Apache OpenOffice (AOO) Bugzilla – Issue 102643
security team/issue mailing lists broken
Last modified: 2012-04-13 05:37:08 UTC
We just created a new project "security", and now the old mailing list security-team@ooo doesn't work anymore, I guess same for security-alerts@OOo. failure notice: > <security-team@openoffice.org>: > Unable to find address team in project security, domain openoffice.org > Do you mean httpd-security-team@openoffice.org? I can't work around this by creating "team" and "alerts" list in the security project, because then all project members could subscribe, while the "team" list is only for some dedicated people. Since this list is used from external security companies to inform us about not disclosed security issues, this is quite urgent.
Adding myself in Cc
reassigning to support...
mt Can I post test-emails to the mentioned mailing lists to see if it works fine? Let me re-confirm that you mentioned these two mailing lists weren't working: security-alerts@openoffice.org security-team@openoffice.org Am I right? Regards N Deepak Support Operations.
As you see from Malte's failure notice we know that security-team@openoffice.org doesn't work. Feel free to send test-messages to security-team@openoffice.org. We are not sure whether security-alerts@openoffice.org works. But let's wait with testing this list with dozens of subscribers until we know the status of security-team@openoffice.org.
Hi We have filed an internal ticket to look in to this issue & will respond as soon as possible. Regards N Deepak Support Operations.
Do you have an update for us on this P2 issue?
Hi I have got some updates from our internal team & have asked them few questions in return. I shall update you about the issue in a consolidated format once I receive aswers from our team. Regards N Deepak Support Operations.
Do you have an update for us on this P2 issue after a week?
Hi Our engineers have found that there does exist a bug in the following scenario. 1. Create new mailing list (test-new) in www project 2. Create a new project (test) 3. Send a mail to test-new@domain. You will receive an error mail message saying "Unable to find address new in project test, domain" So, the issue was only with the mailing threads xxx-yyy@domain and if a project with name xxx exists. <With respect to this issue, the workaround is to change the project name from security to something else.> This issue is fixed in CEE versions 5.x & above. Please let me know if you need more information. Regards N Deepak Support Operations.
Hello N Deepak, of course renaming the project is not an option. And waiting for the deployment a newer version of CEE is also not an option. You said the bug only exists when the project was created after the mailing list. Would it help to delete the mailing list, and create it again? Thanks, Malte.
Malte Sounds like a good option, but you will have to make sure that this time you name the mailing list to something else that does not coincide with a project's name in the entire openoffice.org domain. Let me know if you need more information from me to help you further or if I can go ahead & close this case for now. :) Thanks N Deepak Support Operations.
Well, of course my suggestion was to recreate the list with exactly the _same_ name as before. You stated that the issue would only exist when the project was created _after_ the list. Shouldn't it work then?
Malte The issue lies only with the mailing lists of the 'www' project alone. So, you will have to create a new mailing list 'xxx@openoffice.org' where 'xxx' is not a name of any existing project in the entire site openoffice.org. If you still would insist on using the same mailing list, then you will have to make sure all the posters post their respective emails to the mailing list address in the following format: <security-alerts@www.openoffice.org> <security-team@www.openoffice.org> I have tested sending emails to the above mentioned mailing address formats & it does work. Please notice the '@www.openoffice.org' in the email address. If you still have any doubts regarding this issue, please feel free to leave a phone number where I can reach you. Regards N Deepak Support Operations.
Thanks for the update - I will clarify with the team if they want to use @www, or a different list name...
Mt.. I removed my name from both the mailing lists. I would also suggest you to verify the same. I think that cuts down the issue to your decision on how to proceed further from here. So, could I go ahead & close this ticket for now? Regards N Deepak Support Operations.
Since you wont fix this issue in our current environment, feel free to close it...
Reset QA Contact to new default
legacy infrastructure issue, not pertinent to Apache