Mailman 3 July 2003 - Mailman-Developers

Re: [Mailman-Developers] strange behavior with EXTERNAL_PUBLIC_ARCHIVER
by J C Lawrence July 8, 2003

July 8, 2003

On Sat, 28 Jun 2003 18:16:55 +0200 Jonas Meurer <jonas(a)freesources.org> wrote: > why does user list member different lists in the two cases? same uid, > same gid, only the lists it members are different. Because Mailman is run by a server which was started as root and which then setuid'ed down to a lower privilege level. You need to fully understand how Unix UIDs are managed for processes. I recommend any of the standard security tracts on why services that run as root and then setuid to something less privileged are less secure than those that start at the lower security setting. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

Re: Possible yahoogroups problem.
by Charlie Clark July 8, 2003

July 8, 2003

On 2003-07-08 at 15:14:07 [+0200], mailman-developers-request(a)python.org wrote: > Anyone want to hazard a reason why it might NOT be a breach of yahoo's > algorithm here? I'm just a bit worried that we're seeing a new phase > where spammers have figured out how to get around these protections; if > so, it also opens up mailing lists to be a new form of guided missile in > attacks on people, something I'd rather avoid, thank you...) At the risk of stating the obvious: what if the list admin just changed the rules for subscription and subscribed you anyway? Charlie

1 0

Possible yahoogroups problem.
by Chuq Von Rospach July 8, 2003

July 8, 2003

well, I was promised more than once that yahoo security was going to contact me, and nobody ever did. Ohwell. here's the issue: it looks to me like someone's figured out Yahoo's confirmation protocol. First, we got (edited for brevity): > From: Yahoo! Groups > <confirm-s2-6n1LGtpWyFrKWHIUtg2mjc8G=Ss-mailman- > owner=lists.apple.com(a)yahoogroups.com> > Date: Mon Jun 23, 2003 1:13:36 AM US/Pacific > To: mailman-owner(a)lists.apple.com > Subject: Please confirm your request to join associated_secretarial > Reply-To: > confirm-s2-6n1LGtpWyFrKWHIUtg2mjc8G=Ss-mailman- > owner=lists.apple.com(a)yahoogroups.com > > Hello mailman-owner(a)lists.apple.com, > > We have received your request to join the associated_secretarial > group hosted by Yahoo! Groups, a free, easy-to-use community service. > > 1) Go to the Yahoo! Groups site by clicking on this link: > > > http://groups.yahoo.com/i?i=6n1LGtpWyFrKWHIUtg2mjc8G-Ss&e=mailman- > owner%40lists%2Eapple%2Ecom obviously, our list server never requested to join the list, but if that were it, I'd have simply thrown this out and ignored it with all of the other spam and stuff like this. But then shortly thereafter, we got... > From: associated_secretarial Moderator > <associated_secretarial-owner(a)yahoogroups.com> > Date: Mon Jun 23, 2003 1:15:33 AM US/Pacific > To: mailman-owner(a)lists.apple.com > Subject: Welcome to associated_secretarial > > > Hello, > > Welcome to the From the Eagle's Nest, a newsletter designed to help > you and your business to future successes. Great tips for those just > getting started and for established businesses. "Starting Out" , > "Cold Call Strategy", "Taping Tips" and "Working from Home" are just > some of the articles to look out for. The bi-weekly series addresses > the newer communications and technologies available for those who want > to "move with the times". With a genuine desire to help small > business, this newsletter is one you'll be glad you have in your > "Better Business Arsenal". > We unsubscribed immediately, of course, but the question is, how did that subscription get confirmed? I didn't do it. My associated didn't. So I'm worried that someone's figured out how to circumvent yahoo's confirmation process. I wanted to bring this up with Yahoo, but they evidently weren't interested. (and the reason I'm posting this to mailman-developers: just a general question, since I haven't had time to look it up myself: does the mailman confirmation process use an algorithm that could potentially be reverse engineered? If it happened to Yahoo, it could happen to Mailman. Even if it didn't happen to Yahoo, it could happen to other services if their confirmations can be predicted in some way. Anyone want to hazard a reason why it might NOT be a breach of yahoo's algorithm here? I'm just a bit worried that we're seeing a new phase where spammers have figured out how to get around these protections; if so, it also opens up mailing lists to be a new form of guided missile in attacks on people, something I'd rather avoid, thank you...)

3 2

mailman eating up CPU
by Chris Szilagyi July 7, 2003

July 7, 2003

Hello, I've seen other posts on this problem but have not seen a solution yet. I've got Mailman 2.1 compiled and installed on a Red Hat 7.1 system all up to date. Also I'm using Python 2.2.2 from Red Hat's src rpm. The problem is with the mailman service eating up about 80-95% of the CPU at all times. This box is a test box and is not routing any mail. Has anybody found a solution to this problem??? Thanks for all feedback... -- Chris

1 0

Archive problem
by Marco Henriques July 7, 2003

July 7, 2003

Hi ALL, I'm using Python 2.2.2 and Mailman 2.1 on a NetBSD 1.6 machine. I´m having trouble with Archive. My first message to my list is saved in /usr/local/mailman/archives/private/teste-l/2003-July.txt, the messages are still been send but no are save. And, my index.html file in /usr/local/mailman/archives/private/teste-l/ is empty. I see in my error log file the lines below: Jul 07 09:42:52 2003 (23058) Uncaught runner exception: unsupported format character '(' (0x28) at index 2 Jul 07 09:42:52 2003 (23058) Traceback (most recent call last): File "/usr/local/mailman/Mailman/Queue/Runner.py", line 105, in _oneloop self._onefile(msg, msgdata) File "/usr/local/mailman/Mailman/Queue/Runner.py", line 155, in _onefile keepqueued = self._dispose(mlist, msg, msgdata) File "/usr/local/mailman/Mailman/Queue/ArchRunner.py", line 73, in _dispose mlist.ArchiveMail(msg) File "/usr/local/mailman/Mailman/Archiver/Archiver.py", line 207, in ArchiveMail h.close() File "/usr/local/mailman/Mailman/Archiver/pipermail.py", line 306, in close self.write_TOC() File "/usr/local/mailman/Mailman/Archiver/HyperArch.py", line 1008, in write_TOC toc.write(self.html_TOC()) File "/usr/local/mailman/Mailman/Archiver/HyperArch.py", line 701, in html_TOC accum.append(self.html_TOC_entry(a)) File "/usr/local/mailman/Mailman/Archiver/HyperArch.py", line 732, in html_TOC_entry textlink = templ % { File "/usr/local/mailman/Mailman/Archiver/HyperArch.py", line 118, in sizeof out = _(' %(size)i bytes ') File "/usr/local/mailman/Mailman/i18n.py", line 78, in _ return _translation.gettext(s) % dict ValueError: unsupported format character '(' (0x28) at index 2 Jul 07 09:42:52 2003 (23058) SHUNTING: 1057581770.414556+d6c1ae52a492b811c605bafb6607164b0261267e Someone could help me ?!? Cheers, Marco _______________________________________________________________________ Yahoo! Mail Mais espaço, mais segurança e gratuito: caixa postal de 6MB, antivírus, proteção contra spam. http://br.mail.yahoo.com/

1 0

Re: Hacking Mailman to Work with Central Authentication
by Michael Guo July 5, 2003

July 5, 2003

Our site has a Central Authentication Service (CAS) that enables single sign-on across webapps, and I've been tasked with the duty of modifying Mailman to work with that service. That way, list admins do not have to maintain separate usernames and passwords for Mailman and other webapps nor does Mailman itself have to worry about authenticating users properly. Basically, we need to modify Mailman such that list admins are confronted with the CAS login page rather than the normal Mailman login page that asks for the list administrator password. Mailman needs to check if the admin's logged in through CAS and if not, forward them to the login page. (This is Python code that we already have written.) If the admin's logged in, then Mailman needs to allow the admin access. We also then need to change the logout so that the admin is logged out of both Mailman and CAS (which is done by simply forwarding to a URL). What I'm having trouble with is figuring out where to stick this code! I've been looking through Mailman for a while, but the structure of the program isn't readily apparent to me. I would appreciate any pointers, advice, or war stories about how to get something like this working. For now, we aren't worrying about the subscriber side of login until there's the capability of single user sign-on. In fact, we're planning on completely removing this feature from production. However, we may work on it, time permitting, and contribute to the project, since this sort of feature is on the todo list. So in case my question was lost in all of that text, it basically is: where to start? What files probably need to be modified to handle this? Thank you. I appreciate any help that I can get. -- Michael Guo Email: michael.guo(a)yale.edu URL: http://michaelguo.com AIM: goorulz

1 0

Re: [Mailman-Developers] MySQL Support? Do tell!
by Charlie Clark July 3, 2003

July 3, 2003

On 2003-07-03 at 18:02:33 [+0200], mailman-developers-request(a)python.org wrote: > Barry, you mentioned that Mailman can work with MySQL, just not "out of > the box." Can you expound on this? Or can anyone else? I'm about to do > a lot of R&D in this area and would like to tap into what other people > know so far. > > Are we talking about data synching here, or is there a way to get Mailman > to use MySQL to store its list config and membership data > *instead* of these #&%^@! pickle files? > > If someone can paint me a picture I'd greatly appreciate it. > > Mailman + MySQL = :-) Barry's explanation is pretty good but I think the integration with an ACID RDBMS is a little trickier than with BerkeleyDB and I think MySQL would not be a good choice for this. We have recently done our own RDBMS integration for a client and there are lots of pitfalls along the way, as Barry has hinted. Charlie

2 1

MySQL Support? Do tell!
by Kevin McCann July 3, 2003

July 3, 2003

Barry, you mentioned that Mailman can work with MySQL, just not "out of the box." Can you expound on this? Or can anyone else? I'm about to do a lot of R&D in this area and would like to tap into what other people know so far. Are we talking about data synching here, or is there a way to get Mailman to use MySQL to store its list config and membership data *instead* of these #&%^@! pickle files? If someone can paint me a picture I'd greatly appreciate it. Mailman + MySQL = :-) Best, Kevin

2 1

Re: [Mailman-Developers] How hard would it be...
by Roger Lynn July 3, 2003

July 3, 2003

On Wed 25 Jun 2003 at 23:21, Marty Galyean wrote: > To put a button next to each message in the archives (labeled 'get'?) > that when clicked causes MM to send that message to the logged in > archive user as an email just as if it had been sent to them in > non-digest mode? > > This would be a good way for people who have 'no-mail' or 'digest' set > to reply occasionally to specific posts. And also to reply to a message > the user has already deleted locally. It would be really nice if this could also somehow work to enable non-subscribers browsing the archives to reply to specific posts (as I am doing now). I've no idea how this could be done though. The mailto: link in the archived messages includes a message-id, which I assume is to enable threading to work properly when that message is replied to. Unfortunately it contains the message-id of the previous message, ie the one the message being read is in reply to, so this can't work. It appears to be intended to be used as the In-Reply-To header for the new message, which would be incorrect, unless I have misunderstood the reason for it being there (which is quite likely). Roger

2 1

Mailman Developers in Thailand??
by John Kromodimedjo July 3, 2003

July 3, 2003

Hi all, Does anyone out there know somebody in Thailand that is developing in Mailman? Is it possible to use MySQL as Mailman main database? Thanks a million. John _________________________ John Kromodimedjo ICT Programme Officer Health and Development Networks Chiang Mai, Thailand

2 1