[sork] sasldb2 password change

Ralf Lang lang at b1-systems.de
Thu Mar 8 17:14:57 UTC 2012


Am 08.03.2012 18:08, schrieb Tilman Schmidt:
> Am 08.03.2012 01:24, schrieb Kinglok, Fong:
>> Hi, you can consider using expect script for changing password.  For
>> sure, it is only for vpopmail.
>
> The trouble with that approach is that saslpasswd2 doesn't check the old
> password before setting the new one. With the "expect" driver, that
> behaviour is passed through to the user, ie. whoever gets to a logged in
> Horde screen can set a new password for the logged in user without
> knowing the old one. I would not be comfortable with that.
>

I don't have a sasl auth setup I could test a new driver against but if 
you can provide one, I can reserve some hours in cw12 to build a driver 
against Jon Parise's php5-sasl extension.

-- 
Ralf Lang
Linux Consultant / Developer
Tel.: +49-170-6381563
Mail: lang at b1-systems.de

B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537


More information about the sork mailing list