Bug 19038 - Change Password Critical error (asking root his/her current password!)
Summary: Change Password Critical error (asking root his/her current password!)
Status: RESOLVED FIXED
Alias: None
Product: kdepasswd
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: RedHat Enterprise Linux Other
: NOR wishlist
Target Milestone: ---
Assignee: Geert Jansen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2001-01-24 19:18 UTC by maarizwan
Modified: 2003-04-22 17:00 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description maarizwan 2001-01-24 19:09:03 UTC
(*** This bug was imported into bugs.kde.org ***)

Package: kdepasswd
Version: 2.0
Severity: critical
Installed from: rh 6.x and 7.0 rpms

As root if I try to change my password it (kdepasswd) will ask the "Current Password" which is not a default behavior of Gnome's password changer or simply 'passwd' command. It should ask for "New Unix Password". This "Current Password" entry if given wrong input will hang that application (passwd and so kdepasswd).

To informing the SuperUser (if someone else has changed the passwd behind his back) then logging out message should inform "Root Password changed did you changed the password?" and/or mail the password change information to root.

Yours truly
Rizwaan.


(submitted via bugs.kde.org)
Comment 1 Unknown 2002-02-19 04:07:50 UTC
This is a multi-part message in MIME format

--=_NextPart_2rfkindysadvnqw3nerasdf
Content-Type: text/plain;charset=gb2312
Content-Transfer-Encoding: quoted-printable

Hello
We'd  visited your website: www.cypressskiclub.com. After thorough research=
 we found that your web site has not registered on any popular search engi=
nes and directories.

This will definitely be the chock point of raising reputation and business =
development deeply of your company. Fullpromote has considered of this ahea=
d. At the same time we fully believe that with our service visitors of yo=
ur web site will increase significantly.

Fullpromote.com is the only company in the world who provides a high effic=
iency register service of search engine information. Aiming at 500000+ fam=
ous search engines and directories in the world we can supply you with a p=
rofessional service in information register. We firmly believe that with ou=
r low-cost effective service visitors of your web site will increase signi=
ficantly. For more details about us or our service please visit our websit=
e: www.FullPromote.com.

We're looking forward to hearing from you!
 Best Regards

Melissa Kahley
Sales & Marketing www.FullPromote.com=20
--=_NextPart_2rfkindysadvnqw3nerasdf
Content-Type: text/html;charset=gb2312
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>We'd visited www.cypressskiclub.com</title>
<style>
<!--

.p14{font-size:14.8px; font-family: "Arial" "Helvetica" "sans-serif"}
a:visited    { color: #0000FF; text-decoration:none}
a:active     { color: #0000FF }
a:hover      { color: #0000FF; text-decoration: underline }
a:link       { color: #0000FF; text-decoration:none }

-->
</style>
</head>

<body>

<table border=3D"0" cellspacing=3D"0" style=3D"border-collapse: collapse" b=
ordercolor=3D"#111111" width=3D"776" id=3D"AutoNumber1" background=3D"http:=
//images.fullpromote.com/userimage/bg_new.JPG" height=3D"22" cellpadding=3D=
"0">
  <tr>
          <td width=3D"845" valign=3D"top" height=3D"20" align=3D"center" c=
olspan=3D"2">           <p align=3D"right">
          <img border=3D"0" src=3D"http://images.fullpromote.com/userimage/=
fullpro.gif" width=3D"229" height=3D"15"></td>
          </tr>
  <tr>
          <td width=3D"348" valign=3D"top" height=3D"584" align=3D"center">=
 <br>
            <table width=3D"308" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0" height=3D"269" align=3D"left">
              <tr>                 <td align=3D"center" valign=3D"middle" w=
idth=3D"288" height=3D"16"></td>
                <td align=3D"center" valign=3D"middle" width=3D"272" height=
=3D"16"></td>
              </tr>
              <tr>                 <td align=3D"center" valign=3D"middle" w=
idth=3D"288" height=3D"16"></td>
                <td align=3D"center" valign=3D"middle" width=3D"272" height=
=3D"16"></td>
              </tr>
              <tr>                 <td align=3D"center" valign=3D"middle" h=
eight=3D"197" width=3D"288"> &nbsp;</td>
                <td align=3D"center" valign=3D"middle" height=3D"197" width=
=3D"272"> <img src=3D"http://images.fullpromote.com/userimage/pic1.gif" wid=
th=3D"272" height=3D"8"><img src=3D"http://images.fullpromote.com/userimage=
/pic2.gif" width=3D"8" height=3D"184"><A Href=3D'http://www.cypressskiclub.=
com'><img src=3D"http://images.fullpromote.com/userimage/13/19199" width=3D=
"256" height=3D"184" border=3D0></A><img src=3D"http://images.fullpromote.c=
om/userimage/pic3.gif" width=3D"8"><img src=3D"http://images.fullpromote.co=
m/userimage/pic4.gif" width=3D"272" height=3D"10"></td>
              </tr>
              <tr>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"288">&nbsp;</td>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"272">&nbsp;</td>
              </tr>
              <tr>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"288">&nbsp;</td>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"272">&nbsp;</td>
              </tr>
              <tr>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"288">&nbsp;</td>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"272"><a href=3D"http://www.fullpromote.com"><img src=3D"http://images.f=
ullpromote.com/userimage/singup.gif" width=3D"92" height=3D"25" border=3D0>=
</a></td>
              </tr>
              <tr>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"288">&nbsp;</td>
                <td align=3D"center" valign=3D"middle" height=3D"40" width=
=3D"272">&nbsp;&nbsp; </td>
              </tr>
            </table>
            <p>
            <br>
            <br>
          </td>
          <td valign=3D"top" class=3D"p14" height=3D"584" align=3D"center" =
width=3D"517">             <table width=3D"460" border=3D"0" cellspacing=3D=
"0" cellpadding=3D"9" height=3D"399">
              <tr>                 <td valign=3D"top" height=3D"299" width=
=3D"442" align=3D"left">
                <font face=3D"Arial">Hello</font><p>
                <font face=3D"Arial">
                <span style=3D"font-size: 11pt">We'd</span><b> </b></font><=
span class=3D"p14">
                <font face=3D"Arial">&nbsp;visited your website:<font color=
=3D"#0000FF">                   <A href=3D'http://www.cypressskiclub.com'>w=
ww.cypressskiclub.com</A></font>. After thorough research we found that   =
                your web site has not registered on any popular search engi=
nes                   and directories.<br>
                  <br>
                  This will definitely be the chock point of raising reputa=
tion                   and business development deeply of your company. Ful=
lpromote                   has considered of this ahead. At the same time =
we fully believe                   that with our service visitors of your =
web site will increase                   significantly.<br>
                  <br>
                  <a href=3D"http://www.fullpromote.com">Fullpromote.com</a=
> is the only company in the world who provides                   a high e=
fficiency register service of search engine information.                   =
Aiming at 500000+ famous search engines and directories in                =
   the world we can supply you with a professional service in             =
      information register. We firmly believe that with our low-cost       =
            effective service visitors of your web site will increase sign=
ificantly.                   For more details about us or our service plea=
se visit our website:
                </font><font face=3D"Arial" color=3D"#CC0000"><a href=3D"ht=
tp://www.fullpromote.com">www.FullPromote.com</a>.</font></span></p>
                <p>
                <span class=3D"p14">
                <font face=3D"Arial">We're looking                   forwar=
d to hearing from you!</font></span></p>
                </td>
              </tr>
              <tr>                 <td valign=3D"top" class=3D"p14" height=
=3D"64" width=3D"442">                 <font face=3D"Arial">Best Regards<b=
r>
                <br>
                  Melissa Kahley<br>
                  Sales &amp; Marketing <br>
                  <font color=3D"#CC0000"><a href=3D"http://www.fullpromote=
.com">www.FullPromote.com</a></font></font></td>
              </tr>
            </table>
          </td>
        </tr>
</table>

</body>

</html>

--=_NextPart_2rfkindysadvnqw3nerasdf--
Comment 2 Waldo Bastian 2003-04-22 17:00:14 UTC
Subject: kdeutils/kdepasswd

CVS commit by waba: 

CCMAIL: 19038-done@bugs.kde.org
Don't ask root for old password. (BR19038)


  M +4 -3      kdepasswd.cpp   1.8


--- kdeutils/kdepasswd/kdepasswd.cpp  #1.7:1.8
@@ -41,4 +41,5 @@ int main(int argc, char **argv)
 
     KApplication app;
+    bool bRoot = (getuid() == 0);
 
     QCString user;
@@ -46,5 +47,5 @@ int main(int argc, char **argv)
         user = args->arg(0);
 
-    if (!user.isEmpty() && (getuid() != 0))
+    if (!user.isEmpty() && !bRoot)
     {
         KMessageBox::sorry(0, i18n("You need to be root to change the password of other users."));
@@ -53,5 +54,5 @@ int main(int argc, char **argv)
 
     QCString oldpass;
-    if (user.isEmpty())
+    if (!bRoot)
     {
         int result = KDEpasswd1Dialog::getPassword(oldpass);