[Mailman-Users] question about private archives.

[Richard Barrett]

At 10:48 30/08/2002 +0200, Fabien COMBERNOUS wrote:
>Lo,
>
>I had installed mailman 2.0.9 with sources. All work fine. My archives
>are generated. But we have a read acces to my private archives without any
>passwd. Is it Normal ?
>
>Fabien.
>
>--

What is the URL by which the private archives concerned is being accessed?

Normally, private archives should have a URL path which starts 
'/mailman/private/<listname>/'. This URL goes via a MM script in 
$prefix/Mailman/Cgi/private.py which should enforce privacy and require a 
password to gain access. There should NOT be a symbolic link 
$prefix/archives/public/<listname> pointing at 
$prefix/archives/private/<listname>.

By contrast public archives should have a URL path which starts 
'/pipermail/<listname>'. This should be served direct by your web server 
without any authentication by Mailman itself. There should be a symbolic 
link $prefix/archives/public/<listname> pointing at 
$prefix/archives/private/<listname>.

Tell us which URL you are using. Also, what have you added in the way of 
Alias, Exec and/or ScriptAlias directives to you Apache server's httpd.conf 
to provide access to Mailman stuff.