From Fedora Project Wiki

m (Edit URL of FAS git)
(11 intermediate revisions by 9 users not shown)
Line 1: Line 1:
{{autolang|base=yes}}
{{autolang|base=yes}}


{{Admon/important | Lost or forgotten password? | If you have lost or forgotten your Fedora Account System password, proceed to the [https://admin.fedoraproject.org/accounts/login login screen] and choose "Forgot Password?" to begin the recovery process.}}
{{Admon/important | [[/NewAccount| Create a new Fedora Account]] (includes wiki). [https://admin.fedoraproject.org/accounts/user/resetpass Forgot Password?] }}


= The Fedora Account System =
= The Fedora Account System =


The [https://admin.fedoraproject.org/accounts/ Fedora Account System]  keeps track of Fedora Project contributors and the projects they work on.  It is used to grant authentication and authorization to various components.  This currently includes the various [http://cvs.fedoraproject.org/ CVS repositories]  and [http://bugzilla.redhat.com/ Bugzilla] .
The [https://accounts.fedoraproject.org/ Fedora Account System]  keeps track of Fedora Project contributors and the projects they work on.  It is used to grant authentication and authorization to various components.  This currently includes the various [http://pkgs.fedoraproject.org/ git pkgs repositories]  and [https://bugzilla.redhat.com/ Bugzilla]. ''Note that bugzilla.redhat.com accounts are separate, as FAS can only grant additional privileges to existing accounts. Thus, you should register for bugzilla.redhat.com with the same email you use for your Fedora Account System account.''


== Using the Account System ==
== Using the Account System ==
{{Anchor|Using}}
{{Anchor|Using}}


The initial [https://admin.fedoraproject.org/accounts accounts] page has links to:
The main [https://accounts.fedoraproject.org/ Fedora Accounts page]. It mostly just links to:
* Login to the FAS (Completing the [[/NewAccount|  NewAccount]]  steps are necessary)
* [https://admin.fedoraproject.org/accounts/login? Log In] (Completing the [[/NewAccount|  NewAccount]]  steps are necessary)
* [[/NewAccount|  Apply for a new account]]  
* [https://admin.fedoraproject.org/accounts/user/resetpass Forgot Password?]
* [[Join|Joining Fedora]]
* [[/NewAccountNew Account]]  
 
* [[Join|Why Join?]]
== Other Tools ==
 
* [[/QueryAccountQuery an Account]]  
* [[/QueryGroup| Query a Group]]  


== Account System Internals ==
== Account System Internals ==


* Exporting the email aliases happens hourly, on the hour on bastion.
* Exporting the email aliases happens hourly, on the hour on bastion hosts.  
* Exporting CVS and shell accounts happens hourly, shortly after :30 on various boxes.
* Exporting git and shell accounts happens after users change information, and usually takes 10-20 minutes to complete.  
* Exporting the Bugzilla fedora_contrib group from the 'fedorabugs' group happens hourly, on the hour on ElliotLee's personal workstation inside Red Hat.
* Exporting the Bugzilla fedora_contrib group from the 'fedorabugs' group happens every 10 minutes.  


The account system code is available at https://github.com/fedora-infra/fas .  The project page is at https://fedorahosted.org/fas/.
The account system code is available at https://github.com/fedora-infra/fas.


== FAQ ==
== FAQ ==
Line 44: Line 40:
=== What is an SSH key, and why do I need one? ===
=== What is an SSH key, and why do I need one? ===


[http://openssh.org/ SSH] , short for Secure SHell, allows cryptographically authenticated and encrypted connections between computers.  SSH is used to tunnel CVS connections for the Fedora Project.  Anytime you use CVS with the Fedora Project, the transaction will be performed through an SSH connection.  Your SSH key will identify you to the CVS servers, and host keys on the CVS servers will allow your computer to verify the remote server, too. An SSH key is only needed if you are planning on contributing source code or content, working on Fedora Project website pages or using fedorapeople.org.
[http://openssh.org/ SSH] , short for Secure SHell, allows cryptographically authenticated and encrypted connections between computers.  SSH is used to tunnel Git connections for the Fedora Project.  Whenever you use Git with the Fedora Project, the transaction will be performed through an SSH connection.  Your SSH key will identify you to the Git servers, and host keys on the Git servers will allow your computer to verify the remote server, too. An SSH key is only needed if you are planning on contributing source code or content, working on Fedora Project website pages, or using fedorapeople.org.


See [[Cryptography]]
See [[Cryptography]]
Line 54: Line 50:
=== I encountered a strange error while using the Account System, what should I do? ===
=== I encountered a strange error while using the Account System, what should I do? ===


Send an email to the address at the bottom of this page, or file a ticket in the [https://fedorahosted.org/fas/ Account System Trac].
Send an email to the address at the bottom of this page.
 
=== How do I complete the CA? ===
[[Infrastructure/AccountSystem/CompleteCLA|See How to sign CA]]


=== Where can I get more information about the account system? ===
=== Where can I get more information about the account system? ===
Line 71: Line 64:
Individuals using multiple accounts without prior written approval will have all but one account terminated.
Individuals using multiple accounts without prior written approval will have all but one account terminated.


Users will be warned by email before any accounts are terminated
Users will be warned by email before any accounts are terminated.


[[Category:Infrastructure]]
[[Category:Infrastructure]]
[[Category:App]]
[[Category:in Production]]

Revision as of 11:37, 8 April 2021

The Fedora Account System

The Fedora Account System keeps track of Fedora Project contributors and the projects they work on. It is used to grant authentication and authorization to various components. This currently includes the various git pkgs repositories and Bugzilla. Note that bugzilla.redhat.com accounts are separate, as FAS can only grant additional privileges to existing accounts. Thus, you should register for bugzilla.redhat.com with the same email you use for your Fedora Account System account.

Using the Account System

The main Fedora Accounts page. It mostly just links to:

Account System Internals

  • Exporting the email aliases happens hourly, on the hour on bastion hosts.
  • Exporting git and shell accounts happens after users change information, and usually takes 10-20 minutes to complete.
  • Exporting the Bugzilla fedora_contrib group from the 'fedorabugs' group happens every 10 minutes.

The account system code is available at https://github.com/fedora-infra/fas.

FAQ

Do I need an account in the Fedora Account System?

Many of the Fedora sub-projects require an account in the Fedora Account System for contributors. The system allows management of contributor agreements, group memberships, a single sign-on usable throughout Fedora services, and more.

In short, if you wish to contribute to a project which uses FAS accounts, you need an account. If not, you do not.

What is the Contributor Agreement?

This is an agreement that helps to maintain Fedora's free and open source status by making certain that all contributions to the project are properly licensed, and ensuring that all contributions are available under an open source license, even if one is not explicitly declared. For more information, see Legal:Fedora Project Contributor Agreement

The FPCA replaces the former Individual Contributor License Agreement.

What is an SSH key, and why do I need one?

SSH , short for Secure SHell, allows cryptographically authenticated and encrypted connections between computers. SSH is used to tunnel Git connections for the Fedora Project. Whenever you use Git with the Fedora Project, the transaction will be performed through an SSH connection. Your SSH key will identify you to the Git servers, and host keys on the Git servers will allow your computer to verify the remote server, too. An SSH key is only needed if you are planning on contributing source code or content, working on Fedora Project website pages, or using fedorapeople.org.

See Cryptography

I have requested a group membership, and it shows as unapproved, what does this mean?

New group memberships require approval from the group administrator or a group sponsor. Different groups handle this differently. See the appropriate project pages for the group for the specific process. Some projects, such as PackageMaintainers, will require you to have a dedicated sponsor or complete a certain procedure. Other groups may grant your request as soon as they get around to it.

I encountered a strange error while using the Account System, what should I do?

Send an email to the address at the bottom of this page.

Where can I get more information about the account system?

Contact the management.

Account Termination

Voluntary

If you wish to deactivate your account for some reason, simply edit your account to remove all personal information, and mark the account as "Inactive."

Warning.png
Marking an account inactive
Once you mark your account inactive, you will be unable to use it for any authentication in Fedora. Make sure this is what you want to do before deactivating the account! (Inactive accounts can be reactivated by attempting to login to FAS through the Web site. A password reset is then required to reactivate the account.)

For cause

Malicious usage may result in account termination. Individuals using multiple accounts without prior written approval will have all but one account terminated.

Users will be warned by email before any accounts are terminated.