The mailing list for listmasters using Sympa

[Pat Allen <address@concealed>]

Hi David,

My management has asked me if there is any estimate on how long it might take 
to get this bug fixed. We stumbled upon it when testing a new front-end that 
we had put together allowing our users to browse / subscribe / unsubscribe 
multiple lists at one time. That project is on hold until this gets fixed 
since we can't have our user's passwords being trampled.

Thanks!
Pat

----- Original Message -----
From: "David Verdin" <address@concealed>
To: address@concealed
Sent: Tuesday, March 27, 2018 8:47:43 AM
Subject: Re: [sympa-users] Local password reset when subscribing via email

Hi Pat,

This is a bug indeed and I can reproduce it. I never noticed this 
because all our servers are now federated so we log in using identity 
providers.

I'll check that.

Regards,

David


On 27/03/2018 17:01, Pat Allen wrote:
> Hi everyone,
>
> I've upgraded out production server to 6.2.24 and this is becoming an 
> issue. Can anyone tell me if this behavior is by design or if this is a 
> bug? (I can't find anything on the bug tracker.) Every time I subscribe to 
> a list via email, I need to reset my password on the server. This is 
> annoying to say the least.
>
> Thanks!
> Pat
>
> ----- Original Message -----
> From: "Pat Allen" <address@concealed>
> To: address@concealed
> Sent: Thursday, March 22, 2018 11:23:38 AM
> Subject: Local password reset when subscribing via email
>
> Good morning!
>
> I first noticed this on our production 6.1.3 system and have duplicated it 
> on our test 6.2.24 system.
>
> I have a local user account (e.g. address@concealed). I can login OK to the web 
> interface and manage my subscriptions. Then I send an email to 
> address@concealed with the subject "SUBSCRIBE listname 
> address@concealed". I am successfully subscribed to the list and receive 
> confirmation from the software.
>
> However, my password is no longer valid on the web interface. When I try to 
> login, I get "Unable to continue: The username / password combination 
> provided was incorrect." I need to reset my password in order to continue. 
> This is problematic.
>
> Any help would be appreciated. Thanks!
>
> Pat
>
> Pat Allen
> Monterey Bay Aquarium Research Institute (MBARI)
>
>

-- 
"Mieux vaut viser la perfection et la rater que viser la médiocrité et 
l'atteindre."
- Francis Blanche

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature