Password Reset

Michael Schwendt mschwendt at gmail.com
Tue Mar 10 10:50:16 UTC 2009


On Tue, 10 Mar 2009 03:18:48 -0700, Toshio wrote:

> Michael Schwendt wrote:
> > On Tue, 10 Mar 2009 02:26:07 +0100, Kevin wrote:
> > 
> >> Another unfortunate side effect of that password expiration: mail to
> >> username at fedoraproject.org bounces for those people who haven't renewed
> >> their password in time. This is also a security risk because it means
> >> people can commit bad things to their packages without them noticing. (I
> >> just got such a bounce for the commit message for a rebuild for broken
> >> dependencies.)
> > 
> > Just for the record, two hours ago I got a delivery failure notification
> > for 14 users expanded from the packager sponsors' group alias. IMO there
> > is an additional problem [unless the accounts for all these well-known
> > names have been disabled].
> > 
> The accounts have been disabled.  That is why the email to them is
> bouncing.  We aren't doing something right though... the group aliases
> shouldn't be picking up inactive accounts but they are.

This is unbelievable. We're talking about 14 sponsors with disabled
accounts. Just based on their names I could call them "Fedora celebrities".
Something has gone wrong here.

These people currently don't receive cvs commit notifications either?




More information about the fedora-devel-list mailing list