[prev in list] [next in list] [prev in thread] [next in thread] 

List:       info-cyrus
Subject:    Re: How to let users change their password ?
From:       Michael Fair <michael () daclubhouse ! net>
Date:       2002-02-11 17:32:08
[Download RAW message or body]

One method would be a cgi script that would run 
a separate setuid script to run saslpasswd on 
the users behalf.

However, unless it is run on a secure site
it severley limits the amount of faith you
can have in the security of the password.
On the other hand, if you are not encrypting
your IMAP logins and sending passwords "in
the clear" then you really aren't making 
much more of a security hole for yourself.

Similarly, you could make the script the
login shell for users who could then telnet
to the machine, log in, and change their password.

Good Luck, and Happy Hacking!
-- Michael --

----- Original Message ----- 
From: "Daniel Persson" <myrridin@wlug.westbo.se>
To: <info-cyrus@lists.andrew.cmu.edu>
Sent: Thursday, February 07, 2002 2:46 AM
Subject: How to let users change their password ?


> Hi all,
> 
> Im finally up and running with my new mailsolution.
> 
> However, right now all users got a default password, and i want to let
> them change their passsword.
> 
> How do i accomplish this since none of them has shellacess and cant run
> saslpasswd ?
> 
> Any good tricks out there ?
> 
> /Daniel
> 
> -- 
> Daniel Persson
> 
> Westbo Linux User Group ---> http://wlug.westbo.se
> A swedish site about Gnome ---> http://wlug.westbo.se/gnome
> My personal pages ---> http://wlug.westbo.se/~myrridin
> 
> Dagens kommentar :
> 
> "Computer games don't affect kids; I mean if Pac-Man affected us as kids,
> we'd all be running around in darkened rooms, munching magic pills and
> listening to repetitive electronic music."
> 
> Kristian Wilson, Nintendo, Inc, 1989.
> 
> 
> 

[prev in list] [next in list] [prev in thread] [next in thread]