The mailing list for listmasters using Sympa

[David Verdin <address@concealed>]

[Resending to the list : Did not notice I sent it to Leonid only]

Hi Leonid,


On 01/07/2020 16:15, Leonid Sergushkin wrote:
> Hi,
> is it possible to set the password for a user over the command line?
Not that I know.
> How is sympa generating the password?

It is either a MD5 or bcrypt hash.

By default, it is MD5.

> If i am using an online hashed md5 or bcrypt password its not working 
> when i am changing it directly in the database table "user_table", 
> only if im using an already set password (regular webbased way).

By default, Sympa passwords are cas insensitive. Consequently, the 
password is lower-cased before computing the hash. That may be the 
source of your problem.

Either you lower-case your passwords before hashing them or, which is 
probably better, security speaking, you make the passwords case 
sensitive by setting the "password_case" sympa.conf parameter to the 
value "sensitive".

> Probably there are more places where i have to set the password for a 
> new user?
Nope. Only the user_table.
> Is it possible to set the password during the list creation over the 
> command line with an xml file?

No, because you don't add user at list creation. Lists are always 
created empty. Even the list creator must subscribe manually.

You COULD tweak the list template using TT2 lanaguage to make additional 
operations, such as list subscription, by including perl code, from 
within the template. Such code should be included in a [% PERL %] ... 
perl code ... [% END %] tag.

But for that, you'll need to change the Sympa code in one point : at the 
template object creation in Sympa::Request::Handler::create_list.pm, you 
need to add the option : EVAL_PERL => 1.

Regards,

David

> Kind regards
> Leo :)
--
"Mieux vaut viser la perfection et la rater que viser la médiocrité et 
l'atteindre."
- Francis Blanche

David Verdin
Chef de Projet Collaboratif
Département PROduits NUMériques
Direction des Services Applicatifs
RENATER - Rennes

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature