Re: sasldb2 password change
Ralf Lang <[email protected]> Thu, 08 Mar 2012 18:14:57 +0100
| Newsgroups | gmane.comp.horde.sork |
|---|---|
| Message-ID | <[email protected]> |
Am 08.03.2012 18:08, schrieb Tilman Schmidt: > Am 08.03.2012 01:24, schrieb Kinglok, Fong: >> Hi, you can consider using expect script for changing password. For >> sure, it is only for vpopmail. > > The trouble with that approach is that saslpasswd2 doesn't check the old > password before setting the new one. With the "expect" driver, that > behaviour is passed through to the user, ie. whoever gets to a logged in > Horde screen can set a new password for the logged in user without > knowing the old one. I would not be comfortable with that. > I don't have a sasl auth setup I could test a new driver against but if = you can provide one, I can reserve some hours in cw12 to build a driver = against Jon Parise's php5-sasl extension. -- = Ralf Lang Linux Consultant / Developer Tel.: +49-170-6381563 Mail: [email protected] B1 Systems GmbH Osterfeldstra=DFe 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 -- = Sork mailing list - Join the hunt: http://horde.org/bounties/#sork Frequently Asked Questions: http://horde.org/faq/ To unsubscribe, mail: [email protected]