OSGeo LDAP contains spam accounts

[darkblueb]

reported by Martin Spott ..

17. can we characterize the attributes ? what groups and what privelages
18. can new spam account creation be stopped
19. can we characterize the attack vector ? how did they get there

also see ticket #165

[martin]

Note that I said "fake" accounts, not "spam".

Remember that creating OSGeo LDAP user ID's has been kept very simple by intention, not just by accident. I don't think there's a particular "attack", they're just using the form we provide.

OSGeo LDAP currently has approx. 18k user ID's, but, as far as I understand, most of these are not members of any of our project or shell groups.

[strk]

This ticket became relevant again these days. See also #1665

What are "Q", "R" and "S" in the original ticket description ?

[strk]

Closed for lack of feedback