SID-01070: User registration and logging in without email component

Status:	Answered	TWiki version:	5.0.1	Perl version:	5.0.1
Category:	CategoryAuthentication	Server OS:	ubuntu 10.04.1	Last update:	14 years ago

Hi,

I have read about Template and Apache login in the doc. Both seem to need the user to receive the activate link by email for authentication.

My requirement is for a small company, which intends to run it on the cloud. Hence employees access the Twiki site only through public IP address (sorry we can't afford vpn and virtual private cloud at this time).

Is there any way or technology where in
- Twiki presents the registration page,
- user provides his username and his chosen password,
- then twiki registers it (dont know where and how and with what technology) internally or with some other s\w
- and subsequently user can start using the site with that username and password

I am fine with the arrangement where sys admin has to create the username but user will have option to provide his own password or atleast change it from default password.

We dont want the email component where all and sundry start registering if they get to know the url since its on public IP address.

Any help in this regard, I will am thankful to you.

Thanks

-- KishorePratap - 2010-12-29

Discussion and Answer

I recommend this setup:

• Run TWiki under SSL for security.
• Use Apache login or template login, but in either case, authenticate all scripts except resetpasswd, and the twiki/pub directory.
• Configure TWiki in {Register}{NeedVerification} to not require verification of e-mail at time of registration.
• An admin pre-registers users with a temporary password. Call user or send an e-mail with temporary password and link to ChangePassword page.

-- PeterThoeny - 2010-12-29

HI, what happens when userX forgot their password? Not the admin nor the userX know it. Can the admin modify the user password?

thanks

-- TWikiGuest - 2011-01-04

Since the userX forgot his pwd and I did not know I genereted an encrypted new one and pasted into the .htpassword file, it worked but I didn't like: meed to modify a sensible file Is there a way do let admin set user passwords from one topic? And how admin can register user?

Thanks, bye. Jouani

-- TWikiGuest - 2011-01-04

The userX and you as an admin can reset the password for the user. Visit TWiki.ResetPassword on your site. TWiki will send a new temporary password by e-mail to the registered address.

-- PeterThoeny - 2011-01-04

Good morning Mr. Thoeny, nice to discuss with you. The point is that the email component is not available in this case, UserX can't receive the message.

-- TWikiGuest - 2011-01-05

Hi, where an admin can pre-registers users with a temporary password? Thank you.

-- TWikiGuest - 2011-02-08

Please open a new support question.

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- PeterThoeny - 2011-05-02

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.