Getting OpenID working

Question

I'm having a little trouble getting OpenID working, either from the master or from the stackexchange branch. Trying to use ClaimID (which works for me here) produces the following error after typing in the user name and hitting enter:

The OpenId authentication failed: Server denied check_authentication

Just clicking the Google option, without even getting a chance to type my name, produces:

Sorry, but your input is not a valid OpenId

Trying Yahoo actually gets me to the Yahoo site, where I can log in, but the process fails on the return as it seems to be requesting an HTTPS address, and I don't have SSL running locally. Is that required for OpenID? I don't see any https for the ClaimId or Google attempts. Thanks!

Accepted Answer

Digging into the problem, it turned out that the python I'd compiled didn't have SSL support built in. The openid library was throwing an exception trying to use https, and this exception was getting swallowed in OSQA.

Now admittedly I'm a bit of a dolt for not having built python with SSL, but I think it might be helpful for others to log the errors encountered trying to connect to openid services. (Errors that might be of other types, like the service is not running any more etc.)

I suggest the following change to forum_modules/openidauth/consumer.py:

     try:
         auth_request = consumer.begin(user_url)
     except DiscoveryFailure, e:
         logging.debug('openid discovery failure for ' + user_url)
         logging.debug(e)

Answer 2

Hello, this site is running on the latest possible code (and at least 4 more others) and apparently there is in fact a problem with yahoo, but all the others seem to work. Anyway, I'll take a look to see if there's some problem (that may be the reason for yahoo not to work here) and be back to you in a while.

EDIT:

Hello again, I did some changes in the authentication consumer classes, however, I noticed no changes on my test environments, with the exception that now yahoo works again here, although it was still working in other places. I don't know if it will fix anything in your case, but please give it a try (use the master).

As a sidenote, the other day we noticed a small issue in one of the other sites, where yahoo was returning a different hash than it used to be, probably this is somehow related to our problem with yahoo.

Thanks for your feedback.

Getting OpenID working

Follow this question

Learn more about OSQA

Related questions