689511 - Allow to disable creating new user accounts in server-full

Status: RESOLVED FIXED

(Cloud Services :: Server: Other, defect)

Description

[Sebastian Schuberth]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
Build ID: 20110902133214

Steps to reproduce:

I tried to setup up my own private Weave server according to [1].

[1] http://docs.services.mozilla.com/howtos/run-sync.html


Actual results:

I noticed there is no option to disable registration of new accounts after I created an account for myself.


Expected results:

There should be an option in etc/sync.conf to disable creating new accounts. I'd like to disable registration for security reasons.

Comment 1

[Tarek Ziadé (:tarek)]

This has been asked many many times, will add an option for it

Comment 2

[Allison Naaktgeboren :ally]

tarek, hows this going?

Comment 4

[Ryan Kelly [:rfkelly]]

Attachment: patch to disable adding new users

OK, finally getting around to this.  Attached patch allows you to set auth.allow_new_users to false to disable the creation of new user accounts.

Comment 5

[Rob Miller [:rmiller]]

Comment on attachment 637740 [details] [diff] [review]
patch to disable adding new users

Review of attachment 637740 [details] [diff] [review]:
-----------------------------------------------------------------

straightforward enough

Comment 6

[Ryan Kelly [:rfkelly]]

Committed in http://hg.mozilla.org/services/server-core/rev/59a0313487a1

I'm leaving this bug open until I update the docs with this change.  For folks following this bug because they run their own sync server, if you update to latest development version:

    make build CHANNEL=dev

Then you should be able to add this to your config file to disable creation of new user accounts:

    [auth]
    allow_new_users = false

Comment 7

[Ryan Kelly [:rfkelly]]

Added this option to example config files distributed with server-full: http://hg.mozilla.org/services/server-full/rev/7eb157ce2da1