[horde] Re: How to enforce password change on first login...

[Michael C. Ibarra]

I had just finished looking into utilizing authentication against
sql and I realized that my custom login ceased to work.  Where and
how do I use sql-auth and retain my custom login/logout screen?

Thanks, and kudos on the look/feel of the user admin frontend.

-mike


Quoting "Jason M. Felice" <jfelice at cronosys.com>:

> Michael M Slusarz wrote:
>
>> Quoting Victor Guilherme Hogemann <hogemann at rio.rj.gov.br>:
>>
>>> Greetings,
>>>
>>> [...SNIP...]
>>>
>>> Well, that's my congratulations... now let's the complains start!
>>>
>>> I'd like to now if there is some way to force users change their
>>> passwords upon
>>> the first login. I need this because we create the accounts with an custom
>>> application, and the password must be changed by the account user 
>>> before the
>>> first use.
>>>
>>> I'm pretty sure that there is no obvious configuration to make it
>>> happen, so I
>>> gess I'll have to code some hack to do it. Can you help me on this? Where
>>> should I look for help, examples, spiritual advice?
>>>
>>>
>>
>> Look at the Maintenance class in Horde.  You can write a maintenance
>> module that would prompt for a new password on a user's first login to
>> Horde.
>>
>>
>
> Actually, more directly, I added the ability to have logins expire.
> Only the SQL auth driver supports it at the moment, but any auth driver
> can be extended to do the same thing.  You can have your custom
> application set the soft expiration date to one second ago, and the user
> will be prompted to change his or her password whenever he or she logs in.
>
> --
> Jason M. Felice
> Cronosys, LLC <http://www.cronosys.com/>
> 216.221.4600 x302