Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: oscartenerife on November 06, 2008, 12:23:42 AM

Title: can´t change user password from the web (WAN SIDE)
Post by: oscartenerife on November 06, 2008, 12:23:42 AM
Hi everybody:

Coming back to this forum once.
I've my SME 7.xx server working great since the last one year.
There's  something that I would like to do, what is "CHANGE USER PASSWORD FROM THE WEB through the Internet Browser but each time I try, a message shows up. "FORBIDEN - USer don´t have authorization to change.....
According on what I've understood from the Administration Manual (and is not completely clear for me), user password command  (In my case www.mydomain.com/user-password), can be issued only from the local LAN. Otherwise a PPTP should be created.
Can anybody help on this issue.

Thank's in advance - OSCAR
Title: Re: can´t change user password from the web (WAN SIDE)
Post by: m on November 06, 2008, 03:27:29 AM
According on what I've understood from the Administration Manual (and is not completely clear for me), user password command  (In my case www.mydomain.com/user-password), can be issued only from the local LAN. Otherwise a PPTP should be created
That is correct. If you don't have a VPN access, you can allow Remote Management for specific networks/mask in the servermanager. But be aware that you then also have opened access to server server-manager, which both can be a security issue.
Title: Re: can´t change user password from the web (WAN SIDE)
Post by: oscartenerife on November 06, 2008, 10:51:01 AM
First of all, thank you for your answer.

Do you mean that I can set VPN access for a user, for him to be able to set or change his password from the web, avoiding remote management, wich I agree with you is not so good for safety reasons, specially because server-manager will be available as well ?

That is correct. If you don't have a VPN access, you can allow Remote Management for specific networks/mask in the servermanager. But be aware that you then also have opened access to server server-manager, which both can be a security issue.

Looking forward to ear from you. Regards.