This is a security choice that I do not think we will change. The information present in the account system are sensitive and meant to be kept secure.

@pingou : hi! The problem with that approach to security, is that it harms usability, and inconveniences users. Then, in order to save time, they may employ sub-optimal practices, such as keeping the password available in plaintext, disabling the browser's master password, or using a short or easily guessable password. So it may end up backfiring security-wise and on top of that the users will be more frustrated, resentful, and unhappy.

Just my opinion - I may be wrong.

Whether your opinion/conjecture is correct or not, this is not something we can easily change without breaking a lot of things and messing with security assumptions many tools have been built with. As such we are not able to fix this.

On a side note, we do not run bugzilla and you will find that the authentication methods for accounts there are also time limited to require a relogin after some hours/days.

Note that you can use a kerberos ticket to do this to some extent.

ie, kinit shlomif@FEDORAPROJECT.ORG will get you a kerberos tgt that you can renew ever day for a week and bugzilla should at least allow you to login that way and should persist in reboots (depending on how you have it setup)

This of course does not affect fas, you always will need to login there, but it's pretty rare that people need to login there or stay logged in there.

On Tue, 19 May 2020 16:26:35 +0000 (UTC)
Kevin Fenzi pagure@pagure.io wrote:

kevin added a new comment to an issue you are following:
``
Note that you can use a kerberos ticket to do this to some extent.=20
=20
ie, kinit shlomif@FEDORAPROJECT.ORG will get you a kerberos tgt that you =
can
renew ever day for a week and bugzilla should at least allow you to login
that way and should persist in reboots (depending on how you have it setu=
p)
=20

I don't understand. Did you mean:

=C2=AB
I.e, kinit shlomif@FEDORAPROJECT.ORG will get you a kerberos tickett that y=
ou
can renew every day for a week, and bugzilla should at least allow you to l=
ogin
that way and should persist after reboots (depending on how you have it set=
up).
=C2=BB

?

This of course does not affect fas, you always will need to login there, =
but
it's pretty rare that people need to login there or stay logged in there.=
``
=20
To reply, visit the link below or just reply to this email
https://pagure.io/fedora-infrastructure/issue/8925

--=20

Shlomi Fish https://www.shlomifish.org/
https://www.shlomifish.org/humour/bits/New-versions-of-the-GPL/

We agree. But do we agree to agree?
=E2=80=94 https://www.shlomifish.org/humour.html

Please reply to list if it's a mailing list post - https://shlom.in/reply .

I don't understand. Did you mean:
=C2=AB
I.e, kinit shlomif@FEDORAPROJECT.ORG will get you a kerberos tickett that y=
ou
can renew every day for a week, and bugzilla should at least allow you to l=
ogin
that way and should persist after reboots (depending on how you have it set=
up).
=C2=BB
?

I don't understand your question. You just quoted back to me what I typed. ;)

Can you formulate a question and I can try and answer.

On Thu, 21 May 2020 16:55:40 +0000 (UTC)
Kevin Fenzi pagure@pagure.io wrote:

kevin added a new comment to an issue you are following:
``

I don't understand. Did you mean:
=3DC2=3DAB
I.e, kinit shlomif@FEDORAPROJECT.ORG will get you a kerberos tickett th=
at y=3D
ou
can renew every day for a week, and bugzilla should at least allow you =
to l=3D
ogin
that way and should persist after reboots (depending on how you have it=
set=3D
up).
=3DC2=3DBB
? =20
=20
I don't understand your question. You just quoted back to me what I typed=
. ;)=20
=20
Can you formulate a question and I can try and answer.=20

Well, the English grammar seemed broken in your original tip.

In any case - can I use that "kinit" invocation to have my bugzilla login
persist for longer than a day or a reboot? If so - how?

``
=20
To reply, visit the link below or just reply to this email
https://pagure.io/fedora-infrastructure/issue/8925

--=20

Shlomi Fish https://www.shlomifish.org/
List of Graphics Apps - https://shlom.in/graphics

Chuck Norris is Vito Corleone=E2=80=99s godfather. (by ZadYree)
=E2=80=94 https://www.shlomifish.org/humour/bits/facts/Chuck-Norris/

Please reply to list if it's a mailing list post - https://shlom.in/reply .

In any case - can I use that "kinit" invocation to have my bugzilla login persist for longer than a day or a reboot? If so - how?

run in a terminal: kinit shlomif@FEDORAPROJECT.ORG
go to bugzilla.redhat.com in a browser and click on login then 'login from fedora account system'
you should now be logged in.

You can use 'klist -A' to show your existing kerberos tickets and when they expire.

Before it expires you can do 'kinit -R' to renew your ticket.

If you use fedora workstation/gnome desktop you can just set this up in 'online accounts' as 'enterprise login' and it will take care of renewing it for you.

Hope that helps.