[sork] passwd doesn't change passwords
Wang, Yu
ywang at unf.edu
Mon Sep 22 07:36:18 PDT 2003
I use ssl. In ssl_request_log:
[22/Sep/2003:08:30:46 -0400] 132.50.110.130 SSLv3 RC4-MD5 "GET /passwd/?Webmail=AAAf56eca80114asebr34092edd4bbb&Webmail= AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 0
[22/Sep/2003:08:30:47 -0400] 132.50.110.130 SSLv3 RC4-MD5 "GET /passwd/main.php?Webmail=AAAf56eca80114asebr34092edd4bbb&Webmail= AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 10907
[22/Sep/2003:08:31:04 -0400] 132.50.110.130 SSLv3 RC4-MD5 "POST /passwd/main.php?Webmail=AAAf56eca80114asebr34092edd4bbb HTTP/1.1" 11348
I can see yours had two different session ids: f023... and d57b...; Mine has same session ids. I guess the different session ids caused horde to redirect to login screen.
--Yu Wang
Information Technology Services
University of North Florida
(904) 620-2820
-----Original Message-----
From: Paul Lambert [mailto:paul at digis.net]
Sent: Sunday, September 21, 2003 10:06 PM
To: Wang, Yu
Cc: sork at lists.horde.org
Subject: Re: [sork] passwd doesn't change passwords
Thanks for the reply. I've tried your suggestions. I'm not getting any
errors on screen or in any logs just the imp login screen after I click
"Change your password". The only log that shows anything is the httpd
access log. Could you compare your access log to mine. Maybe that will
give a clue.
>>>>click "Change your password"
208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "POST
/horde/passwd/main.php?Digis+Webmail=f023a1b616c9ddf4dff82ea20c8e4cb4
HTTP/1.1" 302 5
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "GET
/horde/login.php?Digis+Webmail=1ef83186eb76ed35fde0490b247adf59&url=%2Fhorde%2Fpasswd%2Fmain.php%3FDigis%2BWebmail%3D1ef83186eb76ed35fde0490b247adf59
HTTP/1.1" 302 5
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
208.186.134.102 - - [21/Sep/2003:19:53:06 -0600] "GET
/horde/imp/login.php?Digis%2BWebmail=a3bdd574deb481b8e32900ed80c28624&url=http%3A%2F%2Fwebmail.digis.net%2Fhorde%2Fpasswd%2Fmain.php%3FDigis%252BWebmail%3Da3bdd574deb481b8e32900ed80c28624%26Digis%2BWebmail%3D1ef83186eb76ed35fde0490b247adf59
HTTP/1.1" 200 7098
"http://webmail.digis.net/horde/passwd/main.php?actionID=105&Digis%2BWebmail=f023a1b616c9ddf4dff82ea20c8e4cb4&Digis+Webmail=d57badf9d7b452c64da6861a7c87d29b"
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
<<<<<shows IMP login screen.
Also here is my config/backends.php:
$backends['expect'] = array(
'name' => 'Example expect script',
'preferred' => '',
'password policy' => array(
'minLength' => '7',
'maxLength' => '9',
'minNumeric'=> '1',
'minAlpha' => '1'
),
'driver' => 'expect',
'params' => array(
'program' => '/usr/bin/expect',
'script' => 'scripts/passwd_expect',
'params' => '-ssh -host digis.net -output /tmp/passwd.log'
)
);
scripts/passwd_expect is the same as yours
--
Thanks
Yu Wang wrote:
>
> Paul,
>
> I configured the password using Expect option. It works after I modified
> several things from default installation. Since you didn't show your
> configurations, I can just suggest you to check several places for the Expect.
>
> My expect uses SSH to connect users to a different server since the server
> running Horde doesn't allow general users login.
>
> Check the config/backends.php. Here is mine:
> $backends['expect'] = array(
> 'name' => 'User Server',
> 'preferred' => '',
> 'password policy' => array(
> 'minLength' => '7',
> 'maxLength' => '9',
> 'minNumeric'=> '1',
> 'minAlpha' => '1'
> ),
> 'driver' => 'expect',
> 'params' => array(
> 'program' => '/usr/bin/expect',
> 'script' => 'scripts/passwd_expect',
> 'params' => '-ssh -host userserver.unf.edu -output /tmp/passwd.log'
> )
> );
>
> Then modify scripts/passwd_expect
>
> ...
> }elseif {[string match $login "ssh"]} {
> set pid [spawn ssh $host -l $user]
> }
> ...
>
> and turn on log:
> log_user 1
> this will log all things into /tmp/passwd.log
>
> Then you can use "tail -f /tmp/passwd.log" and run the password program to see
> where is the problem that cause the failure. It may because the key
> verification prompt or terminal type prompt or even login shell prompt. You
> need to modify the Expect script to fit those prompts.
>
> You may also want to change the timeout value to a shorter one. The default
> timeout 20 is kind too long.
>
> Finally, do you have any rewrite rules turned on? A broken rewrite rule in
> Apache can cause the program redirected to login page.
>
> Hope this helps you pin the problem.
>
> --
> Yu Wang
> Information Technology Services
> University of North Florida
> (904) 620-2820
>
> Quoting Paul Lambert <paul at digis.net>:
>
> > I have imp (using imap auth, and mysql), turba, and passwd installed and
> > everything works except when I submit to change a users password it just
> > goes to the imp login screen and doesn't change the password. It doesn't
> > matter what I type in the username and Old password field either. It
> > gives no errors on screen or in the logs. I have tried both poppassd (I
> > tested poppassd manually and it works) and expect. It is almost as if
> > the "change password" button doesn't do anything except take me to the
> > login page. Has anyone had a similar problem. Also I followed these
> > online instructions:
> > http://www.geocities.com/oliversl/imp/
> >
> > Anyone have a similar problem or have any suggestions?
> > --
> > Thanks in advance
> > Paul
> > --
> > Sork mailing list
> > Frequently Asked Questions: http://horde.org/faq/
> > To unsubscribe, mail: sork-unsubscribe at lists.horde.org
> >
>
> ---------------------------------------------------------
> This mail sent through UNF Webmail: https://horde.unf.edu
More information about the sork
mailing list