Stop users from changing PW in WebMail?

General Discussion of atomic repo and development projects.

Ask for help here with anything else not covered by other forums.
Galactic Zero
Forum Regular
Forum Regular
Posts: 471
Joined: Mon Dec 06, 2004 10:43 pm

Stop users from changing PW in WebMail?

Unread post by Galactic Zero »

Ok, I've gotten a request from a client to disable the ability of his users to change their passwords via the horde interface, none will have access to the CP to do this.

Is there a way to accomplish this that is easy?
Franklyn Halamka
Still learning my way around Linux Security.
http://www.galacticzero.net
Snapdragon
Forum Regular
Forum Regular
Posts: 119
Joined: Mon Nov 28, 2005 4:44 pm

Unread post by Snapdragon »

What about killing the poppasswd service on port 106? Then webmail has nothing to talk to... but that would affect everyone on the server.
Galactic Zero
Forum Regular
Forum Regular
Posts: 471
Joined: Mon Dec 06, 2004 10:43 pm

Unread post by Galactic Zero »

that would be a good choice but as you said it is server wide... Hum...
Franklyn Halamka
Still learning my way around Linux Security.
http://www.galacticzero.net
Snapdragon
Forum Regular
Forum Regular
Posts: 119
Joined: Mon Nov 28, 2005 4:44 pm

Unread post by Snapdragon »

Right now I'm trying to code a way to put webmail into each domain so that the bandwidth tracks back to the client IP.. this server wide webmail thing is costing me too much in bandwidth.
Galactic Zero
Forum Regular
Forum Regular
Posts: 471
Joined: Mon Dec 06, 2004 10:43 pm

Unread post by Galactic Zero »

let us know how that goes...
Franklyn Halamka
Still learning my way around Linux Security.
http://www.galacticzero.net
Snapdragon
Forum Regular
Forum Regular
Posts: 119
Joined: Mon Nov 28, 2005 4:44 pm

Unread post by Snapdragon »

Well I figure I can make aliases of my own in the user's own domains, like wm.domain.com (since Plesk traps webmail.*) and then just link to the Horde directory. That way the user will come in from their own domain and connect on their IP.

I track bandwidth using iptables, not Plesk, that way I get the true count of what that person is using. Each client has their own IP and all their sites are on it. When I was running around 400 GB of traffic a month, about 60 of it was being lost due to webmail, phpMyAdmin (because I had it centralized too), DNS, failed FTP, incomplete email, etc.
Post Reply