Password changing CGI

From: Don Newcomer <newcomer_at_dickinson.edu>
Date: Wed, 07 May 2003 12:05:28 -0400 (EDT)

I have a CGI program that I wrote in C to allow users to change their
passwords over the web. This has been working well for over a year but now
we're seeing problems where a "server error" page comes up. If I check the
server error log, it appears that the error is due to a user's proposed
password showing up in the password dictionary. Now, we don't have
triviality checking turned on and I can go into 'passwd' directly and use
that same password without incident. Any idea why sia_chg_password is
checking the dictionary? Can we turn it off? Or am I missing the boat
completely? My collection routine works fine for other errors like
re-using an existing password and my testing doesn't show any strange
rendition values coming in to it.

We're running Tru64 UNIX version 4.0G on an AS4000 box. Thanks in advance.

================================================================================
Don Newcomer Dickinson College
Associate Director, System and Network Services P.O. Box 1773
newcomer_at_dickinson.edu Carlisle, PA 17013
                                                        Phone: (717) 245-1256
                                                          FAX: (717) 245-1690
Received on Wed May 07 2003 - 16:06:16 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:44 NZDT