<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<p>Hi Patrik -</p>
<p>You should build a little test rig in the lab and make sure that
this will do what you expect.</p>
<p>cheers</p>
<p>Hugh</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 22/8/2023 23:03, Patrik Forsberg via
radiator wrote:<br>
</div>
<blockquote type="cite"
cite="mid:PRAP191MB20666022D6CFA14E723FEB3B961FA@PRAP191MB2066.EURP191.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";
mso-ligatures:none;}span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-ligatures:standardcontextual;}span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span lang="SV">Hey </span><span
style="font-family:"Segoe UI Emoji",sans-serif"
lang="SV">😊</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV"><o:p> </o:p></span></p>
<p class="MsoNormal">So, if I understand this correctly, I can
combine “NoDefault” with “Blacklist” ?<o:p></o:p></p>
<p class="MsoNormal">If so.. will it block the user if “DEFAULT”
is under evaluation ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The function of “Default” will never be of
use for me anyway so if I can simply disable this
functionality and then be able to check for the username
DEFAULT instead that is perfect..<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">---<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Best
Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Patrik<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm
0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="mso-ligatures:none">From:</span></b><span
style="mso-ligatures:none"> Hugh Irvine
<a class="moz-txt-link-rfc2396E" href="mailto:hugh@radiatorsoftware.com"><hugh@radiatorsoftware.com></a>
<br>
<b>Sent:</b> Tuesday, August 22, 2023 12:33 PM<br>
<b>To:</b> Patrik Forsberg
<a class="moz-txt-link-rfc2396E" href="mailto:patrik.forsberg@globalconnect.se"><patrik.forsberg@globalconnect.se></a>;
<a class="moz-txt-link-abbreviated" href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a><br>
<b>Subject:</b> Re: [RADIATOR] Blacklist issue<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p>Hey Patrik -<o:p></o:p></p>
<p>Very good to hear from old friends!<o:p></o:p></p>
<p>As it happens, this is very much by design.<o:p></o:p></p>
<p>Radiator has a "special" user called DEFAULT as described
in the manual:<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<div>
<div>
<p><b><span
style="font-size:12.0pt;font-family:"Helvetica",sans-serif">3.32.13.
NoDefault
</span></b><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p><span
style="font-size:10.0pt;font-family:"Times",serif">Normally
if Radiator searches for a user in the database and
either does not find one, or finds one but the users
check items fail, Radiator will then consult the
DEFAULT user entry. However, if the NoDefault
parameter is set, Radiator will never look for a
DEFAULT. </span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p><b><span
style="font-size:12.0pt;font-family:"Helvetica",sans-serif">3.32.14.
NoDefaultIfFound
</span></b><o:p></o:p></p>
<p><span
style="font-size:10.0pt;font-family:"Times",serif">Normally
if Radiator searches for a user in the database and
finds one, but the users check items fail, Radiator
will then consult the DEFAULT user entry. However,
if the NoDefaultIfFound parameter is set, Radiator
will only look for a DEFAULT if there were no
entries found in the user database for the user.
</span><o:p></o:p></p>
</div>
</div>
</div>
<p><o:p> </o:p></p>
<p>My suggestion is don't use it as you are trying to do.<o:p></o:p></p>
<p>cheers from Oz<o:p></o:p></p>
<p>Hugh<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 22/8/2023 17:38, Patrik Forsberg via
radiator wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal">I’m using the ”blacklist” knob in an
authby to reject people I don’t like
<span style="font-family:"Segoe UI
Emoji",sans-serif">😝</span><o:p></o:p></p>
<p class="MsoNormal">I had an issue this weekend where the
user “DEFAULT” was added to the list of users, for some
reason, and after that no one could login anymore.<o:p></o:p></p>
<p class="MsoNormal">After deleting this user all went back
to normal again ..<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Question.. is this a by design feature
or bug/flaw ?<o:p></o:p></p>
<p class="MsoNormal">Seems a bit odd that I can’t reject a
user by the name “DEFAULT” in a blacklist
<span style="font-family:"Segoe UI
Emoji",sans-serif">😊</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The AuthBy is an AuthBy SQL so the list
of users is in an mariadb table.<o:p></o:p></p>
<p class="MsoNormal">The authby looks like this
(username/password and so forth replaced)<o:p></o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"><AuthBy
SQL></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
Identifier AuthenticateSQLBlacklist</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
DBSource dbi:<a
href="MariaDB:database=db;host=host;port=3306"
moz-do-not-send="true">MariaDB:database=db;host=host;port=3306</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
DBUsername dbuser</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
DBAuth dbauth</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
UsernameMatchesWithoutRealm</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
AuthSelect SELECT NULL FROM `blacklist`
WHERE BINARY `username` = ?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
AuthSelectParam %0</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
AuthColumnDef 0, User-Password, check</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas">
Blacklist</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:Consolas"></AuthBy></span><o:p></o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">---</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Best
Regards,</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas;mso-ligatures:none">Patrik</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>radiator mailing list<o:p></o:p></pre>
<pre><a href="mailto:radiator@lists.open.com.au" moz-do-not-send="true" class="moz-txt-link-freetext">radiator@lists.open.com.au</a><o:p></o:p></pre>
<pre><a href="https://lists.open.com.au/mailman/listinfo/radiator" moz-do-not-send="true" class="moz-txt-link-freetext">https://lists.open.com.au/mailman/listinfo/radiator</a><o:p></o:p></pre>
</blockquote>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
radiator mailing list
<a class="moz-txt-link-abbreviated" href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a>
<a class="moz-txt-link-freetext" href="https://lists.open.com.au/mailman/listinfo/radiator">https://lists.open.com.au/mailman/listinfo/radiator</a></pre>
</blockquote>
</body>
</html>