Re: [Mailman-Users] Password reminders

2014-08-01 Thread Peter Brooks
Thank you, yes, I see, I should have researched further before asking.

On 2 August 2014 03:08, Ed Kaler  wrote:
>
> << On 8/1/2014 11:11 AM, Peter Brooks wrote:
>>
>> Does anybody know why mailman stores passwords in clear text?  ??
>
> Peter, just use the "Archives" link a bottom and search last month .
>
> Enough info to last you a month .
>
> Ed
> " Just Brits "
>
> --
> Mailman-Users mailing list Mailman-Users@python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe:
> https://mail.python.org/mailman/options/mailman-users/peter.brooks%40kchclinics.com
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Password reminders

2014-08-01 Thread Ed Kaler


<< On 8/1/2014 11:11 AM, Peter Brooks wrote:

Does anybody know why mailman stores passwords in clear text?  ??

Peter, just use the "Archives" link a bottom and search last month .

Enough info to last you a month .

Ed
" Just Brits "
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Password reminders

2014-08-01 Thread Carl Zwanzig

On 8/1/2014 9:11 AM, Peter Brooks wrote:


Does anybody know why mailman stores passwords in clear text?


Because it was easy?

http://wiki.list.org/display/DOC/Mailman+2.1+Members+Manual
6 Passwords
Do NOT use a valuable password for Mailman, since it can be sent in plain 
text to you.



Are there any plans to tighten the security up?

http://wiki.list.org/display/DEV/Mailman+3.0


Later,

z!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


[Mailman-Users] Password reminders

2014-08-01 Thread Peter Brooks
The installation of mailman that I'm using has the monthly sending of
password reminders as the default setting.

This led to some discussion with members of one of my mailman lists.

It seems very odd that mailman sends clear-text passwords through
e-mail. The use of one-way hashing passwords has been known a long
time - Unix version 6 that came out in 1975 already had crypt that was
used for one-way encryption of passwords.

Does anybody know why mailman stores passwords in clear text?

I imagine that, back in the '90s, when majordomo was written, it
seemed an OK thing to do because nobody thought that all their email
was being read - now that everybody knows that e-mail is entirely
unsafe, it seems odd that mailman still does this.

Are there any plans to tighten the security up?
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Any way to globally search and/or remove a user

2014-08-01 Thread George Kasica
Thanks!

Exactly what I needed. You just saved me HOURS of work.

George


-Original Message-
From: Mailman Admin [mailto:mailman-ad...@uni-konstanz.de] 
Sent: Friday, August 01, 2014 6:28 AM
To: George Kasica
Subject: Re: [Mailman-Users] Any way to globally search and/or remove a user

Hello George Kasica

Am 2014-08-01 09:45, schrieb George Kasica:
> Curious here about the following:
> 
> Is there any way or utility for Mailman that will allow me to search 
> ALL the mailing lists on the server for a given user email and then 
> remove that email address?
>
> I don't care about sending out a nice
> email to them - these are SPAM passing emails that have gotten added 
> and I just want them gone...it's not a huge number maybe 2 dozen, but 
> when you spread that over say 8 lists and 2 servers the workload adds 
> up to do it manually. In a perfect solution I could feed it a list of 
> addresses in a flat file and let it go, if I have to build one line at 
> a time that's not so bad either, but pointing and clicking it ugly and 
> time consuming. Conversely there probably is a bounce setting that I 
> could be using to let it drop them after say 1or 2 bounces, but that 
> kills off anyone with even a transient mail server issue so I'd rather 
> go the manual route above.
> 

On the command line you can use bin/remove_members for that.
You can feed it with a file with one email address per line.
For more infos see
bin/remove_members -h


Kind regards,
Christian Mack
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


[Mailman-Users] Any way to globally search and/or remove a user

2014-08-01 Thread George Kasica
Curious here about the following:



Is there any way or utility for Mailman that will allow me to search ALL the 
mailing lists on the server for a given user email and then remove that email 
address?



I don't care about sending out a nice email to them - these are SPAM passing 
emails that have gotten added and I just want them gone...it's not a huge 
number maybe 2 dozen, but when you spread that over say 8 lists and 2 servers 
the workload adds up to do it manually. In a perfect solution I could feed it a 
list of addresses in a flat file and let it go, if I have to build one line at 
a time that's not so bad either, but pointing and clicking it ugly and time 
consuming.



Conversely there probably is a bounce setting that I could be using to let it 
drop them after say 1or 2 bounces, but that kills off anyone with even a 
transient mail server issue so I'd rather go the manual route above.



Thanks,

George





---

===[George R. Kasica]===+1 414 732 8503

gkas...@netwrx1.com +1 206 374 6482 FAX

http://www.netwrx1.com/ Jackson, WI USA



("`-''-/").___..--''"`-._

`6_ 6  )   `-.  ( ).`-.__.`)

(_Y_.)'  ._   )  `._ `. ``-..-'

_..`--'_..-_/  /--'_.' ,'

(il),-''  (li),'  ((!.-'



--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org