Skip to content

Wildcard user unusable in isolation ("Set password: HTTP error: 404 Not Found") #306

@kousu

Description

@kousu

I cannot set up a group with only the wildcard user:

$ galenectl create-group -group abcd
$ galenectl create-user -group abcd -wildcard
$ cat groups/abcd.json 
{"wildcard-user":{"permissions":"present"}}
$ galenectl set-password -group abcd -wildcard
New password: 
2026/03/15 20:47:12 Set password: HTTP error: 404 Not Found

Adding a non-wildcard user first allows managing the password of the wildcard user:

$ galenectl create-user -group abcd -user defg
$ cat groups/abcd.json 
{"users":{"defg":{"permissions":"present"}},"wildcard-user":{"permissions":"present"}}
$ galenectl set-password -group abcd -wildcard
New password: 
$ cat groups/abcd.json 
{"users":{"defg":{"permissions":"present"}},"wildcard-user":{"password":{"type":"bcrypt","key":"$2a$08$mGYv6ZVi4L3w/9abiwnE0ORLlbGda4SxnjO0YXgpLAS5uCgV4afEG"},"permissions":"present"}}

I want to ask if it is intended that a group must have at least one real user. The docs say

galene/galene.md

Lines 259 to 277 in a4c917f

#### The fallback user
It is sometimes useful to allow multiple users to log in using the same
password. This can be achieved by defining the *wildcard* user:
```sh
galenectl create-user -group city-watch -wildcard
galenectl set-password -group city-watch -wildcard
```
For open groups, where any user can login with any password, the wildcard
user's password is set to the password of type `wildcard`:
```sh
galenectl set-password -group city-watch -wildcard -type wildcard
```
See the section *Client authorisation* below for more information about
password types.

which sounds too me like fully anonymous-access rooms should be allowed, if the admin sets them up.

If this is intended behaviour, it would be clearer if create-user failed with a clear explanation instead of discovering the problem at set-password


This is with this version: 888aa9b.


Galène is super cool! If I'm being nosy it's because I'm interested and I want to use it a lot. Don't let issues get you down.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions