Change /etc/shadow password interest?

Heritz · October 06, 2006, 12:06:23 AM

Ok the patch for cPanel is on:

http://roundcubeforum.net/forum/index.php?topic=711.0

Enjoy!

MNPF · October 22, 2006, 09:37:35 PM

Hi I'm using RC on Ubuntu 6.06 server with ISPConfig, I applied the patch an everything was done with success, but when I try to change a password allways receive the warning: You are not authorized to change password

I've checked syslog and it have this error: chetcpasswd.cgi: You are not authorized to change password, IPAddress 192.168.5.10

It seems that my IP is not allowed but I've the /etc/chetcpasswd.allow file with 0.0.0.0 that shouldn't hapend!

Any ideas?!

Thanks.

MF

JBMedeiros · November 24, 2006, 01:02:23 AM

I receive this erron in my cpanel instalation.

When i click on any tab (My Email, Adress Book, Personal Settings) after i installed this plugin.

The erro is:

Not Found

The server was not able to find the document (/roundcube/) you requested
Please check the url and try again. You might also want to report
this error to your webhost.

Im search files for this problem but i wont get it.

armand · November 25, 2006, 01:45:38 PM

Hi there,

I'm using Debian Sarge, and installed the plugin. But no luck. I get the error: 'Not authorized to change password.'

Any ideas? I really want this to work.

TNX

Mando....

kali · November 25, 2006, 01:54:38 PM

What version of "change password" are you running? Heritz version for cpanel or my version for local users? They are quite different - and change pw's in very different locations under different permissions.

armand · November 26, 2006, 04:56:55 AM

Quote from: kali What version of "change password" are you running? Heritz version for cpanel or my version for local users? They are quite different - and change pw's in very different locations under different permissions.

I'm using the version for local users. I'm not using cpanel.
Just a clean install of Debian en the plugin.

TNX,

Mando

kali · November 26, 2006, 12:22:39 PM

In which case.... please check to be sure of following:

You put chetcpasswd.allow in /etc with allowed ip (eg 0.0.0.0 for all)

The install was run such that the cgi script has correct permissions.

armand · November 27, 2006, 01:27:46 AM

Quote from: kali In which case.... please check to be sure of following:

You put chetcpasswd.allow in /etc with allowed ip (eg 0.0.0.0 for all)

The install was run such that the cgi script has correct permissions.

I've done all that. The readme file is very clear. Permissins are good. Mayby it has something to do with Debian it self?

Mando...

kali · November 27, 2006, 01:30:59 AM

Check /etc/passwd and /etc/shadow --- are the local users you are trying to change located there as line items? ie - these are not virtual mail users of some sort?

JBMedeiros · November 27, 2006, 10:24:31 AM

Quote from: JBMedeiros I receive this erron in my cpanel instalation.

When i click on any tab (My Email, Adress Book, Personal Settings) after i installed this plugin.

The erro is:

Not Found

The server was not able to find the document (/roundcube/) you requested
Please check the url and try again. You might also want to report
this error to your webhost.

Im search files for this problem but i wont get it.

No one knows what are make this error?

armand · December 04, 2006, 03:45:30 PM

Quote from: kali Check /etc/passwd and /etc/shadow --- are the local users you are trying to change located there as line items? ie - these are not virtual mail users of some sort?

/etc/passwd and /etc/shadow are okay. No virtual mail users. I use Exim and Courier-imap. I created the file: /etc/courier/userdb and chmod this to 600. I also created the files: /etc/courier/userdb.dat and /etc/courier/userdbshadow.dat.
Could this be the problem? I don't know. I followed the steps from the Linux Bible.

TNX

Mando

joshenry · February 12, 2007, 06:07:28 PM

Hey, couple things, RC is kick ass! Next, this mod is going to be kick ass when I can get it working ;-)

I've done the install in the README, created the /etc/chetcpasswd.allow file with 0.0.0.0 (I've even tried my local IP of 10.10.10.97, no go). When I try to access the Password tab I get:

Authorization file not found. Please README

So I've double checked everything and it all goes through (pretty simple to setup, I thought so ;-) ). Any help here would be awesome.

Thanks.

kali · February 12, 2007, 06:22:58 PM

Hi Joshenry,

I need to update the README. The new version creates a separate directory called /etc/chetcpasswd and two files are located there. The .allow file and the .conf file. That is where the .allow needs to be!

Sorry - please try that and let me know.

joshenry · February 12, 2007, 06:28:27 PM

Sweet, works no problem now! Nice app, great job and THanks! :-D

kali · February 12, 2007, 06:31:40 PM

Quote from: joshenry Sweet, works no problem now! Nice app, great job and THanks! :-D

Glad it worked! I am updating the code for a non-critical security fix and will update the README as well. Thanks for that catch!