Web based password updating...

Mike O'Rourke mjoop at curia.op.org
Tue Jan 27 21:35:25 EST 2004

>>> "Adam Gover" <agover at rogers.wave.ca> 01/28/04 03:06am >>>

Im starting to think you took the better of the two options.  I did
additional looking and it looks like the better option is to simply do
the mysql thing.  I was trying to avoid it as it adds some additional
overhead, which I admit really shouldn't impact the system at all,
said its better to be a miser :)

Ill see if I can whip up a quick little cgi or php password changer.  

I figure ill just do the passwd rip to insert the user names into the
database without actually creating the inbox, then once the password
set auto create the inbox for them...  That should work pretty well

Thanks for the idea..  A little bit of extra work for me, but if it
saves me the pain of having my co-workers freaking because users keep
calling to set passwords its always good :)


> -----Original Message-----
> From: owner-info-cyrus at lists.andrew.cmu.edu [mailto:owner-info-
> cyrus at lists.andrew.cmu.edu] On Behalf Of Kendrick Vargas
> Sent: Tuesday, January 27, 2004 8:23 PM
> To: Cyrus Info List
> Subject: Re: Web based password updating...
> On Tue, 27 Jan 2004, Adam Gover wrote:
> > Im not too sure if this is the correct list for this or not so
> > excuse me if I have misdirected this.
> >
> > Im in the process of migrating my departments internal mail system
to a
> > cyrus/postfix combo.  Our current system is simply using
> > /etc/passwd for authentication/user lookup at this point I am not
> > of a simple method to obtain the users current passwords as such I
> > to arrange a way for users to update passwords.
> >
> > Since my team really doesn't have the resources (or time) to field
> > 200-300 calls for users attempting to change passwords I was
> > if anyone has run across a web based password change tool that
> > with my setup (web-cyradm I don't think will work).  I have looked
> > around but as of yet I have not seen anything that will allow
> Well, I wrote my own. Basically I migrated my /etc/passwd+shadow to
> mysql database. The migration was probably easier for me (~30 users)
> it would be for you. Then I set up cyrus-sasl to auth against mysql.
> Writing a php script to handle changing users' passwords was very
easy. If
> you don't feel comfortable doing that, you could look into imp-4's
> modules. IMP v4 which is in CVS has a whole buncha modules along
> which basically make it the perfect account administration
> including password change. Would anyone (off the top of their heads)
> how close they are to releasing?
> 			-peace
> --
> Let he who is without clue kiss my ass



Is a webmail interface going to be part of your setup? If so, I know
that SquirrelMail has several good change password plugins for various
needs, and I would imagine (but I do not know) that Horde would have
something similar.

You might even grab one of the plugins from the Squirrel site. They are
written in PHP, and the one for changing the sasldb password is easy to
adapt to a stand-alone page.


More information about the Info-cyrus mailing list