[Pmwiki-users] Passwords [Was: Security aspects -- experience using PmWiki]

[chr@home.se]

On Tue, 14 Sep 2004 chr at home.se wrote:

> !!! User's who forget their passwords
> 
> Ok, this is not really a security issue, but is *annoying*... I don't
> know -- both users who got to chose their password, and users who were
> assigned a passwords have forgotten it. Since I'm not a systems
> administrators, I don't have much tolerance for this :-(

Two people suggested (thanks:) in mails directly to me of using a scheme
where an action by the user will e-mail the password to the user. That's
propably a good thing to have in general (if you use user-based
authentification). It does however require more functionality in PmWiki
since it'll have to keep track of user names, passwords and e-mail
adresses.

/Christian

PS. I should mention that in my case, the part where the user performs an
action is difficult, since noone is allowed in to the server without their
password....  (so they can't even get to a page requesting a password).
Since my number of users is low, this is not a problem, but I can easily 
imagine how this could be a problem in a slightly larger setting.

-- 
Christian Ridderstr?m, +46-8-768 39 44               http://www.md.kth.se/~chr