[Mailman-Users] list passwords

[Mark Sapiro]

Ernest Byaruhanga 
>
>when i use ./mmsitepass -c, i create a new list creator password
>succesffully, and i can log into the list admin site with it. however,
>even the old list-creator password is still able to be used to log in to
>the list admin interface. is there somefile where these passwords are
>stored so i can delete them from there?

There are several passwords.

List Creator, set by mmsitepass -c, authorizes list creation only.
Shouldn't authorize list administration. Encrypted value stored in the
file mm_cfg.LISTCREATOR_PW_FILE which defaults to data/creator.pw

Site Password, set by mmsitepass (no -c option), authorizes any and
everything. Encrypted value stored in the file mm_cfg.SITE_PW_FILE
which defaults to data/adm.pw

List administrator. Set per list through list admin, bin/change_pw,
etc., authorizes administration of the one list that it is for.
Encrypted value stored with other list data in
lists/<listname>/config.pck

List moderator. Set per list through list admin, etc., authorizes
moderation only of the one list that it is for. Encrypted value stored
with other list data in lists/<listname>/config.pck

--
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan