Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
f627b0ad
Commit
f627b0ad
authored
Aug 28, 2020
by
Eric Mosher
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update sign-up restrictions with allow/denylist
parent
7c540670
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
8 additions
and
8 deletions
+8
-8
doc/user/admin_area/settings/img/domain_denylist.png
doc/user/admin_area/settings/img/domain_denylist.png
+0
-0
doc/user/admin_area/settings/sign_up_restrictions.md
doc/user/admin_area/settings/sign_up_restrictions.md
+8
-8
No files found.
doc/user/admin_area/settings/img/domain_
black
list.png
→
doc/user/admin_area/settings/img/domain_
deny
list.png
View file @
f627b0ad
File moved
doc/user/admin_area/settings/sign_up_restrictions.md
View file @
f627b0ad
...
@@ -8,7 +8,7 @@ You can use sign-up restrictions to:
...
@@ -8,7 +8,7 @@ You can use sign-up restrictions to:
-
Disable new signups.
-
Disable new signups.
-
Require user email confirmation.
-
Require user email confirmation.
-
Blacklist or white
list email addresses belonging to specific domains.
-
Denylist or allow
list email addresses belonging to specific domains.
NOTE:
**Note:**
NOTE:
**Note:**
These restrictions are only applied during sign-up from an external user. An admin is
These restrictions are only applied during sign-up from an external user. An admin is
...
@@ -31,7 +31,7 @@ consider disabling new signups if you do not expect public users to sign up for
...
@@ -31,7 +31,7 @@ consider disabling new signups if you do not expect public users to sign up for
account.
account.
Alternatively, you could also consider setting up a
Alternatively, you could also consider setting up a
[
whitelist
](
#whitelist-email-domains
)
or
[
blacklist
](
#black
list-email-domains
)
on
[
allowlist
](
#allowlist-email-domains
)
or
[
denylist
](
#deny
list-email-domains
)
on
email domains to prevent malicious users from creating accounts.
email domains to prevent malicious users from creating accounts.
## Require email confirmation
## Require email confirmation
...
@@ -48,14 +48,14 @@ their email address before they are allowed to sign in.
...
@@ -48,14 +48,14 @@ their email address before they are allowed to sign in.
You can
[
change
](
../../../security/password_length_limits.md#modify-minimum-password-length-using-gitlab-ui
)
You can
[
change
](
../../../security/password_length_limits.md#modify-minimum-password-length-using-gitlab-ui
)
the minimum number of characters a user must have in their password using the GitLab UI.
the minimum number of characters a user must have in their password using the GitLab UI.
##
White
list email domains
##
Allow
list email domains
> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/598) in GitLab 7.11.0
> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/598) in GitLab 7.11.0
You can restrict users to only sign up using email addresses matching the given
You can restrict users to only sign up using email addresses matching the given
domains list.
domains list.
##
Black
list email domains
##
Deny
list email domains
> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/5259) in GitLab 8.10.
> [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/5259) in GitLab 8.10.
...
@@ -71,17 +71,17 @@ To access this feature:
...
@@ -71,17 +71,17 @@ To access this feature:
1.
Navigate to the
**Admin Area > Settings > General**
.
1.
Navigate to the
**Admin Area > Settings > General**
.
1.
Expand the
**Sign-up restrictions**
section.
1.
Expand the
**Sign-up restrictions**
section.
For the
black
list, you can enter the list manually or upload a
`.txt`
file that
For the
deny
list, you can enter the list manually or upload a
`.txt`
file that
contains list entries.
contains list entries.
For the
white
list, you must enter the list manually.
For the
allow
list, you must enter the list manually.
Both the
whitelist and black
list accept wildcards. For example, you can use
Both the
allowlist and deny
list accept wildcards. For example, you can use
`*.company.com`
to accept every
`company.com`
subdomain, or
`*.io`
to block all
`*.company.com`
to accept every
`company.com`
subdomain, or
`*.io`
to block all
domains ending in
`.io`
. Domains should be separated by a whitespace,
domains ending in
`.io`
. Domains should be separated by a whitespace,
semicolon, comma, or a new line.
semicolon, comma, or a new line.
![
Domain
Blacklist
](
img/domain_black
list.png
)
![
Domain
Denylist
](
img/domain_deny
list.png
)
<!-- ## Troubleshooting
<!-- ## Troubleshooting
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment