Topic: h You don't have permission to access /user-password on this serverttps

[solom2i]

dear sme server 8.1

i'm using sme server 8.1 in the remote area. Then when someone try to change is password and  using this link "https://my-public -ip/user-password" he get  message like this:

Forbidden

You don't have permission to access /user-password on this server.


But in local area there is no problem. i feel that it'is a problem of access right when you are not in thr LAN.

Please can someone help me.


regards

[guest22]

Hi and welcome,

in server manager, under remote access, you need to add a remote management network. This should be the public IP/Netmask of the user that want's to change the password. Once the password has changed, you want to remove the remote management IP again.

This is one of the default security features of SME Server.

[solom2i]

i would like that all emails accounts owners use this link "https://server/user-password" to change their password everywhere they are

[guest22]

A VPN connection is the only *secure* way to do that. There is a very unsecure way tho.

[solom2i]

what is the unsecure way

[guest22]

add 0.0.0.0/0.0.0.0 as a remote management network. This will open up server manager access to the world too.

So don't use it. BUT use it with a pre-defined time frame, during which you add the 0.0.0.0, and staff can change stuff, and close it after an hour or so.

You're on your own using this.

[solom2i]

think you
i test your solution
it's well



Best regard