that is a glitch, but a pretty rare one. why would someone ever login via DA to the site which they originally registered? there isn't a security problem here, just a duplicate account problem. i'll add it to the bug list.

> -----Original Message-----
> From: drupal-devel-admin@drupal.org
> [mailto:drupal-devel-admin@drupal.org]On Behalf Of Dries Buytaert
> Sent: Sunday, May 26, 2002 4:52 PM
> To: drupal-devel@drop.org
> Subject: [drupal-devel] distributed authentication glitch
>
>
>
> In drop.org's watchdog, I just spotted the following:
>
> 05/26/2002 - 17:58
> new user: 'cecco' Anonymous chicken
> [the e-mail is made spam-proof]
>
> 05/26/2002 - 17:59
> session opened for 'cecco@www.drop.org' cecco@www.drop.org
>
> 05/26/2002 - 17:59
> new user: cecco@www.drop.org (drupal ID) Anonymous chicken
>
> That is, someone can create a second account on drop.org using its
> drop.org Drupal ID.
>
> --
> Dries Buytaert :: http://www.buytaert.net/

Comments

Anonymous’s picture

(not verified) commented
Component: Code » User system
Category: bug » feature
Priority: Major » Normal

Making this a feature request. The DA wasn't designed to handle this so its working as expected. However it would be nice if someone decided to tackle this problem!

Bèr Kessels’s picture

Bèr Kessels commented
Component: User system » other

Very old. Marking this "by design". A DA username != a username. They should not be the same.

moshe weitzman’s picture

moshe weitzman commented

actually, i'm told by numerous admins (including drupal.org) that many people try to sign in with a drupal ID. they just cut and paste from the default welcome email.

forngren’s picture

forngren commented
Status: Active » Closed (works as designed)