Your message dated Sat, 15 Mar 2008 13:54:05 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Re: Bug#470876: Acknowledgement (Problem in Lost Password 
email)
has caused the Debian Bug report #470876,
regarding Problem in Lost Password email
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
470876: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=470876
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: python-moinmoin
Version: 1.5.3-1.2etch1
Severity: normal

A user has reported a problem with the "Lost Password" procedure in
DebianWiki. http://lists.debian.org/debian-www/2008/03/msg00136.html 

When a user wants to recover his lost password, (s)he goes to
http://wiki.debian.org/UserPreferences and asks for it's password by
email.

The email send looks like :
> Somebody has requested to submit your account data to this email
> address.
> 
> If you lost your password, please use the data below and just enter
> the
> password AS SHOWN into the wiki's password form field (use copy and
> paste
> for that).
> 
> After successfully logging in, it is of course a good idea to set a
> new and known password.
> 
> Login Name: FranklinPiat
> 
> Login Password: {SHA}000000000000000000000000000=
> 
> Login URL: http://wiki.debian.org/UserPreferences

The URL should actually read (depending on i18n) :
http://wiki.debian.org/UserPreferences?action=login

The problem could be reproduced on French and English versions.

Debian/Testing system isn't affected (moinmoin 1.5.8).
I've tried to locate the problem on my system (1.5.8) . It seems to lie
in /usr/share/python-support/python-moinmoin/MoinMoin/user.py :
python-moinmoin 1.5.3-1.2etch1
> text = '\n' + _("""\
> Login Name: %s
> 
> Login Password: %s
> 
> Login URL: %s/%s
> """, formatted=False) % (
>                         self.name, self.enc_password, 
> self._request.getBaseURL(), getSysPage(self._request, 
> 'UserPreferences').page_name)

python-moinmoin 1.5.8
>         text = '\n' + _("""\
> Login Name: %s
> 
> Login Password: %s
> 
> Login URL: %s/%s?action=login  
> """, formatted=False) % (
>                         self.name, self.enc_password,
> self._request.getBaseURL(), getSysPage(self._request,
> 'UserPreferences').page_name)

I guess the i18n pages should be updated too.

Franklin




--- End Message ---
--- Begin Message ---
Version 1.5.8
thanks

Franklin Piat wrote:
> Debian/Testing system isn't affected (moinmoin 1.5.8).

As I mentioned in the original bug, this bugs isn't affecting python-moinmoin 
1.5.8.
1.5.3-1.2etch1

Seems to have been fixed upstream in 1.5.4 "fix forgotten password email" :
http://hg.moinmo.in/moin/1.5/rev/50c7a0cc1791

Franklin



--- End Message ---

Reply via email to