Re: remote passwd change

From: cc (cc_at_belfordhk.com)
Date: 10/03/03

  • Next message: Oscar Kooijman: "RE: cmdline tool to add users (win2k)"
    Date: Fri, 03 Oct 2003 11:22:28 +0800
    To: security-basics@securityfocus.com
    
    

    Ruiz Cifuentes, Rolando Matias (CL - Santiago) wrote:

    >
    > telnet myserver anyport (using a .bat file in their computers)
    >
    > and then the server replies something like:
    >
    > Enter your Username: <user>
    > Enter your OldPass: <pass1>
    > Enter your NewPass: <pass2>
    > Enter your NewPass again: <pass2>
    > Your password has been change. Have a nice day!

    I've been trying to do this for eons and still haven't
    figured it out. As with non-linux users, they won't/
    don't understand why they need to telnet to a server.

    I thought about using a secured web form installed on
    the company's server and accessible only to LAN users;
    but couldn't figure out how to get the perl script/
    php script to actually change the passwords since
    the UID/GID of the Apache server isn't root-based
    (which is the correct way of doing things).

    I did find something like chpass on the net, but
    couldn't figure out how to get it running.

    The only way, right now that i can think of, is
    to teach the users the benefit of your solution. (Making
    sure, of course that the telnet port is only
    accessible to LAN IPs.)

    If someone out there has any good ideas, I'm also
    willing to try.

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Oscar Kooijman: "RE: cmdline tool to add users (win2k)"

    Relevant Pages

    • RE: remote passwd change
      ... it's a simple, safe, configurable cgi, that you "make, make install" and ... don't understand why they need to telnet to a server. ... the company's server and accessible only to LAN users; ... of course that the telnet port is only ...
      (Security-Basics)
    • Re: OWA issue
      ... for Exchange coming from external IP addresses. ... As you said,there is no record in IIS log file about requests for ... TELNET port 443 to my server in home,it is all working,now i was ... i can TELNET port 443 to the exchange server from external IP addresses. ...
      (microsoft.public.exchange.admin)
    • Re: Cant telnet Exchange server on port 25
      ... The server runs on a single NIC, Running Proxy 2.0, I ... can't telnet port 25 from inside the LAN including from ...
      (microsoft.public.backoffice.smallbiz)
    • Re: Recipient unknown when attaching to Exchange 2000
      ... connect from the client on telnet port 25. ... matter what profile I set up on this pc I get exactly the ... >Exchange server runs locally at the remote office. ...
      (microsoft.public.exchange2000.clients)
    • Re: impersonator@mydomain.com - telnet port 25
      ... >How do u prevent hackers from assuming an existing name in ... >your domain when they send a mail through telnet port 25 at command prompt. ... no authentication is required and the server does not ... If its addressed to an existing email account, ...
      (microsoft.public.exchange.admin)