On Mon, Aug 07, 2000 at 04:15:12PM +0530, UK Jaiswal wrote:
: Use php:

How is that a password change script (as the subject requests)?

If you really want to do web based password changes, make sure you're doing
it over https.

I do this using a combination of poppassd, and a php script I wrote that 
talks to the poppassd running on the local machine.  Why poppassd?  It 
avoids running an httpd as root, running suid cgi processes, or other
such nonsense..  Configure your firewall (or use ipchains) to NOT allow
poppassd connections from outside of your local LAN, as it uses clear
passwords.  In my case, this is ok, since the php script talks to the 
poppassd running on localhost.

I use the ceti version of poppassd (since it is PAM-ified):

/home/jcostom$ rpm -q poppassd-ceti
poppassd-ceti-1.8-1

Here's a link to the php class I wrote to interface with the poppassd.

http://www.zend.com/codex.php?id=62&single=1

: <?php
: $user="username";
: $passwd="password";
: 
: if($PHP_AUTH_USER!=$user || $PHP_AUTH_PW!=$passwd)

-- 
Jason Costomiris <><           |  Technologist, geek, human.
jcostom {at} jasons {dot} org  |  http://www.jasons.org/ 



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to