Please link your SLMS account to Discourse!

Hello all @members

As part of the transition to the new membership system (which is really really nice btw; top marks to Tommel EDIT: And Luke! for writing the whole thing from scratch) , we can now control membership of Discourse groups. For example, everyone trained on the laser cutter will automatically be a member of @lasers. Most importantly, we can drive membership of the @members group so that the private forums are properly available to full members only.

I’m doing these manually myself, but there are lots of accounts and it’s taking a while! I’d be really grateful if you could log in to the membership system (use the I Forgot My Password link to get a new one) and link your discourse account. It only takes a minute :slight_smile:

1 Like

Done. That is indeed a rather splendid system @unknowndomain has created.

I just did it!
I have a question tho, why I had to reset the password? I tried the old one and didn’t work, while is still working on discourse…
Just to know…

They are separate accounts with separate passwords.

The old membership system used Mozilla Persona to log in, but that service is being closed down, so now we have to do the authentication ourselves.

Discourse is a separate database.

The old membership system used Mozilla Persona to handle logins. As such we only had an email address and not the users password.

All existing users now have to create a password by resetting it. It also happens in your case that the email addresses on each system were the same.

Ok ok so when persona went down all the password were lost and now we are using the emails to create one more… I get it! :slight_smile:

Are you the right bloke to speak to for the permission granting system? :slight_smile:

Are the passwords encrypted?

Yes. SHA512

1 Like

Yes, I think password security is pretty good.

Passwords on the membership system are salted and hashed using PBKDF2. It applies 1000 passes of SHA512. Making the process relatively slow for brute forcing.

Passwords must be at least 8 characters long, and contain mixed case, numbers and symbols that make it more difficult to apply a dictionary to.

Every user has it’s own randomly generated salt, which is invalidated and regenerated every time the user changes their password or resets it.

Finally passwords cannot be guessed as there is a lockout after incorrect attempts in a row.

1 Like

Done! Thank you all for taking care of this.

@members to advise the membership system is now managing control of your access to the private member only Discourse areas.

Some new members whose payments were created before the 12th September will not have become active yet because the payment was setup before the new system came online, in effect this means some members may have lost access to the door/shutter and now also Discourse.

There are 144 active members, 130 have access to discourse right now, 12 haven’t got discourse accounts, leaving 2 members who should have access but don’t because of the above reason, one is @ianmiell and I’ve fixed that, it should be fixed by the time you read this, and then one more is unknown, this will self correct at your next payment, or you can message a director or myself for help whoever you are.

Ian your account is fixed already.

@tomnewsom I have tried to login and have used the forgot my password but I never receive the email assistance that should be sent to my registered account?
Any ideas?

Spam folder

Nope nothing there either…

Try again? (I’m addlibbing)

Check which email you signed up with. Do you have more than one?

Failing that probably technical issue but it’s odd it’s not happened before.

Still nothing. Can you check the email address that’s listed for me? It should be jonathanlouis@gmail.com

Unfortunately not.
I have no admin access.

Just a normal user trying to help :laughing::laughing::laughing: