Package: sympa
Version: 5.2.3-1.2
Severity: wishlist

Whenever Sympa/WWS is used with HTTPS, one must pay attention to
configuring :
SSLOptions StdEnvVars
in the mod-ssl configuration parameters (maybe thos for wws), so that
the test on SSL_PROTOCOL variable is successful to detect
referer/redirection mechanism on loging-in via the login box in the WWS
interface (wwslib:get_my_url function).

Otherwise, when logging-in from an HTTPS URL, the user will be
succesfully logged-in, but redirected to a HTTP URL.

Of course this should be added to the docs, but I'm thinking of a
possible conf in a config file provided it's enclosed in a conditional
test of mod-ssl use ?

Best regards,

For more details see the thread here :
http://listes.cru.fr/sympa/arc/sympa-fr/2006-01/msg00024.html (in
french) and my soon appearing followup there ;)

Best regards,


-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages sympa depends on:
ii  adduser                     3.102        Add and remove users and groups
ii  debconf [debconf-2.0]       1.5.11       Debian configuration management sy
ii  exim4-daemon-light [mail-tr 4.63-17      lightweight exim MTA (v4) daemon
ii  libarchive-zip-perl         1.16-1       Module for manipulation of ZIP arc
ii  libc6                       2.3.6.ds1-10 GNU C Library: Shared libraries
ii  libcgi-fast-perl            5.8.8-7      CGI::Fast Perl module
ii  libcrypt-ciphersaber-perl   0.61-4       Perl module implementing CipherSab
ii  libdbd-mysql-perl           3.0008-1     A Perl5 database interface to the 
ii  libdbi-perl                 1.53-1       Perl5 database interface by Tim Bu
ii  libfcgi-perl                0.67-2       FastCGI Perl module
ii  libintl-perl                1.16-1       Uniforum message translations syst
ii  libio-stringy-perl          2.110-1      Perl5 modules for IO from scalars 
ii  libmailtools-perl           1.74-1       Manipulate email in perl programs
ii  libmd5-perl                 2.03-1       backwards-compatible wrapper for D
ii  libmime-perl                5.420-0.1    Perl5 modules for MIME-compliant m
ii  libmsgcat-perl              1.03-3       Locale::Msgcat perl module
ii  libnet-ldap-perl            1:0.33-2     A Client interface to LDAP servers
ii  libtemplate-perl            2.14-1       template processing system written
ii  libxml-libxml-perl          1.59-2       Perl module for using the GNOME li
ii  mhonarc                     2.6.16-1     Mail to HTML converter
ii  perl [libmime-base64-perl]  5.8.8-7      Larry Wall's Practical Extraction 
ii  perl-suid                   5.8.8-7      Runs setuid Perl scripts
ii  sysklogd [system-log-daemon 1.4.1-18     System Logging Daemon

Versions of packages sympa recommends:
ii  doc-base                      0.7.21     utilities to manage online documen
ii  logrotate                     3.7.1-3    Log rotation utility

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to