SquirrelMail  
Donations
News
About
Support
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties













Security Notice
Phishing campain
Version 1.4.15
Security Upgrade
Plugins - Change SASL Password
Category: Change password

Cyrus SASL includes a shell utility called "saslpasswd" for manipulating user passwords in the "sasldb" database. This patch attempts to use this utility to perform password manipulations required by your squirrelmail users without any administrative interaction. Unfortunately, this scheme requires that the "saslpasswd" utility be run as the "cyrus" user - a horrible security problem since we have chosen to SUID a small script which will allow this to happen. You will also find a wrapper program which will hopefully allow this to be done a bit more securely. This plugin has been tested against sasl 1.5.58. It will also work with 2.1.6. It is also localizable.


Version 1.4.1
by Brad Donison on Mar 2, 2005
[ chg_sasl_passwd-1.4.1-1.4.tar.gz tarball (10601 d/l) Help ]
Requires: SquirrelMail 1.4.x Cyrus SASL

Description:
* Removed using userid in the form via hidden vars
* Did some updates to po file
* works with a sendmail virtusertable

Older versions

Version 1.4
by Galen Johnson on Apr 8, 2004
[ chg_sasl_passwd-1.4-1.4.x.tar.gz tarball (4570 d/l) Help ]
Requires: SquirrelMail 1.4.x Cyrus SASL

Description: *** Security fix *** Removed userid field from change screen. Other changes include a version file for compliance, several fixes provided by a contributor. Also note that all future translations will be provided as separate downloads...this release includes German, Icelandic and Swedish. The french translation has been removed.

Version 1.3
by Galen Johnson on Aug 13, 2003
[ chg_sasl_passwd-1.3-1.4.x.tar.gz tarball (3556 d/l) Help ]
Requires: SquirrelMail 1.4.x Cyrus SASL

Description: Minor cosmetic enhancements and bug fixes to code. Someone finally took pity and corrected the French translation. 1 year and counting...woohoo

Version 1.2
by Galen Johnson on Apr 8, 2003
[ chg_sasl_passwd-1.2-1.4.0.tar.gz tarball (3377 d/l) Help ]
Requires: SquirrelMail 1.2.x, Cyrus SASL1 or SASL2

Description: Added SM 1.4.0 compatibility...NOT backwards compatible (use 1.1 for SM 1.2.x)

Version 1.1
by Galen Johnson on Oct 31, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.x, Cyrus SASL1 or SASL2

Description: Updated to work with rg=off. It should still work with the older versions.

Version 1.0
by Galen Johnson on Sep 27, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7, Cyrus SASL1 or SASL2

Description: No real code changes have been made. The Reame file has been expanded upon to make installation a bit easier and added some sanity checks for users to try.

Version 0.2
by Galen Johnson on Aug 3, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: Cyrus SASL

Description: Added localization by request of Alexander Klingenstein. Minor bug fixes. (thanks Alex for the catch) Alex provided the German translation. Added horrible french translation...feel free to send me a better one.

Version 0.1
by Galen Johnson on Aug 1, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: Cyrus SASL

Description: Initial Release

If you have problems with the download or decompressing...
Internet Explorer
Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape
Right-click on the file, then select "Save Link As"
Opera
Right-click on the file, then select "Save Link Document As"
Lynx and Links
Press "d" on the link to download the file directly.
  • Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
  • Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
  • If all else fails, seek our help
© 1999-2010 by The SquirrelMail Project Team