NAME

       poppassd - Password change server for Eudora and NUPOP mail clients

DESCRIPTION

       poppassd runs from inetd and listens on TCP port 106 by default.  Its sole purpose in life
       is to engage in short FTP-like conversations from  client  applications  and  execute  (or
       deny)  remote  password  changes via the PAM facilities configured in /etc/pam.d/poppassd.
       The conversation looks something like this:

              200 poppassd v1.8.4 hello, who are you?
              user adconrad
              200 Your password please.
              pass foo
              200 Your new password please.
              newpass bar
              200 Password changed, thank-you.
              quit
              200 Bye.

       As can be seen from the example above, unencrypted  passwords  are  transmitted  over  the
       network.   Because  of  this,  it  is  recommended that you use this daemon only for local
       loopback password changing (for instance, from Perl, Python, or PHP  web  applications  on
       the  same  server)  and  block  all  non-local  access to port 106, either via tcpwrappers
       (/etc/hosts.deny) or with appropriate firewall rules.

       If sending unencrypted passwords over the wire doesn't bug you terribly much  (as  in  the
       case  of an ISP with hundreds of POP3 mail accounts), this daemon can provide a simple way
       for some of your clients (those running mail clients that actually support this  protocol)
       to easily change their passwords.

FILES

       /etc/pam.d/poppassd
              Contains  the  PAM  configuration  for  poppassd.   By default on Debian, it merely
              includes the common-auth and common-password  files,  which  should  work  in  most
              cases.  If this doesn't cut it for your site, tailor to suit.

SEE ALSO

       pam(7), inetd(8), hosts.deny(5)

AUTHOR

       This  manual  page  was written by Adam Conrad <adconrad@0c3.net> for the Debian operating
       system.