Hi Greg, Thanks for testing this stuff. I don't think there is a way to require commenters to be logged in as Roller users unless you are using LDAP and LdapCommentAuthenticator actually works (I have never tested it). In roller.properties: comment.authenticator.classname=LdapCommentAuthenticator.
You can turn on comment moderation to server-wide to require all comments to be approved before shown: Server Admin → Configuration → Comment Settings → "Require comment moderation for all weblogs" (users.moderation.required) Dave On Sun, Nov 1, 2026 at 6:21 AM Greg Huber <[email protected]> wrote: > Ok thanks. Seems working today. > > Where is the setting now for anonymous posting (ie not being logged in), > and how to disallow it? > > On 31/10/2026 16:05, Dave wrote: > > Hi Greg, > > > > I cannot reproduce this one locally. Do you have the absolute URL > > (site.absoluteurl) set in your global properties? I think this error can > > occur when you access the blog from a URL that does not match what is set > > as the site's absolute URL. > > > > Dave > > > > On Sat, Oct 31, 2026 at 4:17 AM Greg Huber<[email protected]> wrote: > > > >> Dave, > >> > >> I keep getting > >> > >> The response is not correct. Please try again. > >> > >> when trying to post a comment, not sure its my install. The mathAnswer > >> is null. > >> > >> I started by adding a comment submitted, then added email and submitted. > >> > >> CommentServlet > >> > >> } else if (!preview && !this.authenticator.authenticate(request)) { > >> error = messageUtils.getString("error.commentAuthFailed"); > >> log.debug("Comment failed authentication"); > >> } > >> > >> On 30/10/2026 21:22, Dave wrote: > >>> Please review and vote on Apache Roller 6.1.7, release candidate 4. > >>> > >>> Source and convenience binary artifacts: > >>> https://dist.apache.org/repos/dist/dev/roller/roller-6.1/v6.1.7/ > >> (r88934) > >>> Source tag: roller-6.1.7-rc4, commit > >>> 69d0d5eefd8e6ffcdb3630f0c8affb9453c308ba > >>> https://github.com/apache/roller/tree/roller-6.1.7-rc4 > >>> > >>> KEYS:https://downloads.apache.org/roller/KEYS > >>> Signing fingerprint: 3687 8574 1958 DE96 98FF DF4E 8FEC 6F9C BA59 703C > >>> > >>> Release notes: > >>> https://github.com/apache/roller/blob/roller-6.1.7-rc4/CHANGES.md > >>> Please read "Behaviour changes worth reading before upgrading" before > you > >>> upgrade a live site. > >>> > >>> To check signatures, checksums, LICENSE/NOTICE and the source build, > you > >>> can use the script on master: > >>> > >> > https://github.com/apache/roller/blob/master/skills/roller-release/scripts/check-release.sh > >>> (check-release.sh <download-dir> --build). Do not use the copy in the > RC4 > >>> source archive. On large archives it can wrongly report that LICENSE > and > >>> NOTICE are missing. > >>> > >>> The vote stays open for at least 72 hours, until at least Tuesday, > >> November > >>> 3, 2026, 12:00 UTC. > >>> > >>> [ ] +1 Release this candidate > >>> [ ] +0 No opinion > >>> [ ] -1 Do not release, because ... > >>> > >>> Dave Johnson > >>>
