Export OpenIdIdentifier to Canonical SSO

Bug #644975 reported by Stuart Bishop
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical SSO provider
Fix Released
Critical
Łukasz Czyżykowski
Launchpad itself
Fix Released
High
Stuart Bishop

Bug Description

Currently, in the information we export to the Canonical SSO we can only link a Person to a single OpenIdIdentifier. We use the last OpenIdIdentifier that was used to log into Launchpad, This can still cause confusion such as Bug #644824 but is the best we can do with the current data model.

We should export the OpenIdIdentifier table to the Canonical SSO. I expect using the same mechanism is best for now - create a lp_OpenIdIdentifier mirror table and replicate that via Slony-I.

The Canonical SSO should use this information to map SSO accounts to Launchpad People instead of using lp_Account.

We can then drop lp_Account from replication, and drop the table.

Related branches

Gary Poster (gary)
Changed in launchpad-foundations:
status: New → Triaged
Gary Poster (gary)
Changed in launchpad-foundations:
importance: Undecided → High
assignee: nobody → Stuart Bishop (stub)
Revision history for this message
Launchpad QA Bot (lpqabot) wrote : Bug fixed by a commit
Changed in launchpad-foundations:
milestone: none → 10.10
tags: added: qa-needstesting
Changed in launchpad-foundations:
status: Triaged → Fix Committed
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
Stuart Bishop (stub)
tags: added: qa-ok
removed: qa-needstesting
Curtis Hovey (sinzui)
Changed in launchpad-foundations:
status: Fix Committed → Fix Released
Revision history for this message
Stuart Metcalfe (stuartmetcalfe) wrote :

Marking as "Incomplete" until we have confirmation that this change has landed on the production db

Changed in canonical-identity-provider:
importance: Undecided → Critical
status: New → Incomplete
Revision history for this message
Stuart Bishop (stub) wrote :

Its on the production databases.

Changed in canonical-identity-provider:
status: Incomplete → Confirmed
Revision history for this message
Stuart Metcalfe (stuartmetcalfe) wrote :

This hasn't yet landed on the sso staging db

Changed in canonical-identity-provider:
status: Confirmed → Incomplete
Revision history for this message
Stuart Metcalfe (stuartmetcalfe) wrote :

This landed on the staging db today

Changed in canonical-identity-provider:
status: Incomplete → Confirmed
milestone: none → 1-commitment
tags: added: defect
Changed in canonical-identity-provider:
assignee: nobody → Łukasz Czyżykowski (lukasz-czyzykowski)
status: Confirmed → In Progress
Changed in canonical-identity-provider:
milestone: 1-commitment → 2-implementation
Changed in canonical-identity-provider:
importance: Critical → High
tags: added: kb-defect
tags: added: kb-task
removed: kb-defect
Changed in canonical-identity-provider:
importance: High → Critical
tags: added: kb-defect
removed: kb-task
Changed in canonical-identity-provider:
status: In Progress → Fix Committed
milestone: 2-implementation → 3-internal-qa
Revision history for this message
Julien Funk (jaboing) wrote :

Untestable. Pass on UEC pending smoke tests.

Revision history for this message
Dave Morley (davmor2) wrote :

Realistic Untestable this is a corner case and therefore near impossible to setup and actually test in a realistic manner. I am therefore marking this as qa-untestable and leaving it to those who are in this minority to report back on if it is fixed for them.

tags: added: qa-untestable
Changed in canonical-identity-provider:
milestone: 3-internal-qa → 11.02
Changed in canonical-identity-provider:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.