#9781 Email not accepted as Fedora login any more, gives strange errors
Closed: Upstream 2 days ago by kevin. Opened 22 days ago by oturpe.

Describe what you would like us to do:

Before the Fedora Accounts change, I used my email address when logging in to different Fedora services. Since Accounts were taken into use, it does not work anymore. Also, the generated error message is unclear and different from the message given if nonexistent username is given.

  • Pagure.io and src.fedoraproject.org gives: "Strange state: failure"
  • Wiki gives: "Auto-creation of a local account failed: You have not specified a valid username."
  • badges.fedoraproject.org ends in an apparently endless loop of loading badges.fedoraproject.or and id.fedoraproject.org alternatively, displaying only a white screen
  • accounts.fedoraproject.org gives the expected error message: "Unauthorized: bad credentials."

It would be great if email still worked like it used to. Of course that is not critical, because username works. In that case, there is still something wrong, because the login fails in a bad way for different services (but may actually require fixing at each individual service?).

When do you need this to be done by?

Not urgent, since using the username instead of email works

fas, when orig written allowed this.

3ish years ago: https://github.com/fedora-infra/fas/pull/263 we dropped this, so I am not sure how or why it was still working. ;(

I don't see this ability coming back, but will let others comment on it.

We should of course improve error messages here.

Just tried this on stage for src.stg.fedoraproject.org, and it seems ipsilon lets you authenticate against it with the email as username.

When trying to login to src.stg, it provides me with all my details to consent, but then fails when trying to acutally log back into src.stg

Metadata Update from @smooge:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: authentication, dev, high-trouble, medium-gain

19 days ago

This worked by accident in the past so we will need to see how to make it work by design. This means development work probably in noggin and ipsilon

So in my test setup locally, IPA / Noggin let me log in with email. Is there something in the prod/stage freeIPA config that is stopping a login using email?

I'm not at all sure. Perhaps @puiterwijk knows off the top of his head? :)

Do we really want to enable this? I would think we should just tell people to use their username instead of email.

I think we just want to no longer support using email as login. We thought we dropped it long ago, lets just really do so now.

We could definitely improve error messages however. Thats likely something on ipsilon...

Filed https://pagure.io/ipsilon/issue/351 so lets track that there.

Metadata Update from @kevin:
- Issue close_status updated to: Upstream
- Issue status updated to: Closed (was: Open)

2 days ago

Login to comment on this ticket.

Boards 1
dev Status: Backlog