.H.Manger@...
Identity and security team — Chief Technology Office — Telstra

 

From: openid-general-bounces@... [mailto:openid-general-bounces@...] On Behalf Of Allen Tom
Sent: Wednesday, 21 October 2009 2:09 PM
To: Andrew Arnott
Cc: general
Subject: Re: [OpenID] wiki.openid.net openid support broken

 

I also delegated my domain to myopenid.com, but I'm able to login to the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/"

YMMV
Allen


Andrew Arnott wrote:

This is what I sent to pbworks via their contact page:

 

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

 

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Johannes Ernst-6]

There is also the issue of your trailing slashes in the link element. Some parsers don't quite grok those, particularly when used without a blank before the slash.

(One issue I have been burned with in the past, I forgot which OP).

On Oct 20, 2009, at 20:57, Andrew Arnott wrote:

Wow, that's a great review, James.

I am convinced that it's Allen's 1.1 endpoint HTML elements whereas I have 2.0 elements.  In OpenID 1.1, delegation is entirely managed by the RP rather than a concert between RP and OP the way it is in 2.0, so delegation was simpler in 1.1 and easier to get right IMO.  
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:46 PM, Manger, James H <James.H.Manger@...> wrote:

http://blog.nerdbank.net/ claims to be XHTML but isn’t valid XML. That could be a problem, though http://allentom.com/ also claims to be XHTML but also isn’t valid. They both have lots of unescaped ‘&’ characters so that doesn’t explain the difference, but other XML errors are only in one or the other so that could cause different behaviour.

The <meta http-equiv=’X-XRDS-Location’ content=’https://xri…’> element in http://blog.nerdbank.net/ (without a corresponding HTTP header) may be a more significant difference. Are RPs supposed to notice such a <meta> element?

Other minor differences: ‘ vs “ to quote OpenID <link> attributes; /> vs > to terminate <link> elements; empty path vs / path on delegate URIs.

A more significant difference is that http://blog.nerdbank.net/ includes OpenID v1 and v2 links, while http://allentom.com/ only has v1 links.

 

I am curious about what the actual cause turns out to be.

 

 

James Manger
James.H.Manger@...
Identity and security team — Chief Technology Office — Telstra

 

From: openid-general-bounces@... [mailto:openid-general-bounces@...] On Behalf Of Allen Tom
Sent: Wednesday, 21 October 2009 2:09 PM
To: Andrew Arnott
Cc: general
Subject: Re: [OpenID] wiki.openid.net openid support broken

 

I also delegated my domain to myopenid.com, but I'm able to login to the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/"

YMMV
Allen


Andrew Arnott wrote:

This is what I sent to pbworks via their contact page:

 

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

 

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

[Andrew Arnott]

I got a response from PBworks.  They say their code doesn't support delegation (I guess based on Allen's experience that could be qualified as that they don't support 2.0 delegation but they do support 1.1 delegation) but that they'll consider it in the future now that I've brought it to their attention.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 9:05 PM, Johannes Ernst <[e-mail]> wrote:

There is also the issue of your trailing slashes in the link element. Some parsers don't quite grok those, particularly when used without a blank before the slash.

(One issue I have been burned with in the past, I forgot which OP).

On Oct 20, 2009, at 20:57, Andrew Arnott wrote:

Wow, that's a great review, James.

I am convinced that it's Allen's 1.1 endpoint HTML elements whereas I have 2.0 elements.  In OpenID 1.1, delegation is entirely managed by the RP rather than a concert between RP and OP the way it is in 2.0, so delegation was simpler in 1.1 and easier to get right IMO.  
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

On Tue, Oct 20, 2009 at 8:46 PM, Manger, James H <James.H.Manger@...> wrote:

http://blog.nerdbank.net/ claims to be XHTML but isn’t valid XML. That could be a problem, though http://allentom.com/ also claims to be XHTML but also isn’t valid. They both have lots of unescaped ‘&’ characters so that doesn’t explain the difference, but other XML errors are only in one or the other so that could cause different behaviour.

The <meta http-equiv=’X-XRDS-Location’ content=’https://xri…’> element in http://blog.nerdbank.net/ (without a corresponding HTTP header) may be a more significant difference. Are RPs supposed to notice such a <meta> element?

Other minor differences: ‘ vs “ to quote OpenID <link> attributes; /> vs > to terminate <link> elements; empty path vs / path on delegate URIs.

A more significant difference is that http://blog.nerdbank.net/ includes OpenID v1 and v2 links, while http://allentom.com/ only has v1 links.

 

I am curious about what the actual cause turns out to be.

 

 

James Manger
James.H.Manger@...
Identity and security team — Chief Technology Office — Telstra

 

From: openid-general-bounces@... [mailto:openid-general-bounces@...] On Behalf Of Allen Tom
Sent: Wednesday, 21 October 2009 2:09 PM
To: Andrew Arnott
Cc: general
Subject: Re: [OpenID] wiki.openid.net openid support broken

 

I also delegated my domain to myopenid.com, but I'm able to login to the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/"

YMMV
Allen


Andrew Arnott wrote:

This is what I sent to pbworks via their contact page:

 

The OpenID login that you have doesn't correctly handle delegation. When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com with an openid.identity value of http://blog.nerdbank.net/ instead of the correct value of http://andrew.arnott.myopenid.com/ This makes it impossible for me to login. Please fix this asap.

 

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general

_______________________________________________
general mailing list
general@...
http://lists.openid.net/mailman/listinfo/openid-general