From mboxrd@z Thu Jan  1 00:00:00 1970
Authentication-Results: mail.toke.dk; dkim=pass header.d=webweaving.org header.i=@webweaving.org header.a=rsa-sha256 header.s=shared header.b=Ghkz2h3L; arc=none (Message is not ARC signed); dmarc=pass (Used From Domain Record) header.from=webweaving.org policy.dmarc=none
Received: from weser.webweaving.org (weser.webweaving.org [148.251.234.232])
	by mail.toke.dk (Postfix) with ESMTPS id 50268197D450
	for <galene@lists.galene.org>; Mon, 02 Nov 2026 12:12:08 +0100 (CET)
Received: from smtpclient.apple ([10.11.0.230])
	(authenticated bits=0)
	by weser.webweaving.org (8.18.2/8.18.1) with ESMTPSA id 6A2BC68V030451
	(version=TLSv1.2 cipher=ECDHE-ECDSA-AES256-GCM-SHA384 bits=256 verify=NO)
	for <galene@lists.galene.org>; Mon, 2 Nov 2026 12:12:06 +0100 (CET)
	(envelope-from dirkx@webweaving.org)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=webweaving.org;
	s=shared; t=1793617927;
	bh=ESfsZbkW1B4Dal0z1I1y/XFOdP+kqNDZnZGSgk9reXQ=;
	h=From:Subject:Date:To;
	b=Ghkz2h3L64VtNF0DUD29r6voOLYRCYmUjwvUg0M2u58VChrMhIsOIx++KeRLybwk6
	 UOjtILhL18Wa8qbY/nK0d1jZGFFhWcK2lR6fD00MarbWc7CQ5DELBVnd8f/erfeNjO
	 Q6muPY8NL2Bgs6nNnHjg9ruTXOWX0tx0Aj9OA3dg=
X-Authentication-Warning: weser.webweaving.org: Host [10.11.0.230] claimed to be smtpclient.apple
From: Dirk-Willem van Gulik <dirkx@webweaving.org>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.700.51.1.3\))
Message-Id: <362CEC86-2063-4E6F-A30A-5C0AEABB5FF9@webweaving.org>
Date: Mon, 2 Nov 2026 12:12:04 +0100
To: galene@lists.galene.org
X-Mailer: Apple Mail (2.3864.700.51.1.3)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (weser.webweaving.org [148.251.234.232]); Mon, 02 Nov 2026 12:12:07 +0100 (CET)
Message-ID-Hash: UVYSLBURUSDLDZ7H3Z7M63L4VIW77AUX
X-Message-ID-Hash: UVYSLBURUSDLDZ7H3Z7M63L4VIW77AUX
X-MailFrom: dirkx@webweaving.org
X-Mailman-Rule-Hits: member-moderation
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Galene] wildcard users
List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= <galene.lists.galene.org>
Archived-At: <https://lists.galene.org/galene/362CEC86-2063-4E6F-A30A-5C0AEABB5FF9@webweaving.org/>
List-Archive: <https://lists.galene.org/galene/>
List-Help: <mailto:galene-request@lists.galene.org?subject=help>
List-Owner: <mailto:galene-owner@lists.galene.org>
List-Post: <mailto:galene@lists.galene.org>
List-Subscribe: <mailto:galene-join@lists.galene.org>
List-Unsubscribe: <mailto:galene-leave@lists.galene.org>

I am currently allowing people to enter an arbitrary name (and no =
password) on certain calls with a definition such as:

	// Generated 2026-11-02 11:09:23 UTC, project bar-test, DB: =
9656dfdac01ba854402ca635e
	{
	  "public": false,
	  "op": [
		    {
		      "username": "xxxchairpersonxxx",
		      "password":  {"type":"bcrypt","key":"XXX"}
		    }
 	 ],
	  "users": {
		"XXXXmoderator1XXX":{"permissions": "present",....},
  		"XXXXmoderator2XXX":{"permissions": "present",....}
	  },
	  "wildcard-user": {
		"password": "",  "permissions": "present"
	  },
	  "presenter": [
	    {}
	  ]
	}

And am now seeing=20

	Nov  2 03:56:52 jailed-galene daemon[19372]:=20
		2026/11/02 03:56:52 /var/db/galene/groups/XXXXXXXX.json: =
duplicate wildcard user=20
			2026/11/02 03:56:52 =
/var/db/galene/groups/XXXXXXXXX.json: duplicate wildcard user

in my log. Why is this ? And what is the right way to allow arbitrary =
names (and an empty or fixed, simple PIN style, password for ad-hoc =
cases where sending an invite or similar hurdle/extra step is non ideal) =
?

With kind regards,

Dw=