https://forge.in2p3.fr/https://forge.in2p3.fr/favicon.ico?16780521162013-06-09T11:32:00ZIN2P3-ForgeIN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106122013-06-09T11:32:00ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul><li><strong>File</strong> <a href="/attachments/4392">PastedGraphic-1.png</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/4392/PastedGraphic-1.png">PastedGraphic-1.png</a> added</li></ul> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106132013-06-09T11:32:51ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul></ul><p>Remarque à côté : On peut voir que redmine a un petit problème avec le traitement de deux attachments à nom identique.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106152013-06-09T15:15:54ZKnödlseder Jürgen
<ul><li><strong>File</strong> <a href="/attachments/4393">certificat.jpg</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/4393/certificat.jpg">certificat.jpg</a> added</li></ul><p>Here also another problem report for me. Safari 5.1.9 on Mac OS X 10.6. It even does not ask for anything, I just get an error.<br /><img src="https://forge.in2p3.fr/attachments/download/4393/certificat.jpg" style="width:100%;" alt="" /></p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106162013-06-09T16:07:33ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul><li><strong>Assigned To</strong> set to <i>ROUET Jean-René</i></li></ul><p>Juste pour essayer de dessiner une esquisser claire de la situation : Tous ces utilisateurs réussissent-ils à utiliser redmine avec Firefox sur leur Mac ?</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106172013-06-09T16:14:51ZKnödlseder Jürgen
<ul></ul><p>Dirk Hoffmann wrote:</p>
<blockquote>
<p>Juste pour essayer de dessiner une esquisser claire de la situation : Tous ces utilisateurs réussissent-ils à utiliser redmine avec Firefox sur leur Mac ?</p>
</blockquote>
<p>Je pense que oui, car après avoir dit que Safari pose problème, tous (sauf un) on réussi de se connecter avec un autre navigateur). D'ailleurs: ça marche aussi avec l'iPhone.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106322013-06-10T00:10:39ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul></ul><p>This looks very similar to the problem as reported by David:<br /><a class="external" href="http://xml.pcpc.org/workspace/files/fixingclientcertificateonsafarimac.pdf">http://xml.pcpc.org/workspace/files/fixingclientcertificateonsafarimac.pdf</a></p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106332013-06-10T00:14:39ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul></ul><p>Dirk Hoffmann wrote:</p>
<blockquote>
<p>This looks very similar to the problem as reported by David:<br /><a class="external" href="http://xml.pcpc.org/workspace/files/fixingclientcertificateonsafarimac.pdf">http://xml.pcpc.org/workspace/files/fixingclientcertificateonsafarimac.pdf</a></p>
</blockquote>
<p>And here is another report that states Safari unexpectedly pops up the client certificat dialog, although it has not been requested from the server:<br /><a class="external" href="https://discussions.apple.com/thread/3871083?start=0&tstart=0">https://discussions.apple.com/thread/3871083?start=0&tstart=0</a></p>
<p>However, Jürgen's symptoms (comment on <a class="issue tracker-3 status-5 priority-3 priority-lowest closed" title="Support: Accès à redmine via oupiou difficile pour utilisateurs CTA (Closed)" href="https://forge.in2p3.fr/issues/4631#note-3">#4631#note-3</a>) are different. (And they have not appeard two weeks ago to him.) Maybe we have two different problems here.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106522013-06-10T21:58:30ZROUET Jean-René
<ul></ul><p>I confirm the following comportment :<br />you can use safari 6.0.5 with oupiou.in2p3.fr without a certificate : you have to click cancel on the window proposing the certificates.<br />before, it may be necessary to remove the "identity preference" set in keychain application for oupiou.in2p3.fr (safari remember the tuple website/certificate to present). quit safari and restart it, if you click cancel (keychain don't save any identity preference).<br />for safari 5.1.9 on snow leopard (10.6.8), i can't test it to confirm or not.</p>
<p>regards</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106642013-06-10T22:17:26ZKnödlseder Jürgen
<ul></ul><p>I have a report from a user which seems to contradict this:</p>
<blockquote>
<p>I am trying to log in to the Redmine system, following the procedure in the PDF attached. However I am not getting past step 2. I am using safari 6.0.5 on mac os x 10.8.4</p>
<p>When I hit 'CAS Sign in' I get s popup which says</p>
<p>WebProcess wants to sign using key "Apple ID Authentication 2012-08-20 15:30:26 GMT +01:00" in your keychain</p>
<p>If I deny this then I do not get access to the web page. If I allow it I am presented with a popup which says</p>
<p>The website "oupiou.in2p3.fr" did not accept the certificate "unknown"</p>
<p>I am offered 2 certificates to choose from, but selecting either results in the first popup listed above again.</p>
<p>Advice welcome</p>
</blockquote> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106662013-06-10T22:26:38ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul></ul><p>Jürgen Knödlseder wrote:</p>
<blockquote>
<p>I have a report from a user which seems to contradict this:</p>
</blockquote>
<p>I am not sure about this (not a Mac user and no way to reproduce Mac behaviour).</p>
<p>But:</p>
<blockquote><blockquote>
<p>WebProcess wants to sign using key "Apple ID Authentication 2012-08-20 15:30:26 GMT +01:00" in your keychain</p>
</blockquote></blockquote>
<p>This seems to indicate that the user still has interfering certificates in his keychain, doesn't he?</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=106682013-06-10T22:53:36ZKnödlseder Jürgen
<ul></ul><p>Dirk Hoffmann wrote:</p>
<blockquote>
<p>Jürgen Knödlseder wrote:</p>
<blockquote>
<p>I have a report from a user which seems to contradict this:</p>
</blockquote>
<p>I am not sure about this (not a Mac user and no way to reproduce Mac behaviour).</p>
<p>But:</p>
<blockquote><blockquote>
<p>WebProcess wants to sign using key "Apple ID Authentication 2012-08-20 15:30:26 GMT +01:00" in your keychain</p>
</blockquote></blockquote>
<p>This seems to indicate that the user still has interfering certificates in his keychain, doesn't he?</p>
</blockquote>
<p>Probably. But I think most user will not manage to remove properly interfering keychains anyways, so if it goes to this level of system management required, it'll hard to be used by anyone having Safari.</p>
<p>And on my system I even have no clue which certificates to remove ...</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=108292013-06-18T13:06:28ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul><li><strong>% Done</strong> changed from <i>0</i> to <i>80</i></li></ul><p>My conclusion would be: "Safari is not suitable for use of modern tools like Redmine or SharePoint."</p>
<p>Suggest to close this ticket.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=108442013-06-18T17:13:02ZROUET Jean-René
<ul></ul><p>Dirk Hoffmann wrote:</p>
<blockquote>
<p>My conclusion would be: "Safari is not suitable for use of modern tools like Redmine or SharePoint."</p>
<p>Suggest to close this ticket.</p>
</blockquote>
<p>I use safari on MacOS X 10.8 without any problem, but i admit that modify keychain preferences is not easy even if it's more powerful than firefox. I understand that the solution to migrate to 10.8 is not a really good solution. May be Chrome is the good alternative.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=128652013-11-14T09:25:31ZHoffmann Dirkhoffmann@cppm.in2p3.fr
<ul></ul><p>I add S. Schlenstedt as observer to this ticket, as he reported the same problem again to the ACTL list. I am afraid, it is void, but in case you can give him a hint how to solve his problems on Safari / Mac.</p>
<p>Otherwise, the ticket may be closed, I think.</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=144242014-02-10T14:40:08ZBarbier Cecile
<ul><li><strong>Assigned To</strong> changed from <i>ROUET Jean-René</i> to <i>Barbier Cecile</i></li></ul> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=144522014-02-10T17:48:12ZBarbier Cecile
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li><li><strong>% Done</strong> changed from <i>80</i> to <i>100</i></li></ul><p>Updated user documentation (<a class="external" href="https://portal.cta-observatory.org/WG/DM/DM_wiki/SW_DEV/Software%20tools%20library/CTA_SWTOOLS.pdf">https://portal.cta-observatory.org/WG/DM/DM_wiki/SW_DEV/Software%20tools%20library/CTA_SWTOOLS.pdf</a> currently under modification) with "use Firefox or Chrome or Mac OS X 10.8+"</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=178232014-06-05T22:42:31ZOkumura Akiraoxon@mac.com
<ul></ul><p>Does the workaround written in the following thread help this issue?<br /><a class="external" href="https://discussions.apple.com/message/23846596#23846596">https://discussions.apple.com/message/23846596#23846596</a><br />Please try changing an Apache setting "SSLVerifyClient optional".</p> IN2P3-Forge - Support #4631: Accès à redmine via oupiou difficile pour utilisateurs CTAhttps://forge.in2p3.fr/issues/4631?journal_id=225582015-01-23T12:55:56ZOkumura Akiraoxon@mac.com
<ul></ul><p>Hello Cecile,</p>
<p>I would like to inform you that this login issue also appears when the user is using OS X 10.8+ and Safari 6+. I use OS X 10.9.5 (Mavericks) and Safari 7.1.2, and still encounter this issue occasionally. Because "com.apple.idms..." suddenly appears in my Keychain repeatedly. But I do not know what system change triggers this.</p>
<p>I would appreciate it if you could add a short explanation about the workaround (i.e. removing "com.apple.idms..." from Apple Keychain) in a future version of the documentation. In addition, it would be also appreciated if the server manager could try the proposal I posted 8 months ago.</p>
<p>Akira</p>