Hello,

Is there any way, besides editing the options.html template file, to completely
disable regular/monthly password reminders? According to the list options page,
whether or not a list sends out reminders individual subscribers can still
change this setting.

Regards,

Alan Rubin
Technician Unix
DCS Midrange Services
Phone: +61 (08) 8999 6814
Fax: +61 (08) 8999 7493
e-Mail: alan.rubin at nt.gov.au

Search Discussions

  • Mark Sapiro at Sep 1, 2008 at 11:15 pm

    Alan.Rubin at nt.gov.au wrote:
    Is there any way, besides editing the options.html template file, to completely
    disable regular/monthly password reminders? According to the list options page,
    whether or not a list sends out reminders individual subscribers can still
    change this setting.

    Granted, it could be more clear, but if you read the description of
    "Get password reminder email for this list?" on the options page, it
    says the user can turn off reminders by selecting No. It does not say
    the the user can get reminders if the list setting is off.

    In fact, if the list is set to not send reminders, the list is not
    included in reminders regardless of any list member's setting.

    Also, A site can disable monthly reminders all together by removing the
    cron/mailpasswds entry from Mailman's crontab.

    However, none of this prevents a user from requesting a reminder from
    the options login page.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Alan Rubin at Sep 1, 2008 at 11:17 pm
    Mark,

    Is that a singular reminder that is requested and not a periodic one (if monthly
    reminders are set off)?

    Regards,

    Alan Rubin
    Technician Unix
    DCS Midrange Services
    Phone: +61 (08) 8999 6814
    Fax: +61 (08) 8999 7493
    e-Mail: alan.rubin at nt.gov.au



    Mark Sapiro
    <mark at msapiro.net>
    Sent by: To
    mailman-users-bounc Alan.Rubin at nt.gov.au,
    es+alan.rubin=nt.go mailman-users at python.org
    v.au at python.org cc

    Subject
    02/09/2008 08:45 AM Re: [Mailman-Users] monthly password
    reminders










    Alan.Rubin at nt.gov.au wrote:
    Is there any way, besides editing the options.html template file, to completely
    disable regular/monthly password reminders? According to the list options page,
    whether or not a list sends out reminders individual subscribers can still
    change this setting.

    Granted, it could be more clear, but if you read the description of
    "Get password reminder email for this list?" on the options page, it
    says the user can turn off reminders by selecting No. It does not say
    the the user can get reminders if the list setting is off.

    In fact, if the list is set to not send reminders, the list is not
    included in reminders regardless of any list member's setting.

    Also, A site can disable monthly reminders all together by removing the
    cron/mailpasswds entry from Mailman's crontab.

    However, none of this prevents a user from requesting a reminder from
    the options login page.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan

    ------------------------------------------------------
    Mailman-Users mailing list
    Mailman-Users at python.org
    http://mail.python.org/mailman/listinfo/mailman-users
    Mailman FAQ: http://wiki.list.org/x/AgA3
    Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
    Unsubscribe:
    http://mail.python.org/mailman/options/mailman-users/alan.rubin%40nt.gov.au

    Security Policy: http://wiki.list.org/x/QIA9
  • Mark Sapiro at Sep 1, 2008 at 11:35 pm

    Alan.Rubin at nt.gov.au wrote:
    Is that a singular reminder that is requested and not a periodic one (if monthly
    reminders are set off)?

    If the list's send_reminders is set to No, no periodic reminders are
    sent for that list regardless of the user's setting on the user
    options page.

    If the user clicks the "Remind" button on the options login page (after
    providing her email address), she will get a one-time reminder
    regardless of any other settings.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Alan Rubin at Sep 1, 2008 at 11:42 pm
    Mark/list,

    on a different but related tact, what could I alter in the cron script to send
    out a 'reminder' that the user belongs to the list, but not actually send the
    password? IT Security is a little antsy about having these passwords floating
    around through the email system (don't ask).

    Regards,

    Alan Rubin
    Technician Unix
    DCS Midrange Services
    Phone: +61 (08) 8999 6814
    Fax: +61 (08) 8999 7493
    e-Mail: alan.rubin at nt.gov.au



    Mark Sapiro
    <mark at msapiro.net>
    Sent by: To
    mailman-users-bounc Alan.Rubin at nt.gov.au,
    es+alan.rubin=nt.go mailman-users at python.org
    v.au at python.org cc

    Subject
    02/09/2008 09:05 AM Re: [Mailman-Users] monthly password
    reminders










    Alan.Rubin at nt.gov.au wrote:
    Is that a singular reminder that is requested and not a periodic one (if monthly
    reminders are set off)?

    If the list's send_reminders is set to No, no periodic reminders are
    sent for that list regardless of the user's setting on the user
    options page.

    If the user clicks the "Remind" button on the options login page (after
    providing her email address), she will get a one-time reminder
    regardless of any other settings.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan

    ------------------------------------------------------
    Mailman-Users mailing list
    Mailman-Users at python.org
    http://mail.python.org/mailman/listinfo/mailman-users
    Mailman FAQ: http://wiki.list.org/x/AgA3
    Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
    Unsubscribe:
    http://mail.python.org/mailman/options/mailman-users/alan.rubin%40nt.gov.au

    Security Policy: http://wiki.list.org/x/QIA9
  • Mark Sapiro at Sep 2, 2008 at 1:18 am

    Alan.Rubin at nt.gov.au wrote:
    on a different but related tact, what could I alter in the cron script to send
    out a 'reminder' that the user belongs to the list, but not actually send the
    password? IT Security is a little antsy about having these passwords floating
    around through the email system (don't ask).

    The easiest way to do this, although not the prettiest would be to
    change the lines

    # treates person at dom.ain the same as PERSON at dom.ain.
    try:
    password = mlist.getMemberPassword(member)
    except Errors.NotAMemberError:
    # Here's a member with no passwords, which I think
    was
    # possible in older versions of Mailman. Log this
    and
    # move on.
    syslog('error', 'password-less member %s for list
    %s',
    member, mlist.internal_name())
    continue
    optionsurl = mlist.GetOptionsURL(member)

    (lines 152-162 in cron/mailpasswds) to


    # treates person at dom.ain the same as PERSON at dom.ain.
    password = 'password elided'
    optionsurl = mlist.GetOptionsURL(member)


    or some such.

    You may also wish to make an edited version of the cronpass.txt
    template that explains what's going on, but note this must be a 'site'
    template as monthly password reminders don't come from a list. See
    <http://wiki.list.org/x/jYA9>.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan
  • Jeffrey Goldberg at Sep 2, 2008 at 3:11 am

    On Sep 1, 2008, at 6:42 PM, Alan.Rubin at nt.gov.au wrote:

    IT Security is a little antsy about having these passwords floating
    around through the email system (don't ask).
    Would they be willing to accept these passwords being mailed around if
    you were to disable individuals' ability to set their own password?
    That is, if the only passwords that mailman ever mailed were the
    mailman generated ones, would they be happier with those?

    And is there a way to prevent people from using their own passwords?

    Cheers,

    -j
  • Mark Sapiro at Sep 2, 2008 at 4:04 am

    Jeffrey Goldberg wrote:
    And is there a way to prevent people from using their own passwords?

    You would have to disable the user set password in
    Mailman/Cgi/subscribe.py and Mailman/Commands/cmd_subscribe.py and
    disable the password change in Mailman/Cgi/options.py.

    --
    Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
    San Francisco Bay Area, California better use your sense - B. Dylan

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
groupmailman-users @
categoriespython
postedSep 1, '08 at 10:58p
activeSep 2, '08 at 4:04a
posts8
users3
websitelist.org

People

Translate

site design / logo © 2022 Grokbase