[Mailman-Users] Re: Unable to confirm user email not can I approve posting via https website

[Mark Sapiro]

On 9/20/21 10:41 PM, Stephen J. Turnbull wrote:

p...@interisland.net writes:

  > I'm not sure if these are a connected issue. When I use the web
  > interface confirm my subscription or if I try to approve a posting
  > I get the error:
  >
  > The information you’re about to submit is not secure
  > Because this form is being submitted using a connection that’s not
  > secure, your information will be visible to others.
  >
  > Nothing happens, neither confirm email address or approve post
  > happens.

Without more information there is little we can say.  Are you the
Mailman administrator for the site?  Do you have access to Mailman,
MTA, and webserver logs (especially the latter)?  Is the webserver
generally configured to use HTTPS rather than HTTP?  Is this is the
first time you've tried these operations, or a change in Mailman's
behavior from past operations?



First, the "The information you’re about to submit is not secure ..." 
message comes from your web browser, not Mailman and is because your are 
POSTing form data to and http (not https) URL.




My unfounded guess is that the webserver is part HTTP and part HTTPS,
and your confirmation and approval requests are getting lost in the
referral.  This can be corrected by making sure the mm_cfg.py file has
the correct URL, and running the bin/fix_url script in the Mailman
installation.  Of course if you're not using HTTPS at all, that's
completely wrong.



I agree with Steve. I think your web server is redirecting http to https 
and the POST data is lost in the process. See steps 2 and 3 at 
https://wiki.list.org/x/17892007 for more information on how to fix this.



--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Can not delete a mailing list with error.

[Mark Sapiro]

On 9/20/21 11:37 PM, Masaharu Kawada wrote:

Hello Mark,

Very much appreciate your help.


What is the error message and traceback from Mailman's logs/mailman.log?


The /var/log/mailman/error shows following logs when the issue happens.

~
Sep 21 15:30:48 2021 admin(10045):

admin(10045): [- Mailman Version: 2.1.29 -]
admin(10045): [- Traceback --]
admin(10045): Traceback (most recent call last):
admin(10045):   File "/usr/lib/mailman/scripts/driver", line 117, in
run_main
admin(10045): main()
admin(10045):   File "/usr/lib/mailman/Mailman/Cgi/rmlist.py", line 104, in
main
admin(10045): process_request(doc, cgidata, mlist)
admin(10045):   File "/usr/lib/mailman/Mailman/Cgi/rmlist.py", line 139, in
process_request
admin(10045): sys.modules[modname].remove(mlist, cgi=1)
admin(10045):   File "/usr/lib/mailman/Mailman/MTA/Postfix.py", line 407,
in remove
admin(10045): _do_remove(mlist, ALIASFILE, False)
admin(10045):   File "/usr/lib/mailman/Mailman/MTA/Postfix.py", line 398,
in _do_remove
admin(10045): outfp.close()
admin(10045): AttributeError: 'NoneType' object has no attribute 'close'



The issue is Mailman is trying to remove the aliases for this list from 
the data/aliases file. It does this by creating a data/aliases.tmp file, 
copying all of data/aliases except for what it wants to delete and then 
renaming data/aliases.tmp to data/aliases.


It appears that creating the data/aliases.tmp file as is done at 
https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/view/1799/Mailman/MTA/Postfix.py#L362 
sets outfp to None. I don't see how that can happen without throwing an 
exception at that point.


What does `ls -la` on Mailman's data/ directory show and what is the 
content of Mailman's data/aliases file?


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Unable to confirm user email not can I approve posting via https website

[paul]

Thanks for the pointer. I am the server admin so, yes, I have access to it all. 
This is my first time using Mailman and everything is pretty much texted book 
install of all components needed.

Based on the doc https://wiki.list.org/x/17892007 I only needed to add

DEFAULT_URL_PATTERN = 'https://%s/mailman/' 
PUBLIC_ARCHIVE_URL = 'https://%(hostname)s/pipermail/%(listname)s'
to mm_cfg.py. 

I could see the redirects working in the Apache logs and suspected there was 
something in Mailman that needed to be tweeked. I just couldn't find the 
article to get me moving forward.
Thanks for the help and sorry for the double post.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Can not delete a mailing list with error.

[Mark Sapiro]

Please keep this thread on the list.

On 9/21/21 6:36 PM, Masaharu Kawada wrote:

Hello Mark,

Thanks again for your help.

 >What does `ls -la` on Mailman's data/ directory show and what is the
 >content of Mailman's data/aliases file?

The /var/lib/mailman/data only shows the following file.

]# ls -l /var/lib/mailman/data
lrwxrwxrwx 1 root mailman 25 Sep 30  2020 sitelist.cfg -> 
/etc/mailman/sitelist.cfg


As for the aliases, please take a look at below results.

]# ls -l /etc/mailman/aliases
-rw-rw-rw- 1 root mailman 2840 Sep 21 12:41 /etc/mailman/aliases



Not the issue, but this probably shouldn't be other writable.



]# cat /etc/mailman/aliases

~
# The ultimate loop stopper address
mailman-loop: /var/lib/mailman/data/owner-bounces.mbox

...




If this is a RHEL mailman package, please see 




As far as I know, in the RHEL package, Mailman's aliases are in 
/etc/mailman/ as you show.


I think the problem may be that the `mailman` group does not have write 
permission on /etc/mailman/. Permissions should be `drwxrwsr-x` and 
group mailman.


Try running Mailman's bin/check_perms to check and `bin/check_perms -f` 
as root to fix errors, but don't worry about symlinks.



--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/