jasig-cas IRC Logs-2011-11-11

[06:49:02 CST(-0600)] <phrearch> hello

[06:49:04 CST(-0600)] <phrearch> anyone here?

[06:49:19 CST(-0600)] <phrearch> any idea where this error comes from? http://paste.pocoo.org/show/506235/

[06:49:25 CST(-0600)] <wgthom> hi

[06:49:25 CST(-0600)] <phrearch> trying to create a maven overlay

[06:49:30 CST(-0600)] <phrearch> hello wgthom

[06:50:09 CST(-0600)] <phrearch> seems like it uses a property i defined earlier in cas.properties. but after removing it its still there after a rebuild

[06:50:11 CST(-0600)] <wgthom> 'ticketGrantingTicketUniqueIdGenerator' defined in ServletContext resource [/WEB-INF/spring-configuration/uniqueIdGenerators.xml]: Could not resolve placeholder 'host.name'

[06:50:22 CST(-0600)] <wgthom> check your cas.properties

[06:50:43 CST(-0600)] <phrearch> that one is empty, but it doesnt flush the old values it seem

[06:50:57 CST(-0600)] <phrearch> shouldnt mvn clean package reset all values?

[06:51:02 CST(-0600)] <wgthom> not sure what you mean

[06:51:29 CST(-0600)] <wgthom> mvn clean will remove your the 'target

[06:51:32 CST(-0600)] <wgthom> dir

[06:51:41 CST(-0600)] <phrearch> well, that ticketgranting reference was in src/main/webapp/WEB-INF/cas.properties first, but i removed it again and rebuild with mvn clean package

[06:51:43 CST(-0600)] <wgthom> mvn pacakge will overlay your files on the the speicific cas version

[06:52:11 CST(-0600)] <wgthom> removed the file?

[06:52:35 CST(-0600)] <phrearch> no, the reference to the ticketgranting in cas.properties

[06:52:51 CST(-0600)] <phrearch> im not sure, maybe i need to mess in the target dir?

[06:53:29 CST(-0600)] <wgthom> not following you.

[06:53:39 CST(-0600)] <wgthom> you should not have to mess with target dir

[06:53:50 CST(-0600)] <wgthom> what ref did you remove from cas.props?

[06:54:02 CST(-0600)] <phrearch> hm. well every time i make a change in the overlay, i expect the resulting war file to reflect the changes i made in /sr/main/webapp/WEB-INF

[06:54:15 CST(-0600)] <phrearch> not sure if thats correct

[06:54:46 CST(-0600)] <wgthom> yes. after mvn clean pacakge…the change in /src/ will be overlayed on the cas.war

[06:55:12 CST(-0600)] <wgthom> "host.name" must be in cas.properties

[06:55:24 CST(-0600)] <wgthom> if you removed it in your overlay…you need to put it back.

[06:55:43 CST(-0600)] <wgthom> running mvn clean package won't put it back into your overlay files in src

[06:55:52 CST(-0600)] <phrearch> aha, maybe i should just remove the whole file

[06:56:08 CST(-0600)] <wgthom> yes, unless you need some local change to it

[06:57:13 CST(-0600)] <phrearch> ok great. i thought an empty cas.properties wont harm, but it does apperently

[06:57:22 CST(-0600)] <phrearch> cas runs again

[06:57:27 CST(-0600)] <phrearch> thanks

[06:57:37 CST(-0600)] <wgthom> yes, since your empty file is getting overlayed onto the cas.war and blowing away required config

[06:58:00 CST(-0600)] <phrearch> i see

[06:58:03 CST(-0600)] <phrearch> lots to learn

[06:58:13 CST(-0600)] <phrearch> im trying to setup mysql auth in deployerConfigContext.xml

[06:58:15 CST(-0600)] <wgthom> one downside of mvn overlay method….if you want to introduce changes they must go along with the required file out of the cas dist

[06:58:48 CST(-0600)] <wgthom> ok. you'll want to first copy deployerConfig out of the cas dist into your /src/ dir and then make changes there

[06:59:11 CST(-0600)] <wgthom> each upgrade you'll have to diff any changes in the cas dist

[06:59:15 CST(-0600)] <phrearch> yea got that. added a datasource bean and a QueryDatabaseAuthenticationHandler

[06:59:24 CST(-0600)] <phrearch> aha ok

[06:59:47 CST(-0600)] <phrearch> made a simple db to check against md5

[07:01:10 CST(-0600)] <phrearch> i read the cas protocol a while ago, but was wondering whether the cas server checks against the credential store on each request

[07:01:27 CST(-0600)] <wgthom> "each request?

[07:01:44 CST(-0600)] <wgthom> cas only does primary authN when necessary

[07:02:23 CST(-0600)] <phrearch> well, suppose a user sends a request to an app. the app sends a message to cas through cas-client. does cas check against the credential store on each request, or just whether the ticket is still valid in some in-memory db?

[07:02:53 CST(-0600)] <phrearch> at least, thats what i imagines what happens when doing a request

[07:03:03 CST(-0600)] <phrearch> imagine

[07:04:36 CST(-0600)] <wgthom> once the app session is established cas is mostly out of the picture

[07:04:49 CST(-0600)] <wgthom> primary authN is only done to establish the cas sso session

[07:05:27 CST(-0600)] <phrearch> aha, so the app is responsible for the session?

[07:05:43 CST(-0600)] <wgthom> of course

[07:05:50 CST(-0600)] <wgthom> cas is not a session manager

[07:06:18 CST(-0600)] <phrearch> aah ok. so suppose cas has a web service as credential store, then it wouldnt add another http call on each request

[07:06:29 CST(-0600)] <phrearch> like user -> app -> cas -> webservice

[07:06:47 CST(-0600)] <wgthom> user interacts with cas directly

[07:06:52 CST(-0600)] <wgthom> for primary authN

[07:07:46 CST(-0600)] <phrearch> hm, like the app redirects to cas?

[07:08:15 CST(-0600)] <wgthom> y

[07:08:21 CST(-0600)] <phrearch> i should reread the whole protocol thing

[07:08:32 CST(-0600)] <phrearch> especially the ticket part is a bit confusing to me

[07:09:05 CST(-0600)] <wgthom> http://www.youtube.com/watch?v=Ik_11Y17ASg

[07:09:54 CST(-0600)] <phrearch> aha thanks!

[07:10:07 CST(-0600)] <wgthom> my pleasure.

[07:23:30 CST(-0600)] <phrearch> hm, a custom passwordencoder shouldnt end up in authenticationHandlers?

[07:23:55 CST(-0600)] <phrearch> http://paste.pocoo.org/show/506253/

[07:24:14 CST(-0600)] <phrearch> somehow it cant find the reference

[07:26:11 CST(-0600)] <phrearch> ah got it. needed to add it to the outer bean

[12:59:17 CST(-0600)] <Ozy_work> no meeting today?

[12:59:27 CST(-0600)] <wgthom> hi

[12:59:36 CST(-0600)] <apetro_> checking in

[13:00:01 CST(-0600)] <apetro_> agenda bash?

[13:00:23 CST(-0600)] <apetro_> agendum: automatic registration of services management service

[13:00:46 CST(-0600)] <apetro_> agendum: enhancing theme support in CAS 3.5 to afford per-theme JSPs rather than just per-theme CSS

[13:00:57 CST(-0600)] <apetro_> agendum: LPPE

[13:01:05 CST(-0600)] <Ozy_work> yay!

[13:01:54 CST(-0600)] <apetro_> agendum: Jasig UnConference recap / discussion?

[13:03:16 CST(-0600)] <wgthom> lil distracted at this time...

[13:03:20 CST(-0600)] <apetro_> yeah

[13:03:23 CST(-0600)] <apetro_> I'm thinking that

[13:03:43 CST(-0600)] <apetro_> those were fun agenda items if there were a critical mass to work with

[13:04:50 CST(-0600)] * apetro_ discovers his IRC client is apparently unstable

[13:05:07 CST(-0600)] <apetro_> 0zy_work , what do you want to discuss?

[13:09:08 CST(-0600)] <Ozy_work> LPPE

[13:09:13 CST(-0600)] <Ozy_work> sorry on the phone

[13:10:53 CST(-0600)] <apetro_> k

[13:11:00 CST(-0600)] <Ozy_work> back

[13:11:09 CST(-0600)] <Ozy_work> i was just lurking to follow LPPE

[13:11:26 CST(-0600)] <Ozy_work> we are holding off on our CAS upgrade to see where LPPE support goes

[13:11:51 CST(-0600)] <apetro_> wgthom seems essential to a good discussion of LPE, and he's a "lil distracted". How to resolve? Take to list? Discussion can happen now? Reschedule discussion?

[13:12:25 CST(-0600)] <Ozy_work> i'm fine either way

[13:12:34 CST(-0600)] <Ozy_work> i have nothing to really contribute

[13:12:44 CST(-0600)] <apetro_> Is we University of Northern Iowa?

[13:12:45 CST(-0600)] <Ozy_work> i have not had time to do anything with CAS lately

[13:12:49 CST(-0600)] <Ozy_work> indeed

[13:13:02 CST(-0600)] <Ozy_work> well, we being me at the univeristy of northern iowa

[13:13:10 CST(-0600)] <apetro_> of course you have something to contribute, somewhere on the spectrum of adoption to requirements articulation to QA to feature development.

[13:14:09 CST(-0600)] <apetro_> I think where it's at is, good discussion at UnConference. Andrew Tillinghast is reflecting LDAP account status in his CAS login workflow, in production.

[13:14:23 CST(-0600)] <Ozy_work> fair enough

[13:14:24 CST(-0600)] <apetro_> Has shared code, is working with that feature branch via pull requests etc. to share that code.

[13:14:38 CST(-0600)] <apetro_> Collaboration towards stability, and targeting this feature for CAS 3.5, as per roadmap.

[13:15:00 CST(-0600)] <apetro_> Last I heard there were some issues getting to clean pull requests. Some growing pains in learning to use Git effectively.

[13:16:03 CST(-0600)] <apetro_> So, there's code to look at and comment upon and envision how it will meet your needs, and that would be awesome.

[13:16:20 CST(-0600)] <apetro_> But even sharing that you're enough interested in this feature to hold up your CAS upgrade to try to get it is good feedback.

[13:16:31 CST(-0600)] <Ozy_work> well then

[13:16:41 CST(-0600)] <Ozy_work> it's holding us up because we are selfish, to be fair

[13:17:04 CST(-0600)] <apetro_> please do be selfish. Enlightened self interest is a beautiful thing.

[13:17:14 CST(-0600)] <Ozy_work> it took a lot of work to hack the module into fitting our needs when I installed CAS, and now we are stuck requiring those features

[13:17:38 CST(-0600)] <Ozy_work> we cannot upgrade if it cuts the ability to detect and reset expired passwords

[13:17:55 CST(-0600)] <apetro_> well then. Sounds like you have even more to contribute than you let on, if you're running this functionality in production today.

[13:17:58 CST(-0600)] <Ozy_work> and the lasat time I tried to get the patch to work, I ran out of time and never got it to work

[13:18:06 CST(-0600)] <Ozy_work> indeed we are

[13:18:10 CST(-0600)] <Ozy_work> it's slick, too

[13:18:13 CST(-0600)] <apetro_> you delivering the password reset experience directly in CAS login flow?

[13:18:23 CST(-0600)] <Ozy_work> and we are using Oracle, not Active Directory

[13:18:25 CST(-0600)] <Ozy_work> i think so

[13:18:28 CST(-0600)] <Ozy_work> well

[13:18:30 CST(-0600)] <Ozy_work> no

[13:18:33 CST(-0600)] <Ozy_work> I stand corrected

[13:18:42 CST(-0600)] <apetro_> as in, the form for password reset is delivered by, handled by CAS, or it merely links out to external app for providing actual password change experience?

[13:18:47 CST(-0600)] <Ozy_work> we use an iFrame when someone logs in with an expired password

[13:19:03 CST(-0600)] <Ozy_work> external app

[13:19:04 CST(-0600)] <apetro_> yup, cool

[13:19:10 CST(-0600)] <Ozy_work> want to test it?

[13:19:22 CST(-0600)] <Ozy_work> see it in action?

[13:19:24 CST(-0600)] <apetro_> sure

[13:19:43 CST(-0600)] <Ozy_work> https://castest.uni.edu/cas/login

[13:19:51 CST(-0600)] <Ozy_work> one second I need to drum you up an account

[13:19:53 CST(-0600)] <apetro_> I think the LPPE feature branch will meet your needs when Tillinghast's changes are merged in.

[13:20:28 CST(-0600)] <apetro_> some work to do for mapping from Oracle rather than AD, but I'd hope that will be an achievable bit of customization

[13:21:01 CST(-0600)] <Ozy_work> PM

[13:21:08 CST(-0600)] <Ozy_work> yeah

[13:21:14 CST(-0600)] <Ozy_work> that mapping was not terribly hard

[13:22:25 CST(-0600)] <apetro_> is castest.uni.edu available outside your network?

[13:22:44 CST(-0600)] <Ozy_work> hrm.... it is supposed to be, but the ACLs may have changed on me

[13:22:50 CST(-0600)] * apetro_ is not able to access castest.uni.edu

[13:23:12 CST(-0600)] <Ozy_work> try....

[13:23:21 CST(-0600)] <Ozy_work> https://casstage.uni.edu/cas/login

[13:23:34 CST(-0600)] <Ozy_work> does that load?

[13:23:43 CST(-0600)] <apetro_> yes

[13:23:48 CST(-0600)] <Ozy_work> awesome

[13:24:20 CST(-0600)] <Ozy_work> new password, same account

[13:24:39 CST(-0600)] <Ozy_work> i'm being lazy and using my lazyman scripts

[13:25:03 CST(-0600)] <Ozy_work> it's not the most clean thing in the world, but it works

[13:25:16 CST(-0600)] <Ozy_work> it also handles administatively locked accounts

[13:26:13 CST(-0600)] <apetro_> again, where "handles" is "advises user of problem via an error page" ?

[13:26:56 CST(-0600)] <Ozy_work> yeah

[13:27:07 CST(-0600)] <Ozy_work> by default, cas as authenticating them

[13:27:10 CST(-0600)] <Ozy_work> was*

[13:27:16 CST(-0600)] <Ozy_work> even though they were locked

[13:27:20 CST(-0600)] <Ozy_work> IIRC

[13:27:51 CST(-0600)] <Ozy_work> so now it catches them and it tells them to communicate with the office in charge of administrative locks

[13:27:56 CST(-0600)] <Ozy_work> the help desk, basically

[13:28:10 CST(-0600)] <apetro_> very nice

[13:28:18 CST(-0600)] <Ozy_work> yeah

[13:28:21 CST(-0600)] <apetro_> looks like a pretty seamless experience, despite the inline frame

[13:28:33 CST(-0600)] <Ozy_work> what doesnt work, though

[13:28:46 CST(-0600)] <Ozy_work> is that once you change your password, you go back, and have to re-log in

[13:28:58 CST(-0600)] <apetro_> right. Rather than continuing through flow.

[13:28:59 CST(-0600)] <Ozy_work> we were unable to have the iframe redirect to the cas login page

[13:29:05 CST(-0600)] <apetro_> hmm

[13:29:05 CST(-0600)] <Ozy_work> since that's hijacking

[13:29:07 CST(-0600)] <apetro_> right

[13:29:15 CST(-0600)] <Ozy_work> the iframe cannot control the parent

[13:29:21 CST(-0600)] <Ozy_work> silly security

[13:29:41 CST(-0600)] <apetro_> what about having the iframe experience terminate in a link/button that sends you to /cas/login?service=the_service_you_wanted

[13:30:00 CST(-0600)] <Ozy_work> i don't recall why that did not work

[13:30:02 CST(-0600)] <apetro_> or this issue is CAS login failed such that it didn't issue a tgt?

[13:30:05 CST(-0600)] <Ozy_work> i do recall we tried it

[13:30:07 CST(-0600)] <Ozy_work> oh

[13:30:10 CST(-0600)] <Ozy_work> that's part of it

[13:30:12 CST(-0600)] <apetro_> ah

[13:30:12 CST(-0600)] <apetro_> k

[13:30:23 CST(-0600)] <Ozy_work> you still need to authenticate with a new ticket

[13:30:44 CST(-0600)] <apetro_> interesting

[13:30:46 CST(-0600)] <Ozy_work> but I don't like the lack of a redirect shrug

[13:30:50 CST(-0600)] <Ozy_work> it works

[13:30:57 CST(-0600)] <Ozy_work> and it's been working since...

[13:30:59 CST(-0600)] <apetro_> well, good to know you've already implemented this, in production, and as you say, it works

[13:31:01 CST(-0600)] <Ozy_work> hmm

[13:31:08 CST(-0600)] <Ozy_work> it's been a long time

[13:31:58 CST(-0600)] <apetro_> I encourage you to stay engaged in the effort of mainstreaming this for 3.5., at whatever levels and ways you can.

[13:32:25 CST(-0600)] <Ozy_work> this is 3.3.5, and has been working since that version came out

[13:32:37 CST(-0600)] <Ozy_work> i'm trying to stay involved as much as I can

[13:32:52 CST(-0600)] <Ozy_work> i am swamped at work, though, so it's hard to do much other than monitor the meetings

[13:33:03 CST(-0600)] <Ozy_work> if someone has a concrete thing I can help with, I can find time

[13:33:21 CST(-0600)] <apetro_> well. Hope GitHub can facilitate monitoring of code and real work. It's a step up from meetings.

[13:34:12 CST(-0600)] <apetro_> concretely, I think it will be really helpful if you could try to locally implement (in a dev env) the lppe- feature branch just as soon as it's stable.

[13:34:23 CST(-0600)] <Ozy_work> that I can do

[13:34:36 CST(-0600)] <apetro_> either it meets your needs or it doesn't, will be awesome to shake that out before it ships in CAS 3.5

[13:34:46 CST(-0600)] <Ozy_work> any guesses on when that will be?

[13:34:54 CST(-0600)] <apetro_> Not sure.

[13:35:19 CST(-0600)] <apetro_> There was hope of working through github pull request cleanness at UnConf, but didn't quite get to bottom of it, so I think wgthom and atilling are still working through that.

[13:36:47 CST(-0600)] <Ozy_work> yeah

[13:36:57 CST(-0600)] <apetro_> as long as we're chatting anyway

[13:37:03 CST(-0600)] <apetro_> what are you doing for service registration?

[13:37:20 CST(-0600)] <Ozy_work> oh convoluted setup that rocks

[13:37:26 CST(-0600)] <Ozy_work> lol

[13:37:33 CST(-0600)] <apetro_> I sense a theme

[13:37:49 CST(-0600)] <apetro_> ok. What needs does the convolution meet / what makes it rock?

[13:38:05 CST(-0600)] <apetro_> feedback on this: ? http://www.unicon.net/blog/apetro/automatically_register_services_management_service

[13:38:12 CST(-0600)] <Ozy_work> we have an Oracle table that we load the urls into, along with the administrators name and their backups, and a description of the service

[13:38:32 CST(-0600)] <apetro_> interesting, so, tracking people associated with the services is important

[13:38:41 CST(-0600)] <Ozy_work> once a day (or on demand) we copy the appropriate information into the CAS DB tables

[13:38:49 CST(-0600)] <apetro_> how many registered services are we talking about?

[13:38:50 CST(-0600)] <Ozy_work> and then every 2 minutes the frontends refresh

[13:38:56 CST(-0600)] <Ozy_work> 347 at this time

[13:39:01 CST(-0600)] <Ozy_work> as of 15 minutes ago

[13:39:09 CST(-0600)] * apetro_ collects his jaw off the floor

[13:39:27 CST(-0600)] <Ozy_work> every cas enabled app is a service

[13:39:59 CST(-0600)] <Ozy_work> when you consider we have test, stage, and prod tiers, we have a lot of services to track

[13:40:16 CST(-0600)] <Ozy_work> and they are all in the same oracle table for logistical reasons

[13:40:22 CST(-0600)] <apetro_> ok

[13:40:24 CST(-0600)] <apetro_> this is awesome

[13:40:26 CST(-0600)] <Ozy_work> (we clone prod to test and stage regularly)

[13:40:31 CST(-0600)] <apetro_> are you doing any delegated administration of that table?

[13:40:38 CST(-0600)] <Ozy_work> yes and no

[13:40:40 CST(-0600)] <apetro_> as in, named admins of a service are allowed to edit that service?

[13:40:44 CST(-0600)] <Ozy_work> nope

[13:40:53 CST(-0600)] <Ozy_work> not directly

[13:41:01 CST(-0600)] <apetro_> k

[13:41:03 CST(-0600)] <Ozy_work> ok, so we have a move system in place

[13:41:13 CST(-0600)] <Ozy_work> they can edit test directly

[13:41:17 CST(-0600)] <Ozy_work> but not stage or prod

[13:41:20 CST(-0600)] <apetro_> ah

[13:41:26 CST(-0600)] <apetro_> that makes sense

[13:41:29 CST(-0600)] <Ozy_work> they make scripts and request they be moved

[13:41:35 CST(-0600)] <apetro_> right

[13:41:41 CST(-0600)] <Ozy_work> stage moves are twice a day, prod once a week

[13:41:51 CST(-0600)] <apetro_> so, you're kind of using test as a self-service service registration requesting tool

[13:42:02 CST(-0600)] <Ozy_work> for the most part

[13:42:15 CST(-0600)] <apetro_> see value in a service-provider-facing UI for requesting service registration / changes to registrations?

[13:42:17 CST(-0600)] <Ozy_work> not all service administrators can access the DB either, but they help each other

[13:42:21 CST(-0600)] <apetro_> Would your life be better if CAS had that?

[13:42:26 CST(-0600)] <Ozy_work> oh heck yes

[13:42:33 CST(-0600)] <Ozy_work> we are writing one.. sorta

[13:42:36 CST(-0600)] <apetro_> !

[13:42:47 CST(-0600)] <Ozy_work> not tied to cas, but tied to that oracle table

[13:42:52 CST(-0600)] <Ozy_work> it's on the list of projects

[13:42:59 CST(-0600)] * apetro_ encourages sharing it via GitHub, regardless of what it's tied to

[13:43:14 CST(-0600)] <Ozy_work> i'll see what I can do

[13:43:20 CST(-0600)] <Ozy_work> i am guessing there is no code written yet

[13:43:37 CST(-0600)] <apetro_> do you see value in these improvements, or are they mostly irrelevant to you? https://wiki.jasig.org/display/~awp9/CAS+Services+Registry+Improvements+for+CAS+3.5

[13:44:23 CST(-0600)] <Ozy_work> lookimng

[13:44:55 CST(-0600)] <Ozy_work> first off, we don't use the CAS provided webgui

[13:46:33 CST(-0600)] <apetro_> k.

[13:46:49 CST(-0600)] <Ozy_work> we also decided we cannot use the logout callbacks

[13:46:59 CST(-0600)] <apetro_> imho, an excellent choice

[13:47:10 CST(-0600)] <Ozy_work> too many applications would ignore that, adn let users be mislead into security concerns

[13:47:22 CST(-0600)] <apetro_> right there with ya

[13:47:28 CST(-0600)] <Ozy_work> like shibboleth, with is the biggest concern

[13:47:41 CST(-0600)] <Ozy_work> and our student information portal (grades, billing, etc)

[13:47:50 CST(-0600)] <apetro_> PeopleSoft?

[13:47:55 CST(-0600)] <Ozy_work> haha

[13:47:56 CST(-0600)] <Ozy_work> yeah

[13:48:08 CST(-0600)] <Ozy_work> and shibboleth = google/gmail

[13:48:14 CST(-0600)] <Ozy_work> thats the driving app

[13:48:35 CST(-0600)] <Ozy_work> not logging out of gmail on single logout was a ngihtmare of potential issues

[13:48:49 CST(-0600)] <Ozy_work> Interactive Service Matching Tester < – DO IT! THIS IS NEEDED

[13:49:19 CST(-0600)] <apetro_> voting on the tracking JIRA is welcome. https://issues.jasig.org/browse/CAS-996

[13:50:09 CST(-0600)] <apetro_> this is great feedback. Really helpful to hear from someone doing serious production service registration today regarding how services management should be made better

[13:50:10 CST(-0600)] <Ozy_work> done

[13:50:22 CST(-0600)] <Ozy_work> i'm full of feedback

[13:50:36 CST(-0600)] <Ozy_work> cas is a wonderful app

[13:50:49 CST(-0600)] <Ozy_work> and we have... strange... requirements sometimes

[13:50:58 CST(-0600)] <apetro_> appreciate your saying so. Tell all your friends. About the CAS bit, that is.

[13:51:22 CST(-0600)] <Ozy_work> we do

[13:51:28 CST(-0600)] <apetro_> the responsible party tracking thing is an interesting insight

[13:51:52 CST(-0600)] <Ozy_work> if you are interested, I can show you the table headers and explain the,

[13:51:53 CST(-0600)] <Ozy_work> them*

[13:52:14 CST(-0600)] <apetro_> the open-ended description field might work kinda okay for that today, but might be some profit in embiggening the registrations to track that

[13:52:23 CST(-0600)] <Ozy_work> yeah

[13:52:25 CST(-0600)] <apetro_> notify on errors, perhaps

[13:52:43 CST(-0600)] <apetro_> could get it down to a single email address per service

[13:52:55 CST(-0600)] <apetro_> and then if you want it to go to multiple folks, point it at an alias or list or something.

[13:53:15 CST(-0600)] <Ozy_work> well, we use SSO_ID, which is an internal, unique identifier that links to the person record in another table

[13:53:51 CST(-0600)] <apetro_> yup

[13:54:06 CST(-0600)] <apetro_> I suppose if it's a user id, that'd be great for affording some kind of service-owner-view on services registry management

[13:54:17 CST(-0600)] <apetro_> maybe these are two different features

[13:54:22 CST(-0600)] <apetro_> notify an email address on failure

[13:54:32 CST(-0600)] <apetro_> enumerate set of zero or more userids of service owners

[13:55:09 CST(-0600)] <apetro_> getting to the end of time I can afford for IRC today

[13:55:18 CST(-0600)] <Ozy_work> same here

[13:55:20 CST(-0600)] <apetro_> but I've really appreciated hearing about what you're really doing with CAS

[13:55:29 CST(-0600)] <apetro_> and welcome further feedback / discussion / input

[13:55:40 CST(-0600)] <Ozy_work> PM'd you the headers and an example entry

[13:55:44 CST(-0600)] <apetro_> want to follow through on incremental but real services management improvement for 3.5

[13:55:48 CST(-0600)] <apetro_> ]awesome

[13:55:51 CST(-0600)] <Ozy_work> i gave you my email if you have anything specific

[13:57:16 CST(-0600)] <Ozy_work> those two features are our most heavily.... needed... features

[13:57:35 CST(-0600)] <Ozy_work> all the changes are related to requirements, directly

[13:57:58 CST(-0600)] <apetro_> awesome

[13:58:45 CST(-0600)] <Ozy_work> have a good one, and dont hesitate to ask if there is anything we can do