Skip to content

Login dialog: create a data-server account from it, not only with ecce-dataserver-adduser #203

Closed

Description

@ohlincha

Today an account is made with ecce-dataserver-adduser in a terminal. A new user who sees ECCE's login dialog first has no hint that this command exists. A Create account… button in the dialog would make it discoverable.

Suggested behaviour

  • Local data server (per user): the button asks for user name, password (twice), first and last name, runs ecce-dataserver-adduser -b, then fills the login fields.
  • Central server (ecce -remote): the client cannot create accounts on another machine. Hide the button, or show it disabled with "Ask your server administrator for an account" and the ecce-dataserver-adduser / --from FILE commands to pass on.
  • Show adduser's own error message when it fails (name taken, bad characters), not a generic one.

Questions

  • On a central server, should the server's owner be able to create accounts from the dialog? That only works when the dialog runs on the server itself, so ecce-dataserver-adduser may be enough there.
  • Passwords here keep users apart on a shared server; they are not a security boundary. Self-service creation on a local per-user server changes nothing about that.

Activity

  1. ohlincha commented on Sep 29, 2026

    @ohlincha
    CollaboratorAuthor

    Decided: the server's owner can create accounts from the dialog too. The button is offered whenever the dialog runs as the account that owns the data server (the per-user server, or the central server's own account on the server machine), and runs ecce-dataserver-adduser -b there. On a client connected with ecce -remote it stays hidden, with the hint to ask the administrator.

  2. ohlincha commented on Oct 12, 2026

    @ohlincha
    CollaboratorAuthor

    Part 1 (create the account on this computer's own data server) is in 9.0.0. Follow-up for 9.0.1, same scope: on the per-user data server, a forgotten password should be resettable from the login window ("Set a new password for andy on this computer's data server?"), since the server belongs to the user; today ecce-dataserver-adduser refuses an existing name and the only way is htpasswd ~/.ECCE/dataserver/users NAME. Central servers keep administrator-only account management.

  3. ohlincha commented on Oct 12, 2026

    @ohlincha
    CollaboratorAuthor

    Part 1 is in 9.0.0 (c11b79f): on this computer's own data server the login window offers to create a missing account. Password reset follows in 9.0.1.

  4. ohlincha commented on Oct 13, 2026

    @ohlincha
    CollaboratorAuthor

    In 9.0.1 (234cf20): on this computer's own data server the login window has Forgot password…, which sets a new password for an existing account. On a central server, a refused login names the command an administrator runs: ecce-dataserver-adduser --passwd NAME.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions