RE: How to enable user to change their own password

Sounds like we need web interface for the user to change their password.
It's unacceptable that he has to tell his password to admin.

I guess somebody has already done that?

Calvin

-----Original Message-----
From: Nick Pappas [mailto:nwpappas@gmail.com]
Sent: Wednesday, July 20, 2005 5:35 PM
To: users@subversion.tigris.org
Subject: Re: How to enable user to change their own password

You could probably write a script to do this. Not sure if there is a
setting you can change to let it happen automatically (I've never seen
an interface to change a password).

svnserver saves its password in clear text, which would be a snap to
write a script for letting users change their password online.

For Apache, you would need to give the user your server runs under
('nobody' commonly) access to the password binary. A simple PHP
script could run it off the server with whatever parameters you need.

Aside from glaring security issues involved with giving any user the
right to run an admin binary, especially from the web server, I would
generally stay well clear of any script that runs a server script that
isn't well isolated. One error in your script and/or one jerk who
access your script = major trouble.

On 7/20/05, Calvin <szguoxz@hotmail.com> wrote:
> Is there anyway to do this?
> I am using Apache, auth_svn_mod.
>
> Thanks,
>
> Calvin
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

-- 
Whatever you do - don't congratulate yourself too much, or berate
yourself either.
Your choices are half chance, and so are everybody else's.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org