Mailman configuration on Apache

B

balanga

I'm trying to set up Mailman to work with Apache following the notes here:-
http://www.freebsddiary.org/mailman.php
The notes are ten years old but that's all I could find.

As I understand it, once mail/mailman has been installed, all I need to do is add
Code: 
ScriptAlias  /mailman   "/usr/local/mailman/cgi-bin"
to Apache's configuration and presumably
Code: 
http://example.org/mailman/
should take me to the web interface for mailman.

I get a Forbidden msg so I guess the permissions are wrongly set.

What do I need to do?

Incidentally is there a preferred Mailing List Manager for FreeBSD?
 
Which version of Apache are you using? Note that Apache 2.4 configuration has changed syntax a bit, you better read up on it.
Also, you post isn't very clear on what version of mailman, FreeBSD and son you are trying to set up.
Details matter - please be precise and reasonably complete.
 
According to:

http://www.purplehat.org/?page_id=18


I need to add Apache to Mailman group using


pw usermod www -G mailman


This doesn't get round the Forbidden error....

The httpd-error.log shows

Code: 
[Sun May 29 23:58:41.409265 2016] [authz_core:error] [pid 55215] [client 82.37.21
5.218:31067] AH01630: client denied by server configuration: /usr/local/mailman/cgi-bin/


Under apache24 I have a mailman.conf consisting of

Code: 
ScriptAlias     /mailman/       /usr/local/mailman/cgi-bin/

<Directory "/usr/local/mailman">
       AllowOverride All
       Options FollowSymlinks
       Require all granted
    </Directory>

Doesn't seem to get round the problem....
 
The error happens because DirectoryIndex isn't set and directory browsing is turned off by default.
 
I tried this - but without success....

Code: 
ScriptAlias     /mailman/       /usr/local/mailman/cgi-bin/

<Directory "/usr/local/mailman">
    DirectoryIndexRedirect on
       AllowOverride All
       Options FollowSymlinks
       Require all granted
    </Directory>
 
I already checked the reference mentioned, that's why I included the DirectoryIndexRedirect directive but that doesn't work. I don't see any other directive to allow directory browsing.
 
You don't want to enable directory browsing (that's why it's off by default too). You certainly don't want to enable directory browsing on a cgi-bin directory as it would introduce a major security risk. Imagine hackers being able to simply browse your cgi-bin and pick and choose the scripts to attack. They don't even have to guess the names anymore.
 
OK, so you've explained what I don't want to do, but I still have no idea what I should do to enable mailman's cgi-bin directory to be usable

By default Apache only looks for index.html and index.htm. If those files don't exist or cannot be read it resorts to directory browsing. Directory browsing is forbidden by default.
Click to expand...

So how do I permit apache users to use /usr/local/mailman/cgi-bin?

I have read https://httpd.apache.org/docs/current/mod/mod_dir.html#directoryindex

but can't see how I'm supposed to handle access to this directory.
 
There is a directory full of commands.
Code: 
admin
admindb
confirm
create
edithtml
listinfo
options
private
rmlist
roster
subscribe

I'm not yet familiar enough with Mailman to know how to proceed. I assumed that browsing to
http://example.org/mailman/ would take me to a setup page, but that is forbidden. It turns out that I can actually go to http://example.org/mailman/admin so it is actually working.

Not quite as user-friendly as setting up Wordpress, I must admit.
 
You must log in or register to reply here.
Back
Top