30 May 2019 |
yogsi | should an invite be sent or not? | 13:55:53 |
Maximus | what invite? | 13:56:25 |
yogsi | i'll post logs | 13:59:28 |
yogsi | give me a sec | 13:59:33 |
yogsi | mxisd config: | 14:00:54 |
yogsi | register:
policy:
threepid:
email:
domain:
whitelist:
- 'something.hr' | 14:00:57 |
yogsi | logs here: https://pastebin.com/uPaRHxQN | 14:01:24 |
Maximus | please use markdown blockquotes if you paste configuration | 14:01:53 |
Maximus | well you obfuscate the email domain in the config and the logs, can't really tell you what is supposed to happen | 14:03:34 |
Maximus | But there is no mention of the registration feature being called, so I guess you did not follow the reverse proxy instructions | 14:04:53 |
yogsi | heh, right... let me fix that :) | 14:05:08 |
yogsi | I did the nginx setup | 14:05:35 |
Maximus | show me the server block for it please? | 14:06:27 |
Maximus | Follow-up: documentation was wrong for the nginx location line, it's now fixed in master | 15:31:00 |
yogsi | Follow-up: documentation was wrong for the nginx location line, it's now fixed in master the new nginx config fixed the issue. thanks | 19:55:29 |
31 May 2019 |
chriz (sysops) | 31070 | 07:02:08 |
yogsi | Hi guys, me again :) | 09:26:55 |
yogsi | trying to setup 3pid invite policies according to https://github.com/kamax-matrix/mxisd/blob/master/docs/features/identity.md#policies | 09:27:11 |
yogsi | this role concept is a bit unclear to me | 09:27:36 |
yogsi | I'd like to allow only users with certain email domains as part of their 3pid to invitate others | 09:29:13 |
yogsi | invite* | 09:29:23 |
yogsi | can't see the link between role in "hasRole" setting and "3pid" :) | 09:30:30 |
yogsi | ok, found something burried in sql config page: https://github.com/kamax-matrix/mxisd/blob/master/docs/stores/sql.md | 09:35:57 |
Maximus | because there isn't any. A role is specific to each Identity store, doc might be lacking what they represent, but it's usually some kind of group memvership | 10:39:34 |
Maximus | only the Exec, REST and SQL identity stores would allow you to map to whatever you want since it's fully custom | 10:42:39 |
Maximus | Docs are definitely lacking indeed, will fix that in the coming days | 10:59:29 |
yogsi | I think i managed to get it to work | 12:46:25 |
yogsi | so, I'm using synapseSql (postgres) identity store and wanted to allow only users with certain domain in their email addresses to send out invites | 12:48:23 |
yogsi | mxisd config: | 12:49:13 |
yogsi | invite: policy: ifSender: hasRole: - 'DOMAIN.com' | 12:49:23 |