Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Robert Moskowitz 



On 12/06/2010 07:30 PM, Mark Sapiro wrote:

Robert Moskowitz wrote:
   

Through trail and error, user apache needed access.

Should user apache be added to the mailman group, as the files seem to
have root:mailman or mailman:mailman as their owners?
 


The way this is supposed to work is all the files in
/usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
be group 'mailman' and SETGID. Thus, when they are invoked through
Apache's ScriptAlias, they run with effective group 'mailman'. See the
FAQ at  for more detail.

You should not add user 'apache' to the 'mailman' group. This could
potentially give public access to things which aren't public.


Ah,  OK got it

Well hopefully one more time to get it right the first time...

:)


--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Mark Sapiro 
Robert Moskowitz wrote:
>
>Through trail and error, user apache needed access.
>
>Should user apache be added to the mailman group, as the files seem to 
>have root:mailman or mailman:mailman as their owners?


The way this is supposed to work is all the files in
/usr/lib/mailman/cgi-bin/ are compiled wrappers that are supposed to
be group 'mailman' and SETGID. Thus, when they are invoked through
Apache's ScriptAlias, they run with effective group 'mailman'. See the
FAQ at  for more detail.

You should not add user 'apache' to the 'mailman' group. This could
potentially give public access to things which aren't public.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Robert Moskowitz 

On 12/06/2010 05:16 PM, Mark Sapiro wrote:

Robert Moskowitz wrote:
   

Here is the error_log:

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- Mailman
Version: 2.1.12 -]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [-
Traceback --]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] Traceback
(most recent call last):
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File
"/usr/lib/mailman/scripts/driver", line 85, in run_main
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] immediate=1)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File
"/usr/lib/mailman/Mailman/Logging/StampedLogger.py", line 52, in __init__
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]
Logger.__init__(self, category, nofail, immediate)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File
"/usr/lib/mailman/Mailman/Logging/Logger.py", line 50, in __init__
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] self.__get_f()
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File
"/usr/lib/mailman/Mailman/Logging/Logger.py", line 68, in __get_f
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 1)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File
"/usr/lib/python2.6/codecs.py", line 865, in open
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] file =
__builtin__.open(filename, mode, buffering)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] IOError:
[Errno 13] Permission denied: '/var/log/mailman/error'
 


The mailman user can't create or write the /var/log/mailman/error log
file. Try running Mailman's bin/checkperms -f as root.


I was getting ready to reply no such command.  But I dug a bit and found 
check_perms.  Nice tool!  Thanks!



--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Robert Moskowitz 



On 12/06/2010 05:14 PM, Adam McGreggor wrote:

On Mon, Dec 06, 2010 at 04:31:27PM -0500, Robert Moskowitz wrote:
   

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] IOError: [Errno 13] 
Permission denied: '/var/log/mailman/error'
 

Is probably what I'd fix first, from that Trackback.


Through trail and error, user apache needed access.

Should user apache be added to the mailman group, as the files seem to 
have root:mailman or mailman:mailman as their owners?


I am going to move on to testing out subscriptions, creating another 
list, and sending messages, then do one more rebuild to see that I have 
everything right.


--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Mark Sapiro 
Robert Moskowitz wrote:
>
>Here is the error_log:
>
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
>
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- Mailman 
>Version: 2.1.12 -]
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- 
>Traceback --]
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] Traceback 
>(most recent call last):
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
>"/usr/lib/mailman/scripts/driver", line 85, in run_main
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] immediate=1)
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
>"/usr/lib/mailman/Mailman/Logging/StampedLogger.py", line 52, in __init__
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
>Logger.__init__(self, category, nofail, immediate)
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
>"/usr/lib/mailman/Mailman/Logging/Logger.py", line 50, in __init__
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] self.__get_f()
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
>"/usr/lib/mailman/Mailman/Logging/Logger.py", line 68, in __get_f
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 1)
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
>"/usr/lib/python2.6/codecs.py", line 865, in open
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] file = 
>__builtin__.open(filename, mode, buffering)
>[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] IOError: 
>[Errno 13] Permission denied: '/var/log/mailman/error'


The mailman user can't create or write the /var/log/mailman/error log
file. Try running Mailman's bin/checkperms -f as root.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Adam McGreggor 
On Mon, Dec 06, 2010 at 04:31:27PM -0500, Robert Moskowitz wrote:
> [Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] IOError: [Errno 13] 
> Permission denied: '/var/log/mailman/error'

Is probably what I'd fix first, from that Trackback.


-- 
"a moat is an effective barrier, especially if you manage
 water levels so an area in the middle is very shallow over 
 gooey mud. A moat is also much prettier than a wall or razor wire"
-- Dan Holdsworth
--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Robert Moskowitz 

On 12/06/2010 04:23 PM, Robert Moskowitz wrote:

On 12/06/2010 03:48 PM, Mark Sapiro wrote:

Mark Sapiro wrote:


Robert Moskowitz wrote:



ServerName mailman


Same caveat as below, but I also think this should be

 ServerName mailman.htt-consult.com



#
#  httpd configuration settings for use with mailman.
#

ScriptAlias mailman.htt-consult.com/mailman/ /usr/lib/mailman/cgi-bin/


I am not an expert on named virtual hosts, but I think the above should
be

ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/


What I just tried is:

ServerName mailman
ServerAlias mailman.htt-consult.com
ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
RedirectMatch ^/mailman[/]*$ 
http://mailman.htt-consult.com/mailman/listinfo



And now I get:

Bug in Mailman version 2.1.12

We're sorry, we hit a bug!

And it tells me to look in the Mailman error logs.  I see errors in 
the  /var/hda/web-apps/mailman/logs/error_log.  I will have to move it 
over to this system via a USB drive...


So progress!


Here is the error_log:

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- Mailman 
Version: 2.1.12 -]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- 
Traceback --]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] Traceback 
(most recent call last):
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
"/usr/lib/mailman/scripts/driver", line 85, in run_main

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] immediate=1)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
"/usr/lib/mailman/Mailman/Logging/StampedLogger.py", line 52, in __init__
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
Logger.__init__(self, category, nofail, immediate)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
"/usr/lib/mailman/Mailman/Logging/Logger.py", line 50, in __init__

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] self.__get_f()
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
"/usr/lib/mailman/Mailman/Logging/Logger.py", line 68, in __get_f

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 1)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]   File 
"/usr/lib/python2.6/codecs.py", line 865, in open
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] file = 
__builtin__.open(filename, mode, buffering)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] IOError: 
[Errno 13] Permission denied: '/var/log/mailman/error'
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- Python 
Information -]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.version = 2.6.2 (r262:71600, Jun  4 2010, 18:28:04)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [GCC 4.4.3 
20100127 (Red Hat 4.4.3-4)]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.executable  = /usr/bin/python
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.prefix  = /usr
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.exec_prefix = /usr
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.path= /usr
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
sys.platform= linux2
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] [- 
Environment Variables -]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tHTTP_COOKIE: 
locale=en
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tSERVER_SOFTWARE: Apache/2.2.15 (Fedora)
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tSCRIPT_NAME: 
/mailman/listinfo
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tSERVER_SIGNATURE: Apache/2.2.15 (Fedora) Server at 
mailman.htt-consult.com Port 80

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149]
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tREQUEST_METHOD: GET
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tHTTP_KEEP_ALIVE: 300
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tSERVER_PROTOCOL: HTTP/1.1

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tQUERY_STRING:
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tHTTP_ACCEPT_CHARSET: ISO-8859-1,utf-8;q=0.7,*;q=0.7
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tHTTP_USER_AGENT: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.15) 
Gecko/20101027 Fedora/3.5.15-1.fc12 Firefox/3.5.15
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] 
\tHTTP_CONNECTION: keep-alive
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tSERVER_NAME: 
mailman.htt-consult.com
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tREMOTE_ADDR: 
208.83.67.149

[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tSERVER_PORT: 80
[Mon Dec 06 16:18:32 2010] [error] [client 208.83.67.149] \tSERVER_ADDR: 
208.83.67.149
[Mon Dec 06

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Robert Moskowitz 

On 12/06/2010 03:48 PM, Mark Sapiro wrote:

Mark Sapiro wrote:

   

Robert Moskowitz wrote:
 



ServerName mailman
   


Same caveat as below, but I also think this should be

 ServerName mailman.htt-consult.com


   

#
#  httpd configuration settings for use with mailman.
#

ScriptAlias mailman.htt-consult.com/mailman/ /usr/lib/mailman/cgi-bin/
   


I am not an expert on named virtual hosts, but I think the above should
be

ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
 


What I just tried is:

ServerName mailman
ServerAlias mailman.htt-consult.com
ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
RedirectMatch ^/mailman[/]*$ http://mailman.htt-consult.com/mailman/listinfo


And now I get:

Bug in Mailman version 2.1.12

We're sorry, we hit a bug!

And it tells me to look in the Mailman error logs.  I see errors in the  
/var/hda/web-apps/mailman/logs/error_log.  I will have to move it over 
to this system via a USB drive...


So progress!






[...]
 

Alias mailman.htt-consult.com/pipermail/ /var/lib/mailman/archives/public/
   


And I think the above should be

Alias /pipermail/ /var/lib/mailman/archives/public/

--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/mark%40msapiro.net
 

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying again from the start -- Re: Help inunderstandingMailmansetup

2010-12-06 Thread Mark Sapiro 
Mark Sapiro wrote:

>Robert Moskowitz wrote:
>>
>>
>>
>>ServerName mailman


Same caveat as below, but I also think this should be

ServerName mailman.htt-consult.com


>>#
>>#  httpd configuration settings for use with mailman.
>>#
>>
>>ScriptAlias mailman.htt-consult.com/mailman/ /usr/lib/mailman/cgi-bin/
>
>
>I am not an expert on named virtual hosts, but I think the above should
>be
>
>ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
>
>
>
>[...]
>>
>>Alias mailman.htt-consult.com/pipermail/ /var/lib/mailman/archives/public/
>
>
>And I think the above should be
>
>Alias /pipermail/ /var/lib/mailman/archives/public/
>
>-- 
>Mark Sapiro The highway is for gamblers,
>San Francisco Bay Area, Californiabetter use your sense - B. Dylan
>
>--
>Mailman-Users mailing list Mailman-Users@python.org
>http://mail.python.org/mailman/listinfo/mailman-users
>Mailman FAQ: http://wiki.list.org/x/AgA3
>Security Policy: http://wiki.list.org/x/QIA9
>Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
>Unsubscribe: 
>http://mail.python.org/mailman/options/mailman-users/mark%40msapiro.net
-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org