[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cpx] Restrict Users from changing their password (fwd)



You may be happy to know that I am not as braindead as I had thought. I remembered the reason that I only had the one line in that script and was not passing anything to the real pw program. It was because I was trying to see what was being passed to the pw program by CPX. However, the log file never had anything in it when I would run the change password function in CPX so I was not sure what to pass on to the real pw program. Bruce, thanks for the extra line, I was not sure how to call that.

Jonathan


---------- Forwarded message ----------
Date: Mon, 13 Dec 2004 15:16:52 -0700 (MST)
From: Jonathan Duncan <jonathan@xxxxxxxxxx>
To: cpx@xxxxxxxxxxxxx
Subject: Re: [cpx] Restrict Users from changing their password

Ummm... duh! Ok, I was brain-dead when I wrote that. There is absolutely nothing in that script that passes anything to the real pw. Sorry to bother everyone. Slap me with the silly stick.

Jonathan



On Mon, 13 Dec 2004, Bruce Armstrong wrote:

It doesn't look like you passed the information on to the real pw.  If
you are just looking to log for a while, your script should look like
this:

#!/bin/sh

echo "$@" >> /path/to/blah.txt
exec /path/to/real/pw $@

	--Bruce

On Fri, 2004-12-10 at 22:24 -0700, Jonathan Duncan wrote:
On Fri, 10 Dec 2004, Jared Betteridge wrote:

Another option would be to write a wrapper for pw.  You'd rename pw to
something like /usr/sbin/pw.real, and then write a wrapper script named
/usr/sbin/pw that calls your custom programs when certain things happen and
then passes on everything to the real pw.

Jared Betteridge



I tried your suggestion, I renamed pw and in place of it put a simple
script to catch anything being passed to it to be logged to a file so I
could find out what CPX was trying to send to pw.

However, with that script in place I go into CPX and change my password,
and CPX tells me that the password has been changed, no errors, so I log
out.  I try to log back in with the new password and it will not work.
The old one still works.  I rename the real pw script back into place and
then I am in fact able to change my password with CPX.

This is perhaps out of the scope of this list and off topic, so if that is
the case just tell me and I will go sulk and try looking for answers
elsewhere.

-rwxrwxrwx  1 root  wheel  309 Dec 11 04:34 pw
-rwxrwxrwx  1 root  wheel  24  Dec 11 04:35 blah.txt

-------------
#!/bin/sh
echo "$@" >> blah.txt;
-------------

From the command line it works:

/usr/sbin# pw var1 var2 var3 var4 var5 var6
/usr/sbin# cat blah.txt
var1 var2 var3 var4 var5 var6
/usr/sbin#

Then again, I am an ultra beginner with shell scripts.

Jonathan
======================================================================
This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
Before posting a question, please search the archives (see above URL).
--
Bruce Armstrong <bruce@xxxxxxxxxxxxxxxxxxxxx>

======================================================================
This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
Before posting a question, please search the archives (see above URL).

======================================================================
This is <cpx@xxxxxxxxxxxxx>      <http://www.groupmail.org/lists/cpx/>
Before posting a question, please search the archives (see above URL).


Home | Main Index | Thread Index
Match: Format: Sort by:
Search: