Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Using Mailman version: 2.1.12

I'm looking for a way to do several things with Mailman:

  1. Disable user passwords completely. I know how to disable the reminders, but I'd like for them not to be set via e-mail or other sources. My concern is that a user will use a personal password and Mailman does not secure this at all.

  2. Disable LISTSERV commands (such as SUBSCRIBE, etc) via e-mail.

My plan is to replace the web interface with an alternative system, or write a simpler list management front-end with LDAP authentication using CherryPy+Apache at some point.

share|improve this question
1  
Don't disable the ability of people to unsubscribe, unless you want to find yourself blacklisted as a spammer. –  Michael Hampton Jan 28 '13 at 20:39
add comment

2 Answers

Afaik the password is only used in the webfrontend, so if you're replacing that, you don't need to worry about passwords.

And if you don't add the relevant aliases (foo-subscribe@...) to your mailserver, those commands don't happen either.

share|improve this answer
add comment

If using mailman is not a requirement then you should consider sympa.

Sympa does not have this old school thinking with passwords and mail commands and has a nice web GUI. It has several integration strategy with LDAP.

http://www.sympa.org/doc/index

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.