Bugs item #2039241, was opened at 2008-08-05 12:55 Message generated for change (Comment added) made by msapiro You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=2039241...

Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Web/CGI Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: Robert Collins (rbcollins) Assigned to: Nobody/Anonymous (nobody) Summary: teach firefox that different lists may have different passwo

Initial Comment: given two lists on a mailman instance, foo and bar, each with a list passsword the same as the name. login to one, save the password in firefox, go to the other's admindb and it will fail - wrong password. login and ask firefox to remember it and it resets the password saved for the list foo.

This is annoying :) I suspect you are using the same field and form names - while I don't know what the heuristic ff uses for html auth field detection, its certainly assuming its the *same* password.

One hack that might be elegant and work would be a hidden field called username set to the list name :)

Another would be just changing things to ff thinks its a different password and stores it differently.

I'd *really* love a fix that can be backported to 2.1.8 which our list servers are running.

----------------------------------------------------------------------

Comment By: Mark Sapiro (msapiro)

Date: 2008-08-05 15:08

Message: Logged In: YES user_id=1123998 Originator: NO

The template for the pages is admlogin.html. See http://wiki.list.org/x/jYA9 for ways to make an edited version of this template. The string %(listname)s will be replaced with the list name. You could implement your first suggestion by changing the line

<TD><INPUT TYPE="password" NAME="adminpw" SIZE="30"></TD>

to

<TD><INPUT TYPE="HIDDEN" NAME="userid" VALUE="%(listname)s"> <INPUT TYPE="password" NAME="adminpw" SIZE="30"></TD>

Changing the name "adminpw" to something list specific as in your second suggestion would require several code changes to identify the password.

----------------------------------------------------------------------

You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=2039241...