Support an authentication ID for a user
Description
Attachments
is related to
Activity
Hudson CI Server April 18, 2014 at 6:08 AM
Integrated in sakai-trunk-java-1.7 #192 (See http://builds.sakaiproject.org:8080/job/sakai-trunk-java-1.7/192/)
Result = SUCCESS
Matthew Buckett March 7, 2014 at 8:50 AM
If you pull users both from a provider and user Sakai's internal database of users then then in it's current state the account validator doesn't work for the internal users.
The reason is that after an account has been validated the tool logs the user in by supplying some ExternalTrustEvidence. The ID is used to find the user (by AID) and as the user isn't in the provider it fails. Falling through to doing the lookup by EID fixes the issue.
Hudson CI Server March 1, 2014 at 5:12 AM
Integrated in sitestats trunk #905 (See http://builds.sakaiproject.org:8080/job/sitestats%20trunk/905/)
Result = SUCCESS
Hudson CI Server March 1, 2014 at 3:10 AM
Integrated in kernel-trunk #796 (See http://builds.sakaiproject.org:8080/job/kernel-trunk/796/)
Support Authentication ID.
This adds support for an Authentication ID which users can be searched on from outside the kernel and also supports using an authentication ID when container based authentication is being used. (Revision 306641)
Result = SUCCESS
Hudson CI Server March 1, 2014 at 2:38 AM
Integrated in search trunk #786 (See http://builds.sakaiproject.org:8080/job/search%20trunk/786/)
Support Authentication ID.
This adds support for an Authentication ID which users can be searched on from outside the kernel and also supports using an authentication ID when container based authentication is being used. (Revision 306641)
Result = SUCCESS
Here at Oxford we have two IDs for a user their authentication ID (used for authentication and generally know by the user) and and enterprise ID which is used for looking up users and finding group memberships. So we have enhanced Sakai to have 3 IDs for a user:
Internal ID (never changes).
Enterprise ID (normal Sakai EID).
Authentication ID (new ID that is used for authentication).
Some original work was done on allowing an authentication ID but it that was limited to being outside the kernel.
We want the ability to lookup people by AID (when adding then to the site).
NOTE: UserDirectoryService API change (need to update all 4 mocks in trunk code)