#8765 Issues with SSO on websites
Closed: Will Not/Can Not fix 4 months ago by smooge. Opened 4 months ago by alciregi.

Hello.
I write to report and to collect information about an issue affecting some people.

For instance: https://ask.fedoraproject.org/t/problem-with-login-on-the-discourse/5851
The similar behaviour has been reported as well by various Outreachy 2020 people involved in the Fedora design team, and by some people in the Fedora Join Telegram group.

The issue, in short words, is as follow: trying to login to some Fedora websites (i.e. pagure.io and Ask Fedora) a login window appears, the user insert her credentials, and the login window appears again and again. This login window is managed by the browser. It has something to do with SSO [1]

I'm not sure, but it seems that the problem arises in MS Windows with Chrome and other browsers (Brave?). Firefox seems not affected by that issue.
On Fedora, for instance, I can't replicate this issue with any browser (I used Firefox, Chrome, Chromium).

Are you aware of this issue? What can be done? What we should suggest to people?

[1] https://fedoramagazine.org/set-up-single-sign-on-for-fedora-project-services/

@riecatnor @ankursinha


Yes, this is a windows bug I am pretty sure.

The workaround when this happens is to press 'cancel' in the pop up dialog windows popped up. There should be a web page with the actual fedora login, they then enter username/password on that page.

I'm not sure if there's any way for us to make this better...

Metadata Update from @smooge:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: authentication, high-trouble, low-gain

4 months ago

Metadata Update from @smooge:
- Issue close_status updated to: Will Not/Can Not fix
- Issue status updated to: Closed (was: Open)

4 months ago

@kevin you can disable GSSAPI negotiation for Windows browsers, for info see https://bugzilla.redhat.com/show_bug.cgi?id=1309041#c31

Oh cool. Where should that be set? On ipsilon web pods? The proxies? on ask?

Login to comment on this ticket.

Metadata