[2240] in WWW Security List Archive
Change password...
daemon@ATHENA.MIT.EDU (S.W. Cheung)
Mon Jun 17 23:53:15 1996
From: "S.W. Cheung" <swcheung@hkimd.cig.mot.com>
Date: Tue, 18 Jun 1996 09:33:34 +0800
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Dear All:
I put a Web page in my server to allowing user to change password. I
use the cgi program "change-password".
It works fine when I use it in the web site in which I am the webmaster.
However, I encounter a problem when I use it in other web site. The
user change the password with the page, they cannot login again with
either old or new password.
I find out that the encryted string for the changed password becomes
"p4..........." in the password files.
What special procedure/setup should I use in the case that I use the
script in the site which is own by others.
Thanks,
--
S.W. Cheung
Email: swcheung@hkimd.cig.mot.com
URL: http://www.hkimd.cig.mot.com/~senwadmin/people/swcheung.html
Phone: (852) 2966-3774
Mobile: (852) 9498-4939
