Topic: change user password (Resolved)

[munter]

Hi.

First of all: Like sme-server a lot!!

however

changing password for user doesnt work in https/whatever.dyndns.org/server-manager.

"not safe enough bla bla" (did set password streangth to none)

but looged in as root typing passwd user works fine.
its not a really great problem as long as workarounds work

keep the good work up sme foaks  

[byte]

changing password for user doesnt work in https/whatever.dyndns.org/server-manager.

"not safe enough bla bla" (did set password streangth to none)

How did you set password strength? If you set it like...

config setprop passwordstrength Users none

Then you will not have any strength, therefore you won't get the "not safe.." message.

but looged in as root typing passwd user works fine.
its not a really great problem as long as workarounds work

It will be a problem in the long run and is not the way to do this as you could end up breaking the server.

[munter]

did this first:


/sbin/e-smith/config setprop passwordstrength User none
/sbin/e-smith/config setprop passwordstrength Ibays none
/sbin/e-smith/config setprop passwordstrength Admin strong

but its ok now...love console-mode

[dsemuk]

did this first:


/sbin/e-smith/config setprop passwordstrength User none
/sbin/e-smith/config setprop passwordstrength Ibays none
/sbin/e-smith/config setprop passwordstrength Admin strong

but its ok now...love console-mode

munter if changing user password via the web interface didn't work as it should I would really apprecate if you could log a bug and try to workout why it isn't working.

You may be happy working at the console but other SME users are less happy / familiar so need to use the web interface.

By logging a bug and helping developers to track down the problem you are helping fellow SME users.

Thanks


Dave

[byte]

And again using "passwd user" from command line is not the way to go with SME due to the way it works, if it works then good (just a polite note)

I would like to assume it's probably a typo as I've changed this a few times although not recommended.

If you could try again and you still get the problem then please open a bug so we can see why in this instance it's not working.

Thanks!

[dsemuk]

https/whatever.dyndns.org/server-manager.

Where are you trying to change the password from?  Inside or outside your local network(s)

Have you tried https://ipaddress/user-password  ?

Dave

[Ted]

FWIW I seem to have been able to set and use weak passwords for two users on my test SME 7.0 server (which I will be using when I migrate my home server from 6.5rc1 to 7.0).  
I made the users in the usual fasion, in */server-manager.  Then I ssh'd into my server as admin and 6) Access Server Manager.  From there I modified the current users and set their passwords as I wanted to set them.  Using passwords that had failed while in the browser */server-manager.

Seems to have worked for me.

Ted

[fern]

munter & Ted

The password change URL
https://www.yourdomain.com/user-password
as well as server manager
https://www.yourdomain.com/server-manager
and if you ever install it, the user-manager contrib
https://www.yourdomain.com/user-manager

are only accessible from the local network.

If you want to be able to remotely access these URLs (from an external web location) then you need to add the remote users (static) IP in  the Remote Access panel under Remote Management.

Alternatively a user can connect to the server using VPN, which makes them a part of the local network, and then use URLs like
https://serverlocal-IP/user-password
https://serverlocal-IP/server-manager
https://serverlocal-IP/user-manager

Just a reminder that the manual can be a good read, which if anyone says they cannot find, is just a click away.
Look in server manager at the top right of the screen and click on the  ?  button.

[fern]

munter, Ted & anyone else for that matter

Setting weak password strength is a BAD idea.

It may be convenient, but there are plenty of people & robots out there that are continually testing our systems & trying to break in.
If you have weak passwords and your server has ANY web access, especially with external services enabled, then you have a higher chance of being hacked one day, it's just a case of trial & error enough times on the part of the hacker.

Far better to use strong password strength & sleep soundly at night.

The basic format required to be successful is to use a combination of upper case, lower case, numbers & special characters (#$@!&*) eg HRWsgt581%#&

I have explained why you may have had access problems in the previous post, which as you can see has nothing to do with the password strength setting.

[munter]

https/whatever.dyndns.org/server-manager.

Where are you trying to change the password from?  Inside or outside your local network(s)

Have you tried https://ipaddress/user-password  ?

Dave

oooo .. sorry foaks.
Did not pop in on this one after giving up password issue.

Going to check if this "problem" can be fixed.
didnt meant to be rude and NOT answer, sorry.

Checking tonight and get back with info.

[mrmango]

Have to agree.

I have had complaints about passwords being too strong, however there are ways and means to get a user to remember a password that at first glance seems hard to user (other than writing it down!!!)

 

[munter]

https/whatever.dyndns.org/server-manager.

Where are you trying to change the password from?  Inside or outside your local network(s)

Have you tried https://ipaddress/user-password  ?

Dave

oooo .. sorry foaks.
Did not pop in on this one after giving up password issue.

Going to check if this "problem" can be fixed.
didnt meant to be rude and NOT answer, sorry.

Checking tonight and get back with info.

/sbin/e-smith/config setprop passwordstrength User none

this did give same error in server-manager but worked in console.
sending it in to bugzilla tomorrow

[skm]

munter & Ted

The password change URL

and if you ever install it, the user-manager contrib
https://www.yourdomain.com/user-manager

Hi, can you tell me how to install it?
Thank you very much.

[CharlieBrady]

It will be a problem in the long run and is not the way to do this as you could end up breaking the server.

munter has already broken the server. samba and VPN access will no longer work correctly if password is changed from the command line.

[william_syd]

munter has already broken the server.

Can the situation be recovered from?