#10743 Please disallow usernames starting with "fedora"
Closed: Upstream 2 years ago by kevin. Opened 2 years ago by mattdm.

Someone recently registered a Fedora account with the name fedora36. This is potentially quite confusing. Could we please:

  1. Block all usernames starting with the word "fedora" (and possibly just plain containing it)?
  2. Contact all existing users with such names and ask them to change?

Thank you.


Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: medium-gain, medium-trouble, ops

2 years ago

This may not be easy to search for or do, but we can give it a try. ;)

  1. Forbidden substrings are going to take some upstream noggin work. CC: @abompard
    Might be good if it was made a config file option, so we can adjust it over time.

  2. Finding all users with fedora in uid isn't something ipa is good at searching for. You can search for a substring in all fields easily, but not just uid. ;( I'm sure we can figure out how to do this...

This may not be easy to search for or do, but we can give it a try. ;)

  1. Finding all users with fedora in uid isn't something ipa is good at searching for. You can search for a substring in all fields easily, but not just uid. ;( I'm sure we can figure out how to do this...

This can be done with fasjson, e.g.:

curl --negotiate -u : https://fasjson.fedoraproject.org/v1/search/users/?username=fedora

however, it's paginated, and can't seem to get any other page than page 1, or make the pages bigger :(

However, there are currently 348 users with fedora as a substring.

I talked with @abompard and have refiled this upstream: https://github.com/fedora-infra/noggin/issues/957

Once it's implemented there, we can add fedora to it and look at the existing users.

Metadata Update from @kevin:
- Issue close_status updated to: Upstream
- Issue status updated to: Closed (was: Open)

2 years ago

The noggin feature is now implemented and deployed. We can configure a set of regexps that registering usernames will be checked against and blocked if they match. I've taken the liberty to add .*fedora.* already.

As far as listing existing users, this command will give their UIDs:

ldapsearch -LLL -o ldif_wrap=no 'uid=*fedora*' -b cn=accounts,dc=fedoraproject,dc=org uid | grep ^uid: | cut -d' ' -f2

There are currently 369 accounts containing fedora.

Log in to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog