Date: Fri, 19 Nov 1999 10:00:21 +0800 (PHT) From: "Francis A. Vidal" <francis@usls.edu> To: cataract@eye2eye.net Cc: 'Sheldon Hearn' <sheldonh@uunet.co.za>, 'FreeBSD Questions' <freebsd-questions@FreeBSD.ORG> Subject: RE: change system password over web Message-ID: <Pine.BSF.4.10.9911190958380.74748-100000@atlas.usls.edu> In-Reply-To: <1145CD545D54D211BCEB0060B067AD0618C125@RETINA>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- - ---- Quoting 's message, sent 11/18/99 1:51pm ---- > We had a problem like this at the office and sorted it out with an > interesting solution. The main problem is you need to be root to do > this, and apache refuses to run as root unless you fix it a little - > and thats NOT recommended. > > So what we did is we made a php3 script which is the ACTION of our > form. What we do is send a mail to root with cunning hidden headers > and some pgp encryption of the username and new password. Then we have > a procmail filter which looks for the hidden header, takes the > encryption passes it through a php binary which decrypts the pgp and > then executes something like this : > > #$1 = username > #$2 = newpassword > > /usr/sbin/pw usermod $1 -h 0 <<EOF > $2 > EOF > > Weird solution - but it works! do you have the source for the PHP scripts and the procmail filter? i might try it, sounds interesting. i also saw a posting about using Expect. btw, is there also a way to include a Hint phrase just in case the user forgets the password? - -- francis vidal university of st. la salle, bacolod city, philippines . . . . . . . PGP key available via e-mail / subject: get PGP key u s l s N E T tel nos. (+63.34).433.3526 / fax (+63.34).434.0415 -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv Comment: Requires PGP version 2.6 or later. iQCVAwUBODSvOBHlkpsNrjEFAQERggP9Fb4i2e/DY61RfJlsspnpuFukitemkSuX yFNu2N89QmFgBLifbX9PDjfmU7Uu80y1xJCyV2FK7fl9nxH2elGapfHTCfb5rdsh czPPKgxUdCk7CW4SSejL4s3bB+/gUsqDIazYrmKJTE12AvTIDrePnFJ7suyq03H3 cD0tr2xMD+0= =9TIk -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9911190958380.74748-100000>