From owner-freebsd-questions  Thu Mar 25  9:43:37 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from pleb.cs.uct.ac.za (pleb.cs.uct.ac.za [137.158.132.206])
	by hub.freebsd.org (Postfix) with ESMTP id 4822314C3F
	for <freebsd-questions@FreeBSD.ORG>; Thu, 25 Mar 1999 09:43:13 -0800 (PST)
	(envelope-from khetan@link.freebsd.os.org.za)
X-Disclaimer: Contents of this e-mail are the writer's opinion
X-Disclaimer2: and may not be quoted, re-produced or forwarded
X-Disclaimer3: (in part or whole) without the author's permission.
Received: from localhost (khetan@localhost)
          by pleb.cs.uct.ac.za (8.9.1+3.1W/8.9.1a) with SMTP id TAA00708;
          Thu, 25 Mar 1999 19:42:26 +0200 (SAT)
          (envelope-from khetan@link.freebsd.os.org.za)
Date: Thu, 25 Mar 1999 19:42:25 +0200 (SAT)
From: Khetan Gajjar <khetan@link.freebsd.os.org.za>
X-Sender: khetan@pleb.cs.uct.ac.za
Reply-To: Khetan Gajjar <khetan@os.org.za>
To: Branko Kmetec <brane@mra.si>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Web interface for poppassd
In-Reply-To: <Pine.BSF.3.96.990325143623.24959A-100000@frida.mra.si>
Message-ID: <Pine.BSF.4.02A.9903251933270.394-100000@pleb.cs.uct.ac.za>
X-Mobile: +27 82 9907663
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Thu, 25 Mar 1999, Branko Kmetec wrote:

>I'm looking web interface for poppassd. Any idea?

I use :
<form action="/cgi-bin/change-pass.cgi" method="POST">
Enter your username (all lower case): <BR>
<input type=text name="username" size=20><BR>
<P>
Enter your current password: <BR>
<input type="password" name="oldpasswd" size=20><br>
Select a new password: <BR><input type="password" name="passwd" size=20> <BR>
Re-enter your new password for verification: <BR>
<input type="password" name="passwd1" size=20> <p>
<input type="submit" value="Change Password">
<input type = "reset" value = "Clear Fields">
</form>

with the change-pass.cgi to do this. I've sent this to you in private
mail. Anyone else wanting it please mail me directly.

I would _strongly_ recommend installing poppassd with TCP/Wrappers,
and only allowing access from the web server. It makes it a bit
more secure, and prevents people using something like Eudora to
change their password over potentially insecure lines.

I had to fudge the poppassd to use a script file that had -l as a 
parameter; I'm on a network that uses Kerberos IV.
--- 
Khetan Gajjar       (!kg1779) * khetan@iafrica.com ; khetan@os.org.za
http://www.os.org.za/~khetan  * Talk/Finger khetan@chain.freebsd.os.org.za
FreeBSD enthusiast            * http://www2.za.freebsd.org/
Security-wise, NT is a OS with a "kick me" sign taped to it  



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message