[imp] force password change

Michael M Slusarz slusarz@bigworm.colorado.edu
Mon, 17 Jun 2002 15:15:21 -0600


Quoting tomc@teamics.com:

| Is there a way to force IMP 3.0 users to change their initial password?
| I considered putting a redirector in, but though I might end up creating
| a
| security hole or just jacking up the IMP.

Probably not in IMP 3.0.  In the latest CVS head, you could write a 
maintenance module that would only run once (FIRST_LOGIN) that would not 
let a user log in until they changed their password successfully.

michael

______________________________________________
Michael Slusarz [slusarz@bigworm.colorado.edu]
The University of Colorado at Boulder