I should add that the timestamp on the config.db file DID in fact change after I 
changed the list admin password, just not the encrypted password itself.

And no error was given when I made the password change.

Are there mailman logs for login attempts?  Any other ways to troubleshoot this?


And here's the really weird part... when I log in as the site admin to one of 
the lists, and go to change the listadmin pw, if I put in the new password and 
put in a DIFFERENT password in the confirm new password field and click Submit 
Your Changes, I *do not* get an error... when I should, since the password I 
enter and the one I confirm are different.  So, why would I not be getting an 
error?  I should at least be getting an error flagged somewhere.  But where?  
It's certainly not on the list page, and it is not in the Mailman logs either.

Steve
[EMAIL PROTECTED]

> 
> Well, I did what you said... I used dumpdb to look at the encrypted password 
for 
> a list.  Then I changed the list admin pw for th list (logged in as the site 
> admin), and did a dumpdb again.  I get the same encrypted password for the 
list 
> admin (and therefore, still cannot log in as the admin).
> 
> What else can I try?
> 
> Thanks!
> 
> Steve
> [EMAIL PROTECTED]
> 
> > Subject: Re: [Mailman-Users] Passwords of members
> > From: Jon Carnes <[EMAIL PROTECTED]>
> > To: Steve Rifkin <[EMAIL PROTECTED]>
> > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> > Content-Transfer-Encoding: 7bit
> > Date: 14 Dec 2002 20:36:07 -0500
> > Mime-Version: 1.0
> > X-Keywords: 
> > 
> > In this version of Mailman the admin password for the list is encrypted,
> > well sort of... If you want to be clever and look at the source you can
> > easily figure this part out.
> > 
> > In any case, I've seen this problem before after an upgrade and it seems
> > to be that the encryption has changed.  Normally resetting the password
> > via the web-admin works.  I don't know why it's not working in your case
> > - unless you upgraded python and didn't re-install Mailman.
> > 
> > You might want to use dumpdb to look at the encrypted password, then try
> > to change it via the web admin and use dumpdb to see if it actually
> > changed.
> > 
> > Good Luck - Jon Carnes
> > 
> > On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > > Now that we can see the plain-text passwords of members using dumpdb on 
the 
> > > config.db file, how can we see the specific list admin password for a 
given 
> > > list?  I could see plaintext passwords for the users, but for what looked 
> like 
> > > the admin, I saw something very different than what the password is set 
to.
> > > 
> > > A (bogus) example of this:  Here are what looks like the admin lines from 
> the 
> > > config.db dump:
> > > 
> > >  'owner': ['[EMAIL PROTECTED]'],
> > >     'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > >     'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
> > >                      '[EMAIL PROTECTED]': 'nasdat',
> > >                      '[EMAIL PROTECTED]': 'kljlkd',
> > >                      '[EMAIL PROTECTED]': 'jsdafk',
> > > },
> > > 
> > > So, the user passwords are pretty clear, but the owner's password is not 
> listed 
> > > in plain text as to what the password is.
> > > 
> > > How do we get that password?  If I had that info, I could check to see why 
> we 
> > > are able to log into our mm site with the site-wide password or the user 
> > > (subscriber) passwords, but *not* the list admin's password.  (for mm 
> 2.0.13)
> > > 
> > > Thanks!
> > > 
> > > Steve
> > > [EMAIL PROTECTED]


------------------------------------------------------
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/

This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to