Re: Web based password change

From: Ahmed Moustafa (amoustafa@pobox.com)
Date: 03/30/02


From: Ahmed Moustafa <amoustafa@pobox.com>
Date: Sat, 30 Mar 2002 06:30:10 GMT

Guylene Gadal wrote:
> And - how secure is your web server??
>
> Mark Wake wrote:
>
>>Has anybody ever tried to put a web based front end onto a unix box for
>>changing a unix password. I need to be able to offer a facility whereby a
>>user can change their own password. It needs to be done via apache. I was
>>thinking along the lines of a cgi script to run the passwd command under
>>solaris. Any thoughts or experiences?
>>
>>Thanks,
>>Mark.

I implemented that with an Expect CGI script which was of 2 steps:
1. login to the system (via telnet - of course SSH would be more secure).
2. interact with passwd to change the password.

It worked fine on a Solaris 2.7.

-- 
Ahmed Moustafa
http://pobox.com/~amoustafa



Relevant Pages

  • Re: Please help, directory level protection needed.
    ... > you rely on the Web Server to implement a check to control access. ... >> I am trying to implement a secure software update directory. ... > free download to your software program, ...
    (microsoft.public.inetserver.iis.security)
  • RE: newbie -how do you defend your decision?
    ... Concerning the Web server, IIS 6 is the most secure Web server available. ... Microsoft solution is the support you get, whether from our MVPs, ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: NT/2000 vs Unix based Web Servers
    ... front of the web server as part of this discussion but please also note ... high level of security on it and like everything else we discussed they ... do not come secure 'out of the box'. ... Trustix Secure Linux is a ...
    (Security-Basics)
  • RE: "Secure" Web Hosting?
    ... I think that you mount an Apache Web Server on a Windows 2000 or 2003 (I ... are fine or more secure that usind IIS. ... El contenido de este mail y cualquier archivo adjunto son confidenciales. ...
    (Security-Basics)
  • Re: Websites getting hacked
    ... more things to do to secure your system, ... important are installing all security patches, ... IIS web server log for other ... that are set to start a new log every day, so I recommend changing this ...
    (microsoft.public.inetserver.iis.security)