Re: [webmin-devel] [feature request] new password type for modules' configuration

[<ra...@si...>]

On Sun, 17 Oct 2004, Emmanuel Saracco wrote:

> hi jamie,
>
> could it be possible to have a simple password field for modules
> configuration section (other than 12, which is sometime confusing for
> the user).
>
> "simple", that means: only a <input type="password" name="var"
> value="">, and nothing else (no radios for exemple :-) ).
>
> is this type already exist (I did not see it)?
>
> thanks,
>
> bye
>

If I am reading this correctly (and let me know if this is wrong), that
the request is that there be a line in the config.info like:
   pass=Password,<some_number_that_is_not_12>

that will generate a line in the module's configuration page like:
   Password	[   <blank text>    ]

instead of (if the number 12 is used above):
   Password     [X] Don't Change    [ ] Set to  [   <blank text>    ]


Besides the potential security issues, it makes it extremely difficult
to differentiate between the following:
     I didn't want to change the password
     I didn't want to change the password, but typed something there
           accidentally
     I intended to change the password to the NULL string
     I intended to change the password to this new value
     I didn't want to change the password, but was unsure and typed
           the original password which might reset the expiration date
     I wanted to update the expiration date, but not change the
           password, so I entered the same password

With the radio buttons, it comes down to a simple case of:
     I didn't want to change the password, so ignore anything in the
           password box.
or
     I intended to change the password, so use whatever is in the
           password box, even if it is NULL or the same as the previous
           password.


  The best answer is to understand the confusion, and change the way this
line is displayed so that is is not confusing.  So given that it is
important to know if the user intended to change/set a password, what
wording or display organization do you think would make it less confusing,
or (hopefully) totally undestandable?


  Cheers!

	---- Randy