LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Ben Parker <[log in to unmask]>
Tue, 27 Nov 2012 23:23:46 -0700
text/plain (36 lines)
(please change the Subject: line when your message is not a continuation of
the current topic/thread)

On Tue, 27 Nov 2012 23:56:08 +0000, Matthew Black <[log in to unmask]>
wrote:

>Is there a way to list known users/accounts created by people who signed-up through the web interface (Register LISTSERV Password)?

Alas, no.  This information is not easily available.

>We are authenticating local users through LDAP. I am aware of the config variable LDAP_PW_ONLY, which is currently set to 0 (No). We are considering the pros and cons of disabling the registration function, because this would prevent list subscribers from managing their subscriptions through the web interface.

Actually, setting this to 1 will prevent anyone (local or outside) from
registering a personal password with LISTSERV.  Essentially this turns off
LISTSERV's internal authentication method and allows only (local) users to
authenticate and only via LDAP.  Since LISTSERV's relationship with LDAP is
read-only, users cannot create/change an LDAP password via LISTSERV.  This
must be done by other methods outside of LISTSERV.

So non local users cannot use the WWW interface for anything requiring
authetication (such as reading messages for private lists to which they are
subscribed) and also cannot even use their password with emailed commands. Any
users with passwords previously registered with LISTSERV will be immediately
invalidated since LISTSERV will no longer check their password against its
internal storage.

So consider carefully about making such a change, and be sure to give adequate
notice to all affected users.

############################

To unsubscribe from the LSTSRV-L list:
write to: mailto:[log in to unmask]
or click the following link:
http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=LSTSRV-L&A=1

ATOM RSS1 RSS2