Kerberos password change CGI
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Makefile
README.md
cgi.c
cgi.h
chpass.c
chpass.conf
chpass.h
conf.c
conf.h
front.html
output.c
success.html

README.md

chpass.cgi

Kerberos password change CGI for OpenBSD

author

Chris Maxwell @WrathOfChris chris@wrathofchris.com

requirements

Requires mod_auth_kerb or another authentication plugin such as cosign.

install

make obj
make
sudo make install

then copy into apache directory:

sudo cp -PRp /usr/local/share/chpass /var/www/htdocs/

config

Customize front.html and success.html as desired.

Extract a keytab for mod_auth_kerb

ktutil ext -k /var/www/conf/httpd.keytab http/yourdomainname.com@YOURREALM.COM

httpd.conf:

<Directory "/var/www/htdocs/chpass">
	AuthType kerberos
	AuthName "Kerberos username and password"
	KrbMethodNegotiate off
	KrbMethodK5Passwd on
	KrbAuthoritative on
	KrbAuthRealms YOURREALM.COM
	KrbVerifyKDC on
	Krb5Keytab /var/www/conf/httpd.keytab
	KrbServiceName http
	KrbSaveCredentials on
	AllowOverride None
	Options ExecCGI
	require valid-user
</Directory>

thanks

Thanks to Daniel Hartmeier for releasing the undeadly code years ago.