
I just installed Mailman 2.1.9-4 on my Linux mail server and configured it according to the online guide straight from the Mailman site. It appears to be working fine and I get hit the main page via Apache and see the only pubic list available called 'Mailman'. Now I selected the 'Admin Overview Page' and it takes me straight to the 'Admin' page with out any credentials for password or anything. Is this normal Mailman behavior? Should anyone be able to simply hit my Mailman public page and walk right into the 'Admin' page with put any credentials?
Secondly - since I am in the 'Admin' page, I then attempt to select the link that says "create a new mailing list" which takes me to a new page for adding all the criteria for the new list I would like to generate. At the very bottom, it has a blank field box for "List creator's (authentication) password:" and I simply have no idea what that is. If I leave it blank or type in the password for the only Mailman list I have called "Mailman", I get an error when creating the new list that says: "Error: You are not authorized to create new mailing lists"
Can someone please tell me what I did wrong?
Thanks so much!
-Carlos

Regarding point 2.
Open the Command line interface,
Cd $prefix/mailman bin/mmsitepass <new passwd>
Now try again to create new mailing lists with this passwd.
-----Original Message----- From: mailman-users-bounces+krishnadas=marfic.com@python.org [mailto:mailman-users-bounces+krishnadas=marfic.com@python.org] On Behalf Of Carlos Williams Sent: Wednesday, October 21, 2009 6:18 AM To: mailman-users@python.org Subject: [Mailman-Users] Unable To Create Mailman Lists
I just installed Mailman 2.1.9-4 on my Linux mail server and configured it according to the online guide straight from the Mailman site. It appears to be working fine and I get hit the main page via Apache and see the only pubic list available called 'Mailman'. Now I selected the 'Admin Overview Page' and it takes me straight to the 'Admin' page with out any credentials for password or anything. Is this normal Mailman behavior? Should anyone be able to simply hit my Mailman public page and walk right into the 'Admin' page with put any credentials?
Secondly - since I am in the 'Admin' page, I then attempt to select the link that says "create a new mailing list" which takes me to a new page for adding all the criteria for the new list I would like to generate. At the very bottom, it has a blank field box for "List creator's (authentication) password:" and I simply have no idea what that is. If I leave it blank or type in the password for the only Mailman list I have called "Mailman", I get an error when creating the new list that says: "Error: You are not authorized to create new mailing lists"
Can someone please tell me what I did wrong?
Thanks so much!
-Carlos
Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/krishnadas%40marfic.com

On Wed, 21 Oct 2009, Carlos Williams wrote:
Yes. You can't do anything there without a password of some sort, but hte password required will depend on which list you want to edit.
You need to create a site password. http://list.org/./mailman-install/node6.html
Geoff.

Carlos Williams wrote:
I don't understand. Are you saying you go to http://www.example.com/mailman/admin/ and you wind up at http://www.example.com/mailman/admin/mailman/? If so, this is something in your Apache config.
Or, are you saying you can go directly to the admin interface at http://www.example.com/mailman/admin/mailman/ without going through the login page. If this is the issue, there are two possible causes. Either you previously logged in in this browser session and still have the login cookie, or you set a null site admin password with bin/mmsitepass (accepting a null password is a bug fixed in MM 2.1.13 to be released soon)
Secondly - since I am in the 'Admin' page, I then attempt to select the link that says "create a new mailing list"
This is on the admin overview page, not the list admin page. The overview page does not require authentication. If that's the issue above, it's not a problem.
You need to use either the 'site' password or the special list creator password. See bin/mmsitepass --help.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Regarding point 2.
Open the Command line interface,
Cd $prefix/mailman bin/mmsitepass <new passwd>
Now try again to create new mailing lists with this passwd.
-----Original Message----- From: mailman-users-bounces+krishnadas=marfic.com@python.org [mailto:mailman-users-bounces+krishnadas=marfic.com@python.org] On Behalf Of Carlos Williams Sent: Wednesday, October 21, 2009 6:18 AM To: mailman-users@python.org Subject: [Mailman-Users] Unable To Create Mailman Lists
I just installed Mailman 2.1.9-4 on my Linux mail server and configured it according to the online guide straight from the Mailman site. It appears to be working fine and I get hit the main page via Apache and see the only pubic list available called 'Mailman'. Now I selected the 'Admin Overview Page' and it takes me straight to the 'Admin' page with out any credentials for password or anything. Is this normal Mailman behavior? Should anyone be able to simply hit my Mailman public page and walk right into the 'Admin' page with put any credentials?
Secondly - since I am in the 'Admin' page, I then attempt to select the link that says "create a new mailing list" which takes me to a new page for adding all the criteria for the new list I would like to generate. At the very bottom, it has a blank field box for "List creator's (authentication) password:" and I simply have no idea what that is. If I leave it blank or type in the password for the only Mailman list I have called "Mailman", I get an error when creating the new list that says: "Error: You are not authorized to create new mailing lists"
Can someone please tell me what I did wrong?
Thanks so much!
-Carlos
Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/krishnadas%40marfic.com

On Wed, 21 Oct 2009, Carlos Williams wrote:
Yes. You can't do anything there without a password of some sort, but hte password required will depend on which list you want to edit.
You need to create a site password. http://list.org/./mailman-install/node6.html
Geoff.

Carlos Williams wrote:
I don't understand. Are you saying you go to http://www.example.com/mailman/admin/ and you wind up at http://www.example.com/mailman/admin/mailman/? If so, this is something in your Apache config.
Or, are you saying you can go directly to the admin interface at http://www.example.com/mailman/admin/mailman/ without going through the login page. If this is the issue, there are two possible causes. Either you previously logged in in this browser session and still have the login cookie, or you set a null site admin password with bin/mmsitepass (accepting a null password is a bug fixed in MM 2.1.13 to be released soon)
Secondly - since I am in the 'Admin' page, I then attempt to select the link that says "create a new mailing list"
This is on the admin overview page, not the list admin page. The overview page does not require authentication. If that's the issue above, it's not a problem.
You need to use either the 'site' password or the special list creator password. See bin/mmsitepass --help.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (4)
-
Carlos Williams
-
Geoff Shang
-
Krishnadas Kossery
-
Mark Sapiro