Re: [cpx] Restrict Users from changing their password

[Jared Betteridge <jbetteridge@xxxxxxxxx>]

You could modify the VSAP module that changes passwords and insert a 
hook to call a custom program.  However remember that if you modify a 
vsap file, it will not receive automatic updates for bug fixes and 
enhancements.  Refer to Scott's recent email about how to deal with 
this.  Here is the vsap module that is responsible for changing a password:

/usr/local/lib/perl5/vendor_perl/5.8.4/VSAP/Server/Modules/vsap/user/password.pm

Another option would be to write a wrapper for pw.  You'd rename pw to 
something like /usr/sbin/pw.real, and then write a wrapper script named 
/usr/sbin/pw that calls your custom programs when certain things happen 
and then passes on everything to the real pw.

Jared Betteridge


Jonathan Duncan wrote:
> Here is a question that could answer this whole thing for me.  Does CPX 
> use the "vnewvirtmaps" command to do the rehash after it edits the 
> virtmap file?  Or does CPX have a copy of the rehash commands built into 
> it?  If CPX were to call "vnewvirtmaps" I could just edit that program 
> and add a line that calls another script.
>
> Jonathan
>
>
> On Thu, 9 Dec 2004, Jonathan Duncan wrote:
>
> > In CPX, is there a way/option to restrict users from changing their 
> > own passwords?  OR Is there a way to add some steps to the password 
> > change (in the background) like running a script on the server.
> >
> > The reason for this is because I have a huge site with a user 
> > database.  I create system users and virtmaps for e-mail out of that 
> > database.  Their password comes fromt that database also.  If they 
> > change it in CPX then it will be out of sync with the one in the 
> > database.  I need to either disallow them to change it in CPX or get 
> > some indicator from the password change utility that launches a sync 
> > script so that I can update the database with their change.
> >
> > Thanks,
> > --
> > Jonathan Duncan
> > http://www.nacnud.com
> >
> > ======================================================================
> > This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
> > Before posting a question, please search the archives (see above URL).
> ======================================================================
> This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
> Before posting a question, please search the archives (see above URL).

======================================================================
This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
Before posting a question, please search the archives (see above URL).