mirror of
https://github.com/nsupdate-info/nsupdate.info.git
synced 2026-04-26 00:55:52 +03:00
[GH-ISSUE #176] notify users on auth errors #164
Labels
No labels
bug
bug
duplicate
easy
easy
enhancement
enhancement
invalid
needs help
pull-request
scalability
security
task
urgent
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nsupdate.info-nsupdate-info#164
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ThomasWaldmann on GitHub (Nov 7, 2014).
Original GitHub issue: https://github.com/nsupdate-info/nsupdate.info/issues/176
Originally assigned to: @ThomasWaldmann on GitHub.
if an update request has no or wrong credentials, this does not increment the client faults counter.
this is because we do not know who sent the update request (without auth, this could be anybody, not only the owner of that host).
but we can assume that in most cases it really IS the owner of the host who fails to send correct auth and just does not notice that the updates are not working.
Some updaters will retry and retry and retry rather often, without a chance to success (this is NOT compliant to the dyndns2 specs btw, updaters need to STOP on errors).
What we could do is to introduce a separate counter for auth errors and send a notification to the record owner in case the auth errors are over some threshold.
Also, on the web host view, it could show the auth errors.
@ThomasWaldmann commented on GitHub (Nov 15, 2014):
note: email notification is not implemented yet, but maybe problematic anyway:
if we have auth errors and send emails too early, the user is maybe still in the process of configuring his updater, so it is too early. also, we should not notify by email for each auth error (it could be someone else, not the legitimate user). if we wait too long, the person configuring the updater is maybe not at the right place any more...
So, better just display it on the web UI, the user should see it there while configuring his updater and also later when he looks there in case of problems.