Fw: Bug in Mailman version 1.1 - problem with cookies? Round 2

i never got a response to this. can someone help me out?
thanks
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
----- Original Message ----- From: <blurr@txraves.org> To: "Mailman-users" <mailman-users@python.org> Sent: Thursday, December 16, 1999 10:35 AM Subject: Bug in Mailman version 1.1 - problem with cookies?
just like to say i've been running mailman for a good while now and i've turned into a total list whore! =P
heres a recent problem i've run into that i'm thinking has to do with cookies. it breaks on my machine(internet exploder & nutscrape) but works fine on another machine.
Bug in Mailman version 1.1
We're sorry, we hit a bug!
If you would like to help us identify the problem, please email a copy of this page to the webmaster for this site with a description of what happened. Thanks!
Traceback: Traceback (innermost last): File "/home/mailman/scripts/driver", line 112, in run_main main() File "/home/mailman/Mailman/Cgi/admin.py", line 103, in main is_auth = lst.WebAuthenticate(password=adminpw, File "/home/mailman/Mailman/SecurityManager.py", line 83, in WebAuthenticate return self.CheckCookie(cookie_key) File "/home/mailman/Mailman/SecurityManager.py", line 117, in CheckCookie if cookiedata[keylen+1] <> '"' and cookiedata[-1] <> '"': IndexError: string index out of range
any ideas?
thanks!
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -

blurr@txraves.org wrote:
i never got a response to this. can someone help me out?
What would you like us to do? Yes, it looks like a bug. Have you tried either examining the cookie or deleting it?... since the error message pretty clearly points to the file of code, and the code is pretty clearly examining the cookie data itself and finding something wrong....
You might add something like
if len(cookiedata) < len(key): return 0
before
if cookiedata[keylen+1] <> '"' and cookiedata[-1]....
in SecurityManager.py.
I haven't tested the fix, because I don't know if that's what's going wrong.
thanks
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
----- Original Message ----- From: <blurr@txraves.org> To: "Mailman-users" <mailman-users@python.org> Sent: Thursday, December 16, 1999 10:35 AM Subject: Bug in Mailman version 1.1 - problem with cookies?
just like to say i've been running mailman for a good while now and i've turned into a total list whore! =P
heres a recent problem i've run into that i'm thinking has to do with cookies. it breaks on my machine(internet exploder & nutscrape) but works fine on another machine.
Bug in Mailman version 1.1
We're sorry, we hit a bug!
If you would like to help us identify the problem, please email a copy of this page to the webmaster for this site with a description of what happened. Thanks!
Traceback: Traceback (innermost last): File "/home/mailman/scripts/driver", line 112, in run_main main() File "/home/mailman/Mailman/Cgi/admin.py", line 103, in main is_auth = lst.WebAuthenticate(password=adminpw, File "/home/mailman/Mailman/SecurityManager.py", line 83, in WebAuthenticate return self.CheckCookie(cookie_key) File "/home/mailman/Mailman/SecurityManager.py", line 117, in CheckCookie if cookiedata[keylen+1] <> '"' and cookiedata[-1] <> '"': IndexError: string index out of range
any ideas?
thanks!
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
Mailman-Users maillist - Mailman-Users@python.org http://www.python.org/mailman/listinfo/mailman-users

What would you like us to do? Yes, it looks like a bug. Have you tried either examining the cookie or deleting it?...
a. to know if any other users have had similar problems/error messages b. if so, have they discovered anything new that sheds some light on the situation and what they did to fix it, if they did fix it. c. if not, are the developers aware of the problem
You might add something like
i'm not familiar with python. :]
just a squirrel tryin to get a nut...
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
----- Original Message ----- From: "Dan Mick" <dan.mick@West.Sun.COM> To: <blurr@txraves.org> Cc: "Mailman-users" <mailman-users@python.org> Sent: Tuesday, December 21, 1999 11:59 AM Subject: Re: [Mailman-Users] Fw: Bug in Mailman version 1.1 - problem with cookies? Round 2
blurr@txraves.org wrote:
i never got a response to this. can someone help me out?
What would you like us to do? Yes, it looks like a bug. Have you tried either examining the cookie or deleting it?... since the error message pretty clearly points to the file of code, and the code is pretty clearly examining the cookie data itself and finding something wrong....
You might add something like
if len(cookiedata) < len(key): return 0
before
if cookiedata[keylen+1] <> '"' and cookiedata[-1]....
in SecurityManager.py.
I haven't tested the fix, because I don't know if that's what's going wrong.
thanks
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
----- Original Message ----- From: <blurr@txraves.org> To: "Mailman-users" <mailman-users@python.org> Sent: Thursday, December 16, 1999 10:35 AM Subject: Bug in Mailman version 1.1 - problem with cookies?
just like to say i've been running mailman for a good while now and i've turned into a total list whore! =P
heres a recent problem i've run into that i'm thinking has to do with cookies. it breaks on my machine(internet exploder & nutscrape) but works fine on another machine.
Bug in Mailman version 1.1
We're sorry, we hit a bug!
If you would like to help us identify the problem, please email a copy of this page to the webmaster for this site with a description of what happened. Thanks!
Traceback: Traceback (innermost last): File "/home/mailman/scripts/driver", line 112, in run_main main() File "/home/mailman/Mailman/Cgi/admin.py", line 103, in main is_auth = lst.WebAuthenticate(password=adminpw, File "/home/mailman/Mailman/SecurityManager.py", line 83, in WebAuthenticate return self.CheckCookie(cookie_key) File "/home/mailman/Mailman/SecurityManager.py", line 117, in CheckCookie if cookiedata[keylen+1] <> '"' and cookiedata[-1] <> '"': IndexError: string index out of range
any ideas?
thanks!
-] jordan -] blurr@txraves.org -] http://www.txraves.org/~blurr
- [ s p r e a d t h a v i b e ] -
Mailman-Users maillist - Mailman-Users@python.org http://www.python.org/mailman/listinfo/mailman-users

OK. let me clarify myself.
it appears, that if mailman has not set a cookie, but a sitewide cookie exists in the browser, mailman will try to use the sitewide cookie, without checking if it is in fact the correct cookie (which at this point is not created).
so, instead of creating a new cookie, as it should, it is dying in the process of parsing the wrong cookie.
Hope this helps the developers.
Allen
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Allen Bolderoff <allen@gist.net.au> LNC - Redhat and Linux, help and commentary http://linux.netnerve.com CTPC - Caffeine - get it here: http://www.coffee-tea-pots-cups.com/ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ GPG fingerprint = CBB0 8626 702C 3D01 B5AD A54A DC2C 93B7 3E4B 6472 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Return-Path: <owner-mailman-users@python.org> Delivered-To: mailman-users@dinsdale.python.org Received: from python.org (parrot.python.org [132.151.1.90]) by dinsdale.python.org (Postfix) with ESMTP id A809B1CD21; Thu, 23 Dec 1999 21:50:36 -0500 (EST) Received: from ns1.gist.net.au (IDENT:root@main.gist.net.au [203.20.102.2]) by python.org (8.9.1a/8.9.1) with ESMTP id VAA21724; Thu, 23 Dec 1999 21:50:33 -0500 (EST) Received: from harper.gist.net.au (root@harper.gist.net.au [203.20.102.68]) by ns1.gist.net.au (8.8.7/8.8.7) with ESMTP id MAA03331; Fri, 24 Dec 1999 12:18:59 +1030 Received: from harper.gist.net.au (IDENT:allen@localhost [127.0.0.1]) by harper.gist.net.au (8.9.3/8.8.7) with ESMTP id NAA13571; Fri, 24 Dec 1999 13:21:14 +1030 Resent-Message-Id: <199912240251.NAA13571@harper.gist.net.au> Message-Id: <199912240251.NAA13571@harper.gist.net.au> X-Mailer: exmh version 2.1.0 To: blurr@txraves.org In-Reply-To: Your message of "Thu, 23 Dec 1999 11:10:01 MDT." <014701bf4d68$8e7011b0$ea17a8c0@jordan> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 24 Dec 1999 13:14:17 +1030 From: Allen Bolderoff <allen@gist.net.au> Resent-To: mailman-users@python.org Resent-Cc: mailman-developers@python.org Resent-Date: Fri, 24 Dec 1999 13:21:14 +1030 Resent-From: Allen Bolderoff <allen@gist.net.au> Resent-Sender: allen@harper.gist.net.au Subject: [Mailman-Users] UPDATE - problem with cookies? Round 2 Sender: mailman-users-admin@python.org Errors-To: mailman-users-admin@python.org X-BeenThere: mailman-users@python.org X-Mailman-Version: 1.2 (experimental) Precedence: bulk List-Id: Mailman mailing list management users <mailman-users.python.org>
What would you like us to do? Yes, it looks like a bug. Have you tried either examining the cookie or deleting it?... since the error message pretty clearly points to the file of code, and the code is pretty clearly examining the cookie data itself and finding something wrong....
You might add something like
if len(cookiedata) < len(key): return 0
before
if cookiedata[keylen+1] <> '"' and cookiedata[-1]....
in SecurityManager.py.
I haven't tested the fix, because I don't know if that's what's going wrong.
This does not work, however, what I can tell you is that if there is another cookie set by the webserver, it appears to confuse mailman.
Mailman then tries to use the other cookie.
ie - I use roxen - http://www.roxen.com
roxen sets a unique cookie for every user that comes to the site.
when I turn on the debug messages by removing the commented debug code, and access a bad page, I get the cookie, which is called RoxenUserID showing in the debug file, not the one we would expect.
In fact, this seems to happen when the cookie does not exist (the authentication cookie that mailman makesm that is)
Hope this helps
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Allen Bolderoff <allen@gist.net.au> LNC - Redhat and Linux, help and commentary http://linux.netnerve.com CTPC - Caffeine - get it here: http://www.coffee-tea-pots-cups.com/ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ GPG fingerprint = CBB0 8626 702C 3D01 B5AD A54A DC2C 93B7 3E4B 6472 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
participants (3)
-
Allen Bolderoff
-
blurr@txraves.org
-
Dan Mick