Is there a semi-easy way to disable https for the password change page?
Sorry still think we need to...
Please spare me the security risk lessons. I'm fronting the unsecured network with an SSL VPN portal and am trouble-shooting issues with redirects to https intranet pages.
... as in this setup your password will travel unencrypted over the line between SSL VPN portal and SME Server.
To go short your solution is in adding a custom template based on /etc/e-smith/httpd/conf/httpd.conf/VirtualHosts/27ManagerProxyPass in the templates-custom tree and modify the copy according to your needs. Information on the template system can be found in the wiki in the SME Server Developers Guide.