4 ms·

GitLab CEO here, we're very exited that we're able to open up the Enterprise Edition code and the 2 factor authentication.

by sytse 11y ago

jordigh 11y ago
I'm a bit amused: https://www.google.ca/?gws_rd=ssl#q=%22GitLab+ceo+here%22 https://www.google.ca/?gws_rd=ssl#q=%22GitLab+ceo+here%22 https://duckduckgo.com/?q=%22GitLab+CEO+here%22+site%3Anews.ycombinator.com&t=keywordsearch https://duckduckgo.com/?q=%22GitLab+CEO+here%22+site%3Anews....
- iancarroll 11y ago
  What's wrong with someone talking about their product?
  - jordigh 11y ago
    There's nothing wrong with it, just amusing.
- sytse 11y ago
  The rest of the company team is now making fun of me on Slack due to this link :)
  - ecnahc515 11y ago
    I wish more people would be upfront like you are. So often do I see really biased answers/responses on the internet, only to realize the person responding works for the company they're defending.
    - sytse 11y ago
      Thanks! We're having a company happy hour so I'll leave my response at this. Have a good weekend!
paukiatwee 11y ago
Not really related to topic, but how is GitLab CE & GitLab EE project maintained in term of source code? GitLab EE is fork of GitLab CE such that additional code of GitLab EE is in different directory (so upstream changes will not conflict with GitLab EE)?
- sytse 11y ago
  Thanks for asking. GitLab CE and EE are different repo's. GitLab EE is a superset of the CE code. We merge CE into EE a couple of times per month. Sometimes changes in CE conflict with EE, the GitLab company team takes care of that. For more information please see https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/release/monthly.md https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/rele...
Omnipresent 11y ago
I love GitLab at our company but really want the keyboard shortcuts [1]. Especially the file finder [1] http://owenou.com/images/posts/github_shortcuts.png http://owenou.com/images/posts/github_shortcuts.png
- sytse 11y ago
  There are keyboard shortcuts, see http://i.imgur.com/OSpOwT9.png http://i.imgur.com/OSpOwT9.png (press shift ? to view them) and if you miss any please add them.
nadams 11y ago
I've implemented 2FA for SVN and Mercurial (not yet for git) for Indefero. I highly recommend showing users the key for their storage - I've had to extract the keys from FreeOTP and Google Authenticator a number of times. How do you leverage 2FA with LDAP/AD accounts? Do you store/check the key in gitlab and then auth the users against LDAP/AD - or store the key in LDAP/AD?
- sytse 11y ago
  GitLab CEO here, I'm probably out of my depth and misunderstanding but let me try. I'll see if other people on my team can look into the question too. Instead of extracting keys don't you want to use backup codes (that we provide)? 2FA for LDAP accounts is an additional safety measure that you need to unlock the account. The key is stored in the same place as with non-LDAP account I think.
  - nadams 11y ago
    > Instead of extracting keys don't you want to use backup codes (that we provide)? Perhaps my opinion is wrong - but if I replace my OTP generating device (such as my phone) I don't want to use recovery codes I just want to restore FreeOTP and be on my way. Recovery codes to me is "oh shit I need to get to my account right now because of some important reason X and I don't have my phone with me". To give you some background of why - I have about 20 OTP keys in FreeOTP right now - being able to have root access and restore FreeOTP from Titanium Backup is very important to me. This was particularly annoying when a service does not provide recovery codes. Or even worse (Symantec VIP OTP) they generate a random key generated based on the device - so even if you reinstall it you can't get the same key back (according to reviews in the play store - updates have even triggered a regen of keys) - locking people out of their accounts because many services who use Symantec VIP access don't offer recovery codes. This all goes back to the idea of exporting keys from apps like FreeOTP and Google auth. People have asked numerous times but no one wants to implement it in those applications (there is a 3rd party OTP app that claims to store the keys encrypted in dropbox...but last time I used it the automatic backup stopped working....). To make a long story short - if you present the QR Code I can get the key by using it a barcode scanner - but just tell me what it is so I can throw it in my password manager in the event I need to get into my account without my phone or have to replace my phone. We can talk offline if you are interested and I can explain how I do 2FA for SVN and Mercurial.

GitLab CEO here, we're very exited that we're able to open up the Enterprise Edition code and the 2 factor authentication.

by sytse 11y ago

GitLab CEO here, we're very exited that we're able to open up the Enterprise Edition code and the 2 factor authentication.

jordigh 11y ago

I'm a bit amused: https://www.google.ca/?gws_rd=ssl#q=%22GitLab+ceo+here%22 https://www.google.ca/?gws_rd=ssl#q=%22GitLab+ceo+here%22 https://duckduckgo.com/?q=%22GitLab+CEO+here%22+site%3Anews.ycombinator.com&t=keywordsearch https://duckduckgo.com/?q=%22GitLab+CEO+here%22+site%3Anews....

iancarroll 11y ago
What's wrong with someone talking about their product?
- jordigh 11y ago
  There's nothing wrong with it, just amusing.
sytse 11y ago
The rest of the company team is now making fun of me on Slack due to this link :)
- ecnahc515 11y ago
  I wish more people would be upfront like you are. So often do I see really biased answers/responses on the internet, only to realize the person responding works for the company they're defending.
  - sytse 11y ago
    Thanks! We're having a company happy hour so I'll leave my response at this. Have a good weekend!

paukiatwee 11y ago

Not really related to topic, but how is GitLab CE & GitLab EE project maintained in term of source code? GitLab EE is fork of GitLab CE such that additional code of GitLab EE is in different directory (so upstream changes will not conflict with GitLab EE)?

sytse 11y ago
Thanks for asking. GitLab CE and EE are different repo's. GitLab EE is a superset of the CE code. We merge CE into EE a couple of times per month. Sometimes changes in CE conflict with EE, the GitLab company team takes care of that. For more information please see https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/release/monthly.md https://gitlab.com/gitlab-org/gitlab-ce/blob/master/doc/rele...

Omnipresent 11y ago

I love GitLab at our company but really want the keyboard shortcuts [1]. Especially the file finder [1] http://owenou.com/images/posts/github_shortcuts.png http://owenou.com/images/posts/github_shortcuts.png

sytse 11y ago
There are keyboard shortcuts, see http://i.imgur.com/OSpOwT9.png http://i.imgur.com/OSpOwT9.png (press shift ? to view them) and if you miss any please add them.

nadams 11y ago

I've implemented 2FA for SVN and Mercurial (not yet for git) for Indefero. I highly recommend showing users the key for their storage - I've had to extract the keys from FreeOTP and Google Authenticator a number of times. How do you leverage 2FA with LDAP/AD accounts? Do you store/check the key in gitlab and then auth the users against LDAP/AD - or store the key in LDAP/AD?

sytse 11y ago
GitLab CEO here, I'm probably out of my depth and misunderstanding but let me try. I'll see if other people on my team can look into the question too. Instead of extracting keys don't you want to use backup codes (that we provide)? 2FA for LDAP accounts is an additional safety measure that you need to unlock the account. The key is stored in the same place as with non-LDAP account I think.
- nadams 11y ago
  > Instead of extracting keys don't you want to use backup codes (that we provide)? Perhaps my opinion is wrong - but if I replace my OTP generating device (such as my phone) I don't want to use recovery codes I just want to restore FreeOTP and be on my way. Recovery codes to me is "oh shit I need to get to my account right now because of some important reason X and I don't have my phone with me". To give you some background of why - I have about 20 OTP keys in FreeOTP right now - being able to have root access and restore FreeOTP from Titanium Backup is very important to me. This was particularly annoying when a service does not provide recovery codes. Or even worse (Symantec VIP OTP) they generate a random key generated based on the device - so even if you reinstall it you can't get the same key back (according to reviews in the play store - updates have even triggered a regen of keys) - locking people out of their accounts because many services who use Symantec VIP access don't offer recovery codes. This all goes back to the idea of exporting keys from apps like FreeOTP and Google auth. People have asked numerous times but no one wants to implement it in those applications (there is a 3rd party OTP app that claims to store the keys encrypted in dropbox...but last time I used it the automatic backup stopped working....). To make a long story short - if you present the QR Code I can get the key by using it a barcode scanner - but just tell me what it is so I can throw it in my password manager in the event I need to get into my account without my phone or have to replace my phone. We can talk offline if you are interested and I can explain how I do 2FA for SVN and Mercurial.