These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
12Next page
 

Single Sign-On = Single Point of Failure

Author
James Amril-Kesh
Viziam
Amarr Empire
#1 - 2013-07-04 15:57:56 UTC
This is the root of the vast majority of problems attributed to the EVE launcher.

I knew there was something wrong when I couldn't reach the login page for the forums. I couldn't reach the login page for any of the web services either, because they use the same service. I couldn't use the launcher to login to the client either, because it uses the same service.

The SSO represents a Single Point of Failure. When it breaks, the whole system comes crashing down around it. People aren't able to log onto the forums. People aren't able to log into EVE (for now they can if they bypass the launcher but that won't always be an option). People aren't able to log in to submit petitions. Essentially everything EVE official becomes unavailable to them because of a single failure in the system.

SSO is a significant design flaw that should have never been included in the first place without adding some serious redundancy to go along with it. The path CCP is on right now however isn't working to correct this issue, instead all it's going to do is further expose this vulnerability. Once the launcher becomes mandatory nobody will be able to log into EVE in the event that SSO goes down. They also won't be able to log into the forums to tell you about it.

Enjoying the rain today? ;)

Xercodo
Cruor Angelicus
#2 - 2013-07-04 16:03:30 UTC
This.

Finally someone who gets it. It's not much of the launcher's fault. The launcher's core code work's 90% the same regarding patching and opening the client as far as I can tell.

It's SSO itself that has been causing problems.

And while I understand the intended benefit of SSO having these things crash means it needs triple the attention it appears to be getting internally.

The Drake is a Lie

Sergeant Acht Scultz
School of Applied Knowledge
Caldari State
#3 - 2013-07-04 16:34:51 UTC
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.

removed inappropriate ASCII art signature - CCP Eterne

Ace Uoweme
Republic Military School
Minmatar Republic
#4 - 2013-07-04 16:39:09 UTC
James Amril-Kesh wrote:
This is the root of the vast majority of problems attributed to the EVE launcher.

I knew there was something wrong when I couldn't reach the login page for the forums. I couldn't reach the login page for any of the web services either, because they use the same service. I couldn't use the launcher to login to the client either, because it uses the same service.

The SSO represents a Single Point of Failure. When it breaks, the whole system comes crashing down around it. People aren't able to log onto the forums. People aren't able to log into EVE (for now they can if they bypass the launcher but that won't always be an option). People aren't able to log in to submit petitions. Essentially everything EVE official becomes unavailable to them because of a single failure in the system.

SSO is a significant design flaw that should have never been included in the first place without adding some serious redundancy to go along with it. The path CCP is on right now however isn't working to correct this issue, instead all it's going to do is further expose this vulnerability. Once the launcher becomes mandatory nobody will be able to log into EVE in the event that SSO goes down. They also won't be able to log into the forums to tell you about it.


CCP in other words he wants WoW's login.

Can bypass the launcher and login directly.

_"In a world of universal deceit, telling the truth is a revolutionary act." _ ~George Orwell

Noddy Comet
Lysdexic Agnostics - Thier is no Dog
#5 - 2013-07-04 16:45:04 UTC
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.



This just in from the breaking news desk:

Nothing affects this guy, so it must be a problem on your end.

Film at eleven.

[i]"The biggest problem with quotes on the Internet, is that just because it's on the Internet too many believe them to be real" -[/i]Abraham Lincoln's "Berlin Wall" speech at the 1984 Winter Olympics.

S Byerley
The Manhattan Engineer District
#6 - 2013-07-04 16:55:42 UTC
Backbone issues related to beavers I think.
Sergeant Acht Scultz
School of Applied Knowledge
Caldari State
#7 - 2013-07-04 16:58:27 UTC
Noddy Comet wrote:
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.



This just in from the breaking news desk:

Nothing affects this guy, so it must be a problem on your end.

Film at eleven.



I don't use steam

I don't use bots or cracks

Since CCP has done some W8 fixes things work absolutely normal. Are you running Windows 3.1 and DX25?

Thanks for your comment, it really help OP fixing his issue and me increasing my forum posting.

removed inappropriate ASCII art signature - CCP Eterne

James Amril-Kesh
Viziam
Amarr Empire
#8 - 2013-07-04 17:30:16 UTC  |  Edited by: James Amril-Kesh
Sergeant Acht Scultz wrote:
I don't use steam

Congratulations, nobody cares. I only started using Steam recently (to get/play Sins of a Solar Empire with friends). Has nothing to do with this issue.

Sergeant Acht Scultz wrote:
I don't use bots or cracks

Good for you? Again, this has nothing to do with this issue.

Sergeant Acht Scultz wrote:
Since CCP has done some W8 fixes things work absolutely normal. Are you running Windows 3.1 and DX25?

Thanks for your comment, it really help OP fixing his issue and me increasing my forum posting.

You do realize this has nothing to do with software on the user's end, and everything to do with the availability of a web server (or a specific page on a server)?
SSO is controlled through a single location. This location was temporarily unavailable. It affected everyone. The only reason you're not having issues is because you got here/signed on either before the problem started or after it resolved itself.

Enjoying the rain today? ;)

Mina Sebiestar
Minmatar Inner Space Conglomerate
#9 - 2013-07-04 17:33:09 UTC
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.


Look at me ppl i is awesome you rest of you isnt

You choke behind a smile a fake behind the fear

Because >>I is too hard

DJ JazzyJeff
Menace 2 Sobriety
#10 - 2013-07-04 17:44:50 UTC
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.


(Insert condescending remark to your post here!)

Im not sure why you are getting such a backlash to your comment but I have social issues and just wanted to fit in, sorry. Sad
Mr Kidd
Center for Advanced Studies
Gallente Federation
#11 - 2013-07-04 17:52:56 UTC
DJ JazzyJeff wrote:
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.


(Insert condescending remark to your post here!)

Im not sure why you are getting such a backlash to your comment but I have social issues and just wanted to fit in, sorry. Sad


Failure always wants to tear down success. Apparently, people are having lots of problems with the launcher....apparently that guy isn't....and so there is envy and envy leads to the darkside.

Don't ban me, bro!

Mina Sebiestar
Minmatar Inner Space Conglomerate
#12 - 2013-07-04 18:02:10 UTC
and on dark side there are cookies..if you run from steam using bots and cracks from Nigeria..just saying not implying anything...

You choke behind a smile a fake behind the fear

Because >>I is too hard

Vincent Athena
Photosynth
#13 - 2013-07-04 18:26:34 UTC
James Amril-Kesh wrote:
This is the root of the vast majority of problems attributed to the EVE launcher.

I knew there was something wrong when I couldn't reach the login page for the forums. I couldn't reach the login page for any of the web services either, because they use the same service. I couldn't use the launcher to login to the client either, because it uses the same service.

The SSO represents a Single Point of Failure. When it breaks, the whole system comes crashing down around it. People aren't able to log onto the forums. People aren't able to log into EVE (for now they can if they bypass the launcher but that won't always be an option). People aren't able to log in to submit petitions. Essentially everything EVE official becomes unavailable to them because of a single failure in the system.

SSO is a significant design flaw that should have never been included in the first place without adding some serious redundancy to go along with it. The path CCP is on right now however isn't working to correct this issue, instead all it's going to do is further expose this vulnerability. Once the launcher becomes mandatory nobody will be able to log into EVE in the event that SSO goes down. They also won't be able to log into the forums to tell you about it.

Its also means there is a tremendous intensive to fix any issue that causes a failure. With many different log-ins if one fails the devs can say "lets delay fixing it as most everything else is working" But with SSO as soon as it fails its all effort is needed, RIGHT NOW.

Another advantage is with only one thing needed to sign on, there is only one thing to maintain.

Im reminded of a story about the first person to explore Antarctica with an airplane. He chose a Ford Trimotor. As it had 3 motors he figured he had redundancy. When he actually was over Antarctica he had to climb over the mountains. That required so much power that all 3 motors were almost full throttle. If any one had failed he would have gone down. And in the 1930's there was no hope of rescue there. As there were 3 motors there was a 3 times higher chance that at least one would fail. Because he went for a system that seemed to have higher redundancy he was in greater danger of dying.

Know a Frozen fan? Check this out

Frozen fanfiction

Sergeant Acht Scultz
School of Applied Knowledge
Caldari State
#14 - 2013-07-04 19:05:22 UTC
Mr Kidd wrote:
DJ JazzyJeff wrote:
Sergeant Acht Scultz wrote:
What the heck you guys talking about?

Not having a single issue with my clients launchers at all, none, nada, nicht, nothing. You must be doing or using something nasty to get such troubles.


(Insert condescending remark to your post here!)

Im not sure why you are getting such a backlash to your comment but I have social issues and just wanted to fit in, sorry. Sad


Failure always wants to tear down success. Apparently, people are having lots of problems with the launcher....apparently that guy isn't....and so there is envy and envy leads to the darkside.



Yes I'm jealous, I want issues with my launcher too. Why so meanies with me Cry

removed inappropriate ASCII art signature - CCP Eterne

Frostys Virpio
State War Academy
Caldari State
#15 - 2013-07-04 19:43:16 UTC
Ace Uoweme wrote:
James Amril-Kesh wrote:
This is the root of the vast majority of problems attributed to the EVE launcher.

I knew there was something wrong when I couldn't reach the login page for the forums. I couldn't reach the login page for any of the web services either, because they use the same service. I couldn't use the launcher to login to the client either, because it uses the same service.

The SSO represents a Single Point of Failure. When it breaks, the whole system comes crashing down around it. People aren't able to log onto the forums. People aren't able to log into EVE (for now they can if they bypass the launcher but that won't always be an option). People aren't able to log in to submit petitions. Essentially everything EVE official becomes unavailable to them because of a single failure in the system.

SSO is a significant design flaw that should have never been included in the first place without adding some serious redundancy to go along with it. The path CCP is on right now however isn't working to correct this issue, instead all it's going to do is further expose this vulnerability. Once the launcher becomes mandatory nobody will be able to log into EVE in the event that SSO goes down. They also won't be able to log into the forums to tell you about it.


CCP in other words he wants WoW's login.

Can bypass the launcher and login directly.


When the battle.net sign-on server is down, you still have access to nothing. It happened before. A few time in fact when the transfered to a single login system.
Nikko Jiangtibayan
Ghosts That Linger
#16 - 2013-07-04 19:49:03 UTC
Also, if they add SSO to Account Management, leaving EVE Gate logged in will be able to bring you considerably more trouble than a string of shitposts.

Hello...mate. 

Mizhir: "Brakes are for cowards and they makes the ship heavier."

Medarr
Viziam
Amarr Empire
#17 - 2013-07-04 19:57:27 UTC
So if I understand correctly if you DDoS the SSO server you effectively cripple the whole of EvE?....
Nikko Jiangtibayan
Ghosts That Linger
#18 - 2013-07-04 20:00:21 UTC
Medarr wrote:
So if I understand correctly if you DDoS the SSO server you effectively cripple the whole of EvE?....

That will become the case as soon as SSO is universally implemented and the launcher becomes unskippable. It would still be possible to view the forums and news in read-only mode, but anything that required login (Account Management, forum posting, Support, EVE itself) would be vulnerable.

Hello...mate. 

Mizhir: "Brakes are for cowards and they makes the ship heavier."

Setaceous
Nexus Prima
#19 - 2013-07-04 21:29:41 UTC
Nikko Jiangtibayan wrote:
Medarr wrote:
So if I understand correctly if you DDoS the SSO server you effectively cripple the whole of EvE?....

That will become the case as soon as SSO is universally implemented and the launcher becomes unskippable. It would still be possible to view the forums and news in read-only mode, but anything that required login (Account Management, forum posting, Support, EVE itself) would be vulnerable.

Indeed. SSOs always look simple on paper (especially from the Accountants view), but they very easily turn into Single Points of Failure, something every competent technician tries to avoid getting cornered into deploying.

Fun story: our servers often travel into active war zones and someone was trying to be clever and save money buy taking our multiple physical backup servers and putting them all on one box as virtual machines. OK, fine so far.

"What happens" we asked, : "if that single piece of hardware fails?".

"That's highly unlikely" they said.

Hmmm. We thought about it and set up a field demo for them - we put their server in a tent and then dropped a mortar on it.

"Could you please restore from backup?" we asked Twisted

"oh...." they said.
Linna Baresi
#20 - 2013-07-04 22:34:54 UTC
James Amril-Kesh wrote:
This is the root of the vast majority of problems attributed to the EVE launcher.

I knew there was something wrong when I couldn't reach the login page for the forums. I couldn't reach the login page for any of the web services either, because they use the same service. I couldn't use the launcher to login to the client either, because it uses the same service.

The SSO represents a Single Point of Failure. When it breaks, the whole system comes crashing down around it. People aren't able to log onto the forums. People aren't able to log into EVE (for now they can if they bypass the launcher but that won't always be an option). People aren't able to log in to submit petitions. Essentially everything EVE official becomes unavailable to them because of a single failure in the system.

SSO is a significant design flaw that should have never been included in the first place without adding some serious redundancy to go along with it. The path CCP is on right now however isn't working to correct this issue, instead all it's going to do is further expose this vulnerability. Once the launcher becomes mandatory nobody will be able to log into EVE in the event that SSO goes down. They also won't be able to log into the forums to tell you about it.


IIt's also a security risk. Having separate logins for separate functionality means that if one system is compromised, the others can still be safe (e.g. master account, game account, forum account, support account). Single Sign On means that if they get one, they get them all.

I'm seriously not a fan of SSO.

Member of since 2003 fated.europefreeforum.com

12Next page