[sork] sasldb2 password change

Thu Mar 8 17:08:22 UTC 2012

Am 08.03.2012 01:24, schrieb Kinglok, Fong:
> Hi, you can consider using expect script for changing password.  For
> sure, it is only for vpopmail. 

The trouble with that approach is that saslpasswd2 doesn't check the old
password before setting the new one. With the "expect" driver, that
behaviour is passed through to the user, ie. whoever gets to a logged in
Horde screen can set a new password for the logged in user without
knowing the old one. I would not be comfortable with that.

-- 
Tilman Schmidt
Phoenix Software GmbH
Bonn, Germany

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://lists.horde.org/archives/sork/attachments/20120308/7e6ac282/attachment.bin>