Hi,

 On Tue, 2003-07-08 at 11:52, Distribution Lists wrote:

> What is the most safe way to write a CGI that will add users to a system ?
> The only way I can think of is using setuid.

I don't believe web interface is secure... I've found another way for 
myself:

I activated an ordinary user. She logins to server via ssh; and executes 
some scripts like
./mychangepasswd
./myaddpasswd
./myadduser
./mydeluser

All these write to some files. Using expect, a cron jobs parses these and 
adds/deletes users and changes/adds passwords.

What do the list think? Is it safe?

If someone wants them, please do send me a private e-mail. I'll be happy 
to share the scripts.

Regards,
-- 
Devrim GUNDUZ
[EMAIL PROTECTED]                               [EMAIL PROTECTED] 
                        http://www.tdmsoft.com
                        http://www.gunduz.org


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to