[thelist] webbased linux password change

Kevin p+evolt at redbrick.dcu.ie
Thu Mar 14 12:21:01 CST 2002


On Thu, Mar 14, 2002 at 07:11:26PM +0100, Joxn wrote:
> Colin Mitchell wrote:
> > In theory, you could write a Perl script that exec'ed the passwd command.
> > i'd be pretty careful with it though.

> Yeah, that's the point. I am still hoping that there is a script out
> there that is tested and as secure as possible.

I'm not sure if you can actually do that since the passwd command requires
user input.  You can't send it a commandline argument AFAIK.

I'm sure there's plenty of workarounds to that problem such as getting the
perlscript to telnet in and change it, or connect via POP/FTP but i'm not
entirely sure.

I don't really see how security with it would be anymore of an issue than with
exececuting anything on the commandline via a CGI.

Personally i'd go the ftp route.

Good luck.

- Kevin

p.s. I've just signed onto this list. So Hello! (:



More information about the thelist mailing list