Infra has mentioned in response to inquiries on infrastructure@ that they're looking at an LDAP based solution. I don't have a pointer to a JIRA discussion.
> On May 27, 2016, at 9:50 AM, Gary Helmling <[email protected]> wrote: > > Thanks for the tip. I had tried the copy/paste but was still getting > tricked by the error message. Clicking through that and going to "Update" > worked. > > I'm guessing that for the contributor list and user info JIRA is using it's > own user db. It seems kind of like wasted effort to have each project > duplicating the management of "non-spammer" validation by adding to a > contributor group. I'm wondering if that could be handled through a shared > group across all projects instead. Or alternately of course doing the spam > filtering a different way. > > Anyone have a pointer to a JIRA where the long term spam solution is being > discussed? > > >> On Fri, May 27, 2016 at 9:07 AM Sean Busbey <[email protected]> wrote: >> >> Yes. If you paste in the full JIRA username you'll get the "can't contact >> server" message, but it will just be from the autocomplete. If you close it >> and submit anyways, the user will be added. >> >> Using the rest API to add folks also works, but it's obviously more >> overhead. >>> On May 27, 2016 07:43, "Stack" <[email protected]> wrote: >>> >>> On Fri, May 27, 2016 at 12:00 AM, Andrew Purtell < >> [email protected] >>> wrote: >>> >>>> This is a known problem. >>>> >>>> We solved this before by adding the 'jira-users' group to the >> Contributor >>>> role. However I had to recently remove it because it allows the >> spammers >>>> attacking Apache's JIRA to open issues with any new user they've signed >>> up >>>> for the purpose. >>>> >>>> Infrastructure is working on a long term solution for the problem we >> are >>>> having with spam attack on our JIRA instance. I don't have an ETA. >>>> >>>> One thing we can try is removing folks from the current Contributors >> list >>>> who haven't been active for a while to make room for new entries. >>> I have been doing the above. >>> >>> Adding the user's JIRA name seems to work though JIRA says it does not >>> (trick from Busbey). >>> >>> St.Ack >>> >>> >>> >>>>> On May 26, 2016, at 10:48 PM, Gary Helmling <[email protected]> >>> wrote: >>>>> >>>>> I can't seem to add new contributors to JIRA. Going to the admin >> page >>>> and >>>>> editing the members of the contributors role, JIRA just displays the >>>>> message "The JIRA server could not be contacted". This shows up for >>>>> type-ahead or just trying to paste in the username. >>>>> >>>>> Is anyone else able to make this work? >>
