[NTG-context] Mail server login broken

[NTG-context] Mail server login broken

[Hans Åberg via ntg-context]

Nothing seems to be working on the NTG ConTeXt server login page below, so I can't change my email address.

https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl/


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Henning Hraban Ramm]

Am 29.09.24 um 17:57 schrieb Hans Åberg via ntg-context:
> Nothing seems to be working on the NTG ConTeXt server login page below, so I can't change my email address.
> 
> https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl/

Try https://lists.contextgarden.net/mailman3/ the footer is apparently 
wrong.

Hraban
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Hans Åberg via ntg-context]

> On 29 Sep 2024, at 20:56, Henning Hraban Ramm <texml@fiee.net> wrote:
> 
> Am 29.09.24 um 17:57 schrieb Hans Åberg via ntg-context:
>> Nothing seems to be working on the NTG ConTeXt server login page below, so I can't change my email address.
>> https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl/
> 
> Try https://lists.contextgarden.net/mailman3/ the footer is apparently wrong.

It then says that the email address and/or password are not correct, despite being from my saved passport file. If I try to sign up, a get to a page that says signup is closed:
https://lists.contextgarden.net/accounts/signup/?next=%2Fmailman3%2F


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Taco Hoekwater]

Hi,

> On 29 Sep 2024, at 21:31, Hans Åberg via ntg-context <ntg-context@ntg.nl> wrote:
> 
> 
>> On 29 Sep 2024, at 20:56, Henning Hraban Ramm <texml@fiee.net> wrote:
>> 
>> Am 29.09.24 um 17:57 schrieb Hans Åberg via ntg-context:
>>> Nothing seems to be working on the NTG ConTeXt server login page below, so I can't change my email address.
>>> https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl/

The situation with the mailing list server: mailman3 is confused about all the accounts that have been imported from the old mailman2 installation: the front end assumes these accounts have a postorius login attached to it because that is how it works for new subscribers, but those imported accounts do not have such an account. There is no easy fix for that that I can apply as an administrator, unfortunately. The most straightforward solution would be to create a new subscriber account using the web interface, and then use the old-fashioned email method to unsubscribe the old account (or send me a message personally).

However, a secondary problem is that the mailman web forms are used by spammers so often that I have registration/signup turned off. The continuous barrage of invalid password reset requests was negatively affecting the reputation of the mail server so much that even delivery of proper emails became a problem. This is another issue that cannot be easily fixed as administrator, because there is not a lot of detailed control possible on what messages mailman does and does not send out. Either it sends out no messages to unknown email addresses, or it always sends out such messages. 

I will try turning signs ups on again for a while, but I probably cannot keep it open. This situation will likely endure until some future update to mailman3 gives administrators more control, or until someone knowledgeable in python can help me patch mailman so that it blocks only the “password reset” functionality, but not the “sign up” (help?).

TL;DR: if you have a problem, email me personally with old and new addresses, and I will fix your account. 


>> Try https://lists.contextgarden.net/mailman3/ the footer is apparently wrong.

FWIW the footer is actually correct. It just does not help that much.


— 
Taco Hoekwater              E: taco@bittext.nl
genderfluid (all pronouns)


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Hans Åberg via ntg-context]

> On 30 Sep 2024, at 09:06, Taco Hoekwater <taco@bittext.nl> wrote:
> 
> Hi,
> 
>> On 29 Sep 2024, at 21:31, Hans Åberg via ntg-context <ntg-context@ntg.nl> wrote:
>> 
>> 
>>> On 29 Sep 2024, at 20:56, Henning Hraban Ramm <texml@fiee.net> wrote:
>>> 
>>> Am 29.09.24 um 17:57 schrieb Hans Åberg via ntg-context:
>>>> Nothing seems to be working on the NTG ConTeXt server login page below, so I can't change my email address.
>>>> https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl/
> 
> The situation with the mailing list server: mailman3 is confused about all the accounts that have been imported from the old mailman2 installation: the front end assumes these accounts have a postorius login attached to it because that is how it works for new subscribers, but those imported accounts do not have such an account. There is no easy fix for that that I can apply as an administrator, unfortunately. The most straightforward solution would be to create a new subscriber account using the web interface, and then use the old-fashioned email method to unsubscribe the old account (or send me a message personally).
> 
> However, a secondary problem is that the mailman web forms are used by spammers so often that I have registration/signup turned off. The continuous barrage of invalid password reset requests was negatively affecting the reputation of the mail server so much that even delivery of proper emails became a problem. This is another issue that cannot be easily fixed as administrator, because there is not a lot of detailed control possible on what messages mailman does and does not send out. Either it sends out no messages to unknown email addresses, or it always sends out such messages. 
> 
> I will try turning signs ups on again for a while, but I probably cannot keep it open. This situation will likely endure until some future update to mailman3 gives administrators more control, or until someone knowledgeable in python can help me patch mailman so that it blocks only the “password reset” functionality, but not the “sign up” (help?).

An anti-spam measure is requiring email confirmation, typically an email sent to the address to be registered with an HTML link that must be opened and confirmed by clicking on a button.


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Taco Hoekwater]

> On 30 Sep 2024, at 09:15, Hans Åberg <haberg-1@telia.com> wrote:
> 
> An anti-spam measure is requiring email confirmation, typically an email sent to the address to be registered with an HTML link that must be opened and confirmed by clicking on a button.
 
What happens is that a malicious script is submitting a "password reset" form with a valid but unknown to mailman email address. Mailman3 should not respond to those, but it does. The receivers of such password reset reminders get righteously annoyed. 

Best wishes,
Taco

— 
Taco Hoekwater              E: taco@bittext.nl
genderfluid (all pronouns)


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Hans Åberg via ntg-context]

> On 30 Sep 2024, at 09:27, Taco Hoekwater <taco@bittext.nl> wrote:
> 
>> On 30 Sep 2024, at 09:15, Hans Åberg <haberg-1@telia.com> wrote:
>> 
>> An anti-spam measure is requiring email confirmation, typically an email sent to the address to be registered with an HTML link that must be opened and confirmed by clicking on a button.
> 
> What happens is that a malicious script is submitting a "password reset" form with a valid but unknown to mailman email address. Mailman3 should not respond to those, but it does. The receivers of such password reset reminders get righteously annoyed.

So it seems to be a bug that should be fixed. I have also changed GNU lists, so the question is what they do, or perhaps they have not experienced the problem yet.


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________

[NTG-context] Re: Mail server login broken

[Taco Hoekwater]

Hi all,
> 
> I will try turning signs ups on again for a while, but I probably cannot keep it open. This situation will likely endure until some future update to mailman3 gives administrators more control, or until someone knowledgeable in python can help me patch mailman so that it blocks only the “password reset” functionality, but not the “sign up” (help?).

With much needed help from Max Chernoff, the mailing list webforms now all have a reCaptcha. This means that both signup and “password forgotten” features could be enabled again. 

Thank you, Max!

Best wishes,
Taco

— 
Taco Hoekwater              E: taco@bittext.nl
genderfluid (all pronouns)


___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / https://mailman.ntg.nl/mailman3/lists/ntg-context.ntg.nl
webpage  : https://www.pragma-ade.nl / https://context.aanhet.net (mirror)
archive  : https://github.com/contextgarden/context
wiki     : https://wiki.contextgarden.net
___________________________________________________________________________________