Prev Previous Post   Next Post Next
  #1  
Old 19th September 2007, 15:51
catdude catdude is offline
Senior Member
 
Join Date: Jun 2007
Posts: 178
Thanks: 1
Thanked 12 Times in 11 Posts
Default Record user passwords

I am currently attempting to modify my ISPConfig code to allow me to passwords to user e-mail accounts. I know this introduces security issues, but I happen to believe that if a user manages to compromise my system enough to be able to browse the database, the system is pretty well screwed anyhow.

If I have the user passwords stored somewhere (in the database, or in a Berkeley DB file, or SQLite, or ...) I can then rebuild /etc/passwd and /etc/shadow if they should become compromised, can test proper operation of POP and IMAP for all users, etc. In the early weeks of putting a new ISPConfig installation on-line, the ability to test these functions for every user account can be extremely important.

Since I am moving users from our Plesk server to ISPConfig, I have all their passwords anyway. I'd just like to know that my lists will remain current as users go in to change their own passwords.
Reply With Quote
Sponsored Links
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Statistic not working mzo Installation/Configuration 49 20th April 2011 12:19
Anything I can do against illegal login-requests? schmidtedv Installation/Configuration 17 7th November 2008 09:25
log files cruz Technical 3 15th May 2007 14:35
Falko Postfix How-to - User Passwords socrazy143 Server Operation 3 23rd March 2007 17:36
I can't access FTP - I don't saves user passwords banaantje12 General 2 21st August 2006 16:25


All times are GMT +2. The time now is 19:49.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.