[Mailman-Users] Passwords of members

[Steve Rifkin]

Hi Jon!

Well, I did what you said... I used dumpdb to look at the encrypted password for 
a list.  Then I changed the list admin pw for th list (logged in as the site 
admin), and did a dumpdb again.  I get the same encrypted password for the list 
admin (and therefore, still cannot log in as the admin).

What else can I try?

Thanks!

Steve
steve410 at cs.jhu.edu

> Subject: Re: [Mailman-Users] Passwords of members
> From: Jon Carnes <jonc at nc.rr.com>
> To: Steve Rifkin <steve410 at cs.jhu.edu>
> Cc: Mailman users Mailing list <mailman-users at python.org>
> Content-Transfer-Encoding: 7bit
> Date: 14 Dec 2002 20:36:07 -0500
> Mime-Version: 1.0
> X-Keywords: 
> 
> In this version of Mailman the admin password for the list is encrypted,
> well sort of... If you want to be clever and look at the source you can
> easily figure this part out.
> 
> In any case, I've seen this problem before after an upgrade and it seems
> to be that the encryption has changed.  Normally resetting the password
> via the web-admin works.  I don't know why it's not working in your case
> - unless you upgraded python and didn't re-install Mailman.
> 
> You might want to use dumpdb to look at the encrypted password, then try
> to change it via the web admin and use dumpdb to see if it actually
> changed.
> 
> Good Luck - Jon Carnes
> 
> On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > Now that we can see the plain-text passwords of members using dumpdb on the 
> > config.db file, how can we see the specific list admin password for a given 
> > list?  I could see plaintext passwords for the users, but for what looked 
like 
> > the admin, I saw something very different than what the password is set to.
> > 
> > A (bogus) example of this:  Here are what looks like the admin lines from 
the 
> > config.db dump:
> > 
> >  'owner': ['testlistadmin at cs.jhu.edu'],
> >     'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> >     'passwords': {user1 at jhu.edu': 'sdjlkl',
> >                      'user2 at jhu.edu': 'nasdat',
> >                      'user3 at jhu.edu': 'kljlkd',
> >                      'user4 at jhu.edu': 'jsdafk',
> > },
> > 
> > So, the user passwords are pretty clear, but the owner's password is not 
listed 
> > in plain text as to what the password is.
> > 
> > How do we get that password?  If I had that info, I could check to see why 
we 
> > are able to log into our mm site with the site-wide password or the user 
> > (subscriber) passwords, but *not* the list admin's password.  (for mm 
2.0.13)
> > 
> > Thanks!
> > 
> > Steve
> > steve410 at cs.jhu.edu
> > 
> > 
> > 
> > > ------------------------------
> > > 
> > > Date: 13 Dec 2002 16:58:52 -0500
> > > From: Jon Carnes <jonc at nc.rr.com>
> > > To: Gary Smith <gary8smith at hotmail.com>
> > > Cc: Mailman users Mailing list <mailman-users at python.org>
> > > 
> > > The archives have a script for this (for versions 2.0.x), and you can
> > > easily modify the script found here to do it (you will have to be system
> > > admin):
> > > 
> > > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > > 
> > > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > > Hi.
> > >  
> > > How do I find out the passwords of subscribers with out clicking on the
> > > 'send me my password button'?
> > >  
> > > Thanks,
> > >  
> > > Gary Smith