[Moin-user] Cracked...advice sought on how to proceed

Reimar Bauer rb.proj at googlemail.com
Fri Jun 21 02:07:28 EDT 2013


Am 18.06.2013 01:36, schrieb Desmond Rivet:
> On Sun, Jun 16, 2013 at 5:24 PM, Paul Boddie <paul at boddie.org.uk
> <mailto:paul at boddie.org.uk>> wrote:
> 
> 
>     I wouldn't immediately re-install Moin. It might be interesting to
>     know what
>     kind of authentication measures you provide, whether you have a
>     restrictive
>     ACL policy, and whether the "newaccount" action is enabled.
>     Generally, to
>     prevent bogus edits you can require users to be registered in order
>     to make
>     edits, you can thereby require authentication, and you can forbid new
>     accounts by putting the following in the class in your configuration
>     file:
> 
>         actions_excluded = ["newaccount"] # plus any others you exclude
> 
>     At that point, maybe the only new files that get created are session
>     files and
>     cache files, as far as I can tell.
> 
> 
> I made myself the super user:
> 
> superuser = [u"DesmondRivet", ]
> 
> And I disabled editing all around:
> 
> acl_rights_default = u"All:read"
> 
> And I granted full rights to the WebmasterGroup:
> 
> acl_rights_before = u"WebmasterGroup:read,write,delete,revert,admin"
> 
> of which I am a part.
> 
> I am not aware of the actions_excluded option.  I'll take a look.
> 
> I cam across the moint maint cleanpages utility, which has proven very
> useful here.
> 
> All this being said...I've now tried logging in to my wiki and I'm
> finding that it's hanging with no response...not sure where to look for
> problems.
> 
Have you looked into the logs?
>

join us on IRC #moin irc.freenode.net

It is a better place than mail for Q/A

Reimar Bauer

> 
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
> 
> Build for Windows Store.
> 
> http://p.sf.net/sfu/windows-dev2dev
> 
> 
> 
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
> 






More information about the Moin-user mailing list