Release Goals Breezy : GraphicalConfigTools

[Karl Hegbloom]

On Fri, 2005-06-10 at 08:39 -0400, Ti_Uhl wrote:
> My program is nearly finished but i was wondering, if it's a big
> security risk if the user isn't prompted for changing his user profile
> in the /etc/passwd file. 
>
> Currently the standard ubuntu config /etc/login.defs is set up to ask a
> password if chfn is called. Since my application uses this command to
> change the user info it will not work if this is set. 
>
> A little bit off topic : python wich is shipped by ubuntu is missing
> the spwd module to access the user password db.

I think you should probably use the 'python-pam' interface to libpam0
anyhow.  That stands a chance of making it work no matter what PAM
password storage backend is configured, whether it be the passwd/shadow
files, NIS, or an LDAP directory.

-- 
Karl Hegbloom <hegbloom at pdx.edu>