From owner-freebsd-questions Sat Apr 11 12:28:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA21982 for freebsd-questions-outgoing; Sat, 11 Apr 1998 12:28:21 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from mail.ahnet.net (mail.ahnet.net [207.213.224.25]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA21969 for ; Sat, 11 Apr 1998 12:28:14 -0700 (PDT) (envelope-from webmaster@zwb.net) Received: from znet-pdcs (icg-apc-pr1-p18.apc.net [207.211.76.172]) by mail.ahnet.net (8.8.7/8.8.6) with SMTP id MAA12227; Sat, 11 Apr 1998 12:20:38 -0700 (PDT) Message-Id: <3.0.5.32.19980411122408.00934510@207.213.224.25> X-Sender: 5808.dima@207.213.224.25 X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Sat, 11 Apr 1998 12:24:08 -0700 To: Paul Dekkers From: Dima Dorfman Subject: Re: password change via the web?! Cc: freebsd-questions@FreeBSD.ORG In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Such a script would be very hard to make secure, because to change a password, you have to run with root's permissions. However, this can be accomplished by hacking the 'passwd' code, and changing all calls to getpass(3) to return an argument from the command line. Then, write a script that takes input from a form, and converts that into a call to the first program. This, however, is still insecure. Thanks! Dima At 07:00 PM 4/11/98 +0200, you wrote: >Hi > >I know I already asked this once here, but there wasn't an answer: does >anyone have a cgi-script to change one's password under FreeBSD (and/or >Linux?) > >Paul > >-- >Paul Dekkers >E-Mail: >To err is human, to moo bovine > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message > > --- Thanks! Dima Dorfman - dima@zwb.net "640k ought to be enough for anybody." - Bill Gates, 1981 - Bill Gates To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message