Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » which tool to know password of user
  •  
ngthcuong

Messages: 5

Karma: 0
Send a private message to this user
Hi All,
I'm admin of Kerio Server Mail.
How to know user password. ??
please help me !!!
  •  
sonofcolin

Messages: 483
Karma: 0
Send a private message to this user
Quote:
How to know user password. ??

It's not possible. You can only change them via the admin console or webadmin.
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
All user passwords are encrypted in the user config file. You can't decrypt them.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mombooks

Messages: 23
Karma: 0
Send a private message to this user
Is it known whether there is a plan in place for a 'Forgot your Password?' feature?

...Would be really nice as admin not to have to keep a list of passwords around ^.^
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
The Admin doesn't need to keep a list of all user passwords. In fact, he shouldn't.

If a user has forgotten his password, the admin should reset it to a standard password and the user should change it immediately.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mombooks

Messages: 23
Karma: 0
Send a private message to this user
None of my end users EVER remember their passwords. They all have them saved in their client apps. That is not an attractive option to me! And surely a 'standard password' that may not be changed is more of a security hazard?

Rather just change to a new password generator password than try to explain that users should change and remember their passwords ^.^

I don't understand why they can't implement a 'Forgot your Password' feature if linked to personal email addresses?
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
By "Standard Password" I didn't mean it can't be changed. It is a password that the admin creates (can be different everytime) and then tells the user (for example via phone). The user then has to change this.

How would you implement the "Forgot password" feature? With a password reminder phrase? If your users always forget their passwords, they will also forget the password reminder phrase.

Or would you just send the password to an alternate e-mail address? It is not good practice to send passwords in plain text.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mombooks

Messages: 23
Karma: 0
Send a private message to this user
Ideally the 'forgot your password?' form would be one field - for the email address of the account - so all they'd have to do is enter their email address in order to retrieve their password sent to their own alternate email address linked to their office email.

I understand that it's not best practice to send passwords in plain text, but surely it could be worked around by including options to say send the password as an image, or including a time-expiring link in the email you would have to click on in order to retrieve the password?
  •  
hbianchi

Messages: 121
Karma: 8
Send a private message to this user
Why doing so? Its a nonsense complication? It is not clear why the admin should know everybody's passwords, and if so, Kerio should become a very weak email system. The possibility to have a tool to implement "forget your password...." has no sense because it needs the email to return the password, and the user can't enter the email because he do not remember it. If users are relying on administrator to "know" everybodys password, they are very strange users.
  •  
mombooks

Messages: 23
Karma: 0
Send a private message to this user
It at least needs the ability to use admin password to access standard accounts. I need to be able to access staff accounts for setup modification and troubleshooting, but NO staff here will EVER remember that their password happens to be something like 'a56GrI8A' (case-sensitive). Entourage/Outlook does that for the end-user and as a result they don't know their passwords.

If you run an OFFICE email server then forgotten passwords can be emailed to workers personal gmail or whatever account.
  •  
lythaby

Messages: 30
Karma: 0
Send a private message to this user
We used the Description field, and then not allow web admin.

Now the description field gets published in the public contacts, and web admin is the preferred way to admin.

So i now have an excel of their pw's. Not idea, but not all companies run the same ethics/schemas.

Previous Topic: Kerio Connect 7 Unstable
Next Topic: LDAP on Iphone 3 (Non standard Port)
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Nov 22 08:23:56 CET 2017

Total time taken to generate the page: 0.00449 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.