foxfirefeyPreviously, I think I disabled regular account creation, and that let OpenID accounts register. This kept away spammers, but still let grandfathered accounts work by logging in using their passwords.
This strategy no longer works and I need to figure out a new one. The OpenID plugin has a setting to only allow OpenID logins, but that then blocks out non-OpenID users. In the meantime, registration is turned off because I can't keep dealing with the many, many spam registering accounts that have been constantly happening since I turned regular registration on. There might need to be Captchas, or some other strategy.