[Mailman-Users] Passwords of members

[Jon Carnes]

Well, now you *know* that the password is not being changed!  So
something fundamental is broken within your install.  It's not handling
encryption properly and any calls to cause encryption are failing.

Assuming that this is not a system-wide problem (that would be caused by
a library in your distribution), then I'm guessing that the problem lays
with a library or module of Python.

My suggestion to you is that you re-install Python, then re-install
Mailman.  Both are fairly easy to do.  The order is important - you
definitely want to re-install Mailman after installing Python.

If you install Python from an RPM or package management system, then
load the development packages of Python as well - to make sure you get
all the modules/libraries that Mailman uses.

Good Luck (and if you happen to hang that way: Merry Christmas!)

Jon Carnes 

======
On Mon, 2002-12-23 at 15:29, Steve Rifkin wrote:
> Hi Jon!
> 
> Well, I did what you said... I used dumpdb to look at the encrypted password for 
> a list.  Then I changed the list admin pw for th list (logged in as the site 
> admin), and did a dumpdb again.  I get the same encrypted password for the list 
> admin (and therefore, still cannot log in as the admin).
> 
> What else can I try?
> 
> Thanks!
> 
> Steve
> steve410 at cs.jhu.edu
> 
> > Subject: Re: [Mailman-Users] Passwords of members
> > From: Jon Carnes <jonc at nc.rr.com>
> > To: Steve Rifkin <steve410 at cs.jhu.edu>
> > Cc: Mailman users Mailing list <mailman-users at python.org>
> > Content-Transfer-Encoding: 7bit
> > Date: 14 Dec 2002 20:36:07 -0500
> > Mime-Version: 1.0
> > X-Keywords: 
> > 
> > In this version of Mailman the admin password for the list is encrypted,
> > well sort of... If you want to be clever and look at the source you can
> > easily figure this part out.
> > 
> > In any case, I've seen this problem before after an upgrade and it seems
> > to be that the encryption has changed.  Normally resetting the password
> > via the web-admin works.  I don't know why it's not working in your case
> > - unless you upgraded python and didn't re-install Mailman.
> > 
> > You might want to use dumpdb to look at the encrypted password, then try
> > to change it via the web admin and use dumpdb to see if it actually
> > changed.
> > 
> > Good Luck - Jon Carnes
> > 
> > On Sat, 2002-12-14 at 14:24, Steve Rifkin wrote:
> > > Now that we can see the plain-text passwords of members using dumpdb on the 
> > > config.db file, how can we see the specific list admin password for a given 
> > > list?  I could see plaintext passwords for the users, but for what looked 
> like 
> > > the admin, I saw something very different than what the password is set to.
> > > 
> > > A (bogus) example of this:  Here are what looks like the admin lines from 
> the 
> > > config.db dump:
> > > 
> > >  'owner': ['testlistadmin at cs.jhu.edu'],
> > >     'password': '=\x2b\x4abH\xgg3\x3n\x5e\x4e\xh_\xb6\xb2\x8n\xqp',
> > >     'passwords': {user1 at jhu.edu': 'sdjlkl',
> > >                      'user2 at jhu.edu': 'nasdat',
> > >                      'user3 at jhu.edu': 'kljlkd',
> > >                      'user4 at jhu.edu': 'jsdafk',
> > > },
> > > 
> > > So, the user passwords are pretty clear, but the owner's password is not 
> listed 
> > > in plain text as to what the password is.
> > > 
> > > How do we get that password?  If I had that info, I could check to see why 
> we 
> > > are able to log into our mm site with the site-wide password or the user 
> > > (subscriber) passwords, but *not* the list admin's password.  (for mm 
> 2.0.13)
> > > 
> > > Thanks!
> > > 
> > > Steve
> > > steve410 at cs.jhu.edu
> > > 
> > > 
> > > 
> > > > ------------------------------
> > > > 
> > > > Date: 13 Dec 2002 16:58:52 -0500
> > > > From: Jon Carnes <jonc at nc.rr.com>
> > > > To: Gary Smith <gary8smith at hotmail.com>
> > > > Cc: Mailman users Mailing list <mailman-users at python.org>
> > > > 
> > > > The archives have a script for this (for versions 2.0.x), and you can
> > > > easily modify the script found here to do it (you will have to be system
> > > > admin):
> > > > 
> > > > http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.007.htp
> > > > 
> > > > On Fri, 2002-12-13 at 12:25, Gary Smith wrote:
> > > > Hi.
> > > >  
> > > > How do I find out the passwords of subscribers with out clicking on the
> > > > 'send me my password button'?
> > > >  
> > > > Thanks,
> > > >  
> > > > Gary Smith
>