<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";
mso-ligatures:none;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-ligatures:standardcontextual;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="SV">Hey </span><span lang="SV" style="font-family:"Segoe UI Emoji",sans-serif">😊</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV"><o:p> </o:p></span></p>
<p class="MsoNormal">So, if I understand this correctly, I can combine “NoDefault” with “Blacklist” ?<o:p></o:p></p>
<p class="MsoNormal">If so.. will it block the user if “DEFAULT” is under evaluation ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The function of “Default” will never be of use for me anyway so if I can simply disable this functionality and then be able to check for the username DEFAULT instead that is perfect..<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">---<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Best Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Patrik<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="mso-ligatures:none">From:</span></b><span style="mso-ligatures:none"> Hugh Irvine <hugh@radiatorsoftware.com>
<br>
<b>Sent:</b> Tuesday, August 22, 2023 12:33 PM<br>
<b>To:</b> Patrik Forsberg <patrik.forsberg@globalconnect.se>; radiator@lists.open.com.au<br>
<b>Subject:</b> Re: [RADIATOR] Blacklist issue<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p>Hey Patrik -<o:p></o:p></p>
<p>Very good to hear from old friends!<o:p></o:p></p>
<p>As it happens, this is very much by design.<o:p></o:p></p>
<p>Radiator has a "special" user called DEFAULT as described in the manual:<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<div>
<div>
<p><b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif">3.32.13. NoDefault
</span></b><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p><span style="font-size:10.0pt;font-family:"Times",serif">Normally if Radiator searches for a user in the database and either does not find one, or finds one but the users check items fail, Radiator will then consult the DEFAULT user entry. However, if the
NoDefault parameter is set, Radiator will never look for a DEFAULT. </span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p><b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif">3.32.14. NoDefaultIfFound
</span></b><o:p></o:p></p>
<p><span style="font-size:10.0pt;font-family:"Times",serif">Normally if Radiator searches for a user in the database and finds one, but the users check items fail, Radiator will then consult the DEFAULT user entry. However, if the NoDefaultIfFound parameter
is set, Radiator will only look for a DEFAULT if there were no entries found in the user database for the user.
</span><o:p></o:p></p>
</div>
</div>
</div>
<p><o:p> </o:p></p>
<p>My suggestion is don't use it as you are trying to do.<o:p></o:p></p>
<p>cheers from Oz<o:p></o:p></p>
<p>Hugh<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 22/8/2023 17:38, Patrik Forsberg via radiator wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal">I’m using the ”blacklist” knob in an authby to reject people I don’t like
<span style="font-family:"Segoe UI Emoji",sans-serif">😝</span><o:p></o:p></p>
<p class="MsoNormal">I had an issue this weekend where the user “DEFAULT” was added to the list of users, for some reason, and after that no one could login anymore.<o:p></o:p></p>
<p class="MsoNormal">After deleting this user all went back to normal again ..<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Question.. is this a by design feature or bug/flaw ?<o:p></o:p></p>
<p class="MsoNormal">Seems a bit odd that I can’t reject a user by the name “DEFAULT” in a blacklist
<span style="font-family:"Segoe UI Emoji",sans-serif">😊</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The AuthBy is an AuthBy SQL so the list of users is in an mariadb table.<o:p></o:p></p>
<p class="MsoNormal">The authby looks like this (username/password and so forth replaced)<o:p></o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"><AuthBy SQL></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> Identifier AuthenticateSQLBlacklist</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> DBSource dbi:<a href="MariaDB:database=db;host=host;port=3306">MariaDB:database=db;host=host;port=3306</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> DBUsername dbuser</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> DBAuth dbauth</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> UsernameMatchesWithoutRealm</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> AuthSelect SELECT NULL FROM `blacklist` WHERE BINARY `username` = ?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> AuthSelectParam %0</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> AuthColumnDef 0, User-Password, check</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> Blacklist</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"></AuthBy></span><o:p></o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">---</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Best Regards,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Patrik</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>radiator mailing list<o:p></o:p></pre>
<pre><a href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a><o:p></o:p></pre>
<pre><a href="https://lists.open.com.au/mailman/listinfo/radiator">https://lists.open.com.au/mailman/listinfo/radiator</a><o:p></o:p></pre>
</blockquote>
</div>
</div>
</body>
</html>