[Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread lkolchin
Hello All,
 
1) I'm implementing web-cyradm installation together with mailman-2.1.4-83.13 
on SLES 9.
As I understood from the documentation, there must be mailman list for 
mailman to work properly.
 
Web-cyradm implementing virtual domains with the use of MySQL tables, so my 
mailman list will look something like  haifa.ac.il-mailman where 
haifa.ac.il is one of the domains I have.
 
After creating this list, I restart mailman and get Starting mailmanSite list 
is missing: mailman error.
 
Is there any way to avoid this limitation?
 
2) When I go to http://myservername.com/mailman/listinfo with the browser,
I got this message:
 
Bug in Mailman version 2.1.4
We're sorry, we hit a bug!
If you would like to help us identify the problem, please email a copy of this 
page to the webmaster for this site with a description of what happened. 
Thanks! 
Traceback:
Content-type: text/html
We're sorry, we hit a bug!
Mailman experienced a very low level failure and could not even generate a
useful traceback for you.  Please report this to the Mailman administrator at
this site.
 
In my /etc/apache2/default-server.conf I configured it like this:
##
##
## mailman
##
ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
Directory /usr/lib/mailman/cgi-bin/
AllowOverride None
Options FollowSymLinks ExecCGI
Order allow,deny
Allow from all
/Directory
##
## end mailman
##
##
 
Are these config lines sufficient or my bug is from 1) question?
 
Best Regards,
Leon Kolchinsky
 

 





--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread Brad Knowles
At 11:46 AM +0300 2005-08-19, [EMAIL PROTECTED] wrote:

  As I understood from the documentation, there must be mailman list
  for mailman to work properly.

Correct.

  Web-cyradm implementing virtual domains with the use of MySQL tables, so
  my mailman list will look something like  haifa.ac.il-mailman where
  haifa.ac.il is one of the domains I have.

Neither web-cyradm nor the MySQL member adapter are supported 
parts of Mailman.  If you're having problems with them, you need to 
use resources appropriate to them.  You might get lucky and find 
someone else on this list who is also using them, but then again, you 
might not.

  2) When I go to http://myservername.com/mailman/listinfo with the browser,
  I got this message:

  Bug in Mailman version 2.1.4

Keep in mind that there is a serious known security hole in 
Mailman 2.1.x prior to 2.1.6.  You really should consider upgrading 
to the latest version.

  Are these config lines sufficient or my bug is from 1) question?

I'm sorry I can't provide any more assistance, but I'd have to 
say that there's probably some sort of disconnect between the MySQL 
member adapter and the MySQL database, perhaps caused by the use of 
web-cyradm.  But you should use resources appropriate to those 
products for further assistance.

-- 
Brad Knowles, [EMAIL PROTECTED]

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.

 -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
 Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See http://www.sage.org/ for more info.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread John Dennis
On Fri, 2005-08-19 at 11:46 +0300, [EMAIL PROTECTED] wrote:
 Hello All,
  
 1) I'm implementing web-cyradm installation together with mailman-2.1.4-83.13 
 on SLES 9.

Try to upgrade to mailman 2.1.6 for security reasons.

 As I understood from the documentation, there must be mailman list for 
 mailman to work properly.
  
 Web-cyradm implementing virtual domains with the use of MySQL tables, so my 
 mailman list will look something like  haifa.ac.il-mailman where 
 haifa.ac.il is one of the domains I have.
  
 After creating this list, I restart mailman and get Starting mailmanSite 
 list is missing: mailman error.
  
 Is there any way to avoid this limitation?

You need a site list, this does not have to be created via your
Web-cyradm tool set, it can be done at the time of mailman installation.

  
 2) When I go to http://myservername.com/mailman/listinfo with the browser,
 I got this message:
  
 Bug in Mailman version 2.1.4
 We're sorry, we hit a bug!
 If you would like to help us identify the problem, please email a copy of 
 this page to the webmaster for this site with a description of what happened. 
 Thanks! 
 Traceback:
 Content-type: text/html
 We're sorry, we hit a bug!
 Mailman experienced a very low level failure and could not even generate a
 useful traceback for you.  Please report this to the Mailman administrator at
 this site.

This is typically a result of python syntax errors introduced by editing
mm_cfg.py which is python code that gets executed. A typical reason is
not quoting strings. If you can't find the syntax error try running one
of the command line scripts in mailman/bin, the python interpreter will
probably print the offending file and line number, this is hidden when
using the web interface.

  
 In my /etc/apache2/default-server.conf I configured it like this:
 ##
 ##
 ## mailman
 ##
 ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
 Directory /usr/lib/mailman/cgi-bin/
 AllowOverride None
 Options FollowSymLinks ExecCGI
 Order allow,deny
 Allow from all
 /Directory
 ##
 ## end mailman
 ##
 ##
  
 Are these config lines sufficient or my bug is from 1) question?

Looks fine to me provided your path is correct. See above, you need the
site list, you probably have a syntax error in mm_cfg.py.

-- 
John Dennis [EMAIL PROTECTED]

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread Julian C. Dunn
On Fri, 2005-08-19 at 12:37 -0400, John Dennis wrote:
 On Fri, 2005-08-19 at 11:46 +0300, [EMAIL PROTECTED] wrote:
  Hello All,
   
  1) I'm implementing web-cyradm installation together with 
  mailman-2.1.4-83.13 on SLES 9.
 
 Try to upgrade to mailman 2.1.6 for security reasons.

As far as I know, Novell has backported all security fixes in 2.1.6 into
the SLES 9 2.1.4 Mailman. Please correct me if I'm wrong (and I hope I'm
not, because that's the Mailman we're planning on installing)

- Julian

-- 
-- Julian C. Dunn, B.A.Sc, P.Eng.  [EMAIL PROTECTED]
-- Platform Administrator, CBC.ca Production  Operations
-- Office: 2C310-Q  *  Tel.: (416) 205-3311 x5592

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread John Dennis
On Fri, 2005-08-19 at 12:47 -0400, Julian C. Dunn wrote:
 On Fri, 2005-08-19 at 12:37 -0400, John Dennis wrote:
  On Fri, 2005-08-19 at 11:46 +0300, [EMAIL PROTECTED] wrote:
   Hello All,

   1) I'm implementing web-cyradm installation together with 
   mailman-2.1.4-83.13 on SLES 9.
  
  Try to upgrade to mailman 2.1.6 for security reasons.
 
 As far as I know, Novell has backported all security fixes in 2.1.6 into
 the SLES 9 2.1.4 Mailman. Please correct me if I'm wrong (and I hope I'm
 not, because that's the Mailman we're planning on installing)
 

I don't track Novell's patches, but these are the two CVE's you want to
make sure are fixed, look to see if the release notes include them.

CAN-2005-0202
CAN-2004-1177

Of the two of them, CAN-2005-0202 is the most important.
-- 
John Dennis [EMAIL PROTECTED]

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp


Re: [Mailman-Users] how to avoid mailmanSite list creation

2005-08-19 Thread Julian C. Dunn
On Fri, 2005-08-19 at 12:56 -0400, John Dennis wrote:

  As far as I know, Novell has backported all security fixes in 2.1.6 into
  the SLES 9 2.1.4 Mailman. Please correct me if I'm wrong (and I hope I'm
  not, because that's the Mailman we're planning on installing)
  
 
 I don't track Novell's patches, but these are the two CVE's you want to
 make sure are fixed, look to see if the release notes include them.
 
 CAN-2005-0202
 CAN-2004-1177
 
 Of the two of them, CAN-2005-0202 is the most important.

Yep, they are (in the mailman-2.1.4-83.13 RPM):


* Thu Feb 10 2005 - [EMAIL PROTECTED]

- added mailman-2.1.5-dirtraversal.patch [bug #50563, CAN-2005-0202]

* Wed Jan 12 2005 - [EMAIL PROTECTED]

- added mailman-weak-password.diff [bug #49468, CAN-2004-1144]
- added mailman-CAN-2004-1177.patch [bug #49468, CAN-2004-1177]
- added mailman-2.1.4-avoid-headerfolding-python21.diff [bug #45355]


- Julian

-- 
-- Julian C. Dunn, B.A.Sc, P.Eng.  [EMAIL PROTECTED]
-- Platform Administrator, CBC.ca Production  Operations
-- Office: 2C310-Q  *  Tel.: (416) 205-3311 x5592

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp