Developers of Sympa

[David Verdin <address@concealed>]

I'm not sure to get you right.

As far as I understand, somebody is using one time tickets to 
authenticate on behalf of somebody else and then performs unsubscriptions?

A question would be : "how did this person get a hand on these tickets?"

Could you please send logs of the operations being performed? That would 
help understand the problem.


On 19/10/2017 16:17, address@concealed wrote:
> Hello,
>
> Currently using sympa 6.2.16 and had what appears to be someone unsubscribe a
> bunch of list members from one our lists.  Seems to be one person who did this
> because of the IP logged and the number of "Refusing to perform login because
> the ticket has been used before" errors and successful unsubscriptions
> associated with the IP in question.  Is this a known bug and would upgrading
> to 6.2.22 fix this?
>
> Thanks,
> Matt Goebel

--
"Mieux vaut viser la perfection et la rater que viser la médiocrité et 
l'atteindre."
- Francis Blanche

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature