Github PAT creation triggers 2 emails, is it a security issue? - github

I am receiving 2 emails about the creation of PAT, is it a security vulnerability? or a Bug?
Note: I have 2 emails attached to my GitHub account (both emails configured to same mailbox, means those are alias emails) and we use GitHub Enterprise Server (not cloud)

I found the solution, it's a feature, by default security-relevant mails are sent to backup email Id, it can be changed in profile -> Email -> Backup Email Address.
GHES version: 3.2.9
Adding it as this may help someone. Have a nice day.

Related

IBM API Connect developer portal admin link missing

I have setup an API Connect developer portal in the sandbox catalog (I've been following the basic tutorials about configuring an API developer portal found here).
I receive a message saying that i'll get a one time login link so that i can login to the portal as admin and reset my password. However, this never arrives. I have tried configuring the portal a number of times now and this link never comes. Therefore i'm unable to login as admin.
I've also tried using the 'request new password' option on the developer portal itself and entering my email but this also does not work
Is there a way I can retrieve the login link?
This could be a number of things:
1) the IBM emails often get flagged as spam
2) the IBM email server, or rather the people they've contracted this out to, doesn't fully comply with DKIM/SPF security, so if you are on a corporate server that requires this then you won't get your emails.
The workaround I've done in the past is spin up a gmail account and be sure to check my spam folder.

Getting issues via email stopped working after email account password update

We had a fully working Jira Service Desk installation (JIRA Service Desk Application v3.6.1) for years and on Friday we changed the password of the associated email account ithelp#...
Once the change was done on the Exchange server we updated the password on system-Outgoing Mail and system-Incoming Mail, provided the latest password by clicking on checkbox adjacent to Change Password. After entering the password, click on Update button.. The test in both cases says its working.
If we check Mail audit log for ithelp#... then we see.
If we do a test there then:
And the "view log" shows:
What have we tried?
We went through https://confluence.atlassian.com/jirakb/troubleshooting-jira-service-desk-incoming-mail-790960076.html?_ga=2.74568658.1933816762.1551665594-977289960.1550604024 without success.
Restarting Tomcat.
Rebooting the server.
Deleting and recreating the configuration for IMAP.
Configuring the IMAP settings using IP instead of server name.
If you know what could be the problem or if you know what we are missing your help is greatly appreciated.
Thanks in advance,
Log into Jira Service Desk with elevated rights. (administrative rights)
Select projects -> IThelp
Select email requests.
Under custom email addresses click the edit.
Change the password to the new password set for IThelp. Click next
Select the email request type as Email Request

How do I automatically trigger email notification with custom message after deployment (in CD pipeline) in VSTS

I have a CD pipeline with Azure Deploy task and I want to trigger a email notification to developers after successful deployment but with custom message. I researched on 'Send Email' task but it requires an SMTP server (say google SMTP). is there a feature within VSTS to trigger a mail?
You could use the SendGrid Email extension. You would need a SendGrip API key (hence a SendGrid account) but you can create one for free on Azure.
It would be limited to 25000 emails per month, but it should be enough. And if it isn't, you can upgrade your plan in no time
I Hope I helped you :)
It seems you are using the Send Email task developed by DutchWorkz B.V..
You can use the Send Email task developed by Rene van Osnabrugge (Xpirit) which just need to specify the email addressed, subject and email body.

How to disable email confirmation in gitlab

I set up a gitlab server in ubantu14.4.3SLT
in my case, I want to set up a git server for local users so I do not need user to sign in with any email confirmation.
How can I disable email confirmation in gitlab? are there any api or something simple to disable it?
This isn't a good answer. But ran across this and wanted to skip for a test instance I have. This is what I did(gitlab 10.1.0):
From the rails console:
User.all.each {|u| u.confirmed_at = Time.now; u.save}

How can I set the Sender's address in Jenkins?

I'm sending mail from Jenkins to an anonymous SMTP relay internally. That relay then securely sends mail to exchange online via TLS on port 587. The transport works perfectly, the issue is that Microsoft requires the Sender address match the authentication credentials login name which is the same as the account email address. For example sake, say this is foo#mycompany.com. How can I make jenkins always send mail from foo#mycompany.com?
BTW when I say the transport works perfectly what I mean specifically is that I can drop a formatted e-mail file into the "Pickup" directory on the SMTP relay server and it is properly sent to any recipient provided the From address is foo#mycompany.com.
Jenkins uses the System Admin e-mail address as the sender address for e-mail notification. You can configure this under Manage Jenkins -> Configure System. This is under the Jenkins Location header on that page! It is not immediately obvious that this setting is tied to the e-mail notification settings, since it is not under the E-mail notification header on the configuration page.
Manage Jenkins -> Configure System -> Jenkins Location -> System Admin e-mail address
You can search the page for "Jenkins Location" to change the default value of address not configured yet to whatever you want.
There are two places to add the "E-Mail Notificaitons"
Global level
Local level (Jenkins job level)
To set the E-Mail Notification at Global Level, follow below steps -
1) Go to Manage Jenkins
2) Configure System
3) Jenkins Location
4) System Admin e-mail address
To set the E-Mail Notification at local level (per Jenkins job level), follow below steps -
1) Click on the Job name (if existing one)
2) click on the "Configure"
3) Then look for the "Post-build Action"
4) Specify the email address under "E-mail Notification".
5) Save the changes.
I'm not sure if it is what you meant, but Jenkins enables you to provide a full Sender E-mail Address for notifications. Go to Manage jenkins, then System configuration and find section called E-mail Notification.
You can provide you email address in a form of Jenkins <foo#mycompany.com>.
If you need to do this without using the jenkins UI (for instance in automating a jenkins setup) - you can do so with a groovy script.
import jenkins.model.*
def jenkinsLocationConfiguration = JenkinsLocationConfiguration.get()
jenkinsLocationConfiguration.setAdminAddress("[your admin name] <[your admin email address]>")
// example format -> .setAdminAddress("Jane Doe <foo#company_email.com>")
jenkinsLocationConfiguration.save()
Do note: I did not write this script (although I have tested it and it works), all credit to Peter Halliday and his website with other helpful groovy scripts here.
import javax.mail.Message.RecipientType
import javax.mail.Address
import javax.mail.internet.InternetAddress
import javax.mail.internet.MimeMessage
msg.setFrom(new InternetAddress("john...#server.com"))