30 January 2016, 1:50

On the login page of mahara, any user can actually login (e.g. typing anything like 'pppp' as username and password) and assigned to an institution. The system create them as dummy users, This type of users will have the last name of 'McAuthentication'.

How can i prevent such users to be able to login in my installation of my Mahara?

I am using mahara version 15.10.1. Your help in this regard will be much appreciated.

01 February 2016, 9:12

Hi Stanford,

Please check your authentication methods and registration settings. Normally, users can't just log in with an account that hasn't been registered before unless you allow the option to not choose an authentication method for one of your institutions.

If you want to approve accounts before they are created, also set the option "Confirm registration" to "Yes" and not only "Registration allowed".

See http://manual.mahara.org/en/15.10/administration/institutions.html#edit-an-institution for more information on the authentication methods.

Cheers

Kristina