Date: Mon, 13 Apr 1998 14:26:15 +0200 (CEST) From: Leif Neland <leifn@image.dk> To: Paul Dekkers <psd@cgu.nl> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: password change via the web?! Message-ID: <Pine.BSF.3.96.980413141600.1362B-100000@darla.swimsuit.roskildebc.dk> In-Reply-To: <Pine.BSF.3.96.980413103012.2552A-100000@chippie.cgu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 13 Apr 1998, Paul Dekkers wrote: > On 12 Apr 1998, Leif Neland wrote: > > > At 12 Apr 98 18:45:06 Niall Smart wrote regarding Re: password change via the > > web?! > > > > NS> Really? I hope not :) Another option would be to make it a > > NS> suid root shell script BUT with only the web server having > > NS> execute permission through supplementary groups. > > > > No need to suid to root, just suid to the user you want to change password for. > > To do that, you need the password for the user. > > And to su to another user, you need a program that is suid root, isn't it? No, try as a regular user: $ su - otheruser You get prompted for the password of the otheruser. So to change the password of some user, you just need the current password of this user. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980413141600.1362B-100000>