Still able to create accounts on projects with a SUL-account-name
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	May 24 2008, 12:06 PM

Description

Author: willemo

Description:
I was a bit playing with SUL functionality and tried to register my account on projects which I never registered before. I could login instantly, but I tried to create an account the old-fashioned way. I did use different passwords etc.

If I quote http://meta.wikimedia.org/w/index.php?title=Help:Unified_login/en&uselang=en

""
The greatest advantages are single sign-up (...) consistent identity (your username now always means you; no one else can take your name on another project).
""

As far I can see for now, this isn't the case. I am still able to create accounts (though I didn't try this with other usernames) I don't know whether this is done intentionally (I couldn't find any statement about this), some IP-check is performed, or this is really a bug.

Version: unspecified
Severity: major

Details

Reference: bz14248

Event Timeline

• bzimport raised the priority of this task from to High.Nov 21 2014, 10:11 PM

• bzimport added a project: MediaWiki-extensions-CentralAuth.

• bzimport set Reference to bz14248.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.May 24 2008, 12:06 PM

spacebirdy wrote:

Today this bug was brought to my attention by Pill.

We did some tests on http://so.wiktionary.org/wiki/Special:RecentChanges

Pills SUL was not complete (1 wiki was left open) but his SUL was activated
but
he was able to create an account with the name Pill (he used another password another (or no) mail)

We wanted to test with someone whoses SUL was completet too.

The SUL of Baisemain was complete (I checked before with CentralAuth),
she too was able to create a totally new account with the name Baisemain on so.wiktionary.org!
http://so.wiktionary.org/wiki/Special:Log/newusers

This looks quite serious to me.

Many thanks for Your help,
Elisabeth Anderl [[:wikt:is:Notandi:Spacebirdy]]

Looks quite serious to me, too; therefor I changed Priority from normal to high and Severity from normal to major (feel free to revert this though, I am no expert).

thogol wrote:

Please make sure that this bug gets fixed *before* enabling SUL for all. Otherwise we will get tons of complains by community members facing new fake accounts. (And, seeing the recent cross-wiki activity, fake-accounting seems to be a major issue these days...)

BR, Th.

Just checked out http://af.wikipedia.org/w/index.php?title=Spesiaal%3ALog&user=Platonides
This should be blocking further SUL expansion.

dotkorg wrote:

This bug was also reported on Meta: see http://meta.wikimedia.org/wiki/Help_talk:Unified_login#Bug.2C_or_misunderstanding.3F

Regression due to r34124, fixed in r35340.

MarcoAurelio moved this task from Backlog to Done on the MediaWiki-extensions-CentralAuth board.May 5 2015, 6:12 PM

Still able to create accounts on projects with a SUL-account-nameClosed, ResolvedPublicActions

Description

Details

Event Timeline

Still able to create accounts on projects with a SUL-account-name
Closed, ResolvedPublic
Actions