Re: sasldb2 password change

Ralf Lang <[email protected]> Thu, 08 Mar 2012 18:14:57 +0100
Newsgroups gmane.comp.horde.sork
Message-ID <[email protected]>
Am 08.03.2012 18:08, schrieb Tilman Schmidt:
> Am 08.03.2012 01:24, schrieb Kinglok, Fong:
>> Hi, you can consider using expect script for changing password.  For
>> sure, it is only for vpopmail.
>
> The trouble with that approach is that saslpasswd2 doesn't check the old
> password before setting the new one. With the "expect" driver, that
> behaviour is passed through to the user, ie. whoever gets to a logged in
> Horde screen can set a new password for the logged in user without
> knowing the old one. I would not be comfortable with that.
>

I don't have a sasl auth setup I could test a new driver against but if =

you can provide one, I can reserve some hours in cw12 to build a driver =

against Jon Parise's php5-sasl extension.

-- =

Ralf Lang
Linux Consultant / Developer
Tel.: +49-170-6381563
Mail: [email protected]

B1 Systems GmbH
Osterfeldstra=DFe 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
-- =

Sork mailing list - Join the hunt: http://horde.org/bounties/#sork
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]