Security Basics mailing list archives

Re: remote passwd change


From: "Gabriel Orozco" <gabriel_orozco () mx sumida com>
Date: Fri, 3 Oct 2003 11:17:13 -0500

There are several web tools that can do the job

visit www.freshmeat.net
and look for "password change" (without quotes) in their search bar.

then, choose the ones you like the better, and try/test them.

of course it's way better to have this in a SSL protected page.

Regards

----- Original Message ----- 
From: "Ruiz Cifuentes, Rolando Matias (CL - Santiago)" <rruiz () deloitte cl>
To: <security-basics () securityfocus com>
Sent: Thursday, October 02, 2003 3:21 PM
Subject: remote passwd change


Here is the scenario:
RedHat 7.2 using shadows passwords -> used for popmail use
popmail users are RedHat users, so their password are in /etc/shadow
users dont know nothing about linux (they are windows basic users)

Here is my problem:
I need to make them (~200 users) able to change their linux (mail) pasword
remotely, in the easiest every ever thought way. how can i do this? (i'
dont
care if passwds are send in plaint text over the net) I' was thiking in
something like:

telnet myserver anyport (using a .bat file in their computers)

and then the server replies something like:

Enter your Username: <user>
Enter your OldPass: <pass1>
Enter your NewPass: <pass2>
Enter your NewPass again: <pass2>
Your password has been change. Have a nice day!

do anyone knows anyway to do this? (in this or any other way)

thaks for your help

--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--




---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: