Re: web password change
On Sun, Feb 29, 2004 at 09:15:39PM +0100, Nejc Novak wrote:
> I've browsd freshmeat and i've found a program called chpasswd
> <http://chpasswd.sourceforge.net>.
>
> Does any of you have any experiences using this software and are there
> any security risks? Of course i would run this software using ssl, but
> anyway. And does any of you know any other, better solution?
That was the first solution I came across when I required something
similar a few months back.
I used it to allow people to change passwords on an internal CVS
server. (No logins were allowed to the box, and this was all on a
LAN).
It seemed to work as advertised, and as it was used only on a LAN with
mostly trusted users I was happy enough with using it over SSL.
Steve
--
# Debian Security Audit Project
http://www.shellcode.org/Audit/
Reply to: