[Mailman-Users] Passwords of members

[Jon Carnes]

In this version of Mailman the admin password for the list is encrypted,
well sort of... If you want to be clever and look at the source you can
easily figure this part out.

In any case, I've seen this problem before after an upgrade and it seems
to be that the encryption has changed.  Normally resetting the password
via the web-admin works.  I don't know why it's not working in your case
- unless you upgraded python and didn't re-install Mailman.

You might want to use dumpdb to look at the encrypted password, then try
to change it via the web admin and use dumpdb to see if it actually
changed.

Good Luck - Jon Carnes

On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> Now that we can see the plain-text passwords of members using dumpdb on the 
> config.db file, how can we see the specific list admin password for a given 
> list?  I could see plaintext passwords for the users, but for what looked like 
> the admin, I saw something very different than what the password is set to.
> 
> A (bogus) example of this:  Here are what looks like the admin lines from the 
> config.db dump:
> 
>  'owner': ['testlistadmin at cs.jhu.edu'],
>     'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
>     'passwords': {user1 at jhu.edu': 'sdjlkl',
>                      'user2 at jhu.edu': 'nasdat',
>                      'user3 at jhu.edu': 'kljlkd',
>                      'user4 at jhu.edu': 'jsdafk',
> },
> 
> So, the user passwords are pretty clear, but the owner's password is not listed 
> in plain text as to what the password is.
> 
> How do we get that password?  If I had that info, I could check to see why we 
> are able to log into our mm site with the site-wide password or the user 
> (subscriber) passwords, but *not* the list admin's password.  (for mm 2.0.13)
> 
> Thanks!
> 
> Steve
> steve410 at cs.jhu.edu
> 
> 
> 
> > ------------------------------
> > 
> > Date: 13 Dec 2002 16:58:52 -0500
> > From: Jon Carnes <jonc at nc.rr.com>
> > To: Gary Smith <gary8smith at hotmail.com>
> > Cc: Mailman users Mailing list <mailman-users at python.org>
> > 
> > The archives have a script for this (for versions 2.0.x), and you can
> > easily modify the script found here to do it (you will have to be system
> > admin):
> > 
> > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > 
> > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > Hi.
> >  
> > How do I find out the passwords of subscribers with out clicking on the
> > 'send me my password button'?
> >  
> > Thanks,
> >  
> > Gary Smith
> 
> 
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> 
> This message was sent to: jonc at nc.rr.com
> Unsubscribe or change your options at
> http://mail.python.org/mailman/options/mailman-users/jonc%40nc.rr.com