On 6 Aug 1998, Jason L Tibbitts III wrote:
> OX> Initial notes: install doesn't prompt for whereami which would be
> OX> useful for sites that are running MJ1.x
>
> You mean the perl Makefile.PL part? It's missing a lot of stuff; I'd
> really like for it to be able to take a majordomo.cf and extract at least a
> few useful things from it.
I actually don't want to use an existing .cf (yet) because I'm running MJ2
on the same machine as MJ1. Therefore, I want to set whoami to something
other than majordomo to avoid the name collision.
> OX> "configshow GLOBAL" probably shouldn't return anything without a
> OX> password - a default access_rule to disable this would probably be a
> OX> good thing.
>
> It actually should; the point is that there are variables that you can see
> without a password, which are the ones that the interface can get without
> authentication. Note that you can't actually change them.
>
> The point is that the core doesn't know who's asking and it doesn't care.
> There are some variables it will show without a password and some it won't.
> Is your objection from a security standpoint or one of operator confusion?
Security - I just see no reason to expose this information. Why for
instance is it necessary for anyone to know the actual address of owner-*?
Couple more notes: master_passwd on newly created lists defaults to a
nice guessable value. It would probably be better to force the admin to
supply a passwd or generate a random one.
Also, I think the comment for whoami is wrong in the context of lists -
requests should be sent to list-request.
A function to re-justify text for files with interpolated variables would
pretty up a number of things too.
All in all, it looks pretty good. There's a fair amount of documentation
and proofreading that needs to be done and perhaps the help texts could be
a little less involved. Biggest barrier for general usability is lack of
digests (something I'd be interested in doing some coding for). But I'm
just about ready to start using it for several existings lists.
ps: what's the procedure for adding new domain directories?
--
"Love the dolphins," she advised him. "Write by W.A.S.T.E.."
Follow-Ups:
References:
|
|
