Account management bug?

Account management bug? SearchSearch
Author Message
Alex Kaiser
New member
Username: Alex_k

Post Number: 1
Registered: 07-2006
Posted on Sunday, July 30, 2006 - 12:29 pm:   

Hello Bryce!

I think that i've found very serious bug in NowSMS (all builds).
Please try these actions.
1. Create new account at "SMS Users" tab.
2. Enable SMPP login for this account.
3. Enable credit balance.
4. Add 3 credits, just for test.
5. Bind to this account from client via SMPP.
6. Submit 1 message from client.
7. Remove account

Your account is still working and your credit balance doesn't work. You have to restart nowsms that client not able to submit anymore. Seems that new settings are now applying dynamically.

Could you updated NowSMS that issue clients with UNBIND operation each time that accounts have been modified or deleted?

Kind regards,
Alex K.
Alex Kaiser
New member
Username: Alex_k

Post Number: 2
Registered: 07-2006
Posted on Monday, July 31, 2006 - 09:55 am:   

Same problem with "Restrict to IP Address(es) field. Settings are not apply dynamically!
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 6291
Registered: 10-2002
Posted on Tuesday, August 01, 2006 - 08:30 pm:   

Hi Alex,

If an account is already connected, it won't be disconnected.

So changing the IP address restrictions will not disconnect a client that is already connected.

This behaviour seems acceptable to me, as any IP address restrictions would only be checked as part of the authentication process when the account connects. (The change is dynamic, in that it supports new authentication attempts.)

Similarly, changing an account password does not disconnect an already bound connection.

I do think the other behaviour is troubling, however. A deleted account should not be allowed to continue to post messages ... especially if there was a quota on the account prior to deletion.

So we do need to make a change to address this issue.

And since we need to do that, I think it makes sense to take into consideration other account validation changes.

For example, if the password has changed for the account, we will terminate the connection.

If the IP address restrictions no longer allow the connection, we will terminate the connection.

If the "enable SMPP login" setting no longer allow the account to connect via SMPP, we will terminate the connection.

We are going to have to put these changes through testing.

-bn