-
Bug
-
Resolution: Not a bug
-
Major
-
None
-
1.8.4
-
None
-
MOODLE_18_STABLE
The site is set to force users to login. pop3 authentication is enabled in addition to internal. Self registration is set to disabled. If a user gives a bogus userid, he becomes a message about invalid login. Good. However, if a user gives a userid and passwort that are authenticated by pop3, he is allowed to continue to create an account. This should not happen if I understand the purpose of "registerauth" properly. I expect that when it is set to disabled, only users that are already defined in Moodle database can login using whatever authentication method assigned to them.
- has been marked as being related by
-
MDL-12580 The page isn't redirecting properly if attempting to self register if self registration is disabled
-
- Closed
-
-
MDL-12603 registerauth should be removed from "Common settings" in Authentication configuration
-
- Closed
-
-
MDL-12604 add option to prevent creation of new accounts even if user authenticates in external source
-
- Closed
-