[gentoo-soc] identity.gentoo.org: report #12

[gentoo-soc] identity.gentoo.org: report #12

[Pavlos Ratis]

Hello everyone,

I am working on Gentoo Identity, an LDAP web UI that aims to be a
general-usage application that will allow users - developers -
recruiters - administrators to configure their attributes easily from
Gentoo's LDAP server.

This week, I finished the basic documentation and pushed it to
Identity's repo. Also, I performed a basic penetration testing. Thanks
to Django which provides good security protection out of the box,
Django is hardened by default from some basic attacks( XSS, Directory
traversal, CSRF). In addition form built-in validation improves
security more and prevents LDAP Injections.

My plans for the last week are to improve user settings and add more
fields. Finally, I will perform a final profiling before the hard
'pencils down' now that mgorny and tampakrap implemented context
managers and improved django-ldapdb.

Source code for Gentoo Identity: https://github.com/gentoo/identity.gentoo.org

Regards,
Pavlos

Re: [gentoo-soc] identity.gentoo.org: report #12

[Benda Xu]

[-- Attachment #1: Type: text/plain, Size: 106 bytes --]

Hi Pavlos,

Is there a schedule to deploy this system to Gentoo Infra? I am looking
forward to it!

Benda

[-- Attachment #2: Type: text/html, Size: 292 bytes --]

Re: [gentoo-soc] identity.gentoo.org: report #12

[Pavlos Ratis]

On Wed, Sep 25, 2013 at 5:05 AM, Benda Xu <heroxbd@gmail.com> wrote:
> Hi Pavlos,
>
> Is there a schedule to deploy this system to Gentoo Infra? I am looking
> forward to it!
>
> Benda

Hello Benda,

No, we don't have anything planned, since the application needs more work.
Identity handles sensitive data and there are some things that have to
be done first before it goes to production.

Hopefully, in January (or earlier) we will be able to deploy Identity
in production.
If you have any other questions regarding the application, we are at
#gentoo-www channel ! :)

Thanks for your interest,

Pavlos

Re: [gentoo-soc] identity.gentoo.org: report #12

[heroxbd]

Dear Pavlos,

Pavlos Ratis <dastergon@gentoo.org> writes:

> Identity handles sensitive data and there are some things that have to
> be done first before it goes to production.
>
> Hopefully, in January (or earlier) we will be able to deploy Identity
> in production.  If you have any other questions regarding the
> application, we are at #gentoo-www channel ! :)

Thanks for the clarification. I will need to stick with perl_ldap
then. I myself am not familiar with web :(

Benda