Matttermost, Inc.

Team Invite Link and GitLab

Summary

When disabling user/team creation in the System Console, inviting members gives “User creation has been disabled for your team. Please ask your team administrator for details.” message. And there’s no option to generate an invite link.

Steps to reproduce

Version is 3.3.0, GitLab is at 8.11.2.

  1. Create a team and auth via GitLab
  2. Disable user and team creation
  3. Click the three-dot menu in the team

No team invite link is given. And the above message is displayed when you try to “Invite Member”

No errors of any sort in the log file.

This could honestly be a misconfiguration on my part. But the “Invite Member” message is still off, since user creation shouldn’t have to be enabled if you’re going via GitLab.

Unless user creation is a process in which a GitLab auth-ed user gets a Mattermost account, in which case user creation should be enabled, but limited to GitLab?

Like I said, could just be a configuration issue on my part.

Cheers,
Juraj

Hi @Juraj, thanks for the question.

Unless user creation is a process in which a GitLab auth-ed user gets a Mattermost account, in which case user creation should be enabled, but limited to GitLab?

That’s correct. In the System Console, you’ll want to reenable account creation under General > Users and Teams, but then disable account creation with email under Authentication > Email. After that, users will be able to create their Mattermost account only if they have an existing Gitlab account to link it to.

You’ll probably also want to disable sign-in with email and sign-in with username on Authentication > Email as well to hide the username and password boxes on the login page.

If you’re running Mattermost as part of Gitlab Omnibus, these settings are available in gitlab.rb as

mattermost['enable_account_creation'] = true
mattermost['email_enable_sign_up_with_email'] = false
mattermost['email_enable_sign_in_with_email'] = false
mattermost['email_enable_sign_in_with_username'] = false

I have tried this and it doesn’t seem to work for me. I only want logins through Gitlab Oauth so I disabled creating accounts. But when I turn it back on I still get the message, “User creation has been disabled for your team. Please ask your Team Administrator for details.”

I am using the gitlab-omnibus CE install of Gitlab/Mattermost. But I have only tried configuring it through System Console (an odd name for the administrative setting area).

@noisygecko Have you ran gitlab-ctl reconfigure since you changed those settings? If so, the settings defined in gitlab.rb may have overwritten any changes you made in the System Console.

@hmhealey I did the change through System Console and haven’t run a reconfigure. I was going to make the change in gitlab.rb and reconfigure, but didn’t want to do that while users might be on the system.

I will try that when I get a chance. It is kind of strange to have settings that can be made through the System Console that can be overwritten by the gitlab.rb file. Makes things a bit confusing to new people.