mailboxer+zope security question
I have a setup with two maillists on my Zope 2.7 setup and Mailboxer. One mailist is a straightforward, open-ended list that anyone can join; it's working w/out any problems. I'm trying to make the second list a secure one, where only specific users can join, receive e-mails from the list, and view the archives at the given site. I created a role for my "promoters" group, attached specific users to it, and then w/in zope, only limited "View" access to the maillist to this group. It works in that users authenticated against "promoters" can visit the site, but I can't send emails to the list: Apr 5 15:14:11 promoters mailboxer: problem occurred uploading email to server http://testme.org:8080/promoters/promoters/manage_mailboxer (HTTP Error 302: Moved Temporarily) Apr 5 15:14:11 testme postfix/local[6922]: 5C8E922834D: to=<openib-promoters@testme.org>, relay=local, delay=0, status=deferred (temporary failure) This is the entry from my aliases file: openib-promoters: "|/etc/postfix/smtp2zope.py http://testme.org:8080/promoters/promoters/manage_mailboxer 20000" Any suggestions...something I missed? Thanks Michael
mrmikeylee@comcast.net wrote:
I have a setup with two maillists on my Zope 2.7 setup and Mailboxer. One mailist is a straightforward, open-ended list that anyone can join; it's working w/out any problems. I'm trying to make the second list a secure one, where only specific users can join, receive e-mails from the list, and view the archives at the given site. I created a role for my "promoters" group, attached specific users to it, and then w/in zope, only limited "View" access to the maillist to this group. It works in that users authenticated against "promoters" can visit the site, but I can't send emails to the list:
Apr 5 15:14:11 promoters mailboxer: problem occurred uploading email to server http://testme.org:8080/promoters/promoters/manage_mailboxer (HTTP Error 302: Moved Temporarily) Apr 5 15:14:11 testme postfix/local[6922]: 5C8E922834D: to=<openib-promoters@testme.org>, relay=local, delay=0, status=deferred (temporary failure)
This is the entry from my aliases file:
openib-promoters: "|/etc/postfix/smtp2zope.py http://testme.org:8080/promoters/promoters/manage_mailboxer 20000"
Any suggestions...something I missed? Thanks
Do you use the current MailBoxer-release 3.2.0?
mrmikeylee@comcast.net wrote:
Apr 5 15:14:11 promoters mailboxer: problem occurred uploading email to server http://testme.org:8080/promoters/promoters/manage_mailboxer (HTTP Error 302: Moved Temporarily) Apr 5 15:14:11 testme postfix/local[6922]: 5C8E922834D: to=<openib-promoters@testme.org>, relay=local, delay=0, status=deferred (temporary failure)
This is the entry from my aliases file:
openib-promoters: "|/etc/postfix/smtp2zope.py http://testme.org:8080/promoters/promoters/manage_mailboxer 20000"
Any suggestions...something I missed? Thanks
Do you use the current smtp2zopy.py from MailBoxer 3.2? There you can set a login/password for sites needing authentication.
From the CHANGES.txt:
- added authentication-handler to smtp2zope.py; protected all public-manage-methods with 'View'-permission. Should be useful if you want a more secured MailBoxer. You can now call the smtp2zope.py with an additional authorization (http://user:password@localhost:8080/MailBoxer/manage_mailboxer) or set the authorization directly in smtp2zope.py. Thanks to Steve McMahon for ideas and patches!!! Download MailBoxer at: http://mjablonski.zope.org/MailBoxer But maybe I miss your point... Cheers, Maik
participants (2)
-
Maik Jablonski -
mrmikeyleeï¼ comcast.net