AuthContextInfo(): Python's standard Cookie.py doesn't allow colons in

    the key.  It's strictly interpreting the relevant RFC.  We may
    change Cookie.py to be more relaxed, but instead of trying to
    maintain our own copy of this file, we'll just change the
    separator to be a `+' intead of a `:' -- Cookie.py seems happy
    with this.

1 files changed, 2 insertions, 2 deletions

diff --git a/Mailman/SecurityManager.py b/Mailman/SecurityManager.py
index 58c5a2137..1704a2402 100644
--- a/Mailman/SecurityManager.py
+++ b/Mailman/SecurityManager.py
@@ -91,13 +91,13 @@ class SecurityManager:
         # AuthUser, but the user isn't a member of this mailing list, raise a
         # MMNotAMemberError error.  If the user's secret is None, raise a
         # MMBadUserError.
-        key = self.internal_name() + ':'
+        key = self.internal_name() + '+'
         if authcontext == mm_cfg.AuthUser:
             if user is None:
                 # A bad system error
                 raise TypeError, 'No user supplied for AuthUser context'
             secret = self.getMemberPassword(user)
-            key += 'user:%s' % user
+            key += 'user+%s' % user
         elif authcontext == mm_cfg.AuthListModerator:
             secret = self.mod_password
             key += 'moderator'