[sork] passwd doesn't change passwords

Wang, Yu ywang at unf.edu
Mon Sep 22 07:36:18 PDT 2003


I use ssl. In ssl_request_log:

[22/Sep/2003:08:30:46 -0400] 132.50.110.130 SSLv3 RC4-MD5 "GET /passwd/?Webmail=AAAf56eca80114asebr34092edd4bbb&Webmail= AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 0
[22/Sep/2003:08:30:47 -0400] 132.50.110.130 SSLv3 RC4-MD5 "GET /passwd/main.php?Webmail=AAAf56eca80114asebr34092edd4bbb&Webmail= AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 10907
[22/Sep/2003:08:31:04 -0400] 132.50.110.130 SSLv3 RC4-MD5 "POST /passwd/main.php?Webmail=AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 11348

I can see yours had two different session ids: f023... and d57b...;  Mine has same session ids. I guess the different session ids caused horde to redirect to login screen.

--Yu Wang

Information Technology Services
University of North Florida
(904) 620-2820



-----Original Message-----
From: Paul Lambert [mailto:paul at digis.net]
Sent: Sunday, September 21, 2003 10:06 PM
To: Wang, Yu
Cc: sork at lists.horde.org
Subject: Re: [sork] passwd doesn't change passwords


Thanks for the reply. I've tried your suggestions. I'm not getting any
errors on screen or in any logs just the imp login screen after I click
"Change your password". The only log that shows anything is the httpd
access log. Could you compare your access log to mine. Maybe that will
give a clue.

>>>>click "Change your password"

208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "POST
/horde/passwd/main.php?Digis+Webmail=f023a1b616c9ddf4dff82ea20c8e4cb4
HTTP/1.1" 302 5
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "GET
/horde/login.php?Digis+Webmail=1ef83186eb76ed35fde0490b247adf59&url=%2Fhorde%2Fpasswd%2Fmain.php%3FDigis%2BWebmail%3D1ef83186eb76ed35fde0490b247adf59
HTTP/1.1" 302 5
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "GET
/horde/imp/login.php?Digis%2BWebmail=a3bdd574deb481b8e32900ed80c28624&url=http%3A%2F%2Fwebmail.digis.net%2Fhorde%2Fpasswd%2Fmain.php%3FDigis%252BWebmail%3Da3bdd574deb481b8e32900ed80c28624%26Digis%2BWebmail%3D1ef83186eb76ed35fde0490b247adf59
HTTP/1.1" 200 7098
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

<<<<<shows IMP login screen.

Also here is my config/backends.php:

$backends['expect'] = array(
    'name' => 'Example expect script',
    'preferred' => '',
    'password policy' => array(
        'minLength' => '7',
        'maxLength' => '9',
        'minNumeric'=> '1',
        'minAlpha' => '1'
    ),
    'driver' => 'expect',
    'params' => array(
        'program' => '/usr/bin/expect',
        'script' => 'scripts/passwd_expect',
        'params' => '-ssh -host digis.net -output /tmp/passwd.log'
    )
);

scripts/passwd_expect is the same as yours

--
Thanks



Yu Wang wrote:
> 
> Paul,
> 
> I configured the password using Expect option. It works after I modified
> several things from default installation. Since you didn't show your
> configurations, I can just suggest you to check several places for the Expect.
> 
> My expect uses SSH to connect users to a different server since the server
> running Horde doesn't allow general users login.
> 
> Check the config/backends.php. Here is mine:
> $backends['expect'] = array(
>     'name' => 'User Server',
>     'preferred' => '',
>     'password policy' => array(
>         'minLength' => '7',
>         'maxLength' => '9',
>         'minNumeric'=> '1',
>         'minAlpha' => '1'
>     ),
>     'driver' => 'expect',
>     'params' => array(
>         'program' => '/usr/bin/expect',
>         'script' => 'scripts/passwd_expect',
>         'params' => '-ssh -host userserver.unf.edu -output /tmp/passwd.log'
>     )
> );
> 
> Then modify scripts/passwd_expect
> 
> ...
> }elseif {[string match $login "ssh"]} {
>    set pid [spawn ssh $host -l $user]
> }
> ...
> 
> and turn on log:
> log_user 1
> this will log all things into /tmp/passwd.log
> 
> Then you can use "tail -f /tmp/passwd.log" and run the password program to see
> where is the problem that cause the failure. It may because the key
> verification prompt or terminal type prompt or even login shell prompt. You
> need to modify the Expect script to fit those prompts.
> 
> You may also want to change the timeout value to a shorter one. The default
> timeout 20 is kind too long.
> 
> Finally, do you have any rewrite rules turned on? A broken rewrite rule in
> Apache can cause the program redirected to login page.
> 
> Hope this helps you pin the problem.
> 
> --
> Yu Wang
> Information Technology Services
> University of North Florida
> (904) 620-2820
> 
> Quoting Paul Lambert <paul at digis.net>:
> 
> > I have imp (using imap auth, and mysql), turba, and passwd installed and
> > everything works except when I submit to change a users password it just
> > goes to the imp login screen and doesn't change the password. It doesn't
> > matter what I type in the username and Old password field either. It
> > gives no errors on screen or in the logs. I have tried both poppassd (I
> > tested poppassd manually and it works) and expect. It is almost as if
> > the "change password" button doesn't do anything except take me to the
> > login page. Has anyone had a similar problem. Also I followed these
> > online instructions:
> > http://www.geocities.com/oliversl/imp/
> >
> > Anyone have a similar problem or have any suggestions?
> > --
> > Thanks in advance
> > Paul
> > --
> > Sork mailing list
> > Frequently Asked Questions: http://horde.org/faq/
> > To unsubscribe, mail: sork-unsubscribe at lists.horde.org
> >
> 
> ---------------------------------------------------------
> This mail sent through UNF Webmail: https://horde.unf.edu


More information about the sork mailing list