chngpwd

If you're in search of a secure and reliable tool for changing user passwords in a PAM-enabled system, look no further than chngpwd. This software serves as a wrapper for other interfaces to communicate with users and was built with security in mind, ensuring that there are no security bugs or holes opened by it (although it's always recommended to double-check this for yourself before using it).

Using chngpwd requires Authen::PAM from CPAN and Sys::Syslog, which should already be included in your Perl distribution. Its main feature is its ability to act as a secure wrapper for password changes, so that the CGI or other interface being used doesn't have to deal with security issues or run as suid root.

The script is particularly robust in the sense that it offers a wealth of error messages and exit codes, making it easy to track down errors, misconfigurations, and abuses. Additionally, in particularly critical circumstances, the software will try to mail the admin in an unknown event, and everything it does is logged to Syslog.

Perhaps best of all, chngpwd should work on any PAM-aware system, including almost all Linux distributions, Solaris, and to some extent, HP-UX. While it has been tested on Linux, including Conectiva Linux and Debian, it's worth noting that this software could be a game-changer for users looking to change passwords in a secure, streamlined way.