[ejabberd] webadmin mask password patch

Anastasia Gornostaeva ermine at ermine.pp.ru
Sun Nov 7 00:22:05 MSK 2004


On Sat, Nov 06, 2004 at 09:54:12PM +0100, Andreas van Cranenburgh wrote:
> On Sat, Nov 06, 2004 at 11:46:27PM +0300, Anastasia Gornostaeva wrote:
> > Nobody except me see webadmin of jabber.ru and i'm often asked for forgotten 
> > users password :) I'm annoying when i see stars instead letters.
> 
> Forgotten passwords should always be resetted, not looked up by hand by
> administrators. If it's not a secret it's not a password anymore.

How do you enter new password instead forgotten one? :)
If you enter it manually, such password is not a password, indeed, if the 
account is not your. So you should delete this account to user creates it 
again. I cannot use this way, it does not prevent from username larceny.

ermine


More information about the ejabberd mailing list