[sork] passwd module

Eric Rostetter eric.rostetter@physics.utexas.edu
Thu Oct 24 02:55:10 2002


Quoting Aaron Collins <acollins@teamgtc.com>:

> > > Is their anyway to use a web post for the passwd module?  If no one
> >
> > I have no idea what that means -- can you expand on this concept?
>
> create a driver to do a post to a cgi somewhere, and have that cgi do

Ah, okay.  So basically just change the "action" of the form submission.
If the cgi uses the same names/fields as the form, then it is simple.

You could do this several ways:

1) Simply add a url to conf.* files, and have the html form call your cgi
   instead of its own handler if so configured.
2) Have a driver that "re-posts" the contents to your cgi.
3) Have a driver that calls your cgi via get (parameters in the query string)
4) Create an API in passwd, your cgi, or both.

#1 is simple.

#2 is more difficult.  And how to return to horde afterwards?

#3 has serious security concerns, unless it encrypts the passwords well before
passing them.  And same concern of returning to horde.

#4 is the most interesting, but may also be the most work, or at least 
require the most changes to your cgi.

Which of those would meet your needs?

-- 
Eric Rostetter
The Department of Physics
The University of Texas at Austin

Why get even? Get odd!