Very important. Hide "Change Password"

22 posts / 0 new
Last post
#1 Tue, 08/11/2009 - 05:38
xoa

Very important. Hide "Change Password"

Hi there,

this is very important. I finally need to remove, to hide or to disable the menu entry "Change Password" in the User Panel. I'm happy about every single hint.

Thank you.

Tue, 08/11/2009 - 08:30
andreychek

Howdy,

You can do that by going into System Settings -> Module Config -> Administrator's Webmin Modules, and you can unselect the ones you don't want your users to have access to.

-Eric

Tue, 08/11/2009 - 09:25 (Reply to #2)
xoa

Under Module Config I don't have a Administrator's Webmin Modules entry. Mine is under Server Templates > Default Templates and I have already selected "No" for Change Password. But the menu entry is still there.

Tue, 08/11/2009 - 09:32 (Reply to #3)
andreychek

Which version of Virtualmin are you using?

-Eric

Tue, 08/11/2009 - 09:38 (Reply to #4)
xoa

Im using 3.71 GPL

Tue, 08/11/2009 - 11:03 (Reply to #5)
andreychek

Hmm, I'll check into that and get back with you shortly :-)

-Eric

Tue, 08/11/2009 - 11:33 (Reply to #6)
JamieCameron

This looks like a small Virtualmin bug - the change to allowed modules isn't being applied to existing users, only new ones.

The fix is to SSH in and run the command :

for dom in `virtualmin list-domains --with-feature webmin --name-only`; do
  virtualmin modify-domain --domain $dom
done

I will fix this properly in Virtualmin 3.72.

''

Wed, 08/12/2009 - 06:05 (Reply to #7)
xoa

Thank you for the solution, but where and how should I run the SSh on Virtualmin to run this command properly? How can I ran this command?

Wed, 08/12/2009 - 09:10 (Reply to #8)
andreychek

Howdy,

SSH is a mechanism of connecting to a Linux Server.

So, along the lines of how you can use "FTP" to connect to a server, you'd need an SSH client.

If you're using a Windows machine, you can use an SSH client such as Putty:

http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html

And then log in as root to your server from within Putty, and from there you can execute the commands Jamie gave you.

-Eric

Wed, 08/12/2009 - 09:32 (Reply to #9)
xoa

That step with putty is clear to me, but when i paste the code in the shell i get the following:

http://www.abload.de/image.php?img=untitledluao.jpg

Wed, 08/12/2009 - 09:37 (Reply to #10)
andreychek

Hrm, looks like the forum mangled the code that Jamie entered.

I put a copy of it over here on Pastie, this one should be correct:

http://pastie.org/private/eqnkdgkvsccjpqltwwflkq

Wed, 08/12/2009 - 09:51
xoa

To bad, the change password entry it still there :-(

Wed, 08/12/2009 - 11:44 (Reply to #12)
JamieCameron

Alternately, you can wait for the 3.72 release of Virtualmin, due out in a day or so.

As a work-around till then, you can go to Webmin -> Webmin Users -> domain-owner , and remove his access to the Change Language and Theme module.

''

Wed, 08/12/2009 - 11:45 (Reply to #13)
JamieCameron

Are you seeing this "Change Password" link in Usermin on port 20000, or Virtualmin on port 10000 ?

''

Thu, 08/13/2009 - 00:49
xoa

On Virtualmin port 10000. And the Workaround also did not worked, because Change Lanuage and Theme is already deactivated. I think I'll have to wait for 3.72.

EDT:

Now updated to Virtualmin 3.72 and Framed Theme 7.4 but the Change Password Entry is still there ;-(

Thu, 08/13/2009 - 12:01 (Reply to #15)
JamieCameron

Sorry, I made a mistake .. I didn't realize which "Change Password" link you were referring to.

If you mean the one on the left menu down the bottom that is visible to virtual server owners, at the moment there is no way to remove this, sorry. I am curious as to why you would want to though?

''

Thu, 08/13/2009 - 13:13 (Reply to #16)
xoa

Because we have a very complex server system, with a lot of logins and we get feedback that it would be easier that users are not allowed to change password.

I checked the file edit_passwd.pl. It seems to be the file responsible for "Change Password". Is there at least a way to add the a custom output? (By editing the edit_passwd.pl) Ex. "Chaange password currently disabled"

Thu, 08/13/2009 - 19:33 (Reply to #17)
JamieCameron

I will add an option to prevent password changing in the next Virtualmin release, on the Edit Owner Limits and plans pages.

Till then, you could manually edit edit_pass.cgi and after :

require './virtual-server-lib.pl';

Add the line :

error("Password changing currently disabled");

''

Fri, 08/14/2009 - 01:05 (Reply to #18)
xoa

Thank you, I'm looking forward to the next release.

Fri, 08/14/2009 - 05:25
sgrayban

You actually have clients who think that changing there passwords is a bad thing ? Frankly I think that is a very bad idea on the security side, in fact if I was forced not to be allowed to change my passwords when I wanted to I wouldn't around long.

Fri, 08/14/2009 - 05:45
xoa

It is to difficult for them to understand where they have to use which password. There is the Mysql password, then is there a different Virtualmin Password, and another Piwik password etc..

Fri, 08/14/2009 - 06:14
sgrayban

There is only 2 passwords that can be changed.....

First lets understand how VM works...

When you setup a new domain the mysql password is ALWAYS the same as the domain admin password. This is hard coded. The only way to make the mysql password different is IF you manually make that change under the mysql menu otherwise the password will always be in sync to the admins password.

Second the webmin password is always synced to the virtualmin one and visa-versa so that is a moot point.

There is nothing confusing about changing passwords as long as you can read what you are changing it for, if they cant do that then they cant even operate a website either.