Hi all,

On 15.10.2025 11:28, Dénes Bodó wrote:

> I created https://issues.apache.org/jira/browse/INFRA-26915 multiple
months ago.

Looking at that JIRA issue, it appears that ASF account removals can be
initiated quite straightforwardly. From the outside, there doesn’t seem
to be any visible indication of a “second-factor” verification or
additional confirmation step.

I’m sure INFRA verifies the authenticity of such requests carefully, but
is there any public documentation (beyond what’s covered at [1])
describing how account removal requests are validated and processed
behind the scenes?

At first glance, it seems that losing access to one’s LDAP password
might potentially allow for unintended account deletion.

References:
[1] https://infra.apache.org/account-mgmt.html

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to