Password changing CGI

From: Don Newcomer (newcomer@dickinson.edu)
Date: Wed May 07 2003 - 12:05:28 EDT


I have a CGI program that I wrote in C to allow users to change their
passwords over the web. This has been working well for over a year but now
we're seeing problems where a "server error" page comes up. If I check the
server error log, it appears that the error is due to a user's proposed
password showing up in the password dictionary. Now, we don't have
triviality checking turned on and I can go into 'passwd' directly and use
that same password without incident. Any idea why sia_chg_password is
checking the dictionary? Can we turn it off? Or am I missing the boat
completely? My collection routine works fine for other errors like
re-using an existing password and my testing doesn't show any strange
rendition values coming in to it.

We're running Tru64 UNIX version 4.0G on an AS4000 box. Thanks in advance.

================================================================================
Don Newcomer Dickinson College
Associate Director, System and Network Services P.O. Box 1773
newcomer@dickinson.edu Carlisle, PA 17013
                                                        Phone: (717) 245-1256
                                                          FAX: (717) 245-1690



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:18 EDT