Change PW from TeamSite on Solaris

Has anyone written a ipl to let the users change their passwords from TeamSite on Solaris? Or do I have to code my own? :-(

Find more posts tagged with

Comments

ltravagnin

I've written one, but i could not send it (sorry).
My suggest is to use the perl module Expect bundled with iw-perl. Using it, you can invoke the passwd command.

Lucio

tvaughan

I wrote my own that I set up as a custom menu item in iw.cfg.

Here are the steps:

1) In iw.cfg, add a menu item like this:

custom_menu_item_ChangePassword="Edit", "Change Password", "ChangePassword.cgi",
"editor,author", "scrollbars=yes,resizable=yes,width=640,height=400" "" "500"

2) In the $IWHOME/httpd/iw-bin directory, create a file called "ChangePassword.cgi". (i'm attaching mine to this post) This file should prompt the user for their username, password, new password and confirm their new password. When they click "Submit", the form forwards the request to ChangePasswordResponse.cgi.

3) Create a file in $IWHOME/httpd/iw-bin called "ChangePasswordResponse.cgi"

This file will actually call an expect script (you need expect installed :-( -- get it from sunfreeware.com) that changes the Unix password with the parameters the user entered in the ChangePassword.cgi page.

4) Create a new "chgpwd.expect" file in $IWHOME/httpd/iw-bin.

The expect file I'm attaching is pretty specific to my prompts and password requirements, so you'll have to monkey with your own settings. Plus, the error handling I'm showing on the ChangePasswordResponse.cgi leaves a lot to be desired.

As always, use at your own risk.

Happy hunting, and let me know if you have a question, tvaughan77@space.com

P.S.

Hmm, it looks like I can't post .cgi files, so here's some key snippets of code:

ChangePasswordResponse.cgi, calls the expect script:


$command = "/usr/local/bin/expect -f chgpwd.expect";
$command = $command . " $username $current_password $new_password1 $new_password2";
print "Executing command \'$command\'
";
@result = `$command`;
print "@result";

The expect script:


#  To execute this script use:
#
#  ./chgpwd.expect    
#


#
#  Start the passwd program, giving it the username to change
#
spawn /bin/passwd [lindex $argv 0]

#
#  If the passwd binary is ok, send their login passwd
#
expect {
    "not found" {
        send_error "Unknown passwd command\n"
        exit
    }
    "does not exist" {
        send_error "User [lindex $argv 0] does not exist\n"
        exit
    }
    "Enter login password: " {
        send "[lindex $argv 1]\r"
    }
}

#
#  If their current password is ok, send the new password
#
expect {
    "wrong passwd" {
        send_error "The password you gave as your current password is wrong\n"
        exit
    }
    "New password: " {
        send "[lindex $argv 2]\r"
    }
}

#
#  If their new password is ok, send the confirmation password
#
expect {
    "Password too short" {
        send_error "The new password is too short.  Must be at least 6 characters\n";
        exit
    }
    "Re-enter new password: " {
        send "[lindex $argv 3]\r"
    }
}


#
#  If the confirmation password is ok, exit
#
expect {
    "They don't match" {
        send_error "The confirmation password doesn't match the new password\n";
        exit
    }
    eof {
        send_tty "Password successfully changed\n"
    }
}

Migrateduser

I submitted a cgi script that does this exact operation. It checks the password for correctness (according to the Solaris standards), and even verifies that the request to change the password initiates from TeamSite. I would recommend this program be called using SSL otherwise the passwords will be sent across the network in cleartext via POST.

Have Fun!

Migrateduser

Sorry, it is in the Code/Scripts section of the DevNet.

edtmnjn

Brent, where is that section located? I just can't find it anywhere. There's Downloads->Code Samples, but that section is empty. Could you please describe how to navigate to there?

Regards,
Peter

tvaughan

I've submitted a couple of entries to the download section as well, and they never show up. I don't know if Interwoven is actively preventing it, or if it is just a snafu in their Workflow (he he).

You can try to use my 4/25 post, if that helps.

Tom

edtmnjn

Thanks for your reply Tom. I've seen your previous posts regarding this, and that would probably work. Problem is they seem to require "expect" to be installed which isn't available in our current environment. I'd rather do it in some other way which doesn't require 3rd part tools installed if possible.

tvaughan

Yeah, expect would be required.

I guess it is a third party tool, but not in the Windows sense of the word. . . check out all the stuff at sunfreeware.com, some of which is even getting bundled as part of the Solaris O.S.

Anyway, I don't know of another way to do the password change on Unix without modifying and recompiling the passwd command (not sure you want to do that).

Tom

edtmnjn

Found out that we have expect installed on one of our servers, so that is no longer a problem.

But I got some problems using your solution anyway. The ChangePasswordResponse.cgi script runs as the user who runs the TeamSite UI-server, right? And that would mean that that particular user would need to have access to run passwd for other users (i.e. the user who wants to change his/her password). At least on our system, I get the following error from passwd when trying to change password for a different user:

$ passwd someuser
passwd (SYSTEM): Permission denied
passwd (SYSTEM): Can't change local passwd file
Permission denied

The only way I've figured is to install sudo or something and let the TeamSite UI-user have access to run passwd as root user. But that feels a bit insecure since then passwd won't prompt for the old password prior to entering a new one.

advanced enveloping.JPG

Migrateduser

If the password change script is run with /iw-bin/iw_cgi_wrapper.cgi/<script_name> the script will be run as the user who is doing the passwd. I would definately not recommend using sudo or anything of that nature.
I will email you a script I wrote that does this very thing.

Thanks,

Brent Kastner

Migrateduser

nnguyen

I have to do this very same thing. I have modified my IW.cfg file, and copied the script. However, I cannot get it to work. Has anyone had any success getting this password code to work in their environment?