Which means we can't write to the shadow file.

These are no CGI files but the HTML output generated by these scripts.

Is any more information needed?  Or has no one had a chance to look at 
this yet?  Tks.

The weberver runs as nobody.



I'm unable to get an actual copy of the actual .cgi files.  So just 
have the output information I posted below.  Still looking though.

1. My account to login to my control panel owns the shadow files.  Not 
sure what user the webserver runs as, as I don't administer it.  I 
will find out.



2. I managed to wget the .cgi files.  You can view the source of them 
below.  The latter is the form input destination of the prior.

http://mdma.ca/dekra/files/webmailpasswd.txt

http://mdma.ca/dekra/files/dowebmailpasswd.txt





Just a note to what I said below about the shadow file within the 
domain directory.  I, for example, host two websites under my one 
account.  So the shadow files for domain1.com and domain2.com are in 
/home/user49/etc/domain1.com/ and /home/user49/etc/domain2.com/ 
respectively.  Users from either domain can login into the same Horde 
install.  Just wanted to clarify a little further.



Thanks.

Two questions I can think of, Jan/others may have more:



1. What user owns the shadow file? What user does your webserver run as?



2. Can you see the contents of webmailpasswd.cgi, if it's some sort of 
perl or other script?

User passwords hosted on a server running CPanel are kept in the 
/etc/domainname directory under their home folder.  For example:

/home/user49/etc/mydomain.com/shadow

The shadow file looks like this:

johndoe:2x6KYbPf49Ft6:::::::

janedoe:a1nP4hHTftUeU:::::::



CPanel has a default install of Horde, but users cannot change their 
password within.  They log into domain.com/webmail using their e-mail 
address and password, then are given an option to change their 
password before entering either Horde or SquirrelMail.  The change 
password link directs them to a file called webmailpasswd.cgi where 
they can type and confirm a new password.



I have my own Horde installed as I don't want users to have an option 
of mail clients.  They login directly to hore, so don't see the option 
to change password, hence the need for Passwd to function.



The link below is the only thing I can find on the subject, but 
received no response from the author, and the solution doesn't work.

http://lists.horde.org/archives/sork/Week-of-Mon-20040607/001651.html



If required, I can create an account on my CPanel server so you can 
see how it functions.



Thank you.



ryan.

Where and how does CPanel store its passwords, and is there an API 
available to change them from the outside?

Requesting someone look into creating a new driver for Passwd for 
Horde installations on a server running CPanel.  More information can 
be found at cpanel.net.  I found a driver written for the 2.2.1 
release of Passwd, so perhaps it would just require some 
modifications.  I would be happy to test and help where I can.  Thank 
you.