Hi Friends,

I having trouble in changing the password of the mail users from roundcube webmail. All the mail users in my mail server are local users (/etc/passwd, /etc/shadow).

I have enabled the password change plugin in roundcube, and config.inc.php file inside password plugin says that it uses '/usr/sbin/chpasswd' to change the passwords.

But upon trying to change the password from roundcube, i am getting an error saying changes could not be saved.

It Will be great if anyone here can help me with this one....

I found this link (http://wili.cc/blog/roundcubepw.html) but things don't seem to work.


Thnaks in Advance....

Hi
I think that it would be a major security problem if a webapp (Roundcube in your case) would be allowded to change the contents of /etc/passwd resp. /etc/shadow.
Meaning that in such a case as soon as your webapp is penetrated by a cracker (and there are a lot of ways to do it) you can basically throw away your server.

Your external apps (webapps in your case) have to run with unprivileged accounts that don't have admin privileges, so that a major security breach can be contained.

Hi
I think that it would be a major security problem if a webapp (Roundcube in your case) would be allowded to change the contents of /etc/passwd resp. /etc/shadow.
Meaning that in such a case as soon as your webapp is penetrated by a cracker (and there are a lot of ways to do it) you can basically throw away your server.

Your external apps (webapps in your case) have to run with unprivileged accounts that don't have admin privileges, so that a major security breach can be contained.