User system is blocking *everyone* - needs fixing urgently

[ed]

Everyone who registers for the last two weeks is being blocked - check user list and see screengrab. Needs fixing promptly.

[ed]

screengrab of user list with everyone blocked

[jim]

Fixed... This was a side effect of a change BOA made to limit spam account creation (which to be fair can be hundreds/thousands of accounts per day). The issue where I complained and they refactored the approach is here for reference: ​Force user_register policy unless modules/disable_user_register_protection.info exists

Per the documentation at ​http://omega8.cc/how-to-change-account-registration-settings-273, I've created the appropriate control file like so:

[log in, sudo, totn]
tn@puffin:~$ cd static/transition-network-d6-p005/sites/transitionnetwork.org
tn@puffin:~/static/transition-network-d6-p005/sites/transitionnetwork.org$ touch disable_user_register_protection.info

This control file will prevent the nightly tasks tightening the user registration policy.

Ed, you can unblock the users at your leisure.

[jim]

The control file is in the sites/transitionnetwork.org directory, which is copied in its entirety when a site is moved, migrated or cloned into a new platform. Hence this is a one-off fix.

This situation arose because the BOA team decided to include in the stable version, so the recent updates Chris did would have brought in the 'fix'. Note they regret the handling of this as it caused some pain and was not announced properly: ​https://drupal.org/node/2015553#comment-7621997

Anyway, all done, fixed.

[ed]

Good work, ta

[ed]

Re-opening this ticket as I'm seeing a *lot* of blocked accounts again, and getting moans.Please re-check:
​https://www.transitionnetwork.org/admin/user/user/list

[jim]

So the settings here: ​https://www.transitionnetwork.org/admin/user/settings were "Visitors can create accounts but administrator approval is required." in "Public registrations" at the top.

If this happens again please set it to "Visitors can create accounts and no administrator approval is required."...

And let me know, I'll double-check the settings/punch BOA.

In the mean time the users that look kosha can be set to 'Active' at your leisure -- the users will get an email to say they can use the site.

[jim]

Reassigning to Ed so he can track and re-assign to me in case it happens again -- will investigate further if so...

[ed]

good, thanks

[ed]

I think that this re-boot in #535 re-set the user settings - I had set them to 'Visitors can create accounts and no administrator approval is required.' before, then this happened, now the settings have changed to 'Visitors can create accounts but administrator approval is required.'.

[jim]

OK my bad, the disable_user_register_protection.info file was in [platform]/sites/[tn.org], rather than the modules sub folder.

This meant the /var/xdrago/daily.sh script was locking our user registrations.

Now fixed... Hopefully this won't generate more load spikes due to spam registrrations... see last para of ​http://omega8.cc/how-to-change-account-registration-settings-273 for the BOA team's reasons for introducing this setting.

[jim]

Forgot my time

[ed]

ta