Author Topic: Change local user password (/etc/shadow) plug-in  (Read 10713 times)

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Change local user password (/etc/shadow) plug-in
« on: October 05, 2006, 06:01:29 PM »
FIRST RELEASE of Local User Password Change Plug-in

http://www.kalisystems.com/rc-changepw/

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #1 on: November 25, 2006, 06:33:06 PM »
For anyone running this plug-in. An updated version has been posted incorporating security fixes in the core application. Please see link above for more information.

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #2 on: February 16, 2007, 07:54:27 PM »
Updated version available.

Also - ttt for this thread as the "other" thread was being used for plug-in questions.

Offline pearce

  • Newbie
  • *
  • Posts: 8
Re: Change local user password (/etc/shadow) plug-in
« Reply #3 on: February 20, 2007, 10:23:31 AM »
I don`t know my URL, I have done all (Server Log in Attach)...

Can someone help me?

Greetz
pearce

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #4 on: February 20, 2007, 12:25:21 PM »
If your web server is set to use /srv/www/cgi-bin as its cgi directory - then the url will be your srv home (whatever that is) with /cgi-bin on the end. For example, if your server home for the web server is http://www.srv.com, then the password utility will be at http://www.srv.com/cgi-bin/chetcpasswd.cgi

Make sense?

Offline pearce

  • Newbie
  • *
  • Posts: 8
Re: Change local user password (/etc/shadow) plug-in
« Reply #5 on: February 20, 2007, 01:17:07 PM »
That`s crazy. I did all you say. Because I don't know the main domain (It is the server from a friend - not mine) I put the IP in it and fill after it /cgi-bin/chetcpasswd.cgi. But he always says that the object could not be found?

But there is no error in the Log I have uploaded you. Or I can`t find andything. Do u know what to do now?

Excuse my bad english, I am German ;)

Greetz
pearce

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #6 on: February 20, 2007, 01:51:39 PM »
It is hard to say. Your log clearly shows that the cgi was copied to "/srv/www/cgi-bin" directory. My guess, without knowing more, is that your server is not looking at that directory for cgi scripts.

What Linux dist are you using?
What web server are you using?
Is cgi enabled on your web server?
Are you 100% sure that the web server cgi directory is "/srv/www/cgi-bin"? For example - on redhat using apache, the typical directory is /var/www/cgi-bin, but can vary for other distributions. That is most likely the issue as it "cannot find the object".


Offline pearce

  • Newbie
  • *
  • Posts: 8
Re: Change local user password (/etc/shadow) plug-in
« Reply #7 on: February 20, 2007, 01:56:38 PM »
What I can say you at the Moment is that the server runs with Apache2, the version of Linux I don`t know an if srv or var. I am going to talk with my friend when he`s online.

What I can say too, is that cgi ist wherever on the server, always enabled.

I will repost here when I know the other information ;)

Thanks for your help till know ;)

Offline pearce

  • Newbie
  • *
  • Posts: 8
Re: Change local user password (/etc/shadow) plug-in
« Reply #8 on: February 22, 2007, 02:18:03 PM »
It's a SusE Linux Server running with Apache2 and it`s sure that /srv/www is the right directory

For PHP Infos: http://www.fresh-designs.de/info.php

Do u know what we did wrong?

Greetz
pearce

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #9 on: February 22, 2007, 02:30:03 PM »
Hi Pearce,

Your server root is on /srv/www/web12/html so it is possible (if not likely) that your cgi directory is at /srv/www/web12/cgi-bin. If you have access somehow - can you take a look and see if that directory exists?

Better yet - if you can look at the httpd.conf file, look for the following directive:

ScriptAlias /cgi-bin/ "/srv/www/cgi-bin/"

That directive will tell you exactly where the cgi-bin directory is located.

Offline pearce

  • Newbie
  • *
  • Posts: 8
Re: Change local user password (/etc/shadow) plug-in
« Reply #10 on: February 22, 2007, 03:34:16 PM »
/srv/www/confixx/html/cgi-bin/


Was it....Thanks very much...Now it works fine...

Greetz
pearce

Offline kali

  • Jr. Member
  • **
  • Posts: 57
Re: Change local user password (/etc/shadow) plug-in
« Reply #11 on: February 22, 2007, 03:37:59 PM »
Success! :D

Glad it works for you. Enjoy...
Kali