[Adminsysters] anyone can register on our GitLab instance

mara mara at multiplace.org
Sun Nov 29 18:37:40 CET 2020


Everyone can create an account but no one receives a confirmation email
with the generated password to sign-in. New users need the admins
resetting the password for them. I thought it was a bug, but I saw now
in the gitlab settings that sending emails upon signups is disabled. So
no worries for bots accounts yet.
https://git.systerserver.net/admin/application_settings/general

I don't think restriction on domain names is a practical option.
Gitlab added an admin approval for new registrations from version 13.5.
We have now 12.7. So after upgrade we could enable this feature.

m

On 11/29/20 6:18 PM, ignifugo wrote:
> 
> On 28/11/20 19:31, Donna Metzlar wrote:
>> Hi,
>>
>> I just did a test and created an account on:
>> https://git.systerserver.net/
>>
>> I thought we had a policy, to moderate registration requests? As it is
>> now, anyone and everyone can create an account.
> hum.. maybe we can restrict to only some email domains?
>> Can we see how many people/bots have created an account already?
> 
> at the moment on the gitlab there are 19 users..
> https://git.systerserver.net/admin/users:
> 
> - 5 admin (mara, donna, ignifugo, gaba, gaba2)
> 
> - 8 external, that I don't know what means.. but are people that we know
> 
> - 1 blocked, that is the second account of Gaba (do you want that we
> delete it?)
> 
> - 0 deactivated
> 
> - 5 without a project..
> 
> that's all
> 
> hugs ignifugo
> 
> 
>>
>> Donna
>> _______________________________________________
>> Adminsysters mailing list
>> Adminsysters at lists.genderchangers.org
>> https://lists.genderchangers.org/mailman/listinfo/adminsysters
> _______________________________________________
> Adminsysters mailing list
> Adminsysters at lists.genderchangers.org
> https://lists.genderchangers.org/mailman/listinfo/adminsysters
> 

-- 
mara.multiplace.org


More information about the Adminsysters mailing list