Re: [Mailman-Users] Frustrating web page issues

[Yasuhito FUTATSUKI]

Hi,

On 4/25/19 4:55 AM, Mark J Bradakis via Mailman-Users wrote:

So digging through the logs I found this:

[authz_core:error] [pid 31549:tid 139863772874496] [client 50.198.190.18:46884] 
AH01630: client denied by server configuration:

So I added an AuthType None to the httpd.conf file.  Now I still get the Server 
unavailable page, but a different err:

[Wed Apr 24 13:52:47.955661 2019] [cgid:error] [pid 16974:tid 140524686079744] 
(13)Permission denied: [client 50.198.190.18:45928] AH01257: unable to connect 
to cgi daemon after multiple tries: /local/mailman/teamnet/cgi-bin/listinfo, 
referer: http://autox.team.net/



It seems that the lisinfo CGI is executed as FastCGI. Is it supported?
--
Yasuhito FUTATSUKI
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark J Bradakis via Mailman-Users]

On 4/24/19 4:27 PM, Robert Heller wrote:


Yes, selinux.



[root@autox teamnet]# getenforce
Disabled


Selinux should not be a factor here.

mjb.


--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] archtoc and archtocnombox

[Mark Dale]

> On 4/24/19 3:15 PM, Mark Dale wrote:

>> Small archives seem to use "archtoc.html" which has the link to download
>> the full raw archive (mbox).
>>
>> Larger lists appear to use "archtocnombox.html" which is minus the link.
>>
>> Is there a threshold (filesize) somewhere that determines which gets
>> used? or am I barking up the wrong tree completely?


On 25/4/19 8:31 am, Mark Sapiro wrote:

> This is controlled by the mm_cfg setting PUBLIC_MBOX. If it is True, the
> list's index.html file is built with archtoc.html and if False, with
> archtocnombox.html.
> 
> If some lists have one and some the other it's because the PUBLIC_MBOX
> setting has been changed and those lists that reflect the prior setting
> haven't been posted to since the change.
> 

Many thanks for the clarity Mark.

/var/lib/mailman/Mailman/Defaults.py:478

# When the archive is public, should Mailman also make the raw Unix mbox
file publically available?
PUBLIC_MBOX = No
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] archtoc and archtocnombox

[Mark Sapiro]

On 4/24/19 3:15 PM, Mark Dale wrote:
> Hi All,
> 
> Small archives seem to use "archtoc.html" which has the link to download
> the full raw archive (mbox).
> 
> Larger lists appear to use "archtocnombox.html" which is minus the link.
> 
> Is there a threshold (filesize) somewhere that determines which gets
> used? or am I barking up the wrong tree completely?


This is controlled by the mm_cfg setting PUBLIC_MBOX. If it is True, the
list's index.html file is built with archtoc.html and if False, with
archtocnombox.html.

If some lists have one and some the other it's because the PUBLIC_MBOX
setting has been changed and those lists that reflect the prior setting
haven't been posted to since the change.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Robert Heller]

At Wed, 24 Apr 2019 14:54:47 -0700 Mark Sapiro  wrote:

> 
> On 4/24/19 2:10 PM, Mark J Bradakis via Mailman-Users wrote:
> > On 4/24/19 3:01 PM, Mark Sapiro wrote:
> >>
> >> I'm still interested in 'ls -l'
> > 
> > [root@autox cgi-bin]# ls -l
> > total 352
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admin
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admindb
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 confirm
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 create
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 edithtml
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 listinfo
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 options
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 private
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 rmlist
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 roster
> > -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 subscribe
> 
> 
> OK. Those look good.
> 
> 
> >> And what's in Mailman's error log.
> >>
> > Apr 24 14:45:09 2019 admin(23315):
> > 
> > admin(23315): [- Mailman Version: 2.1.29 -]
> > admin(23315): [- Traceback --]
> > admin(23315): Traceback (most recent call last):
> > admin(23315):   File "/local/mailman/teamnet/scripts/driver", line 111,
> > in run_main
> > admin(23315):     if not request_method.lower() in ['get', 'post', 
> > 'head']:
> > admin(23315): AttributeError: 'NoneType' object has no attribute 'lower'
> 
> 
> I understand what's happening here. The driver script want's to see a
> REQUEST_METHOD of 'get', 'post' or 'head' in the passed environment, and
> when it's invoked from the command line, that isn't set.
> 
> It worked for me when I tested because I didn't use the web user id and
> got a group mismatch. The fact that you got the bug page means there
> wasn't a group mismatch which is good.
> 
> It really looks like a selinux or apparmor or some kind of security
> manager issue.

Yes, selinux.

The OP has the mailman scripts in an "odd" place (not under /var/www/... or 
whatever his linux distro expects web apps (CGI scripts, etc.) to live.

He needs the selinux context to be something like this:

 unconfined_u:object_r:httpd_sys_content_t:s0
 
(He should do a ls -Z someplace where web pages are working, esp. CGI 
scripts and see what the setting it - the above was on a CentOS 6 box and his 
distro might be different.)

> 

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
hel...@deepsoft.com   -- Webhosting Services

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] archtoc and archtocnombox

[Mark Dale]

Hi All,

Small archives seem to use "archtoc.html" which has the link to download
the full raw archive (mbox).

Larger lists appear to use "archtocnombox.html" which is minus the link.

Is there a threshold (filesize) somewhere that determines which gets
used? or am I barking up the wrong tree completely?


/etc/mailman/en/archtoc.html

You can get [more information about this list]
  or you can [download the full raw archive] ().

/etc/mailman/en/archtocnombox.html

You can get [more information about this list].

Thanks,
Mark
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] authorizing posts to a moderated list

[Mark Sapiro]

On 4/24/19 2:22 PM, Bernie Cosell wrote:
> I've discovered that putting someone in the "approved to post" in the
> list config doesn't override the fact that the email is still MOD in the
> members
> list prevents them from posting.


What do you mean by "approved to post"? Are you talking about Privacy
options... -> Sender filters -> accept_these_nonmembers? If so, that
only applies to posts from addresses that are not members. For members,
the member's moderation flag is what applies.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark Sapiro]

On 4/24/19 2:10 PM, Mark J Bradakis via Mailman-Users wrote:
> On 4/24/19 3:01 PM, Mark Sapiro wrote:
>>
>> I'm still interested in 'ls -l'
> 
> [root@autox cgi-bin]# ls -l
> total 352
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admin
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admindb
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 confirm
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 create
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 edithtml
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 listinfo
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 options
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 private
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 rmlist
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 roster
> -rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 subscribe


OK. Those look good.


>> And what's in Mailman's error log.
>>
> Apr 24 14:45:09 2019 admin(23315):
> 
> admin(23315): [- Mailman Version: 2.1.29 -]
> admin(23315): [- Traceback --]
> admin(23315): Traceback (most recent call last):
> admin(23315):   File "/local/mailman/teamnet/scripts/driver", line 111,
> in run_main
> admin(23315): if not request_method.lower() in ['get', 'post', 'head']:
> admin(23315): AttributeError: 'NoneType' object has no attribute 'lower'


I understand what's happening here. The driver script want's to see a
REQUEST_METHOD of 'get', 'post' or 'head' in the passed environment, and
when it's invoked from the command line, that isn't set.

It worked for me when I tested because I didn't use the web user id and
got a group mismatch. The fact that you got the bug page means there
wasn't a group mismatch which is good.

It really looks like a selinux or apparmor or some kind of security
manager issue.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] authorizing posts to a moderated list

[Bernie Cosell]

I've discovered that putting someone in the "approved to post" in the
list config doesn't override the fact that the email is still MOD in the 
members

list prevents them from posting.  seems that it'd be more convenient to
have the configuration setting override the list member list.  as it is,
as i authorize and deauthorize people i have to mess with both and that
feels like unnecessary work.


/b\


Bernie Cosell
  bernie@fantasyfarm. com
— Too many people,  too few sheep —
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark J Bradakis via Mailman-Users]

On 4/24/19 3:01 PM, Mark Sapiro wrote:


I'm still interested in 'ls -l'


[root@autox cgi-bin]# ls -l
total 352
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admin
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 admindb
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 confirm
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 create
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 edithtml
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 listinfo
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 options
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 private
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 rmlist
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 roster
-rwxr-sr-x. 1 mailman mailman 31496 Apr 20 09:36 subscribe



And what's in Mailman's error log.

Apr 24 14:45:09 2019 admin(23315): 


admin(23315): [- Mailman Version: 2.1.29 -]
admin(23315): [- Traceback --]
admin(23315): Traceback (most recent call last):
admin(23315):   File "/local/mailman/teamnet/scripts/driver", line 111, 
in run_main

admin(23315): if not request_method.lower() in ['get', 'post', 'head']:
admin(23315): AttributeError: 'NoneType' object has no attribute 'lower'
admin(23315): [- Python Information -]
admin(23315): sys.version =   2.7.15 (default, Oct 15 2018, 15:26:09)
[GCC 8.2.1 20180801 (Red Hat 8.2.1-2)]
admin(23315): sys.executable  =   /usr/bin/python
admin(23315): sys.prefix  =   /usr
admin(23315): sys.exec_prefix =   /usr
admin(23315): sys.path    = ['/local/mailman/teamnet/pythonlib', 
'/local/mailman/teamnet', '/local/mailman/teamnet/scripts', 
'/local/mailman/teamnet', '/usr/lib/python27.zip', 
'/usr/lib64/python2.7', '/usr/lib64/python2.7/plat-linux2', 
'/usr/lib64/python2.7/lib-tk', '/usr/lib64/python2.7/lib-old', 
'/usr/lib64/python2.7/lib-dynload', '/usr/lib/python2.7/site-packages', 
'/usr/lib/python2.7/dist-packages']

admin(23315): sys.platform    =   linux2
admin(23315): [- Environment Variables -]
admin(23315):     PYTHONPATH: /local/mailman/teamnet
admin(23315):     LOGNAME: www-data
admin(23315):     USER: www-data


mjb.



--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark Sapiro]

On 4/24/19 1:53 PM, Mark J Bradakis via Mailman-Users wrote:
> 
> [root@autox cgi-bin]# ls -Z .
> system_u:object_r:default_t:s0 admin system_u:object_r:default_t:s0 options
> system_u:object_r:default_t:s0 admindb system_u:object_r:default_t:s0
> private
> system_u:object_r:default_t:s0 confirm system_u:object_r:default_t:s0
> rmlist
> system_u:object_r:default_t:s0 create system_u:object_r:default_t:s0 roster
> system_u:object_r:default_t:s0 edithtml system_u:object_r:default_t:s0
> subscribe
> system_u:object_r:default_t:s0 listinfo


I'm still interested in 'ls -l'

> sudo -u www-data ./listinfo
> Content-type: text/html
> 
> Bug in Mailman version 2.1.29
> Bug in Mailman version 2.1.29
> We're sorry, we hit a bug!
> 
> Please inform the webmaster for this site of this
> problem.  Printing of traceback and other system information has been
> explicitly inhibited, but the webmaster can find this information in the
> Mailman error logs or the web server logs.


And what's in Mailman's error log.

Although, this is not what's happening when Apache tries to run it. If
it were, you would see that output in your browser.


> And SELinux is disabled.

OK

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark J Bradakis via Mailman-Users]

[root@autox cgi-bin]# ls -Z .
system_u:object_r:default_t:s0 admin system_u:object_r:default_t:s0 options
system_u:object_r:default_t:s0 admindb system_u:object_r:default_t:s0 
private

system_u:object_r:default_t:s0 confirm system_u:object_r:default_t:s0 rmlist
system_u:object_r:default_t:s0 create system_u:object_r:default_t:s0 roster
system_u:object_r:default_t:s0 edithtml system_u:object_r:default_t:s0 
subscribe

system_u:object_r:default_t:s0 listinfo


[root@autox cgi-bin]# sudo -u web-data ./listinfo
sudo: unknown user: web-data
sudo: unable to initialize policy plugin
[root@autox cgi-bin]# ^web^www
sudo -u www-data ./listinfo
Content-type: text/html

Bug in Mailman version 2.1.29
Bug in Mailman version 2.1.29
We're sorry, we hit a bug!

Please inform the webmaster for this site of this
problem.  Printing of traceback and other system information has been
explicitly inhibited, but the webmaster can find this information in the
Mailman error logs or the web server logs.


And SELinux is disabled.

mjb.


--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Robert Heller]

At Wed, 24 Apr 2019 13:18:25 -0700 Mark Sapiro  wrote:

> 
> On 4/24/19 11:10 AM, Mark J Bradakis via Mailman-Users wrote:
> > 
> > Yes, I have run check_perms, no problems there.  All the other web pages
> > at autox.team.net seem to work just fine, it is only the mailman pages
> > that give the 503 unavailable error.  Frustrating because some pages
> > work, some don't and the Apache error logs are of no help in trying to
> > determine if this is an Apache problem or a mailman problem.
> 
> 
> What does
> 
>  ls -l /local/mailman/teamnet/cgi-bin/

And if selinux is installed and enabled:

   ls -Z /local/mailman/teamnet/cgi-bin/
   
   and what does
   
   getenforce
   
show?


> 
> show?
> 
> And, what's in the Apache error log for one of these 503 errors. I know
> you say it's no help, but helpful or not, what does it say? If it says
> something about a script exiting with status = x, 2 <= x <= 8, we know
> what those mean.
> 
> Also, what is the result from
> 
> sudo -u xxx /local/mailman/teamnet/cgi-bin/listinfo
> 
> where xxx is the user that Apache runs as?
> 

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
hel...@deepsoft.com   -- Webhosting Services

 
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Robert Heller]

At Wed, 24 Apr 2019 13:55:31 -0600 Mark J Bradakis  wrote:

> 
> So digging through the logs I found this:
> 
> [authz_core:error] [pid 31549:tid 139863772874496] [client 
> 50.198.190.18:46884] AH01630: client denied by server configuration:
> 
> So I added an AuthType None to the httpd.conf file.  Now I still get the 
> Server unavailable page, but a different err:
> 
> [Wed Apr 24 13:52:47.955661 2019] [cgid:error] [pid 16974:tid 
> 140524686079744] (13)Permission denied: [client 50.198.190.18:45928] 
> AH01257: unable to connect to cgi daemon after multiple tries: 
> /local/mailman/teamnet/cgi-bin/listinfo, referer: http://autox.team.net/
> 
> So at least I can focus on something specific now.

Is selinux installed?  What is its settings?  What is the selinux context for 
/local/mailman/teamnet/...?

> 
> mjb.
> 
> 
> --
> Mailman-Users mailing list Mailman-Users@python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: 
> https://mail.python.org/mailman/options/mailman-users/heller%40deepsoft.com
> 
> 

-- 
Robert Heller -- 978-544-6933
Deepwoods Software-- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
hel...@deepsoft.com   -- Webhosting Services

  
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark Sapiro]

On 4/24/19 12:55 PM, Mark J Bradakis via Mailman-Users wrote:

> 
> [Wed Apr 24 13:52:47.955661 2019] [cgid:error] [pid 16974:tid
> 140524686079744] (13)Permission denied: [client 50.198.190.18:45928]
> AH01257: unable to connect to cgi daemon after multiple tries:
> /local/mailman/teamnet/cgi-bin/listinfo, referer: http://autox.team.net/
> 
> So at least I can focus on something specific now.

I'm still interested in

ls -l /local/mailman/teamnet/cgi-bin/

and

sudo -u xxx /local/mailman/teamnet/cgi-bin/listinfo

where xxx is the user that Apache runs as?

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark Sapiro]

On 4/24/19 11:10 AM, Mark J Bradakis via Mailman-Users wrote:
> 
> Yes, I have run check_perms, no problems there.  All the other web pages
> at autox.team.net seem to work just fine, it is only the mailman pages
> that give the 503 unavailable error.  Frustrating because some pages
> work, some don't and the Apache error logs are of no help in trying to
> determine if this is an Apache problem or a mailman problem.


What does

 ls -l /local/mailman/teamnet/cgi-bin/

show?

And, what's in the Apache error log for one of these 503 errors. I know
you say it's no help, but helpful or not, what does it say? If it says
something about a script exiting with status = x, 2 <= x <= 8, we know
what those mean.

Also, what is the result from

sudo -u xxx /local/mailman/teamnet/cgi-bin/listinfo

where xxx is the user that Apache runs as?

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark J Bradakis via Mailman-Users]

So digging through the logs I found this:

[authz_core:error] [pid 31549:tid 139863772874496] [client 
50.198.190.18:46884] AH01630: client denied by server configuration:


So I added an AuthType None to the httpd.conf file.  Now I still get the 
Server unavailable page, but a different err:


[Wed Apr 24 13:52:47.955661 2019] [cgid:error] [pid 16974:tid 
140524686079744] (13)Permission denied: [client 50.198.190.18:45928] 
AH01257: unable to connect to cgi daemon after multiple tries: 
/local/mailman/teamnet/cgi-bin/listinfo, referer: http://autox.team.net/


So at least I can focus on something specific now.

mjb.


--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Frustrating web page issues

[Mark J Bradakis via Mailman-Users]

On 4/23/19 1:07 PM, Mark Sapiro wrote:


The above URL returns:

Service Unavailable

The server is temporarily unable to service your request due to
maintenance downtime or capacity problems. Please try again later.


Have you run Mailman's bin/check_perms? I suspect some kind of
permissions error on the wrappers in /local/mailman/teamnet/cgi-bin/,
but do check Apache's error.log which should have more information.



Yes, I have run check_perms, no problems there.  All the other web pages 
at autox.team.net seem to work just fine, it is only the mailman pages 
that give the 503 unavailable error.  Frustrating because some pages 
work, some don't and the Apache error logs are of no help in trying to 
determine if this is an Apache problem or a mailman problem.


mjb.




--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] REST API get template contents

[Mark Sapiro]

On 4/24/19 3:23 AM, Kiffin Gish wrote:
> Is it possible to use the Mailman REST API to query the contents of a given 
> template?
> For example: GET 
> /api/domains/example.org/templates/lang/list:user:action:subscribe
> I would like to do this to allow the administrator to edit existing as a 
> reference point.


Please join the mailman-us...@mailman3.org list at

and post your Mailman 3 questions there.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Prevent users from changing email address

[Stephen J. Turnbull]

Grant Taylor via Mailman-Users writes:
 > On 4/23/19 5:02 AM, Kiffin Gish wrote:
 > > Is it possible to configure mailman so that it is not possible for users 
 > > to change their email address, e.g. disabling the option and including 
 > > the service desk contact information instead?

I'll have to trust Mark that it requires code changes.

But if a list's subscribe_policy and unsubscribe_policy require
approval, I would expect that changing an existing address would end
up on the moderator's desk, too.  I'd call that a defect.  WDOT?

 > What will prevent users from unsubscribing with the old address and 
 > resubscribing with the new address?

You can configure Mailman 2 so that both subscription and
unsubscription require administrator approval.  If this is a Mailman 3
question as Mark suggests, I believe that is still true.

To Kiffen: isn't that better than sending the user to a page that
requires them to go to the service desk and enter a ticket?

Steve

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] REST API get template contents

[Kiffin Gish]

Is it possible to use the Mailman REST API to query the contents of a given 
template?
For example: GET 
/api/domains/example.org/templates/lang/list:user:action:subscribe
I would like to do this to allow the administrator to edit existing as a 
reference point.
--
Kiffin Gish 
Gouda, The Netherlands
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org