[SAC] [OSGeo] #384: Create password "reminder" email script for LDAP user

#384: Create password "reminder" email script for LDAP user
------------------------+---------------------------------------------------
Reporter: tmitchell | Owner: sac@lists.osgeo.org
    Type: enhancement | Status: new
Priority: normal | Component: SAC
Keywords: |
------------------------+---------------------------------------------------
Our user base is getting large enough that there are regular requests for
resetting user's passwords. The only method is to manually change, then
manually email it back to them, along with instructions on how to change
it. It would be great if we could out of the loop and let them request a
reminder to their email address.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#384: Create password "reminder" email script for LDAP user
--------------------------+-------------------------------------------------
  Reporter: tmitchell | Owner: sac@lists.osgeo.org
      Type: enhancement | Status: new
  Priority: normal | Component: SAC
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by tmitchell):

Any thoughts on this one? I'm sure some script guru could save us a few
hours per year in sys admin work by getting SAC out of the being the
middleman.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384#comment:1&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#384: Create password "reminder" email script for LDAP user
--------------------------+-------------------------------------------------
  Reporter: tmitchell | Owner: sac@lists.osgeo.org
      Type: enhancement | Status: new
  Priority: normal | Component: SAC
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by warmerdam):

As the guys who answers most of the password reset requests, and who would
likely end up writing the script, I'm ok with the status quo.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384#comment:2&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#384: Create password "reminder" email script for LDAP user
--------------------------+-------------------------------------------------
  Reporter: tmitchell | Owner: sac@lists.osgeo.org
      Type: enhancement | Status: new
  Priority: normal | Component: SAC
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by martin):

Passwords in the LDAP directory are encrypted, therefore we're having very
little chance to restore the clear text counterpart which would be
required for such a reminder - at least not without putting tons of CPU
cycles at the job .... :wink:

Martin.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384#comment:3&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#384: Create password "reminder" email script for LDAP user
--------------------------+-------------------------------------------------
  Reporter: tmitchell | Owner: sac@lists.osgeo.org
      Type: enhancement | Status: new
  Priority: normal | Component: Systems Admin
Resolution: | Keywords:
--------------------------+-------------------------------------------------
Comment (by warmerdam):

Presumably we would actually perform a password reset, not actually email
out the old password.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384#comment:4&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

On Wed, Mar 24, 2010 at 05:58:11PM -0000, OSGeo wrote:

#384: Create password "reminder" email script for LDAP user

[...]

Presumably we would actually perform a password reset, not actually email
out the old password.

When you're requesting a new password at Mailman, then you're being
sent a one which has been chosen randomly. This sounds like a
reasonable solution at a first glance, but I'm feeling a little bit
estranged with the idea of having some random person on The Net
resetting the OSGeo LDAP password for me .... :wink:

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Martin Spott wrote:

On Wed, Mar 24, 2010 at 05:58:11PM -0000, OSGeo wrote:

#384: Create password "reminder" email script for LDAP user

[...]

Presumably we would actually perform a password reset, not actually email
out the old password.

When you're requesting a new password at Mailman, then you're being
sent a one which has been chosen randomly. This sounds like a
reasonable solution at a first glance, but I'm feeling a little bit
estranged with the idea of having some random person on The Net
resetting the OSGeo LDAP password for me .... :wink:

I guess you'd want to have a confirmation URL sent as well before
actually doing the reset?

On Wed, Mar 24, 2010 at 11:27:20AM -0700, Tyler Mitchell (OSGeo) wrote:

Martin Spott wrote:

> When you're requesting a new password at Mailman, then you're being
> sent a one which has been chosen randomly. This sounds like a
> reasonable solution at a first glance, but I'm feeling a little bit
> estranged with the idea of having some random person on The Net
> resetting the OSGeo LDAP password for me .... :wink:

I guess you'd want to have a confirmation URL sent as well before
actually doing the reset?

Sounds like a plan to me.

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

#384: Create password "reminder" email script for LDAP user
---------------------------+------------------------------------------------
Reporter: tmitchell | Owner: sac@…
     Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by arnulf):

What is the status here? If the statu quo is still fine for Frank we can
close it.

Who actually *can* reset an LDAP password? Is there a list of people who
can be pinged?

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/384#comment:5&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#384: Create password "reminder" email script for LDAP user
---------------------------+---------------------
Reporter: tmitchell | Owner: sac@…
     Type: enhancement | Status: closed
Priority: normal | Milestone:
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------
Changes (by tmitchell):

* status: new => closed
* resolution: => fixed

Comment:

drupals password change/reminder mechanism works for password reset

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/384#comment:6&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.