[imp] PHP scripts

Eric J Rostetter eric.rostetter@physics.utexas.edu
Fri, 22 Feb 2002 08:53:21 -0600


Quoting DM <sysadm@hzrtvu.org>:

> I don't have a poppassd running and I tend to run daemons less as
> possible..(security concerns)

That is a concern.  I run the poppassd on the server, with tcp_wrappers
restricting connections to localhost only, and ipchains blocking it
from anyone except localhost, and then hope for the best.  I think with
tcp_wrappers, ipchains, the built-in username/password authentication,
and the fact that it doesn't allow system accounts to be changed, it
is *fairly* secure.  But of course this does open another potential
hole.  You have to decide if the benefit outways the security risk.

In our case, where the passwords shouldn't hit the network (loopback
address only), and it is firewalled pretty well, we think it is fairly
secure.  And since we only have 2 support people to do *everything* for
over 1000 users, we found it a great benefit to allow them to change their
own passwords easily, rather than having them call us for help or to havce us 
change it for them, etc.

> I just heard php has a few vpopmail functions that allows users to change
> password/domains..

I don't know anything about this, but I will look into it.  If there is
an easy to use interface, and I have a couple people willing to test it,
I'd be willing to write a special module to do this.

> I'm not a good php coder though, that's why i asked for help :-)

Nor am I, but someone has to do it ;)

> Thanks for the reply. I appreciate that.
> 			
> Warm regards,
> DM

Eric Jon Rostetter
The Department of Physics
The University of Texas at Austin
Austin, Texas 78712-1081

Office:    RLM 7.126
Telephone: 512-471-5821
Email:	   eric.rostetter@physics.utexas.edu

------------------------------------------------------------
"I like driving around with my two cats, especially on the 
freeway.  I make them wear little hats so that I can use the 
carpool lane.  Way too much time on your hands too?  Call me. 
SWF, 42, 5'10", brown/blue."  -- from the book "Plain Fat 
Chick Seeks Guy Who Likes Broccoli" (Gibbs Smith)