[Mailman-Users] Re: Retrieving moderator password

[Leonardo Rochael Almeida]

>From what you describe below, they obviously have a customized mailman
configuration, but that doesn't change the fact that they might still be
pulling your leg and giving you and him the same password :-)

In any event, there isn't much we can do to help you here. If they have
user/pass login for list administrator, then you have to check with them
what is the procedure for lost passwords because it is no longer a plain
Mailman.

As for not being able to unsubscribe subscribed adresses, it probably
means your password is not the LIST password, but some customized system.
It certainly is not the site password as that would open all other lists
for you.

All in all, we would love to know what modifications your mailing list
providers did to their instalation.

Regards, Leo.

On Thu, 21 Sep 2000, Thomas Gramstad wrote:

> > Hi,
> > 
> > On Thu, 21 Sep 2000, Thomas Gramstad wrote:
> > 
> >> The procedure for creating a new list here is that when I create a
> >> list I send a message to the computer staff and ask them to create
> >> the new list.  They create it, and I get a message from Mailman that
> >> I'm the list-owner and that I already have an admin password for
> >> Mailman and this admin-password is the same for all my lists.
> 
> > If the message you receive is something in the lines:
> > "The mailing list `listname' has just been created for you. (...snip...)
> > Your mailing list password is the same as the one in your other mailing
> > lists." then either it was not Mailman who sent you the message or it was
> > a very hacked up version of Mailman and we would really apreciate if you
> > could convince your computer staff to send us the changes.
> > 
> > On the other hand if the message looks like:
> > "The mailing list `listname' has just been created for you. (...snip...) 
> > Your mailing list password is:
> > 
> >     xxxx
> > "
> > where xxxx is the same password you have for other lists, then
> > you need to smack your computer staff up in the head for using the same
> > password when creating all the lists (or at least all the lists they
> > create for you), because (and let me speak this really slow): "Each
> > list has only one password" (at least on the Mailman that can be found on
> > http://www.list.org).
> 
> Here is a sample message.
> 
> ---
> 
> 12-Sep-2000  5:57:14-GMT,2180;000000000001
> Return-path: <mailman-owner at lister.uio.no>
> Envelope-to: thomas at ifi.uio.no
> Delivery-date: Tue, 12 Sep 2000 06:57:14 +0200
> Received: from lister.uio.no ([129.240.200.57])
> 	by pat.uio.no with esmtp (Exim 2.12 #7)
> 	id 13Yi8A-0005H8-00
> 	for thomas at ifi.uio.no; Tue, 12 Sep 2000 06:57:14 +0200
> Subject: Granted admin rights for mailing list aynarchism at ifi.uio.no
> From: mailman-owner at lister.uio.no
> To: thomas at ifi.uio.no
> Sender: aynarchism-owner at ifi.uio.no
> Errors-To: aynarchism-owner at ifi.uio.no
> X-BeenThere: aynarchism at ifi.uio.no
> X-Mailman-Version: 1.2 (experimental)
> Precedence: bulk
> List-Id:  <aynarchism.ifi.uio.no>
> Message-Id: <E13Yi8A-0005H8-00 at pat.uio.no>
> Date: Tue, 12 Sep 2000 06:57:14 +0200
> 
> You, thomas at ifi.uio.no, have been granted administrative privileges
> for the mailing list `aynarchism at ifi.uio.no'.
> 
> The address thomas at ifi.uio.no has been registered as list admin for
> other lists before -- and thus that mail address already has an admin
> password associated with it.  That same password should also be used
> when administrating this new list, `aynarchism at ifi.uio.no'.
> 
> Some basic information about the mailing list for which you now have
> admin privileges follows:
> 
> The mailing list can be configured at the following web page:
> 
>     http://ifi-lists.uio.no/mailman/admin/aynarchism@ifi.uio.no
> 
> The web page for users of your mailing list is: 
> 
>     http://ifi-lists.uio.no/mailman/listinfo/aynarchism@ifi.uio.no
> 
> You can even customize these web pages from the list configuration
> page.  However, you do need to know HTML to be able to do this.
> 
> There is also an email-based interface for users (not administrators)
> of your list; you can get info about using it by sending a message
> with just the word `help' as subject or in the body, to:
> 
>     aynarchism-request at ifi.uio.no
> 
> To unsubscribe a user: from the mailing list 'listinfo' web page,
> click on or enter the user's email address as if you were that user.
> Where that user would put in their password to unsubscribe, put in
> your admin password.  You can also use your password to change
> member's options, including digestification, delivery disabling, etc.
> 
> Please address all questions to <mailman-owner at lister.uio.no>.
> 
> ---
> 
> Would that be alternative A?
> 
> >>> [...] I know about 2 list-admin passwords for the 600-odd
> >>> lists I have on my server, but I control them all through the
> >>> site pass.
>  
> >> So the site password has two functions: it allows you to create
> >> or change list passwords, and it can also be used itself as a
> >> list password on any list?
> 
> > No. The site password has only one function. To work everywhere
> > a password is needed as if it was the intended password.
> 
> OK. So since my password cannot be used to unsubscribe a subscriber
> via Mailman's e-mail interface, then my password is not the site
> password?
> 
> > Specifically:
> > 1. at the "list Administrative Authentication" page (where it asks only
> > for a password, not a user/pass combo,
> 
> If this is the page where I log in (the page before the General options
> page and with links to membership management, privacy etc. on top), then
> it does require a user/pass combo.  I've never seen a Mailman web page
> that requires only the password and not the username/address too.
> 
> > so multiple passwords would make for a very weak authentication
> > scheme, not that the one already in place is particularly
> > strong...), and in the "Enter current password:" field at the
> > "To Change The Administrator Password" form at the botton of the
> > "General Options" page.
> 
> OK, I'll try this.
> 
> Thomas Gramstad
> thomas at ifi.uio.no
> 
> [...]