Re: [Mailman-Users] Passwords of members
The archives have a script for this (for versions 2.0.x), and you can easily modify the script found here to do it (you will have to be system admin): http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp On Fri, 2002-12-13 at 12:25, Gary Smith wrote: Hi. How do I find out the passwords of subscribers with out clicking on the 'send me my password button'? Thanks, Gary Smith MSN 8 with e-mail virus protection service: 2 months FREE* > > > -- > Mailman-Users mailing list > [EMAIL PROTECTED] > http://mail.python.org/mailman/listinfo/mailman-users > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py > Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ > > This message was sent to: [EMAIL PROTECTED] > Unsubscribe or change your options at > http://mail.python.org/mailman/options/mailman-users/jonc%40nc.rr.com -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members
Now that we can see the plain-text passwords of members using dumpdb on the
config.db file, how can we see the specific list admin password for a given
list? I could see plaintext passwords for the users, but for what looked like
the admin, I saw something very different than what the password is set to.
A (bogus) example of this: Here are what looks like the admin lines from the
config.db dump:
'owner': ['[EMAIL PROTECTED]'],
'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
'[EMAIL PROTECTED]': 'nasdat',
'[EMAIL PROTECTED]': 'kljlkd',
'[EMAIL PROTECTED]': 'jsdafk',
},
So, the user passwords are pretty clear, but the owner's password is not listed
in plain text as to what the password is.
How do we get that password? If I had that info, I could check to see why we
are able to log into our mm site with the site-wide password or the user
(subscriber) passwords, but *not* the list admin's password. (for mm 2.0.13)
Thanks!
Steve
[EMAIL PROTECTED]
> --
>
> Date: 13 Dec 2002 16:58:52 -0500
> From: Jon Carnes <[EMAIL PROTECTED]>
> To: Gary Smith <[EMAIL PROTECTED]>
> Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
>
> The archives have a script for this (for versions 2.0.x), and you can
> easily modify the script found here to do it (you will have to be system
> admin):
>
> http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
>
> On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> Hi.
>
> How do I find out the passwords of subscribers with out clicking on the
> 'send me my password button'?
>
> Thanks,
>
> Gary Smith
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members
In this version of Mailman the admin password for the list is encrypted,
well sort of... If you want to be clever and look at the source you can
easily figure this part out.
In any case, I've seen this problem before after an upgrade and it seems
to be that the encryption has changed. Normally resetting the password
via the web-admin works. I don't know why it's not working in your case
- unless you upgraded python and didn't re-install Mailman.
You might want to use dumpdb to look at the encrypted password, then try
to change it via the web admin and use dumpdb to see if it actually
changed.
Good Luck - Jon Carnes
On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> Now that we can see the plain-text passwords of members using dumpdb on the
> config.db file, how can we see the specific list admin password for a given
> list? I could see plaintext passwords for the users, but for what looked like
> the admin, I saw something very different than what the password is set to.
>
> A (bogus) example of this: Here are what looks like the admin lines from the
> config.db dump:
>
> 'owner': ['[EMAIL PROTECTED]'],
> 'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> 'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
> '[EMAIL PROTECTED]': 'nasdat',
> '[EMAIL PROTECTED]': 'kljlkd',
> '[EMAIL PROTECTED]': 'jsdafk',
> },
>
> So, the user passwords are pretty clear, but the owner's password is not listed
> in plain text as to what the password is.
>
> How do we get that password? If I had that info, I could check to see why we
> are able to log into our mm site with the site-wide password or the user
> (subscriber) passwords, but *not* the list admin's password. (for mm 2.0.13)
>
> Thanks!
>
> Steve
> [EMAIL PROTECTED]
>
>
>
> > --
> >
> > Date: 13 Dec 2002 16:58:52 -0500
> > From: Jon Carnes <[EMAIL PROTECTED]>
> > To: Gary Smith <[EMAIL PROTECTED]>
> > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> >
> > The archives have a script for this (for versions 2.0.x), and you can
> > easily modify the script found here to do it (you will have to be system
> > admin):
> >
> > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> >
> > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > Hi.
> >
> > How do I find out the passwords of subscribers with out clicking on the
> > 'send me my password button'?
> >
> > Thanks,
> >
> > Gary Smith
>
>
> --
> Mailman-Users mailing list
> [EMAIL PROTECTED]
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
>
> This message was sent to: [EMAIL PROTECTED]
> Unsubscribe or change your options at
> http://mail.python.org/mailman/options/mailman-users/jonc%40nc.rr.com
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members
Hi Jon!
Well, I did what you said... I used dumpdb to look at the encrypted password for
a list. Then I changed the list admin pw for th list (logged in as the site
admin), and did a dumpdb again. I get the same encrypted password for the list
admin (and therefore, still cannot log in as the admin).
What else can I try?
Thanks!
Steve
[EMAIL PROTECTED]
> Subject: Re: [Mailman-Users] Passwords of members
> From: Jon Carnes <[EMAIL PROTECTED]>
> To: Steve Rifkin <[EMAIL PROTECTED]>
> Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> Content-Transfer-Encoding: 7bit
> Date: 14 Dec 2002 20:36:07 -0500
> Mime-Version: 1.0
> X-Keywords:
>
> In this version of Mailman the admin password for the list is encrypted,
> well sort of... If you want to be clever and look at the source you can
> easily figure this part out.
>
> In any case, I've seen this problem before after an upgrade and it seems
> to be that the encryption has changed. Normally resetting the password
> via the web-admin works. I don't know why it's not working in your case
> - unless you upgraded python and didn't re-install Mailman.
>
> You might want to use dumpdb to look at the encrypted password, then try
> to change it via the web admin and use dumpdb to see if it actually
> changed.
>
> Good Luck - Jon Carnes
>
> On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > Now that we can see the plain-text passwords of members using dumpdb on the
> > config.db file, how can we see the specific list admin password for a given
> > list? I could see plaintext passwords for the users, but for what looked
like
> > the admin, I saw something very different than what the password is set to.
> >
> > A (bogus) example of this: Here are what looks like the admin lines from
the
> > config.db dump:
> >
> > 'owner': ['[EMAIL PROTECTED]'],
> > 'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > 'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
> > '[EMAIL PROTECTED]': 'nasdat',
> > '[EMAIL PROTECTED]': 'kljlkd',
> > '[EMAIL PROTECTED]': 'jsdafk',
> > },
> >
> > So, the user passwords are pretty clear, but the owner's password is not
listed
> > in plain text as to what the password is.
> >
> > How do we get that password? If I had that info, I could check to see why
we
> > are able to log into our mm site with the site-wide password or the user
> > (subscriber) passwords, but *not* the list admin's password. (for mm
2.0.13)
> >
> > Thanks!
> >
> > Steve
> > [EMAIL PROTECTED]
> >
> >
> >
> > > --
> > >
> > > Date: 13 Dec 2002 16:58:52 -0500
> > > From: Jon Carnes <[EMAIL PROTECTED]>
> > > To: Gary Smith <[EMAIL PROTECTED]>
> > > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> > >
> > > The archives have a script for this (for versions 2.0.x), and you can
> > > easily modify the script found here to do it (you will have to be system
> > > admin):
> > >
> > > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > >
> > > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > > Hi.
> > >
> > > How do I find out the passwords of subscribers with out clicking on the
> > > 'send me my password button'?
> > >
> > > Thanks,
> > >
> > > Gary Smith
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members
Well, now you *know* that the password is not being changed! So
something fundamental is broken within your install. It's not handling
encryption properly and any calls to cause encryption are failing.
Assuming that this is not a system-wide problem (that would be caused by
a library in your distribution), then I'm guessing that the problem lays
with a library or module of Python.
My suggestion to you is that you re-install Python, then re-install
Mailman. Both are fairly easy to do. The order is important - you
definitely want to re-install Mailman after installing Python.
If you install Python from an RPM or package management system, then
load the development packages of Python as well - to make sure you get
all the modules/libraries that Mailman uses.
Good Luck (and if you happen to hang that way: Merry Christmas!)
Jon Carnes
==
On Mon, 2002-12-23 at 15:29, Steve Rifkin wrote:
> Hi Jon!
>
> Well, I did what you said... I used dumpdb to look at the encrypted password for
> a list. Then I changed the list admin pw for th list (logged in as the site
> admin), and did a dumpdb again. I get the same encrypted password for the list
> admin (and therefore, still cannot log in as the admin).
>
> What else can I try?
>
> Thanks!
>
> Steve
> [EMAIL PROTECTED]
>
> > Subject: Re: [Mailman-Users] Passwords of members
> > From: Jon Carnes <[EMAIL PROTECTED]>
> > To: Steve Rifkin <[EMAIL PROTECTED]>
> > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> > Content-Transfer-Encoding: 7bit
> > Date: 14 Dec 2002 20:36:07 -0500
> > Mime-Version: 1.0
> > X-Keywords:
> >
> > In this version of Mailman the admin password for the list is encrypted,
> > well sort of... If you want to be clever and look at the source you can
> > easily figure this part out.
> >
> > In any case, I've seen this problem before after an upgrade and it seems
> > to be that the encryption has changed. Normally resetting the password
> > via the web-admin works. I don't know why it's not working in your case
> > - unless you upgraded python and didn't re-install Mailman.
> >
> > You might want to use dumpdb to look at the encrypted password, then try
> > to change it via the web admin and use dumpdb to see if it actually
> > changed.
> >
> > Good Luck - Jon Carnes
> >
> > On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > > Now that we can see the plain-text passwords of members using dumpdb on the
> > > config.db file, how can we see the specific list admin password for a given
> > > list? I could see plaintext passwords for the users, but for what looked
> like
> > > the admin, I saw something very different than what the password is set to.
> > >
> > > A (bogus) example of this: Here are what looks like the admin lines from
> the
> > > config.db dump:
> > >
> > > 'owner': ['[EMAIL PROTECTED]'],
> > > 'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > > 'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
> > > '[EMAIL PROTECTED]': 'nasdat',
> > > '[EMAIL PROTECTED]': 'kljlkd',
> > > '[EMAIL PROTECTED]': 'jsdafk',
> > > },
> > >
> > > So, the user passwords are pretty clear, but the owner's password is not
> listed
> > > in plain text as to what the password is.
> > >
> > > How do we get that password? If I had that info, I could check to see why
> we
> > > are able to log into our mm site with the site-wide password or the user
> > > (subscriber) passwords, but *not* the list admin's password. (for mm
> 2.0.13)
> > >
> > > Thanks!
> > >
> > > Steve
> > > [EMAIL PROTECTED]
> > >
> > >
> > >
> > > > --
> > > >
> > > > Date: 13 Dec 2002 16:58:52 -0500
> > > > From: Jon Carnes <[EMAIL PROTECTED]>
> > > > To: Gary Smith <[EMAIL PROTECTED]>
> > > > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> > > >
> > > > The archives have a script for this (for versions 2.0.x), and you can
> > > > easily modify the script found here to do it (you will have to be system
> > > > admin):
> > > >
> > > > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > > >
> > > > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > > > Hi.
> > > >
> > > > How do I find out the passwords of subscribers with out clicking on the
> > > > 'send me my password button'?
> > > >
> > > > Thanks,
> > > >
> > > > Gary Smith
>
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members
> My suggestion to you is that you re-install Python, then re-install
> Mailman. Both are fairly easy to do. The order is important - you
> definitely want to re-install Mailman after installing Python.
OK, reinstalled python. Python works. (v2.1)
Then, reinstalled mailman (v2.0.13). Mailman still does *not* allow for admin
logins... only site and user logins. No errors logged!
All built from "scratch"... i.e. with ./configure make make install
on Solaris 2.6.
> Good Luck (and if you happen to hang that way: Merry Christmas!)
Have a great holiday. Thanks! :)
Oh, and if you have any other ideas on what to do (anybody reading), please let
me know. This is very frustrating.
I'd love to downgrade back to 2.08 without losing my 2.0.13 archive data.
Anyone know how? 2.08 had worked fine before the 2.13 upgrade. But, 2.08
won't let me install it, because a higher version is already on.
Steve
>
> Jon Carnes
>
> ==
> On Mon, 2002-12-23 at 15:29, Steve Rifkin wrote:
> > Hi Jon!
> >
> > Well, I did what you said... I used dumpdb to look at the encrypted password
for
> > a list. Then I changed the list admin pw for th list (logged in as the site
> > admin), and did a dumpdb again. I get the same encrypted password for the
list
> > admin (and therefore, still cannot log in as the admin).
> >
> > What else can I try?
> >
> > Thanks!
> >
> > Steve
> > [EMAIL PROTECTED]
> >
> > > Subject: Re: [Mailman-Users] Passwords of members
> > > From: Jon Carnes <[EMAIL PROTECTED]>
> > > To: Steve Rifkin <[EMAIL PROTECTED]>
> > > Cc: Mailman users Mailing list <[EMAIL PROTECTED]>
> > > Content-Transfer-Encoding: 7bit
> > > Date: 14 Dec 2002 20:36:07 -0500
> > > Mime-Version: 1.0
> > > X-Keywords:
> > >
> > > In this version of Mailman the admin password for the list is encrypted,
> > > well sort of... If you want to be clever and look at the source you can
> > > easily figure this part out.
> > >
> > > In any case, I've seen this problem before after an upgrade and it seems
> > > to be that the encryption has changed. Normally resetting the password
> > > via the web-admin works. I don't know why it's not working in your case
> > > - unless you upgraded python and didn't re-install Mailman.
> > >
> > > You might want to use dumpdb to look at the encrypted password, then try
> > > to change it via the web admin and use dumpdb to see if it actually
> > > changed.
> > >
> > > Good Luck - Jon Carnes
> > >
> > > On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > > > Now that we can see the plain-text passwords of members using dumpdb on
the
> > > > config.db file, how can we see the specific list admin password for a
given
> > > > list? I could see plaintext passwords for the users, but for what
looked
> > like
> > > > the admin, I saw something very different than what the password is set
to.
> > > >
> > > > A (bogus) example of this: Here are what looks like the admin lines
from
> > the
> > > > config.db dump:
> > > >
> > > > 'owner': ['[EMAIL PROTECTED]'],
> > > > 'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > > > 'passwords': {[EMAIL PROTECTED]': 'sdjlkl',
> > > > '[EMAIL PROTECTED]': 'nasdat',
> > > > '[EMAIL PROTECTED]': 'kljlkd',
> > > > '[EMAIL PROTECTED]': 'jsdafk',
> > > > },
> > > >
> > > > So, the user passwords are pretty clear, but the owner's password is not
> > listed
> > > > in plain text as to what the password is.
> > > >
> > > > How do we get that password? If I had that info, I could check to see
why
> > we
> > > > are able to log into our mm site with the site-wide password or the user
> > > > (subscriber) passwords, but *not* the list admin's password. (for mm
> > 2.0.13)
> > > >
> > > > Thanks!
> > > >
> > > > Steve
> > > > [EMAIL PROTECTED]
> > > >
> > > >
> > > >
> > > > > --
> > > > >
> > > > > Date: 13 Dec 2002 16:58:52 -0500
> > > > > Fro
Re: [Mailman-Users] Passwords of members
The other interesting thing I found is that once I log into a list as the SITE ADMIN, if I go to change the list admin's password, I can put anything into: Enter new password: Then, I can put something different into: Confirm new password: I can then proceed to click Submit Your Changes, and I receive NO error that the password I put in and the confirmation of that password are different. It acts like it's trying to submit, but then, just returns me back to the top of the list admin page for the list. I also notice that if I put some bogus password into the Enter Current Password fied at the bottom, and hit submit, I get: Error: Incorrect administrator password displayed at the top of the page. That tells me that the list thinks it has some list admin password set... but, there's no way to figure out what it is? Steve teve [EMAIL PROTECTED] -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
Going an extra step, I compiled python 2.2.2 and put it in place. I then rebuilt mailman (based on the new python). Again, mailman works EXCEPT FOR list admin passwords. I'm running out of options. I'm now at python 2.2.2 and mailman 2.0.13, and my list admins cannot log in, but the site admin and users can. When the site admin changes the list admin password for a list, should there be a confirmation of the change AFTER submit is clicked? WHOA! Here is something weird... all my mailman files are owned by user mailman and group mailman. At the list level, for a test list (mmtest), the dir looks like: -rw-rw 1 mailman mailman 3082 Dec 27 11:48 config.db -rw-rw 1 mailman mailman 3082 Dec 27 11:47 config.db.last -rw-rw-r-- 1 mailman mailman 869 Dec 26 16:57 request.db -rw-rw-r-- 1 mailman mailman 189 Jan 30 2002 handle_opts.html -rw-rw-r-- 1 mailman mailman 1026 Jan 30 2002 headfoot.html -rw-rw-r-- 1 mailman mailman 3136 Jan 30 2002 listinfo.html -rw-rw-r-- 1 mailman mailman 4106 Jan 30 2002 options.html -rw-rw-r-- 1 mailman mailman 1169 Jan 30 2002 roster.html -rw-rw-r-- 1 mailman mailman 198 Jan 30 2002 subscribe.html -rw-rw-r-- 1 mailman mailman 1706 Jan 30 2002 admindbpreamble.html That's ok. HOWEVER, whenever I log into a list or try to make changes to a list as the site admin, the ownership changes for config.db: -rw-rw 1 nobody mailman 3082 Dec 27 11:50 config.db -rw-rw 1 mailman mailman 3082 Dec 27 11:48 config.db.last -rw-rw-r-- 1 mailman mailman 869 Dec 26 16:57 request.db -rw-rw-r-- 1 mailman mailman 189 Jan 30 2002 handle_opts.html -rw-rw-r-- 1 mailman mailman 1026 Jan 30 2002 headfoot.html -rw-rw-r-- 1 mailman mailman 3136 Jan 30 2002 listinfo.html -rw-rw-r-- 1 mailman mailman 4106 Jan 30 2002 options.html -rw-rw-r-- 1 mailman mailman 1169 Jan 30 2002 roster.html -rw-rw-r-- 1 mailman mailman 198 Jan 30 2002 subscribe.html -rw-rw-r-- 1 mailman mailman 1706 Jan 30 2002 admindbpreamble.html And the filesize for config.db does not change. I suspect that the config.db file is not changing at all when I attempt changes logged in as the site admin. The only change to the file is config.db's ownership keeps changing to nobody! Why? Maybe the above is a clue to the problem! Any thoughts? Steve [EMAIL PROTECTED] -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
Oh, I should also add that, as user mailman, when I run: bin/check_perms I get: No problems found Steve -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
Catching up on a few of your messages... I'm betting that your Web-server runs as user nobody, so changes via the web to the list config may end-up as being owned by "nobody". Shouldn't you have the sticky bit set for the group on all those directories and files (if the check came back okay then it must be correct - sorry). What are you using for Password authentication on your system? Are you using PAMs? What does your /etc/nsswitch.conf file look like (are you using NIS)? What happens when you run the site password program? On Fri, 2002-12-27 at 11:57, Steve Rifkin wrote: > Going an extra step, I compiled python 2.2.2 and put it in place. > > I then rebuilt mailman (based on the new python). Again, mailman works EXCEPT > FOR list admin passwords. > > I'm running out of options. I'm now at python 2.2.2 and mailman 2.0.13, and my > list admins cannot log in, but the site admin and users can. > > When the site admin changes the list admin password for a list, should there be > a confirmation of the change AFTER submit is clicked? > > WHOA! Here is something weird... all my mailman files are owned by user mailman > and group mailman. > > At the list level, for a test list (mmtest), the dir looks like: > > -rw-rw 1 mailman mailman 3082 Dec 27 11:48 config.db > -rw-rw 1 mailman mailman 3082 Dec 27 11:47 config.db.last > -rw-rw-r-- 1 mailman mailman 869 Dec 26 16:57 request.db > -rw-rw-r-- 1 mailman mailman 189 Jan 30 2002 handle_opts.html > -rw-rw-r-- 1 mailman mailman 1026 Jan 30 2002 headfoot.html > -rw-rw-r-- 1 mailman mailman 3136 Jan 30 2002 listinfo.html > -rw-rw-r-- 1 mailman mailman 4106 Jan 30 2002 options.html > -rw-rw-r-- 1 mailman mailman 1169 Jan 30 2002 roster.html > -rw-rw-r-- 1 mailman mailman 198 Jan 30 2002 subscribe.html > -rw-rw-r-- 1 mailman mailman 1706 Jan 30 2002 admindbpreamble.html > > > That's ok. HOWEVER, whenever I log into a list or try to make changes to a > list as the site admin, the ownership changes for config.db: > > -rw-rw 1 nobody mailman 3082 Dec 27 11:50 config.db > -rw-rw 1 mailman mailman 3082 Dec 27 11:48 config.db.last > -rw-rw-r-- 1 mailman mailman 869 Dec 26 16:57 request.db > -rw-rw-r-- 1 mailman mailman 189 Jan 30 2002 handle_opts.html > -rw-rw-r-- 1 mailman mailman 1026 Jan 30 2002 headfoot.html > -rw-rw-r-- 1 mailman mailman 3136 Jan 30 2002 listinfo.html > -rw-rw-r-- 1 mailman mailman 4106 Jan 30 2002 options.html > -rw-rw-r-- 1 mailman mailman 1169 Jan 30 2002 roster.html > -rw-rw-r-- 1 mailman mailman 198 Jan 30 2002 subscribe.html > -rw-rw-r-- 1 mailman mailman 1706 Jan 30 2002 admindbpreamble.html > > > And the filesize for config.db does not change. I suspect that the config.db > file is not changing at all when I attempt changes logged in as the site admin. > > The only change to the file is config.db's ownership keeps changing to nobody! > > Why? > > Maybe the above is a clue to the problem! > > Any thoughts? > > Steve > [EMAIL PROTECTED] > > -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
> > What are you using for Password authentication on your system? Are you > using PAMs? What does your /etc/nsswitch.conf file look like (are you > using NIS)? NIS is used, but the mailman user account info is local to the web server. Mailman's home directory, though, is shared between the web server and the mail server. Some nsswitch.conf entries: passwd: compat group: files nis hosts: dns nis [NOTFOUND=return] files netgroup: nis automount: files nis aliases:files nis But again, I never had the list-admin authentication problem until I upgraded the Apache server. Whether the mailman list config databases before the apache upgrade had the nobody user set, I do not know. What could have changed from doing the apache upgrade? The user that CGI scripts get run by? Our cgi-scripts are working ok. Steve Rifkin [EMAIL PROTECTED] -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
Just did another reinstall of 2.0.13. Again, installed with no problems. Check_perm ran fine... again And, the list ownerships for the config.db file for my test list is: -rw-rw 1 mailman mailman 3169 Jan 03 11:57 config.db (owned and group-owned by mailman) Then, I log into the list as the site admin, and change the lists's admin's password. When I do, the config.db file now has these attributes: -rw-rw 1 nobody mailman 3169 Jan 03 14:35 config.db Yes, nobody has replaced mailman as owner again And the list admin gets an authentication error trying to log in to its list. If, as site admin, I once again change the list admin's pwd (this time to a longer password, so that hopefully, config.db would change size) and log out, the config.db file remains the same size with the updated timestamp. -rw-rw 1 nobody mailman 3169 Jan 03 14:36 config.db Still owned by nobody! (yet, still group-owned by mailman) And still not allowing list admin's to log in... onl log in... only site admin and users can log in. (and this happens to all of our lists). Running check_perms again (now that "nobody" is the owner and mailman is the group owner of the config.db files), I still receive "No problems found" Since the only signs of error are 1) the "Authentication failed" error for the list admins, and 2) config.db doesn't looks as if it is updated [comparing the size of the of current and previous config.db files]... ...is there any way to do a trace of what is happening? Can python be used for this? It's almost as if the list admin password being changed by the site admin never really updates the config.db file. Oh, I even tried the setup using the mailman group consisting of mailman and nobody. Steve Rifkin [EMAIL PROTECTED] -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
The ownership issue is a red-herring. As long as it's group owned by
mailman and it's g+rw you should be fine.
I'm guessing somewhere along the way Python got upgraded and the
status of the crypt libraries changed (either they were there before
and not now, or vice versa). Try setting USE_CRYPT=0 in your
mm_cfg.py file.
A better solution would be to upgrade to MM2.1. It uses sha1 hashing,
which will always be available.
BTW, a debugging tool I use quite often (or the Python literate here),
is to sprinkle the code with lines like:
syslog('debug', 'some value: %s', somevalue)
which puts the output in errors/debug. You may need to add
from Mailman.Logging.Syslog import syslog
at the top of the file, if it isn't already there.
-Barry
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
This message was sent to: archive@jab.org
Unsubscribe or change your options at
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
> A better solution would be to upgrade to MM2.1. It uses sha1 hashing, > which will always be available. OK, I upgraded to MM2.1. After having to run check_perms with -f to fix permissions, I finally got the web pages up. When I go in as site admin and change the list admin's password for a list, I *still* cannot log in as the list admin. (I still receive the authentication error). And if I go back into the password change page for the list as the site admin, and if I put in a new list admin password and have a *different* verified password, I receive no errors when I click submit. However, if I run "change_pw" from the command line, changing the password for the list admin for the specific list, them, I CAN log in! :) So, it's the web interface that's screwing up. We're narrowing this one down now... I hope! Any suggestions? Steve Rifkin [EMAIL PROTECTED] -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
> "SR" == Steve Rifkin <[EMAIL PROTECTED]> writes: SR> OK, I upgraded to MM2.1. After having to run check_perms with SR> -f to fix permissions, I finally got the web pages up. SR> When I go in as site admin and change the list admin's SR> password for a list, I *still* cannot log in as the list SR> admin. (I still receive the authentication error). SR> And if I go back into the password change page for the list as SR> the site admin, and if I put in a new list admin password and SR> have a *different* verified password, I receive no errors when SR> I click submit. SR> However, if I run "change_pw" from the command line, changing SR> the password for the list admin for the specific list, them, I SR> CAN log in! :) SR> So, it's the web interface that's screwing up. We're SR> narrowing this one down now... I hope! Any suggestions? Do you have any cookie blockers or other proxies between your browser and the web server? That's about the only thing I can think of. -Barry -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
I recently installed mailman 2.1 (upgrading over our mailman 2.13) to correct a
problem with list admin passwords.
At the time of the upgrade, I was running python 2.1
Today I finally ran genaliases to modify the old mm list aliases for the new
mailman.
With the aliases in place, I sent e-mail to one of my lists... "newlist".
Instead of the message going through, I get back the following from the
mailer-daemon:
- The following addresses had permanent fatal errors -
"|/users/rtfm/mailman/mail/mailman post newtest"
(reason: 1)
(expanded from: )
- Transcript of session follows -
Traceback (most recent call last):
File "/users/rtfm/mailman/scripts/post", line 69, in ?
main()
File "/users/rtfm/mailman/scripts/post", line 64, in main
tolist=1, _plaintext=1)
File "/users/rtfm/mailman/Mailman/Queue/Switchboard.py", line 119, in enqueue
msgfp = open(msgfile, 'w')
IOError: [Errno 13] Permission denied:
'/users/rtfm/mailman/qfiles/in/1042138477.3629709+2b891898799d3290ae81d057bdd6e8
2a56ffe112.msg'
554 5.3.0 unknown mailer error 1
=
What is causing the above?
OK, so I figure, since I was running python 2.1, maybe mailman 2.1 would rather
me run python 2.2.2.
I then installed python 2.2.2. Directly afterwards, I rebuilt (make clean,
configure, make, make install) mailman 2.1 again, and then, ran check_perms (and
corrected anything that needed correcting so that check_perms now comes back
clean.
Now, when I start to run the scripts/mailman script to startup mailmanctl, I
immediately get lots of messages that look like this:
# ./mailman start
cs:/users/rtfm/mailman/scripts:{153} Traceback (most recent call last):
File "/users/rtfm/mailman/bin/qrunner", line 77, in ?
from Mailman.i18n import _
File "/users/rtfm/mailman/Mailman/i18n.py", line 18, in ?
import time
ImportError: No module named time
Traceback (most recent call last):
File "/users/rtfm/mailman/bin/qrunner", line 77, in ?
from Mailman.i18n import _
File "/users/rtfm/mailman/Mailman/i18n.py", line 18, in ?
import time
ImportError: No module named time
Traceback (most recent call last):
I get the above messages continuously. What's happening here?
Mind you, when I had python 2.1 installed, I had no problem running mailmanctl
(except that mail sent to lists would yield the message near the top of this
e-mail. With python2.2.2 installed, I can't even get mailmanctl to run
properly... or rather, whatever it's running is giving me the errors directly
above.
And remember, *after* I installed python 2.2.2, I *rebuilt* mailman.
So, what should I do here?
If python's an issue, I'll go back to python 2.1 and hope someone here can help
me fix the problem with the mailer-daemon message. At least python 2.1, I could
run the mailman startup script.
(Note, the machine mailman is built on is Solaris 2.8.
Thanks in advance!
Steve Rifkin
[EMAIL PROTECTED]
--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Re: [Mailman-Users] Passwords of members UPDATE
Steve, You're first problem looks like a classic "permission denied" problem. I'd suggest running bin/check_perms to see if that clears up your problems. The second issue you had (no module name "time") looks like your Python installation is broken. You should be able to do something like the following at the command line: % python Python 2.2.2 (#1, Oct 14 2002, 19:51:36) [GCC 2.96 2731 (Red Hat Linux 7.3 2.96-112)] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import time >>> time.__file__ '/usr/local/lib/python2.2/lib-dynload/time.so' If not, go back to your Python source dir, and run "make test". Check your compilation output carefully. Mailman 2.1 should work with Python 2.1.3 or later. -Barry -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Passwords of members UPDATE
But, the python commands you want me to try DO work (and mailman still yields the same errors from my previous e-mail): # python -V Python 2.2.2 # python Python 2.2.2 (#1, Jan 9 2003, 16:24:27) [GCC 2.95.2 19991024 (release)] on sunos5 Type "help", "copyright", "credits" or "license" for more information. >>> import time >>> time.__file__ '/usr/local/lib/python2.2/lib-dynload/time.so' So, what should I try next? (BTW, thanks for your help! :) Steve Rifkin [EMAIL PROTECTED] > The second issue you had (no module name "time") looks like your > Python installation is broken. You should be able to do something > like the following at the command line: > > % python > Python 2.2.2 (#1, Oct 14 2002, 19:51:36) > [GCC 2.96 2731 (Red Hat Linux 7.3 2.96-112)] on linux2 > Type "help", "copyright", "credits" or "license" for more information. > >>> import time > >>> time.__file__ > '/usr/local/lib/python2.2/lib-dynload/time.so' -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ This message was sent to: archive@jab.org Unsubscribe or change your options at http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
