[Mailman-Users] Passwords of members

[Steve Rifkin]

> My suggestion to you is that you re-install Python, then re-install
> Mailman.  Both are fairly easy to do.  The order is important - you
> definitely want to re-install Mailman after installing Python.

OK, reinstalled python.  Python works.  (v2.1)

Then, reinstalled mailman (v2.0.13).  Mailman still does *not* allow for admin 
logins... only site and user logins.  No errors logged!

All built from "scratch"... i.e. with ./configure   make   make install
on Solaris 2.6.

> Good Luck (and if you happen to hang that way: Merry Christmas!)

Have a great holiday.  Thanks!  :)

Oh, and if you have any other ideas on what to do (anybody reading), please let 
me know.  This is very frustrating.

I'd love to downgrade back to 2.08 without losing my 2.0.13 archive data.  
Anyone know how?   2.08 had worked fine before the 2.13 upgrade.  But, 2.08 
won't let me install it, because a higher version is already on.

Steve


> 
> Jon Carnes 
> 
> ======
> On Mon, 2002-12-23 at 15:29, Steve Rifkin wrote:
> > Hi Jon!
> > 
> > Well, I did what you said... I used dumpdb to look at the encrypted password 
for 
> > a list.  Then I changed the list admin pw for th list (logged in as the site 
> > admin), and did a dumpdb again.  I get the same encrypted password for the 
list 
> > admin (and therefore, still cannot log in as the admin).
> > 
> > What else can I try?
> > 
> > Thanks!
> > 
> > Steve
> > steve410 at cs.jhu.edu
> > 
> > > Subject: Re: [Mailman-Users] Passwords of members
> > > From: Jon Carnes <jonc at nc.rr.com>
> > > To: Steve Rifkin <steve410 at cs.jhu.edu>
> > > Cc: Mailman users Mailing list <mailman-users at python.org>
> > > Content-Transfer-Encoding: 7bit
> > > Date: 14 Dec 2002 20:36:07 -0500
> > > Mime-Version: 1.0
> > > X-Keywords: 
> > > 
> > > In this version of Mailman the admin password for the list is encrypted,
> > > well sort of... If you want to be clever and look at the source you can
> > > easily figure this part out.
> > > 
> > > In any case, I've seen this problem before after an upgrade and it seems
> > > to be that the encryption has changed.  Normally resetting the password
> > > via the web-admin works.  I don't know why it's not working in your case
> > > - unless you upgraded python and didn't re-install Mailman.
> > > 
> > > You might want to use dumpdb to look at the encrypted password, then try
> > > to change it via the web admin and use dumpdb to see if it actually
> > > changed.
> > > 
> > > Good Luck - Jon Carnes
> > > 
> > > On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > > > Now that we can see the plain-text passwords of members using dumpdb on 
the 
> > > > config.db file, how can we see the specific list admin password for a 
given 
> > > > list?  I could see plaintext passwords for the users, but for what 
looked 
> > like 
> > > > the admin, I saw something very different than what the password is set 
to.
> > > > 
> > > > A (bogus) example of this:  Here are what looks like the admin lines 
from 
> > the 
> > > > config.db dump:
> > > > 
> > > >  'owner': ['testlistadmin at cs.jhu.edu'],
> > > >     'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > > >     'passwords': {user1 at jhu.edu': 'sdjlkl',
> > > >                      'user2 at jhu.edu': 'nasdat',
> > > >                      'user3 at jhu.edu': 'kljlkd',
> > > >                      'user4 at jhu.edu': 'jsdafk',
> > > > },
> > > > 
> > > > So, the user passwords are pretty clear, but the owner's password is not 
> > listed 
> > > > in plain text as to what the password is.
> > > > 
> > > > How do we get that password?  If I had that info, I could check to see 
why 
> > we 
> > > > are able to log into our mm site with the site-wide password or the user 
> > > > (subscriber) passwords, but *not* the list admin's password.  (for mm 
> > 2.0.13)
> > > > 
> > > > Thanks!
> > > > 
> > > > Steve
> > > > steve410 at cs.jhu.edu
> > > > 
> > > > 
> > > > 
> > > > > ------------------------------
> > > > > 
> > > > > Date: 13 Dec 2002 16:58:52 -0500
> > > > > From: Jon Carnes <jonc at nc.rr.com>
> > > > > To: Gary Smith <gary8smith at hotmail.com>
> > > > > Cc: Mailman users Mailing list <mailman-users at python.org>
> > > > > 
> > > > > The archives have a script for this (for versions 2.0.x), and you can
> > > > > easily modify the script found here to do it (you will have to be 
system
> > > > > admin):
> > > > > 
> > > > > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > > > > 
> > > > > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > > > > Hi.
> > > > >  
> > > > > How do I find out the passwords of subscribers with out clicking on 
the
> > > > > 'send me my password button'?
> > > > >  
> > > > > Thanks,
> > > > >  
> > > > > Gary Smith
> > 
> 


Steve Rifkin - JHU CS Dept Sr. Unix Systems Administrator
               Technical Director
steve410 at cs.jhu.edu
410-516-6281