I have searched extensively, but have not found anything useful. Can anyone offer any advice?
Thank you!
3
-
Automatically creating local users? Please elaborate – Lodder May 29 '15 at 15:46
-
Did you tried looking into the custom plugin code and where it is adding users? – Nagarjun May 29 '15 at 15:49
-
I have created a plugin (which does not have any code to add users) that authenticates with an external REST service using curl. Immediately upon returning the JAuthenticationResponse object from the onUserAuthenticate event, a Joomla user is automatically created in the "Registered" group. This is problematic because it presumably opens the authentication process up to issues like out-of-date passwords and account statuses, since I cannot disable the Joomla authentication plugin (which would lock me out of the back end). – Joel May 29 '15 at 15:55
Add a comment
|
I've solved this issue.
Instead of worrying about syncing two authentication sources (external + regular Joomla), I did disable the Joomla authentication plugin, and updated my custom plugin to check if the code is being called from the front end or back end, and if back end, handle Joomla logins manually from the #__users table.
The users are still auto-created, but the problem of out-of-sync user accounts is now moot, and non-admin users in Joomla can be cleared automatically every night to prevent bloat.
