User created a second Launchpad account; now gets mixed success/denied to various services
Bug #644824 reported by
Steve McInerney
This bug affects 4 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical SSO provider |
Fix Released
|
Critical
|
Unassigned | ||
Launchpad itself |
Fix Released
|
High
|
Stuart Bishop |
Bug Description
Have a funky one here:
User created a new, separate, Launchpad account.
This has now left them with two login.u.c accounts - old and new
But one launchpad.net account.
Said lp.net account has 2 openid's associated with it.
Obviously, both are: old and new login.u.c accounts.
The impact is that stuff they previously had no trouble accessing (via group permissions), is now sometimes working, sometimes denied.
We assume the dual openid's are somehow tied in.
account old is: 906913
account new is: 4665357 in login.u.c
The bug is two fold:
1. that the account creation seems to have left us in this half way split
2. recovering from the mess
Changed in launchpad: | |
importance: | Undecided → Critical |
tags: | added: canonical-losa-lp |
affects: | launchpad → launchpad-registry |
affects: | launchpad-registry → launchpad-foundations |
description: | updated |
summary: |
- User created a second SSO account; now gets mixed success/denied to - various services + User created a second Launchpad account; now gets mixed success/denied + to various services |
Changed in launchpad-foundations: | |
assignee: | nobody → Gary Poster (gary) |
Changed in launchpad-foundations: | |
assignee: | nobody → Edwin Grubbs (edwin-grubbs) |
Changed in launchpad-foundations: | |
assignee: | Edwin Grubbs (edwin-grubbs) → nobody |
tags: | removed: qa-untestable |
Changed in launchpad-foundations: | |
status: | Confirmed → Triaged |
assignee: | nobody → Gary Poster (gary) |
Changed in launchpad-foundations: | |
assignee: | Gary Poster (gary) → nobody |
Changed in canonical-identity-provider: | |
status: | New → Incomplete |
importance: | Undecided → Critical |
tags: | added: defect |
Changed in canonical-identity-provider: | |
milestone: | 1-commitment → none |
Changed in canonical-identity-provider: | |
status: | Confirmed → Fix Released |
To post a comment you must log in.
At the moment, the Canonical SSO (login. launchpad. net/login. ubuntu. com) links a Launchpad account to a single OpenId identifier. This is reset when you log into Launchpad. So if you log into Launchpad using your first login.ubuntu.com account, and then log into a different service with your second login.ubuntu.com account, your Launchpad credentials are not reported. Also, this information is replicated asynchronously from Launchpad to the Canonical SSO so there is lag that can cause confusion.
Solution should be to use one Canonical SSO account and stick with it.