OpenID for non-SuperUsers

Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there.  While my knowledge on the subject is far from complete, this post is my attempt to share what I have learned with others.

The target audience for the bulk of this post is people who are capable of adding autodiscovery links to their blog templates, may be able to install a small PHP script and/or know what a HTTP header is.

Claim Your Blog

For starters, one thing I didn’t make clear is that I was expecting people to continue to use their blog or homepage URI’s; what I did not expect was that people would start to use their identity URIs instead.  These people have identities hosted by LiveJournal, Verisign, MyOpenID, 2idi, Technorati, Vox, TypeKey, and others.

What I expected would happen instead is that people would claim their blogs using their identity.  In OpenID terms, this is called delegation, which sounds scary, but in reality it is just a form of autodiscovery, just like you do for your feed.

If you have an OpenID identity and a blog, then follow these instructions.  If you don’t have an OpenID identity, you can get one for free at MyOpenIDHere’s mine.

Given such an identity, copy the following into the head section of your weblog, adjusting the two URIs as appropriate:

<link rel="openid.server" href="http://www.myopenid.com/server" />
<link rel="openid.delegate" href="http://samruby.myopenid.com/" />

That’s pretty much it.  What this says is that the web page in question is owned by the owner of http://samruby.myopenid.com/ and furthermore http://www.myopenid.com/server may be used to verify ownership of http://samruby.myopenid.com/.

By claiming your blog or homepage in this fashion, you can then use your URI (i.e., the URI of your blog or homepage) as your identity.  Having this level of indirection is a good thing.  If you ever become dissatisfied with your identity provider for whatever reason, you can easily and transparently switch providers.

When done, feel free to check your setup.  You may find that the autodiscovery features of most OpenID libraries are not as robust as those for feed autodiscovery.  Never fear, there is a solution for this later in this post.

Master Of Your Domain

This next step is entirely unnecessary, but I suspect that it will be popular with many of the readers of this blog.  Letting someone else host your identity is actually good from a security perspective, after all, any fool can vouch for themselves (and below, I’ll show you how), but having somebody else vouch for you is often better, if for no other reason, it gives the person who is checking up on you a place to report spammers.

Of course, services can be compromised; but as already stated, you can always switch providers quickly.

The real downside is privacy.  It gives somebody else partial information about a portion of your online habits.  And much of the information that they don’t have is readily discoverable.

There is also control issues.  After all, what good is a decentralized identity system where your only real choice is to delegate to a centralized server that you don’t control?

The good news is that it is easy.  You don’t need any of these libraries.  Simply download phpMyID.  Place the one php file in on your web server and modify two lines:

'auth_username' =>      'test',
'auth_password' =>      'e8358914a32e1ce3c62836db4babaa01'

In the first, put your desired username (Duh!), and in the second one put the md5 hash of the following: username:phpMyID:password.  There are many ways to compute this, and the README suggests the following for Unix/OSX:

echo -n 'username:phpMyID:password' | openssl md5

Or the following for Windows:

md5.exe -d"username:phpMyID:password"

I’ll add that you can even get by with:

echo '<? print md5("username:phpMyID:password") ."\n" ?>' | php

Now visit the page you just updated in your browser.  It will identify itself with something like this: http://intertwingly.net:80/id/MyID.php.  Place this information in both the openid.server and openid.delegate autodisovery links, and  re-verify your setup.

Unlike other implementations, this one avoids using HTML forms for login, and instead uses HTTP digest authentication.  This is a good thing.

Update: phpMyId has changed a bit since the time this was originally written.

Decrufting

So far, you have been able to host your own identity, but let’s face it, the URIs are a bit crufty, eh?.  This shouldn’t matter much to anyone, but cleaning this up a bit will provide a bit of future proofing should you ever want to use a different implementation to host your own identity.

Often you can decruft your openid.server URI simply by renaming the script from MyID.php to index.php.  You may need you to tweak your DirectoryIndex, which in turn may require AllowOverride Indexes to be set in your Apache configuration.  Simply by doing this, my decrufted server is now:

http://intertwingly.net/id/

Decrufting your openid.delegate is even easier.  Simply find the line in the php script that sets $idp_url and add another line after it which sets it to the value you want it to be.  By setting it to my weblog address, I can eliminate the need for a openid.delegate autodiscovery link entirely!

$idp_url = 'http://intertwingly.net/blog/';

YADIS

At this point, I have two Identities, but I can only declare one, and can only declare it in a rather fragile and HTML specific manner.  This is good enough for most purposes, and one can certainly stop there.

But let’s not.

YADIS defines a simple format for declaring multiple identities, potentially using multiple different protocols.  Here’s what mine looks like so far:

<xrds:XRDS xmlns:xrds="xri://$xrds" xmlns="xri://$xrd*($v*2.0)"
      xmlns:openid="http://openid.net/xmlns/1.0">
  <XRD>

    <Service priority="1">
      <Type>http://openid.net/signon/1.0</Type>
      <URI>http://intertwingly.net/id/</URI>
      <openid:Delegate>http://intertwingly.net/blog/</openid:Delegate>
    </Service>

    <Service priority="2">
      <Type>http://openid.net/signon/1.0</Type>
      <URI>http://www.myopenid.com/server</URI>
      <openid:Delegate>http://samruby.myopenid.com/</openid:Delegate>
    </Service>

  </XRD>
</xrds:XRDS>

Not too bad, eh?  Two services, one of a lower numerical (and therefore higher logical) priority that I host myself, and one using MyOpenID; both associated with http://openid.net/signon/1.0.  This information is simultaneously richer, more extensible, and easier to consistently parse than autodiscovery links placed in HTML as practiced on the web today.  Just be sure to return this information with the correct MIME type:

AddType application/xrds+xml .xrdf

Now, how do I connect it in with my weblog?  It turns out that there are multiple ways, so let me start out with what I consider the best way to be: redirecting requests based on the value of the HTTP accept header, thus:

RewriteCond %{HTTP_ACCEPT} application/xrds\+xml
RewriteCond %{HTTP_ACCEPT} !application/xrds\+xml\s*;\s*q\s*=\s*0(\.0{1,3})?\s*(,|$)
RewriteRule ^$ http://intertwingly.net/public/yadis.xrdf [R,L]

I like that way best because tools looking for my identity don’t first have to fetch my blog at all.  The next best way involves a HTTP header which you can set thus:

<Files index.html>
  Header onsuccess set X-XRDS-Location http://intertwingly.net/public/yadis.xrdf
</Files>

Finally, one can put this information in the HEAD sections of HTML documents, but only as a last resort:

<meta http-equiv="X-XRDS-Location" content="http://intertwingly.net/public/yadis.xrdf">

As always, when done, check your setup.  In fact, you might find it instructive to check mine.

Recap

Astute readers will note that I still have the link in my main weblog home page.  That’s a fallback for consumers that don’t (yet) support YADIS.

All told: I signed up for one free service, installed and tailored one PHP script, added one line to my weblog template, created one simple XML file and added a total of four lines to my .htaccess files.


Sam, I think you want ref="openid.delegate" for href="http://samruby.myopenid.com/", not “openid.server”.

Posted by Don Park at

I think you want ref="openid.delegate"

Fixed, thanks!

Posted by Sam Ruby at

Hi Sam,

Nice article. I think your “Here’s mine” link wants to link to https://samruby.myopenid.com/ instead of https://www.myopenid.com/ .

Posted by Parand at

“Here’s mine” link wants to link to https://samruby.myopenid.com/

Fixed, thanks!

Posted by Sam Ruby at

Frankly, I found the OpenID spec confusing to read because it used common terms in an uncommon  mix of semantics. For example, ‘End User’ as ‘cardholder’ and ‘Consumer’ as web service.

Posted by Don Park at

Don,

“Consumer” was OpenID 1.0 terminology. Now that other groups have joined the party (LID, DIX, XRI, ...) OpenID 2 has switched to calling it the “Relying Party”, which is apparently the standard terminology for such things. (I’d never heard of it before this, personally!)

As far as I’m aware, the term “cardholder” does not appear anywhere in any OpenID specification past, present or future. The end user is called the end user.

The other “crazy term” was “IdP” (for “Identity Provider”, in 1.0 simply called the “server"), but that has recently been renamed to simply "OpenID Provider” (or "OP"), which I think is much clearer.

Posted by Martin Atkins at

Thanks for the step-by-step tips.  I wasn’t sure where I should go for an OpenID provider.  Ideally someone already frequently handling my ID, such as Google or Yahoo should be my provider.  Someday, perhaps...

Posted by Stephen Duncan Jr at

[from jzawodn] OpenID for non-SuperUsers

Sam shows us what it takes to claim your site using OpenID and start using your new identity. It’s surprisingly easy....

Excerpt from del.icio.us/network/calligraphreak at

Martin, it’s always good to go from ‘crazy’ to ‘clear’. ;-p

Re ‘cardholder’, that’s just brainfart from my payauth past.

Posted by Don Park at

“Options +Indexes” only enables the mod_autoindex module, which is not needed when the DirectoryIndex directive contains a filename mentioned inside a directory (as is your intent with index.php).

Posted by David Wilson at

“Options +Indexes” only enables the mod_autoindex module, which is not needed

Fixed, thanks!  I’ve also added a mention of AllowOverride Indexes, which is probably what I was originally thinking of.

Posted by Sam Ruby at

This blog is OpenIDfied

Thanks to the great instructions from Sam, this blog should now be properly OpenID-enabled. Or at least they say so. I know at least one guy who will be happy to know I’m embracing this stuff, even though he hasn’t got any OpenID...

Excerpt from Elzeviro at

Jeremy Zawodny : OpenID for non-SuperUsers - OpenID for non-SuperUsers: Sam shows us what it takes to claim your site using OpenID and start using your new identity. It’s surprisingly easy. wearehugh : Sam Ruby: OpenID for non-SuperUsers Tags :...

Excerpt from HotLinks - Level 2 at

Sam does OpenID

Sam Ruby’s recent interest in OpenID might be the best thing that could happen. With the size of his audience (2234 subscribers on Bloglines only), his deep understanding of how to spread stuff like this and his desire to hack it is bound to...

Excerpt from protocol7 at

OpenID for non-Super Users

[link][more]...

Excerpt from reddit.com: programming - what's new online at


Sam Ruby: OpenID for non-SuperUsers

Sam Ruby: OpenID for non-SuperUsers by greut & 1 other(s) openid tutorial Copy | React (0) [link]...

Excerpt from Public marks at

Sam Ruby: OpenID for non-SuperUsers....

Excerpt from Hack the Planet at

More OpenID

Sam Ruby provides complete introduction to OpenID. I wrote about it on last day of the last year, when I started using my blog as my identity. But Sam has given further illustrations of hosting the identity on your own server without much effort,...

Excerpt from iface thoughts at

Thanks for this great write-up. I’ve been meaning for some time to switch my identity from using html-based discovery to using full Yadis discovery. Your mod_rewrite patterns will definitely come in handy.

Posted by Daniel E. Renfer at

One issue I found with the rewrite code provided. This will cause the RP to redirect to that address, thus the final identity will be (in your case) “http://intertwingly.net/public/yadis.xrdf” as opposed to the URL you provided. I got around this by dropping the [R] flag.

Posted by Daniel E. Renfer at

links for 2007-01-04

tech decentral » Ajax Start Pages Suck good info on things to avoid in Ajax home pages (tags: ajax toread) Sam Ruby: OpenID for non-SuperUsers quote: “While my knowledge on [OpenID] is far from complete, this post is my attempt to share what...

Excerpt from Bill Higgins at

Dwa świetne artykuły o OpenID

W ostatnich dwóch dniach ukazały się dwa ważne wpisy na blogach, dotyczące OpenID. Pierwszy z nich, którego autorem jest Sam Ruby. ma charakter bardziej techniczny. Opisuje on jak dodać OpenID (a właściwie jak wydelegować OpenID) na swojej stronie,...

Excerpt from identity 2.0 at

links for 2007-01-04

Sam Ruby: OpenID for non-SuperUsers start here (tags: openid identity ***)......

Excerpt from Bill de hÓra at

One issue I found with the rewrite code provided. This will cause the RP to redirect to that address, thus the final identity will be (in your case) “http://intertwingly.net/public/yadis.xrdf” as opposed to the URL you provided. I got around this by dropping the [R] flag.

Odd.  I can successfully log in as http://intertwingly.net/blog/ at the LiveJournal site.

I’m clearly new to this, but I reason thus: the XRD file isn’t my identity, it contains a list of identities.  One of the identities listed is my weblog.

The reason I like the explicit, external redirect is twofold: (1) it actually shows up in my Apache logs, and (2) I’m not normally a fan of content negotiation for the reasons Joe Gregorio gives.  Having this data available under a separate URI makes me feel better.

Posted by Sam Ruby at

links for 2007-01-04

Sam Ruby: OpenID for non-SuperUsers start here (tags: openid identity ***)...... [more]

Trackback from Bill de hÓra at

Thank you for this article. It really simplifies the process of OpenID-enabling.

As for X-YADIS-Location, I think it’s a should rather than can. It won’t hurt to have it in the header just in case. I also believe the http-equiv value should be X-XRDS-Location.

Posted by Dmitry Shechtman at

I also believe the http-equiv value should be X-XRDS-Location.

Ah.  I must have found an old document that I copied/pasted from.

Fixed.  Thanks!

Posted by Sam Ruby at

APP progress and OpenID intros

Atom Publishing Protocol, latest spec draft APP-12 , will be proposed for last call, apparently . There’s another little speclet draft from atompub to review too: The application/atom+xml Type Parameter . Basically (via James ) : Identifying Atom...

Excerpt from Planet RDF at

links for 2007-01-04

The use of Metadata in URIs (tags: by:tag URI metadata W3C bestpractices URL architecture by:noah_mendelsohn by:stuart_williams) Starting with the Web (tags: rest web webservices soa by:mark_baker W3C) OpenID for non-SuperUsers (tags: by:sam_ruby...

Excerpt from protocol7 at

OpenID: distributed authentication services

OpenID is generating a reasonable amount of buzz recently. OpenID is a vendor-independent approach on bringing the infamous concept of single sign-on to the web. in a nutshell, OpenID allows users to use a single, URI-based token to access numerous...

Excerpt from nonsmokingarea.com at

I’ve raised the temporary redirect issue on the OpenID general mailing list.

Posted by Sam Ruby at

[link]...

Excerpt from del.icio.us/tag/openid at

Thanks to this article I was able to fix my OpenID Server so it works for ClaimID...

Posted by red at

X-XRDS-Location in real HTTP headers and X-YADIS-Location in http-equiv? A search for X-XRDS on the yadis.org wiki leads me to believe that X-YADIS-Location is somehow deprecated.

Thanks for the post, though; exactly what I needed to read! --lbruno

Posted by Luis Bruno at

A couple of points about phpMyID:

Posted by James Holderness at

OpenID: distributed authentication services

Based on the results of my Unobtrusive OpenID post , it is quite evident that there is a lot of partial knowledge about OpenID out there. While my knowledge on the subject is far from complete, this post is my attempt to share what I have learned...

Excerpt from Tailrank: Top News for Today in Technology at

Setting your OpenID URL

OpenID, a URL based identity specification, has looked interesting for a while but I havent had time or the inclination to look into it. Until today when I say that Sam Ruby posted a Non Superusers guide to OpenID with...... [more]

Trackback from The Bleeding Edge at

Comment utiliser OpenId, la solution d'identification tant attendue

Cela fait un moment que je suis ça de loin et la sauce est en train de prendre, Tarek en parlait d’ailleurs récemment. OpenId permet de s’identifier via une simple URL sans pour autant être tributaire d’un service puisque vous pouvez avoir votre...

Excerpt from Biologeek : Ubuntu, bio-informatique et geekeries libres d'un bio-informaticien au quotidien. at

Getting my OpenID

There are a couple of really interesting posts about OpenID online, as of yesterday. Richard McManus at Read/WriteWeb has published a short video of setting up an OpenID.  It’s trivial to do. Sam Ruby’s Open ID for non-SuperUsers walks...

Excerpt from Alec Saunders .LOG at

Links for 2007-01-03 [del.icio.us]

10 Mistakes in Transitioning to Agile The Dojo Offline Toolkit Brad Neuberg is one of those people who has worked a lot with client-side storage and offline work. AMASS, then dojo.storage, now this. Remember, though, the risks of client-side...

Excerpt from Central Standard Tech at

Comment utiliser OpenId, la solution d'identification tant attendue

Cela fait un moment que je suis ça de loin et la sauce est en train de prendre, Tarek en parlait d’ailleurs récemment. OpenId permet de s’identifier via une simple URL sans pour autant être tributaire d’un service puisque vous pouvez avoir votre...

Excerpt from Biologeek : Ubuntu, bio-informatique et geekeries libres d'un bio-informaticien au quotidien. at

04

New Nginx.conf with optimizations, by Ezra Zygmuntowicz. Sounds like a reasonable alternative to Lighttpd. The stuff of dreams, “we’ve compiled a short list of fun materials – stuff that behaves a little bit outside the...

Excerpt from Anarchaia at

Self-Hosted Identity

Thanks to Sam’s walkthrough, [link] is now up and running....

Excerpt from snellspace.com at

I created another OpenID server implementation, similar to PhpMyID, although new features are being added. It’s written in Python using Django and the OpenID Python library.

Trac: [link]
SVN: [link]

Comments are more than welcome in my mailbox, or in the Trac system.

Regars,

Nicolas

Posted by Nicolas at

Links Roundup for 2007-01-04

Shared bookmarks for del.icio.us user Synesthesia on 2007-01-04 Google Account Authentication: Keywords: Identity Yahoo Browser-Based Authentication: Keywords: Identity OpenID for the Semantic Web: Keywords: OpenID, Identity Verisign Personal...

Excerpt from Synesthesia at

OpenID for Non-Superusers

Since Joomla! is going to have OpenID Authentication thanks to folks like CoolAcid and Johan, this looks like good reading the rest of us should be able to handle! Technorati Tags: Joomla!, OpenID...

Excerpt from Amy Stephen at


Io sono $URI

OpenID is an open, decentralized, free framework for user-centric digital identity. OpenID starts with the concept that anyone can identify themselves on the Internet the same way websites do-with a URI (also called a URL or web address). Since URIs...

Excerpt from ~ Numerabile ~ at

Tags: development, openid...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "openid" at

Sam Ruby: OpenID for non-SuperUsers

A primer for folks new to OpenID, which is growing fast! Tags: openid, how to, identity...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "openid" at

Sam Ruby: OpenID for non-SuperUsers

Tags: openid...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "openid" at

Sam Ruby: OpenID for non-SuperUsers

Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there. While my knowledge on the subject is far from complete, this post is my attempt to share what I have learned...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "openid" at

Sam Ruby: OpenID for non-SuperUsers

Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there. While my knowledge on the subject is far from complete, this post is my attempt to share what I have learned...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "openid" at

OpenID pour les nuls ou presque....

Excerpt from Public marks with search antivirus pour linux at

Links for Thursday, January 4, 2007

Productive Strategies: Intellectual Diet - “Our health is determined by what we eat on a daily basis. It doesn’t really matter what we do as part of a 1 week diet. Our intellectual health is determined by what we do every day on a...

Excerpt from Jeff Barr's Blog at

links for 2007-01-05

Lattix tackles software architecture complexity (tags: lattix programming uml modeling) MegaMiles 10,000 If you’re a miles/points nut like myself, don’t forget to sign up for this deal with American and whoever else used...

Excerpt from People Over Process at

Thanks for this excellent writeup, Sam. Wonderful work. But could I ask you to update this thread on the progress you do on the OpenID discussion list as I (and many others, I’d expect) don’t subscribe to it?

Posted by Asbjørn Ulsberg at

But could I ask you to update this thread on the progress you do on the OpenID discussion list as I (and many others, I’d expect) don’t subscribe to it?

If anything definitive comes out I will certainly update this entry (and update atom:updated), but at the present time, it appears that the discussion has wandered off into other topics.

The current status: I did an external, temporary redirect as I wanted to see this activity in my Apache Logs.  The current status is that some servers will treat this as a permanent redirect, and use my XRD file as my identity (something that works just fine).  Those that care about such things can drop the [R] and replace the URI with either a relative or absolute file path and neither the Identity Provider nor your Apache logs will ever see the redirect happened.

Posted by Sam Ruby at

Setting up (almost) every aspect of OpenID for yourself. Tags: openid, identity, webdev, blog...

Excerpt from Ma.gnolia: Recent Bookmarks Tagged With "blog" at

Links for 2007-01-04 [del.icio.us]

Sam Ruby: OpenID for non-SuperUsers Some Words of Advice for Small Newspapers "Here are 10 things that publishers and editors of small newspapers should be doing to keep up with the times and resist the industrywide trend of flat or declining...

Excerpt from Chad Dickerson's blog at

Playing With OpenID

I’ve been playing around with OpenID on the few occasions I’ve had internet access over the Christmas break and have it set up, but not ideally. Currently, everything points to [link] as the OpenID URL, but...

Excerpt from Symphonious at


Your preferred method for linking your XRDS to your blog URL will actually break your identity: a correct implementation will use the final destination URL (after following all redirects) as the claimed identifier, so you’ll end up being http://intertwingly.net/public/yadis.xrdf instead of http://www.intertwingly.net/blog/.

The other two methods (X-XRDS-Location header and HTML Meta tags) are the ones supported by Yadis discovery.

Posted by Johnny Bufu at

Your preferred method for linking your XRDS to your blog URL will actually break your identity

Posted by Sam Ruby at

I’m braindead.  Nevermind.  Changed openid.com to myopenid.com (Gotcha there!), and it now validates.  Still weird that I had to move the links up a bit for the validator to catch them, but oh well.

Posted by Bryan Price at

OK, I guess I ignored the OpenID login the first time, and threw away my 1st comment.  Then again, it wasn’t working the first time, so it couldn’t actually validate me anyway.

To wrapup, for those fools who are currently following me, I managed to have openid.com instead of myopenid.com in the <link statements.

I also was experiencing issues with having buried the <link s to far down in the code (some PHP stuff and comments).  Not going to worry about that one right now.  Somebody else can.

But I now actually have it working.  Enough. :-P ;-)

The other stuff I’ll try when I’m more sane.  If that ever happens anymore.  Sheesh......

Posted by Bryan Price at

Links for 2007-01-05

Sam Ruby: OpenID for non-SuperUsers nice description of OpenID for mortals. [via joshua] filed under: development, security, identity, weblogs Matt Cutts: Productivity tip: make “howto” files I’ve been doing this for the past few days and it’s...

Excerpt from onfocus.com at

Simple OpenID

Sam Ruby has a good overview of OpenID and the steps required to start identifying yourself. I personally don’t know much about it but I’m intrigued to learn more after reading some of the recent press about it. OpenID For Non-Superusers...

Excerpt from Adam Jordens@littlesquare:~/ at

OpenID for Me

Thanks to Sam’s post on a short path to getting a personal install of OpenID working, I got things working and gave them a quick whirl with both the OpenID Enabled checker and a WordPress scratchpad. All-in-all it was almost too easy; the most...

Excerpt from mult.ifario.us: OpenID for Me at

OpenID

I followed the instructions here to create an OpenID for myself at MyOpenId, and added the magic bits that associate this weblog with that ID: <link rel="openid.server" href="http://www.myopenid.com/server" /> <link rel="openid.delegate"...

Excerpt from Scripting News at

OpenID

Dave Winer links to some easy instructins to setup an OpenID: I followed the instructions here to create an OpenID for myself at MyOpenId, and added the magic bits that associate this weblog with that ID Like Dave, I’m very excited about this as it...

Excerpt from brendoman.com: putting the eek in geek at

Sam Ruby: OpenID for non-SuperUsers

Sam Ruby: OpenID for non-SuperUsers by jean-gael & 4 other(s) openid developpement web Copy | React (0) [link]...

Excerpt from Public marks with search openid at

Sam Ruby: OpenID for non-SuperUsers

Sam Ruby: OpenID for non-SuperUsers by NiCoS & 4 other(s) openid Copy | React (0) [link]...

Excerpt from Public marks with search openid at

Sam Ruby: OpenID for non-SuperUsers

Sam Ruby: OpenID for non-SuperUsers by nicolas tehu & 4 other(s) openid identity howto Copy | React (0) [link]...

Excerpt from Public marks with search openid at

Scripting News for 1/6/2007

CES stringer for hire…  Real cheap. There’s a preview event tonight for press at the Venetian, and I want to blog it but I’m not sure if I have a press badge (the wonderful people at Podtech are looking into it). So I need a...

Excerpt from Scripting News Annex at

Simple OpenID

Sam Ruby has a good overview of OpenID (wikipedia) and the steps required to start identifying yourself. I personally don’t know much about it but I’m intrigued to learn more after reading some of the recent press about it. OpenID For...

Excerpt from Adam Jordens@littlesquare:~/ at

OpenID für Superuser

Gutes Howto wie man die eigene OpenID zukunftssicher anlegt von Sam Ruby. (das Prinzip openid hat natürlich seine offensichtlichen Vorzüge, man braucht sich nicht immer wieder anmelden, immer wieder neue Passwörter ausdenken oder mit schlechtem...

Excerpt from live.hackr at

OpenID Fetish

I’ve been quiet lately because all my spare time got sucked into OpenID. I had intended to add OpenID support to ongoing myidspace project but Sam Ruby’s tinkering with OpenID got me to change my priorities. Monkey see, monkey do. What people...

Excerpt from Don Park's Daily Habit at


Thanks for the great tutorial, Sam.

Posted by Marie Carnes at

Your preferred method for linking your XRDS to your blog URL will actually break your identity

How will this “break” my identity?

A correct implementation, if it uses Yadis discovery, will use http://intertwingly.net/public/yadis.xrdf as the claimed identifier; it is still yours, but a different one as far as the RP is concerned, while you assume / would like it to be the same one. This is what I meant by ‘breaking’.

Despite this alleged breakage, I can successfully sign on to openidenabled and livejournal.  And validate with the JanRain Python library.

Can’t speak for them - they may be using HTML discovery, not Yadis. It may be worth checking this directly with them.

I explicitly and intentionally chose a temporary redirect.  Does it make sense for YADIS to treat this response the same way it treats a permanent redirect?

As is being discussed in the related thread [http://openid.net/pipermail/general/2007-January/000946.html] on the OpenID list, redirects are not (yet) part of Yadis, and all redirects are treated the same in OpenID (in the normalization section).

Posted by Johnny Bufu at

while you assume / would like it to be the same one

Why would I assume and/or why would I like it to be the same one?

and all redirects are treated the same in OpenID

That spec text is not very specific and contradicts RFC 2616

Posted by Sam Ruby at

links for 2007-01-07

Digging in to TextMate Tips on how to make more efficient use of TextMate. (tags: textmate) Hosted CRM Contact Management Solutions for Individuals and Small Teams Review of options from Web Worker Daily (tags: crm) OpenID for Non-Superusers (tags:...

Excerpt from jarango at

Sam Ruby: OpenID for non-SuperUsers

Interesting post from Sam Ruby explaining how to make your blog or website OpenID-enabled. Bookmark to:...

Excerpt from Ruben's blog at

openid

Following Sam Rubys instructions I’ve OpenID enabled this blog. OpenID is an interesting set of technologies and something I hope to do more with in the future. The timing of Sams instructions was perfect....

Excerpt from Cynic's Soapbox at

OpenID for non-SuperUsers. Sam Ruby explains the key concepts of OpenID that mayn first-time users tend to miss. -->...

Excerpt from Simon Willison's Weblog at


I think openID will take off in 2007, with the geek crowd. In 2008 you’ll start seeing it in some large sites owned by Yahoo/Google etc. Why do I think that? It seems a well thought-out system, open, and adoptable in the sense that it’s...

Excerpt from Peter Van Dijck's Guide to Ease at

4 minutes and 3 steps to set up my OpenID

OpenID looks promising. You can use it to log into wikitravel, vox, and lots of other sites. OpenID sounds as if it shouldn’t work, but it does. Kinda like wikis. It’s secure and everything. To create an account, do this: 1. I went to...

Excerpt from Peter Van Dijck's Guide to Ease at

Come funziona OpenID (con link e risorse)

Negli ultimi giorni ho raccolto un po' di link su OpenID. Post e interventi quanto mai benvenuti, visto che molti di essi hanno un taglio divulgativo a da howto che mi ha consentito finalmente di fare chiarezza sul funzionamento di questo sistema...

Excerpt from edit at

Regarding phpMyID: is it not important if using this to run it on a SSL-enabled server?  Given you will be entering your ‘master’ password for your openid profile it seems silly to send it in clear-text!

Posted by Peter at

Regarding phpMyID: is it not important if using this to run it on a SSL-enabled server?  Given you will be entering your ‘master’ password for your openid profile it seems silly to send it in clear-text!

While TLS/HTTPS would be superior, phpMyID usses HTTP digest authentication, which means that the password is not sent in the clear.

Posted by Sam Ruby at

OpenID para todos

Post en el que se explican varios conceptos sobre OpenID y cómo implementarlo en tu propia página o blog: cómo reclamar tu blog, cómo usar phpMyID en tu web para no delegar en servidores ajenos, cómo usar servicios como Yadis (yadis.org/) y cómo comprobar que toda tu configuración funciona. En inglés.... [more]

Trackback from meneame.net at

z2007-01-07-RecentOpenIdAction

DaveWiner "got":[link] an OpenID and put the URI-s in his WebLog header. SixApart’s VOX "supports":[link] it (in addition to LiveJournal, where it...

Excerpt from WebSeitz/wikilog at

Breyten Ernsting: OpenID Delegation with Drupal

Sam Ruby’s post on OpenID delegation (and more) was inspiring enough to do it for my homepage, that runs on Drupal. It turns out that there’s a module make it very easy: OpenID URL. I’d suggest you download the dev version for the time being. And if...

Excerpt from drupal.org aggregator at


Mas articulos, noticias y posts meneados

- El cajero automático: nunca fue tan fácil y cómodo endeudarse- Sergio Langer es un dibujante ácido y corrosivo- El arzobispo de Canterbury reconoce que la Iglesia anglicana podría caminar hacia un cisma- Ford Motor Company utiliza Wordpress- Los...

Excerpt from El Golpedegato at

Sam Ruby on OpenID for non-Superusers

Great post from Sam Ruby explaining how to OpenID-enable your blog/website/etc.  Says Sam: Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there.  While my knowledge...

Excerpt from claimID weblog - Manage your online identity. at

OpenId is interesting and I see something that would push a bit further. I will try to explain a bit.

Weblog Comments and Weblog posts are exactly of same nature. They have an author, they refer to a content sometimes (either another comment or a weblog post), they have a text, a date, etc.

But why do we have to comment ON the weblog as I do now, when we could all comment on our system AND keep track, traces, archives of our comments locally. What would be neat is that comments section on people’s weblog would be just an aggregation of the comment/posts made elsewhere. hmmm yeah. Nothing new. Is it not what Trackback was proposing, but failed in part because of spam. Indeed.

Though come OpenId. Would it be possible to have a trackback+openid combination. When the trackback is done, it’s not only a link to the post which is made but the aggregation of the full content in the commenting zone.

Another way of doing it is that when you are registered with an openid, your openid system aggregates all your comments done elsewhere.

Posted by Karl Dubost at

OpenID for near-humans

Sam Ruby has a nice, step-by-step process for setting up OpenID for personal digital identity use.  I’ve done part of the process, but will save the rest until I have some time.  Hopefully OpenID will get enough traction that Google...

Excerpt from Way.Nu at


4 minutes and 3 steps to set up my OpenID

OpenID looks promising. You can use it to log into wikitravel, vox, and lots of other sites. OpenID sounds as if it shouldn’t work, but it does. Kinda like wikis. It’s secure and everything. To create an account, do this: 1. I went to...

Excerpt from unmediated at

Enlaces sobre Programacion con Ruby

- OpenID para todos- Diseño y programación Web... ¿desde 0?- Comprahost || Compra Hosting PHP, ASP, Ruby on Rails,DHTML... en www.comprahost.com- Versión 1.0 del Lenguaje de programación D- Hobo extensión a Ruby On Rails- Una mujer con un útero...

Excerpt from CIFE - UNSA at


News Wire: Chris Wilson to Chair W3C HTML Working Group

The Adobe PDF XSS Vulnerability A new XSS vulnerability has been found in Acrobat and Acrobat Reader 7.0.8 and earlier for Windows. If a vulnerable user follows a malicious link to a PDF on your site, the browser will silently execute the...

Excerpt from SitePoint Blogs at

OpenID for non-SuperUsers: Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there.  While my knowledge on the subject is far from complete, this post is my...

Excerpt from Spoken at

Comment utiliser OpenId, la solution d'identification tant attendue

Cela fait un moment que je suis ça de loin et la sauce est en train de prendre, Tarek en parlait d’ailleurs récemment. OpenId permet de s’identifier via une simple URL sans pour autant être tributaire d’un service puisque vous pouvez avoir votre...

Excerpt from Biologeek : Ubuntu, bio-informatique et geekeries libres d'un bio-informaticien au quotidien. at

Blogmarks

OCAWA « ... un outil d’audit de page web orienté vers l’accessibilité. » tags : accessibilite web firefox extension OpenID for non-SuperUsers OpenID pour les nuls ou presque. tags : weblogging securite identite Switchy McLayout : An Adaptive Layout...

Excerpt from Phiji Blog at


openid enabled

У меня сабж :-) Нашел наконец-то время разобраться с openid, как и предполагал ничего особо сложного нет. Все делал по этим статьям: OpenID for non-SuperUsers OpenID delegation under Django and lighttpd Теперь бы еще запустить свой openid сервер :-)...

Excerpt from livedev.org: openid enabled at


Links for 2007-01-12 [del.icio.us]

TOMBO Project - Note Taking for Windows and PocketPC From the 43 Folder’s mailing list JotSpot Wiki - R2.9ReleaseNotes It appears there is some movement from Google’s purchase of JotSpot Need a 2007 calendar for printing? Nice site timeanddate.com...

Excerpt from Planet FiT at

links for 2007-01-13

Hush Tactics for the iPhone - Bits - Technology - New York Times Blog Apple tried to hire Jeff Han. Heh. (tags: jeffhan iphone appleinc UI NYU) Sam Ruby: OpenID for non-SuperUsers "The target audience for the bulk of this post is people who are...

Excerpt from braintag at


Sam Ruby: OpenID for non-SuperUsers

“The target audience for the bulk of this post is people who are capable of adding autodiscovery links to their blog templates, may be able to install a small PHP script and/or know what a HTTP header is.” Originally posted by yatta from...

Excerpt from Eyebeam reBlog at


Setting Up an OpenID Server with phpMyID

Sam Ruby’s “OpenID for non-SuperUsers” distills the process of setting up one’s own OpenID server with phpMyID in such a clear and concise manner, that I couldn’t help but implement it myself. I’ve taken his...

Excerpt from Mike West at

Just a quick compatibility test :)

Posted by John at


links for 2007-01-17

Sam Ruby: OpenID for non-SuperUsers (tags: openid) TWiki / TWiki Access Control (tags: twiki acl)...

Excerpt from Geeks, Guitars and Guinness at


The Tipping Point for OpenID

The noise and interest around OpenID, a distributed and open lightweight identity system, has been growing for a few years now, but my sense is that it has dramatically accelerated in recent months. So much so that things are starting to feel really, really close. And by that I mean that all it takes now is for one “big player” to jump on the OpenID bandwagon. OpenID will then either take off or fall flat on its face. Everyone is...... [more]

Trackback from Jeremy Zawodny's blog at

OpenID yourself

Sam Ruby shows how to get yourself enabled for OpenID. For Typo, I edited app/helpers/article_helper.rb and edited the page_header method to include the 2 links the OpenID delegate requires....

Excerpt from ronin: OpenID yourself at

Today’s Links (16/01/07)

Sam Ruby: OpenID for non-SuperUsers An excellent, practical walkthrough on how to use OpenID. .::{WiiNintendo.net}::. Bloke plays Wii Sports, loses weight, gets fitter. Getting Started with MacFUSE: DLS How-To - Download Squad A clear howto on...

Excerpt from Submit Response at

OpenID's Tipping Point

The noise and interest around OpenID, a distributed and open lightweight identity system, has been growing for a few years now, but my sense is that it has dramatically accelerated in recent months.So much so that things are starting to feel really,...

Excerpt from WebProNews: Blog Combined Feed at


OpenID

OpenID appears to be the new hotness. I’m only just starting to learn about this.  There doesn’t appear to be anything technically earth-shattering here.  As with most good ideas, it’s seems fairly simple. It...

Excerpt from On The Other Hand at


OpenID

Com tanta discussão sobre o OpenID recentemente, achei que seria interessante experimentar com o mesmo aqui no blog. Agora, nos comentários, você pode usar o seu OpenID para efetuar login no site. Infelizmente, isso não significa que você pode...

Excerpt from Superfície Reflexiva at

Sam Ruby: OpenID for non-SuperUsers

Tags: identity...

Excerpt from Ma.gnolia: Ryan Eby's Bookmarks Tagged With "identity" at

Identity by URI

There have been some great projects lately about moving information control into the hands of users such as Move My Data. In that vein there is the idea of profile data using microformats. For example you have a list of your friends marked up on...

Excerpt from ebyblog at

Spam Heaven?

Now that we’re through with OpenID phishing (alright, maybe we’ll be soon ), this is the perfect time for addressing the spam issue. Jayant Kumar Gandhi brings us this “great news”: OpenID is getting popular day by day and...

Excerpt from The Undevelopment Blog at


Social whitelisting with OpenID, my take

When I read Simon’s proposal about social whitelisting with OpenID this morning, I was immediately intrigued by the idea. Basically, he’s suggesting that by whitelisting trusted OpenIDs, sharing these lists among peers, and using them...

Excerpt from tail -f carlo.log at


Tab Sweep

This is going to be big and have month-old news in it; a consequence of the long southern-hemisphere posting interruption. I’ll even group ’em into paragraphs....

Excerpt from Planet Intertwingly at

OpenID

OpenID is ‘an open, decentralized, free framework for user-centric digital identity’. That doesn’t sound terribly exciting, but it has the potential to change the way we all use websites, particularly those that require you to...

Excerpt from Submit Response at

OpenID, baby!

A post on Intertwingly (Sam Ruby’s blog) brought me back to the idea of single sign-ons. A year and a half ago I came up with SPTP, the Simple Profile Transfer Protocol, which turned out to have a major flaw. Then I looked at SINP. But the...

Excerpt from ZefHemel.com at


If the question is why microformats, then the answer is WebCards

Less than two years old and microformats are already changing the way we pull semantic information (hidden metadata) out of the web. Designed for humans first and machines second, microformats are a set of simple, open data formats built upon...

Excerpt from Vecosys at


Sam Ruby: OpenID for non-SuperUsers

“The target audience for the bulk of this post is people who are capable of adding autodiscovery links to their blog templates, may be able to install a small PHP script and/or know what a HTTP header is.” Originally posted by yatta from...

Excerpt from myFeedz for Guest - php script - articles in english from all feeds sorted by relevance at

Sam Ruby - OpenID for non-SuperUsers: "Based on the results of my Unobtrusive OpenID post, it is quite evident that there is a lot of partial knowledge about OpenID out there. While my knowledge on the subject is far from complete, this post is...

Excerpt from myFeedz for Guest - php script - articles in english from all feeds sorted by relevance at


Just testing, since Phil Wilson says Videntity logins are working...

Posted by Dan Libby at

Was I mistaken?

Posted by Phil Wilson at

Well now, isn’t that a thing?

Posted by Phil Wilson at

Videntity imports hCard and FOAF

Videntity.org, an OpenId server by Dan Libby, now imports user profiles from sites which provide your profile in hCard or FOAF. I hadn’t bothered previously filling in my profile details, but now that I’ve pointed it at my Flickr profile page and...

Excerpt from philwilson.org at


Going Legit: OpenID and unAPI

Adopting Standardized Identification and Metadata Since it’s becoming all the rage, I decided to go legit and get myself (and my blog) a standard ID and enable the site for easy metadata exchange. OpenID OpenID is an open and free framework...

Excerpt from AI3:::Adaptive Information at


OpenID plug-in for WordPress

Sam Ruby posted a while back on how to embed LINK tags in your blogs (or other web resources) in order to enable OpenID auto-discovery. Here’s a plug-in for WordPress that lets you accomplish this lickety-split....

Excerpt from τεχνοσοφια at


What OpenID needs to succeed

I think I remember the conversation I had with Brad Fitzpatrick and Randy Reddig that inspired us to create OpenID (and by “us” I mean Brad). The conversation started with my trying to understand why more people simply don’t trust......

Excerpt from majordojo at


What OpenID needs to succeed

I think I remember the conversation I had with Brad Fitzpatrick and Randy Reddig that inspired us to create OpenID (and by “us” I mean Brad). The conversation started with my trying to understand why more people simply don’t trust......

Excerpt from Comments for What OpenID needs to succeed at

Tim Bray: Tab Sweep

This is going to be big and have month-old news in it; a consequence of the long southern-hemisphere posting interruption. I?ll even group ?em into paragraphs. Anyone interested in XML in particular or life online in general will enjoy Jon Bosak?s...

Excerpt from ::Nano Technology:: at


djangoid (django + openid)

[link].be/djangoid/話說現在blog界最紅的話題就是openid,想裝作沒看到都很難 XD而這個網址是opensource的Django架openid的Server,熱血的Shawn同學如果有看到這篇的話(或是已經知道的話)...這個就交給你實驗架在kalug上了啊... ^^(話說回來.... 我不知不覺的就在Kalug server上裝好django環境了... XD)(BTW,...

Excerpt from 拜Python教之Django光明會支部 [ 使徒提姆@Python ] at


Sharing a bit of identity

That was easy. First, I claimed it, then checked it, then mapped it and then checked it again, and now I guess I can claim my identity is gotze.eu. My public persona is currently at gotze.myopenid.com. I’m playing with my own IdP, but...

Excerpt from GotzeBlogged at

Thanks for this tutorial. It was a big help.

Posted by Joe Martin at


OpenID

OpenID is sweet, more and more sites are starting to support it (well, LJ does at least, more sites should be). A while back Sam Ruby posted about how to get it up and running easy easy easy, but I only got around to doing it today. Would be...

Excerpt from The Magical Coding Adventures of Xavier Shay at

Many thanks for this - got me on the OpenID road. I love your unobtrusive comment system, although you could make it clearer that I only need to enter the OpenID URI to authenticate.

Posted by Mark Tranchant at

Works, thanks!
After I read this post I add to my site head line with:
http-equiv="X-XRDS-Location"
as an addition to:
http-equiv="X-YADIS-Location"
which was not recognized by test on openidenabled.com.

Posted by lemiel at

OpenID zawitało na Joggerze!

Jak entuzjastę otwartych standardów (od niedawna zresztą) bardzo mnie ucieszyła informacja o zaprzęgnięciu obsługi OpenID w Joggerze. Poza oczywistymi korzyściami (jak i również wadami) samego OpenID to naprawdę fajne uczucie patrzeć jak Jogger się...

Excerpt from wuzetes... at


links for 2007-02-11

Sam Ruby: OpenID for non-SuperUsers More notes on OpenID… but still looking for how to set up my servers to accept OpenID. (tags: openid authentication howto identity) Converting your site to OpenID This is helpful… thanks, Lisa. (tags:...

Excerpt from House of Hagen at

You, Me and OpenID

It doesn’t take much to get me excited. Even so, I’m quite jazzed over this whole concept of OpenID. Basically it’s a way for websites and services to authenticate your identity in a secure, flexible and decentralized way. Unlike...

Excerpt from yonkeltron at


I think OpenID is pretty cool too.

Posted by John Panzer at

Nice article for starters. I will recommend my non-Geek friends to read this.

Posted by Thejesh GN at


Excited about OpenID

At the Vancouver PHP Conference this past weekend, and then again last night at Ignite Seattle, there were presentations on OpenID.OpenID is probably the coolest pieces of net “infrastructure” tech I’ve seen in a year. I’m really excited. I’m...

Excerpt from Mark Atwood at


AOL and 63 Million OpenIDs

Yesterday, I blogged about AOL’s work-in-progress on OpenID. It generated a lot of positive commentary. I realized after reading the reactions that I buried the lead: There are now 63 million AOL/AIM OpenIDs. Anyone can get one by signing up for a...

Excerpt from dev.aol.com blogs at


OpenID for non-SuperUsers | intertwingly.net

An article about how to turn your website into an openid autentificator...

Excerpt from del.icio.us/tag/php+openid at

AOL and OpenID

901am points to AOL’s announcement that it is going to integrate OpenID into its 63 million user base.From the announcement:"Every AOL/AIM user now has at least one OpenID URI, [link] experimental OpenID 1.1 Provider service is...

Excerpt from think d2c at


links for 2007-02-20

OpenID for non-SuperUsers (tags: OpenID PHP XML RDF Tutorial Apache Identity Security) 10 steps to get Ruby on Rails running on Windows with IIS FastCGI (tags: IIS Rails Ruby FastCGI Windows)...

Excerpt from fozbaca.org at

AOL and “63 Million OpenIDs”

AOL announces a running (still experimental) OpenID project that turns up the temperature on the identity world...

Excerpt from Kim Cameron's Identity Weblog at

THAT was a @#^%ing pain

I’ve got OpenID set up with phpMyID. I got to that project and picked it based on the writeup here that jbeimler pointed me to. It should have been easy, but I made too many mistakes to count in the configs, and I still don’t know...

Excerpt from pebkac thoughts at

Kim Cameron - Microsoft: AOL and “63 Million OpenIDs”

First Microsoft’s announcement with JanRain, SXIP and Verisign at RSA.  Now news that AOL has launched an experimental system and announced it will support the next version of OpenID.  The world streams by at breakneck speed.  We’re...

Excerpt from Planet Identity at


Testing my AIM openID...

Posted by Rainer at

My own OpenID identity provider

After enabling OpenID authentication at this site, I was wondering if I could become my own OpenID identity provider. Googling for references, I have found a detailed guide at Sam Ruby post OpenID for non-SuperUsers. I followed Sam’s instructions,...

Excerpt from SDLC Blog at


OpenID For Idiots

The social Web is interesting. One of the new themes, memes, dreams, whatever you want to call it, that is prevailing at present is that of OpenID . The funny thing is, if you’re anything like me, it takes moment or two (and some serious...

Excerpt from BlogAfrica at


OpenID verkar ha vind i seglen

OpenID är en tjänst som strävar till att ge oss en centraliserad identitet när vi rör oss på nätet. Bland annat innebär det här att vi slipper logga in skilt på varje tjänst som stöder OpenID utan det räcker med att vi har loggat på OpenID en gång...

Excerpt from Teknobabbel at


"OpenID for non-SuperUsers"

[link] There’s a nice post titled...

Excerpt from dAniel's Blog at


Sam Ruby: OpenID for non-SuperUsers

Tags: openid , identification , tutorial...

Excerpt from Ma.gnolia: ramin's Bookmarks at

OpenID Links

OpenID is an open, decentralized identity system that attempts to provide a solution to the multiple log on ID systems to access various sites across the internet. At O´Reilly Radar, Brady Forrest gives some of OpenID Pros: You probably already...

Excerpt from Mohamed Amine Chatti´s ongoing research on Technology Enhanced Learning at

La mia identità OpenID

Seguendo le istruzioni di Douglas Karr e di Sam Ruby ho installato phpMyID in modo che www.garuti.it possa fornire la mia identità OpenId Inoltre anche Digital||Divide e …per Carpi delegano a garuti.it la gestione della mia identità...

Excerpt from ..:digital||divide:.. at


OpenId and SAML

Having looked at OpenId I got to wonder a little how this links in with other technologies such as SAML . One nice thing is it looks like we can have one URL Identifier and use both services. Pat Patterson recently showed with a nice video how one...

Excerpt from Planet RDF at


OpenID and i-name

A few postings, here, here and here already talk about converting their blog urls into OpenID URLs. This method allows you to use your blog URI as your OpenID URI and login any one of the participating websites using that, as opposed to creating...

Excerpt from the occasional blog at


links for 2007-03-10

Why Apple is the best retailer in America Apple are now seen as a leading company in terms of retail design, taking leads from hotel experience and a focus on what people do, not what Apple sell. The Apple retail experience will be hard to...

Excerpt from take one onion by Gavin Bell at


Great stuff; thanks for the very detailed instructions.  You need to update the instructions with the latest versions of MyID.php, since for the non-PHP expert the latest 0.5 doesn’t set $idp_url directly anymore.  Instead, it checks ! array_key_exists('idp_url', $profile), and if not, then defaults it to the current server.

The only other comment for non-experts is to carefully follow the MyID.php setup, especially the .htaccess stuff if needed: it relies on being served properly, which requires that your webhost allow you to use specific directives.

Posted by Shane Curcuru at


open_id_authentication (Part 1)

open_id_authentication is the OpenID consumer plugin for Rails, being written by DHH and some on the Rails core team. This plugin was getting some quick updates at first, but things have slowed down as the 37signals crew has focused on launching the...

Excerpt from Leancode at


links for 2007-04-09

OpenID for non-SuperUsers Setting up your own OpenID server. neat. (tags: openid phpmyid php howto)...

Excerpt from One Measly Dollar at


Atomania

offtopic: sam, could you please contact me at email below, its quite urgent :) thanks

Posted by ma.tija at


links for 2007-04-14

serestandar.es - diseño y desarrollo con estándares web (tags: accessibility conference spain standards web workshop) Sveinbjorn Thordarson’s Website - DataURLMaker (tags: images tools web hacks url hack webdesign data) PebbleRoad: Mapping...

Excerpt from mcdave.net at


OpenID, le LDAP pour PME/TPE ?

OpenID est un système d' authentification unique (SSO ou Single Sign On en anglais) et décentralisé. Le système permet donc à un utilisateur d’utiliser son compte PpenID dans différentes applications web (sous réserve qu’elles intègrent cette...

Excerpt from Un Electron Libre... at


OpenID for non-SuperUsers...

Excerpt from Willie at


By: fredoliveira

A lot of people seem pretty happy about MyOpenId (it’s the one I use myself, and it seems pretty reliable). It’s also pretty easy to change OpenID providers. If you have your own domain name, my suggestion would be making your own domain name your...

Excerpt from Comments on: There are so many OpenID providers out there, what features should I be looking out for? at

By: mbrubeck

“I’ve worked with the folks behind MyOpenID, and think it’s a good service, but I’m not sure about the idea of an identity that’s just an identity URL and not also part of your actual online presence.” With delegation , your OpenID...

Excerpt from Comments on: There are so many OpenID providers out there, what features should I be looking out for? at


I have uploaded the openid plugin for wordpress. The problem is that when I add a comment, the username contains the full path to the yadis file. Is there any way I can change it?

Posted by Joyce K Babu at


How to use OpenId

Sam Ruby has an awesome article on how to use OpenId. He summarizes: All told: I signed up for one free service, installed and tailored one PHP script, added one line to my weblog template, created one simple XML file and added a total of four lines...

Excerpt from Closer To The Ideal at


links for 2007-08-01

Sam Ruby: OpenID for non-SuperUsers “All told: I signed up for one free service, installed and tailored one PHP script, added one line to my weblog template, created one simple XML file and added a total of four lines to my .htaccess...

Excerpt from Through the Wire at


Fatal error

Norman, sorry about the typo, it was actually right in the excerpt, but not in the first line of the whole entry, which is shown while it is current . I found strange that no news is good news is used as a criterion for ending a transaction, no...

Excerpt from Boxes and Glue's Comments at


Got me some OpenID

I finally signed up for an OpenID identity with MyOpenID . I’d been meaning to try out a single sign-on scheme for a while. OpenID hits all the right buttons for me: open, lots of implementations, low barrier to entry (compare that with Microsoft...

Excerpt from richdawe at


really open

Finally gotten around to set up my OpenID another great example of real simple technology    just a couple of link tags on a page you can control (a web page, a blog) an Openid provider (server) like myopenid.com can communicate with the...

Excerpt from BummerWare at


Hi,

I would like to inform you about a new Openid provider.
[link] allow you to create an OpenID account for free and manage your online identity.