On 11/9/2015, 1:54:59 PM, Graham Leggett <minf...@sharp.fm> wrote: 
> On 09 Nov 2015, at 2:41 PM, Daniel Gruno <humbed...@apache.org> wrote:
> 
> > You're welcome to try to clean it up ;)
> > make a user account on the system and give me the UID of that user (the
> > ID, not the username - there are tens of thousands of users, so I can't
> > see them all in the admin interface anymore).
> 
> :)
> 
> > I am contemplating removing all users/mods and adding some recaptcha
> > stuff to it soon, but enotime right now.
> 
> Is there a way to leverage LDAP at all? (Or whatever backs the JIRA et al 
> instances)
> 

JIRA isn't LDAP backed, FWIW.
And no, we wanted it to be open to the larger public to submit modules, not 
just committers. But the rub is, we are being attacked manually by actual 
people sending in garbage stuff, bypassing the security checks. I'm not 
entirely sure how to combat this, but I do have a few ideas. They require 
something close to a complete wipe of the database , however.

With regards,
Daniel.

> Regards,
> Graham
> —
> 
> 
------
Sent via Pony Mail for dev@httpd.apache.org. 
View this email online at:
https://pony-poc.apache.org/list.html?dev@httpd.apache.org

Reply via email to