User Domain user blocked access
flexvixon - July 1, 2009 - 06:02
| Project: | Domain Access |
| Version: | 6.x-2.0-rc8 |
| Component: | - Domain User |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | postponed (maintainer needs more info) |
Jump to:
Description
Everything works as expected in my DNS settings. I'm able to create domain names and sub domains, and browse to it. All good.
The problem I'm having is that on create of the user domain -- the user in question finds himself locked out of the website.
Once I delete the subdomain from the domain list, the user is again able to log in.
After a few tests my feeling is that there may be an issue with reserved usernames. ("The following usernames cannot be registered, since they are used as unique domains.")
#1
It is. But this is probably by design.
If you create the domains (as an admin):
- this.example.com
- someone.example.com
Then no one can register or login as users 'this' or 'someone'. This is a security feature designed to prevent users from "hijacking" primary site domains.
This would be a bug if and only if:
-- The user registers and creates a domain 'myusername.example.com'
-- The name 'myusername' appears in the unique domain list.
The unique domain list is taken from the {access} table, so you can also check there to make sure no usernames were added accidentally.