Re: sasldb2 password change

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============4380629251331411295==
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enigFD36DC2EDD8F27856D5B8C3C"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigFD36DC2EDD8F27856D5B8C3C
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Am 08.03.2012 01:24, schrieb Kinglok, Fong:
> Hi, you can consider using expect script for changing password.  For
> sure, it is only for vpopmail.=20

The trouble with that approach is that saslpasswd2 doesn't check the old
password before setting the new one. With the "expect" driver, that
behaviour is passed through to the user, ie. whoever gets to a logged in
Horde screen can set a new password for the logged in user without
knowing the old one. I would not be comfortable with that.

--=20
Tilman Schmidt
Phoenix Software GmbH
Bonn, Germany


--------------enigFD36DC2EDD8F27856D5B8C3C
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9Y548ACgkQ780oymN0g8MGOQCgqYAMq27djnJaYmb77ACXcoB6
4+UAoImZcxbGTnem2Q1DCT0+HQ7fcRRv
=cRqj
-----END PGP SIGNATURE-----

--------------enigFD36DC2EDD8F27856D5B8C3C--

--===============4380629251331411295==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
Sork mailing list - Join the hunt: http://horde.org/bounties/#sork
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]

--===============4380629251331411295==--