Help with MAILMAN list password
Hi,
I use mailman to administrate my email lists
I need absolutely change the Admin Lists password
I used the command: change_pw in my /bin Mailman directory, all was OK, I can use my new password for all the lists but
My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
Mauricio
Mauricio Juarez wrote:
I need absolutely change the Admin Lists password
I used the command: change_pw in my /bin Mailman directory, all was OK, I can use my new password for all the lists but
My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
I suspect you changed the password and then logged in with the new password and then tried the old password, but you already had the cookie from the successful login so the old password appeared to work.
Try the old password in a brand new browser session.
The other possibility is that the old password is the site password set by bin/mmsitepass. Did you change that too?
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Mauricio Juarez writes:
Hi,
I use mailman to administrate my email lists
I need absolutely change the Admin Lists password
I used the command: change_pw in my /bin Mailman directory, all was OK, I can use my new password for all the lists but
My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
There are three levels of password:
moderator: May approve or reject posts. Cannot access list config. list admin: May access and change list config, and moderate. site admin: May create and remove lists, change config, and moderate.
change_pw only affects the site admin password. To change list admin and moderator passwords, you must operate on each list. In the web interface, there is a Passwords section of the interface where you can change those.
If you have a lot of lists, you may want to use a script. See http://wiki.list.org/pages/viewpage.action?pageId=6914096.
On 7/21/2010 11:21 AM, Mauricio Juarez wrote:
- I use mailman to administrate my email lists
- I need absolutely change the Admin Lists password
- I used the command: change_pw in my /bin Mailman directory, all was My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
Mauricio, the confusion may come from the fact that there might be as many as three "passwords" involved here:
The password for the entire Mailman site installation (which you may not even have if you didn't install Mailman yourself; this is set with the mmsitepass command line program)
The password for the list itself (which is set when the list is created or later with change_pw as you wrote)
The passwords for the list owners if they're subscribed to the list.
The confusion arises, I think, because Mailman actually accepts all of the above in terms of logging into the admin web interface for a list. So you might have changed one but not another, and it's still accepting the "old" password because of that.
If this doesn't help, do you remember the commands you used? (sanitize the password of course, i.e., don't post real passwords on this list)
I only ask because some of your terminology is a little bit ambiguous. For example:
"I use mailman to administrate my email lists" - how many lists are you talking about? How many did you run change_pw for (or did you use the --all option for all lists at once)? How many are exhibiting the confusing "accept old password" behavior?
You said your old password works too - where is it that it "works"; do you mean logging into the web admin interface for the list (and is this the case for one list or multiple lists)?
Similarly, when you said "I need absolutely change the Admin Lists password", what is it that you're trying to protect, the ability to log into the admin interface? (such as http://yourdomain.com/cgi-bin/mailman/admin/listname or http://yourdomain.com/mailman/admin/listname)
I can think of some Python code you could run at the command line to see which password is which, but how comfortable would you be with the Unix shell to run test Python code there?
hope this helps, Anthony
On 7/22/2010 8:11 PM, Anthony R. Thompson wrote:
On 7/21/2010 11:21 AM, Mauricio Juarez wrote:
- I use mailman to administrate my email lists
- I need absolutely change the Admin Lists password
- I used the command: change_pw in my /bin Mailman directory, all was My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
Mauricio, the confusion may come from the fact that there might be as many as three "passwords" involved here:
The password for the entire Mailman site installation (which you may not even have if you didn't install Mailman yourself; this is set with the mmsitepass command line program)
The password for the list itself (which is set when the list is created or later with change_pw as you wrote)
Stephen confused mmsitepass and change_pw in his reply. The above is correct.
- The passwords for the list owners if they're subscribed to the list.
The confusion arises, I think, because Mailman actually accepts all of the above in terms of logging into the admin web interface for a list.
No. Mailman will not accept the owner's list member password (if different from the list admin and site admin passwords) for logging in to the admin web interface.
Also, as Stephen notes there is also a list moderator password which allows access to the list's admindb page but not the admin pages. There is no command line too so set the moderator password. it is set/changed via the list's admin Passwords page.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Thank you for your help but:
- I changed the password fot the entire Mailman site with mmsitepass
- I changed again all lists admin password with change_pw command line, I receive the new password by email without problem
- I changed in each list Admin Website the moderator and admin password, in http:/mydomain/mailman/admin/LISTNAME and the Password option, only mailman list i can not (* see explication above)
Now I can used the new password, but the old password work too :(, I tried different browsers
_*EXPLICATION mailman list- I want to know sometime: _ I can not make changes in my MAILMAN LIST http://mydomain/mailman/admin/mailman
mydomain = mail.example.com
And the Mailman list is configure with example.com in the host
configuration, so I can go in
http://mail.example.com/mailman/admin/mailman if I write the correct
dmain, but I can not save a change, because the page
http://example.com/mailman/admin/mailman doesnt exist, so I thing my
problem of password is linked with that because is the only password
list taht I can not change in the site. Do you know how I can change
the host example.com by mail.example.com in a command line? I can not
change in the admin mailman website, because I can not save
So if I change the linked host example.com by mail.example.com in th mailman list, maybe I can try to change the password in this list too and my problem with the old password it is going to disappear
txs for your help
Le 2010-07-22 23:35, Mark Sapiro a écrit :
On 7/22/2010 8:11 PM, Anthony R. Thompson wrote:
On 7/21/2010 11:21 AM, Mauricio Juarez wrote:
- I use mailman to administrate my email lists
- I need absolutely change the Admin Lists password
- I used the command: change_pw in my /bin Mailman directory, all was My old password work too, do you know why? I change the root password too ( the same) but doesnt work, now the old password and the new one worked Help plz
Mauricio, the confusion may come from the fact that there might be as many as three "passwords" involved here:
The password for the entire Mailman site installation (which you may not even have if you didn't install Mailman yourself; this is set with the mmsitepass command line program)
The password for the list itself (which is set when the list is created or later with change_pw as you wrote)
Stephen confused mmsitepass and change_pw in his reply. The above is correct.
- The passwords for the list owners if they're subscribed to the list.
The confusion arises, I think, because Mailman actually accepts all of the above in terms of logging into the admin web interface for a list.
No. Mailman will not accept the owner's list member password (if different from the list admin and site admin passwords) for logging in to the admin web interface.
Also, as Stephen notes there is also a list moderator password which allows access to the list's admindb page but not the admin pages. There is no command line too so set the moderator password. it is set/changed via the list's admin Passwords page.
Mauricio Juarez wrote:
Thank you for your help but:
- I changed the password fot the entire Mailman site with mmsitepass
- I changed again all lists admin password with change_pw command line, I receive the new password by email without problem
- I changed in each list Admin Website the moderator and admin password, in http:/mydomain/mailman/admin/LISTNAME and the Password option, only mailman list i can not (* see explication above)
It is not necessary to change the admin password via the web site as it should have already been changed via change_pw.
Now I can used the new password, but the old password work too :(, I tried different browsers
Have you tried starting a new browser session and logging in with the old password without first logging in with the new password?
_*EXPLICATION mailman list- I want to know sometime: _ I can not make changes in my MAILMAN LIST http://mydomain/mailman/admin/mailman
mydomain = mail.example.com
And the Mailman list is configure with example.com in the host configuration, so I can go in
http://mail.example.com/mailman/admin/mailman if I write the correct dmain, but I can not save a change, because the page http://example.com/mailman/admin/mailman doesnt exist, so I thing my problem of password is linked with that because is the only password list taht I can not change in the site. Do you know how I can change the host example.com by mail.example.com in a command line? I can not change in the admin mailman website, because I can not save
bin/withlist -l -r fix_url mailman -u mail.example.com
So if I change the linked host example.com by mail.example.com in th mailman list, maybe I can try to change the password in this list too and my problem with the old password it is going to disappear
No. This at most will only affect the 'mailman' list, not any other list, but if you changed the 'mailman' list password with change_pw, it is already changed.
Exactly what Mailman version is this?
Note that prior to Mailman 2.1.13, you could set an empty site or list password and that would allow logging in without a password. This is fixed in Mailman 2.1.13.
Also note that in any Mailman 2.1.x version, only two passwords can be successfully used to access a list's admin interface. These are the site password set by bin/mmsitepass and the list admin password set by bin/change_py or via the web list admin Passwords page. You can disable the site password by removing Mailman's data/adm.pw file and then only the single list admin password should work.
If this is not happening in your case, I can't explain why without more information, but as I said, in any case, there should be at most 2 passwords that will work for accessing a list's web admin interface, the site password and the list's admin password. Neither of these can have multiple values.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
On 7/26/2010 11:19 AM, Mauricio Juarez wrote:
Thank you for your help but: password, in http:/mydomain/mailman/admin/LISTNAME and the Password
- I changed the password fot the entire Mailman site with mmsitepass
- I changed again all lists admin password with change_pw command line, I receive the new password by email without problem
- I changed in each list Admin Website the moderator and admin
option, only mailman list i can not (* see explication above)
Mauricio, I wrote a script to test a given password to see if it matches the site admin password, the list password for the given list, and the moderator password for the same list.
If you want to try it out, you can download it from http://blog.anthonyrthompson.com/listserv-to-mailman/code/utils/which_pw (you'll need to change its permissions of course: chmod +rx which_pw) The usage is: which_pw listname passwordtotest
(If your mailman files aren't in /usr/lib/mailman you'll need to modify the sys.path.append line in that file.)
I also modified a copy of change_pw to allow for changing the moderator password from the command line. If you want or need to do that, it's at http://blog.anthonyrthompson.com/listserv-to-mailman/code/utils/change_mod_p...
(same stuff about chmod and /usr/lib/mailman applies as with which_pw)
In addition to the stuff Mark wrote, I'd ask, did you install Mailman on the server or was it someone else?
I ask because it's possible that maybe the "mailman" list which you mentioned having problems with, is managed differently from other lists?
We have a managed server and after I set up all our "real" lists I went and deleted the "mailman" list thinking it was just a test/stub list. Good thing I mentioned doing that in passing to our server admin, who restored it and told me that it was an important special-purpose list.
Also, to find your Mailman version you can do bin/version (that's ultra-basic but I didn't know it until recently myself :)
Anyway, hope this helps, Anthony
participants (4)
-
Anthony R. Thompson -
Mark Sapiro -
Mauricio Juarez -
Stephen J. Turnbull