tim's profile - activity

We left the default settings for the negative 5 points for unaccepting an answer.
As a result of some slowness in the UI and buggy code it looks like a user can lose far more than 5 points if the original question answerer keeps clicking on accept/unaccept button.

I have set the max length for a comment, but it does not seem to be enforced.

Note that in settings I changed the default editor for comments to be the same as questions.

I would like to see a list of the users who are sent emails for the daily/weekly notifications. Is this possible through Ask or another method?

Please see this question about running cron job or windows scheduler http://askbot.org/en/question/11742/how-does-askbot-send-email-notifications/

I believe you do have to set up a cron job or windows task to run the email notifications. I think the "Real time" notifications work without it.

Spam. please deleet, flag, etc. I do not have the rep points for either

We have a site that requires validation with an outside authentication service (a wiki/LDAP) but yet we see users with obvious bad names on our site and "posting" questions with nonsense in them.

It is apparent that there are others who use AskBot with similar issues.
I have a few questions:

• How did these users create accounts for themselves if they did not use our (what we thought was a) sinlge external authentication?

• How can we stop this from happening?

• How did these bots find the site? (we don't publish it - it is a closed site)

EDIT Note that I was able to reproduce the ability to sign in with nonsense accounts by navigating to [mysite]/account/signup/?login_provider=local there is no way to get there from a UI as far as I could tell, but the url works and allows a person to signup.

.../account/signup/?login_provider=local

thanks. we actually want to delete all the users content in these instances - these were spam accounts.

So I guess my question should be, how do we allow just the ldap lgin - since we do not want the 'local' email/password login at all.

The attempts apparently just came through the usual registration page. Although it was not possible to get to that page through the UI, the url still worked. We are hosting on our own server. Users must be registered to see content/post. We fixed this by using the domain whitelist for emails in order to register.

Great. Look forward to getting it

Instead of doing it from mysql I did it from the django admin page:

YourSiteUrl/admin

and

.../admin/auth/user/

however, I don't believe this is recommended by the implementors of the software - it is recommended to block them, however this is a tedious task if there are more than a few (and when the spammers sign up it usually means trouble...)

In looking at this question: http://askbot.org/en/question/11343/logging-user-access/

I noted that we do not have that log file. Perhaps we have an old version? We're using 'Powered by Askbot version 0.7.49' But that question is over a year old and we just started up our site a few months ago so I am not sure why we would not have that working.

Is this a setting?

While this is not really an answer, I just clicked on the "recover password" link at the bottom of the login page. And then the email I received let me click a link and I was logged in automagically. I was then able to put back the local login.

So this was a way to circumvent the login process

I apparently disabled all authentication methods via the ui - and now I cannot get back onto the site.
I assume there is a way to set this in the settings on the server/in the file system. how can i do that. it is not obvious to me where those settings are. thanks

upgraded to what? I do not see that file

We would like to know how users are creating their spam accounts so we can stop them. We have been unsuccessful so far.

We want only ldap/external authentication to work. We have noticed some spam users and questions showing up. If we uncheck that button will this achieve what we want?

We're also going to whitelist known domains/emails.

I tried uploading a file and pasting an image here to show what I mean, but I am apparently not allowed since I don't have enough rep.

If you go to

settings/LOGIN_PROVIDERS/

and then look at the Activate local password login checkbox you will see what I am asking about.

Will that have side effects/consistency ramifications?