Developers of Sympa

[Olivier Salaun - CRU <address@concealed>]

Hi Adam,

Adam Bernstein wrote:
> 1. Following is a patch to make arc2webarc.pl work with lists in
> virtual robots, which it currently does not.  I will also submit this
> patch through the bug system.

We've applied your patch to arc2webarc.pl with minor corrections.

> 2. I think a minor change should be made in the distribution of Sympa,
> specifically in the permissions on wwsympa.fcgi.  I'm not sure which
> type of Apache/suexec/FastCGI configuration the current settings are
> intended to work with, but they do not worth when the Web server (or
> virtual robot) runs as the user "sympa" and the script is executed by
> FastCGI through Apache's suexec module.  

The default installation of Sympa should work with standard Apache 
configuration,
without any suexec configuration.

If you set suexec in Apache, then you are obliged to run Apache (or at least
Apache's current Virtual Host) as user 'sympa' which is not suitable (at least
in our mind).

If somebody has found a cleaner solution to run WWSympa.fcgi as user Sympa :
        1/ without running Apache as user 'sympa' (only the CGI)
        2/ without setting a SetUID bit on wwsympa.fcgi

Then we are very interrested with this solution, please contact us.

3. Invite feature in WWSympa

Adam, you have submitted a patch to integrate INVITE feature in wwsympa. We
did not respond to your proposition, sorry about that. There are 2 major 
concerns
about that :
        1/ in your patch you use Commands::invite() within wwsympa.fcgi, 
whereas
          Commands.pm subroutines are not adapted to web context (sending 
email
          where a web page should be sent ; 'smtp' authentication used 
instead of
          'md5'). The inner of Commands::invite should be copied and adapted 
in
          wwsympa::do_invite().

        2/ we don't wish to change too much web templates at the moment, 
because
          we have some guys working on a new web GUI. We want to keep the
          web templates as stable as possible in the meanwhile.

Thanks.

--
Olivier Salaun
Comite Reseau des Universites