Great Circle Associates Majordomo-Users
(November 2000)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Simplifying access to closed list--------------
From: Dan Liston <dliston @ netscape . com>
Organization: iPlanet E-Commerce Solutions, A Sun Netscape Alliance
Date: Mon, 20 Nov 2000 09:59:21 -0600
To: John Poltorak <jp @ eyup . org>
Cc: majordomo-users @ GreatCircle . COM
References: <20001119224952.B73@eyup.org> <3A18CE15.5E191F52@netscape.com> <20001120094252.C73@eyup.org>

John Poltorak wrote:
> 
> On Mon, Nov 20, 2000 at 01:09:09AM -0600, Dan Liston wrote:
> > John Poltorak wrote:
> > >
> > > Is there any way to simplify the access to a closed list?
> >
> > Not sure what you mean by "simplify the access".
> 
> I've tried to post this question a number of times and have not seen
> it come back from the list so assumed I was including certain keywords
> which may have been interpreted as administative commands, so I
> changed my wording to some extent, and probably lost the meaning...

If a list is closed or closed+confirm, all subscription requests must
come to the list-owner or list-approval address.  Are you requesting
a simplified confirmation for the user, or a simplified approval for
the owner?
> 
> > It's pretty
> > simple already.  Anyone with the password can post to the list.
> 
> I'm talking about giving people access to the list in the first place.
> I would like the reply to the list approver to consist of a single
> line with the correct password or a alternative suggestion as to
> how to simpilfy the process - maybe to sort of hook using Mutt...

Are you referring to this message that majordomo sends the list owner?
**********************************************************************

Subject: APPROVE test
   Date: Mon, 20 Nov 2000 09:37:06 -0600 (CST)
   From: Majordomo@sample.com
     To: test-approval@sample.com


--

Dan Liston <dliston@netscape.com> requests that you approve the following:

        subscribe test Dan Liston <dliston@netscape.com>

If you approve, please send a message such as the following back to
Majordomo@sonny.org (with the appropriate PASSWORD filled in, of course):

        approve PASSWORD \
        subscribe test \
        Dan Liston <dliston@netscape.com>
  
[The above is broken into multiple lines to avoid mail reader linewrap
problems. Commands can be on one line, or multi-line with '\' escapes.]

If you disapprove, do nothing.


Thanks!

Majordomo@sample.com
**********************************************************************


Replying to the message correctly addresses the response to majordomo at
your domain.  There is no database of new subscribers to be able to just
feed a one word reply (password) back to majordomo, so the old message 
must be quoted in to capture the address of the requestor plus the format
of the approval command.  Everything can be stripped back out except the
approval portion of course.

        approve PASSWORD \
        subscribe test \
        Dan Liston <dliston@netscape.com>

This can also be accomplished on one line with

        approve PASSWORD subscribe test dliston@netscape.com

where the actual password is filled in for PASSWORD.

This same step can be done without waiting for a request from an potential
subscriber too.  If you already know their address, they can be pre-approved
with the same commands and save everyone a lot of email.

It is bad enough already that a password must be sent into majordomo in
clear text, but suggesting that majordomo advertise a password in email
that it sends to someone that should already know the password is an 
extremely bad idea no matter which way you look at it.

So keeping security in mind as well as the fact that most moderators
or list owners have at least 1% use of their brain, how much simpler 
would you really like this to get?

Dan Liston



Follow-Ups:
References:
Indexed By Date Previous: MajorCool samples wanted
From: John Poltorak <jp@eyup.org>
Next: Re: MAJORDOMO ABORT (mj_resend) (fwd)
From: Dan Liston <dliston@netscape.com>
Indexed By Thread Previous: Re: Simplifying access to closed list
From: John Poltorak <jp@eyup.org>
Next: Re: Simplifying access to closed list--------------
From: "Roger B.A. Klorese" <rogerk@QueerNet.ORG>

Google
 
Search Internet Search www.greatcircle.com