LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-05-2007, 08:55 AM   #1
numbers1thru9
LQ Newbie
 
Registered: Nov 2006
Distribution: Debian and Ubuntu
Posts: 18

Rep: Reputation: 0
user authentication


I have an ftp server setup that uses linux user authentication. However as of right now, they have to use whatever password I give them. What I am trying to do is create an interface using php and expect or something that will authenticate the users current password and then ask for the new one and change it if it verifies. I am new to expect and scripting in linux all together. Does anyone have anything or know of somehting that will help me out? I have looked at this: http://www.cyberciti.biz/tips/change...hp-script.html but am unsure on how to make it authenticate the users before changing the password. Any help on this would be GREATLY appreciated. Thanks
 
Old 07-05-2007, 11:58 AM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 344Reputation: 344Reputation: 344Reputation: 344
Why bother? If you are using non-anonymous ftp, everyone can see the userid and password (in clear text). Legacy protocols like telnet and ftp should only be used where anonymous login is acceptable.

You should be using ssh/sftp for secure login, and you can do away with insecure passwords altogether and use passphrases and/or public/private keys.
 
Old 07-06-2007, 09:24 AM   #3
numbers1thru9
LQ Newbie
 
Registered: Nov 2006
Distribution: Debian and Ubuntu
Posts: 18

Original Poster
Rep: Reputation: 0
I am in the process of getting sftp setup and running, I'm just looking for a way to make a script so that they can change their password but not use ssh to logon
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
User Authentication barn63 Linux - Server 8 10-04-2006 09:06 AM
user authentication triley Linux - Networking 3 06-06-2005 10:05 AM
User authentication triley Linux - General 6 10-06-2004 03:02 PM
NT user authentication hzhuang Linux - Security 2 08-11-2003 06:39 AM
Squid proxy with user authentication and user rights duvanhorn Linux - Networking 0 08-07-2003 03:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration