Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: tobiasb on January 17, 2005, 02:31:21 PM

Title: user should have the possibility to change their password
Post by: tobiasb on January 17, 2005, 02:31:21 PM

Hello everybody,

Ive installed and confugired the sme server wihtout any problems. After that ive created some users and mail addys... now these users should have the possibility to change their passwords from the internet without the ../server-manager/  is there a way to do this? I hope anybody can help me with my problem.. and i´m sorry about my bad english

- tobias

Title: user should have the possibility to change their password
Post by: skelk on January 17, 2005, 03:46:40 PM

Me too.  if anyone knows of a contrib that does this I definitely want it.

It would be useful if there was an admin page that each user could log into to do this.  Even if it was just appended to the webmail interface.

Title: user should have the possibility to change their password
Post by: boss_hog on January 17, 2005, 04:00:58 PM

hey tobiasb,
would this link help you?
http://no.longer.valid/mylinks/singlelink.php?cid=89&lid=426
Good luck

Title: user should have the possibility to change their password
Post by: skelk on January 17, 2005, 04:59:12 PM

This looks good but it is missing from the download link.
It also mentions a major bug that stops any further users/i-bays being installed (probably the reason it has been temporarily removed).  

I think this one is definitely one to watch though.

Title: user should have the possibility to change their password
Post by: chriskearns on January 17, 2005, 07:10:46 PM

Sorry if I am missing something, but have you tried:
http:/yourserver.atyour.domain/user-password

This works for me, and seems to be included in the 6.0.1-custom CD, in the e-smith-base-4.14.1-16.rpm.

Regards

Title: user should have the possibility to change their password
Post by: cc_skavenger on January 18, 2005, 09:37:15 AM

have you tried the user-panel contrib?

http://sme.swerts-knudsen.dk/downloads/Userpanel/

Run the newest versions of the three files.  When installed, configure what options you want users to have through the panel in the server manager.

Users log in through
https://your-domain-name-or-ip/user-manager

they enter their username and password and can change whatever you allowed them to in the server-manager.

HTH

Title: user should have the possibility to change their password
Post by: guest22 on January 18, 2005, 10:12:36 AM

as mentioned in our fine manual here:

http://mirror.contribs.org/smeserver/contribs/bobk/SME_Manual/chpt-09.1.html#9.1.2

;-)

Title: user should have the possibility to change their password
Post by: zoi on January 18, 2005, 05:10:57 PM

All that help is fine, but all my users get is a forbidden access error message if they try to login to https://www.myserver.com/user-password

There's TONS of requests about this feature, as there is LOTS of ways around the issue.

But we need a SIMPLE easy solution, which would HAVE to be to add an additional option to allow user-password updates for user accounts from anywhere or not, with the additional option to force https rather than http

Please consider the request.

All the patches available ARE NOT easy for DUMB end users.

Title: user should have the possibility to change their password
Post by: cc_skavenger on January 19, 2005, 01:37:50 AM

Quote from: "zoi"

All that help is fine, but all my users get is a forbidden access error message if they try to login to https://www.myserver.com/user-password
.
.
.
All the patches available ARE NOT easy for DUMB end users.

Not using https opens a big security risk to your user accounts as well as your server.  How about a simple http to https redirect webpage.  I had to do this for our webmail users.  If they browse to http://www.myserver.com/webmail instead of https://mail.myserver.com/webmail, they get a page that gives them the right link to click on (and tells them to change their bookmark) and they also get redirected after 5 seconds if their browser supports it.

Just some suggestions

Title: user should have the possibility to change their password
Post by: duncan on January 19, 2005, 02:18:42 AM

Hi Zoi,

Logging into either

https://www.myserver.com/user-manager
or
https://www.myserver.com/user-password

simply works - no issues - no grief - no patches - the way its supposed to. If you are having problems - perhaps you should take a look at your clients setup.

Title: user should have the possibility to change their password
Post by: zoi on January 19, 2005, 02:09:31 PM

Quote from: "duncan"

Hi Zoi,

Logging into either

https://www.myserver.com/user-manager
or
https://www.myserver.com/user-password

simply works - no issues - no grief - no patches - the way its supposed to. If you are having problems - perhaps you should take a look at your clients setup.

Except you can NOT access this from the INTERNET, only my local intranet.

(Unless I set the internet as my local network, which is hardly appropiate.)

Title: just a suggestion
Post by: treyh on January 19, 2005, 07:01:53 PM

Heres the way I see it...

If you're an ISP, allow access to the box from the ip range that you give to customers

If this is for a school or business, they shouldn't need remote access. Make them email you, and of course if you want remote access then allow access to the box from your network

If you're simply offering an email service, don't know why you would, but make them email you to reset it.

just some thoughts, It might be easier to provide a solution if you tell us what you're using the sme server for and etc.

Thanks

Title: user should have the possibility to change their password
Post by: tobiasb on January 20, 2005, 12:34:50 PM

thanks  .. now it works for me

Title: user should have the possibility to change their password
Post by: zoi on January 20, 2005, 03:19:13 PM

I'm offering an email service where I need the users to be able to change their passwords at will on their own. This is part of a club which I operate, where having users email their request is unworkable.

My request is simply to add an option (similar to the existing FTP options) to allow users to access the /user-password screen from 'allow access from local networks' / 'allow public access(anywhere on the net)'

I would also suggest adding options similar to webmail, to 'enable http or https' / 'enable https only' for the use of /user-password and /server-manager

I'm sure for someone who knows what they are doing that this would take maybe an hour to do. Infact I'd even consider PAYING someone who knew what they were doing to create an rpm for these 2 requests.

But I honestly think it should be a part of the default installation, and although its not recommended the only way around this at the moment is to set a rule to consider the entire internet as a part of my local network.

Unfortunately because I'm un-able to fix the problem myself, that I have to use this measure until someone who knows what they are doing, see's sense in my request.