[SM-PLUGINS] Change_passwd plugin does not change user account password

[Kaplan, A. H. <AHKAPLAN@PARTNERS.ORG>]

Hi there -

=20

I have a system running Fedora Core 7 with SELinux set to permissive mode. =
The
version of SquirrelMail is 1.4.10a-1.fc7, while

the compatibility plugin version is 2.0.9-1.0, and that of the change_passwd
plugin is 4.2-1.2.8.=20

=20

The user interface to change the password does appear to be working properl=
y in
that there are no apparent errors appearing=20

even when the seeoutput and debug options are activated. The output from the
debug flag being activated is shown below:

=20

Permissions of chpasswd executable are: 104750

chpasswd has group ownership: apache
Your web server is running under group: apache

chpasswd is owned by: root

=20


To test the chpasswd utility from the command line, do this:

cd /usr/share/squirrelmail/plugins/change_passwd
.=2E/../plugins/change_passwd/chpasswd 'username' 'old password' 'new passw=
ord'
2>&1

=20

=20

=20

The chpasswd binaries in the plugin as well as the /usr/sbin directories bo=
th
have the 4750 permissions as well as the root:apache=20

ownership. The Apache server on the system is owned by the user and group
apache.=20

=20

The problem that I am seeing is that even though the plugin says a user pas=
sword
was changed successfully, when I run the chage=20

utility on the server, the output it produces does not reflect the change b=
eing
made through Squirrelmail. Furthermore, if the user logs=20

into the server via an ssh connection, the password that was supposedly cha=
nged
through SquirrelMail is not reflected there.=20

=20

What other setting(s) do I need to adjust in order to correct this? Thanks.=20


The information transmitted in this electronic communication is intended on=
ly
for the person or entity to whom it is addressed and may contain confidenti=
al
and/or privileged material. Any review, retransmission, dissemination or ot=
her
use of or taking of any action in reliance upon this information by persons=
 or
entities other than the intended recipient is prohibited. If you received t=
his
information in error, please contact the Compliance HelpLine at 800-856-198=
3 and
properly dispose of this information.