This file is indexed.

/etc/horde/passwd3/conf.xml is in sork-passwd-h3 3.1.2-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
<?xml version="1.0"?>
<!-- $Horde: passwd/config/conf.xml,v 1.12.2.1 2008-10-09 17:12:03 jan Exp $ -->
<configuration>
 <configsection name="menu" desc="Menu settings">
  <configheader>Menu settings</configheader>
  <configmultienum name="apps" desc="Select any applications that should be
  linked in Passwd's menu">
   <values>
    <configspecial name="list-horde-apps" />
   </values>
  </configmultienum>
 </configsection>

 <configsection name="backend">
  <configheader>Backend Settings</configheader>
  <configenum name="backend_list" desc="Should we display a list of backends
  (defined in config/backends.php) for users to choose from? The options are
  'shown', 'hidden'. If the backend list is hidden then you can use the
  'preferred' mechanism to auto-select from it based on an HTTP virtualhost or
  another piece of data. If it is shown, the user will be able to pick from
  any of the options.">hidden 
   <values>
    <value>shown</value>
    <value>hidden</value>
   </values>
  </configenum>
 </configsection>

 <configsection name="user">
  <configboolean name="change" desc="Should we allow the user to specify the
  username?">true</configboolean>
  <configlist name="refused" required="false" desc="Define usernames for which
  we will refuse to change passwords.">
  root,bin,daemon,adm,lp,shutdown,halt,uucp,ftp,anonymous,nobody,httpd,operator,guest,diginext,bind,cyrus,courier,games,kmem,mailnull,man,mysql,news,postfix,sshd,tty,www
  </configlist>
 </configsection>

 <configsection name="password">
  <configboolean name="strengthtests" desc="Should strength tests be done on
  the new password">false</configboolean>
 </configsection>

 <configsection name="hooks">
  <configboolean name="full_name" desc="If this is checked, the full user name
  is used to change the password, the user name without the domain part
  otherwise. This setting is overridden by enabling the hook
  below.">true</configboolean>
  <configboolean name="default_username" desc="Use a custom hook for
  determining the default username">false</configboolean>
  <configboolean name="username" desc="Use a custom hook to translate the
  username for the backend">false</configboolean>
  <configboolean name="userdn" desc="If we are using the LDAP driver, use a
  custom hook to provide a userdn for binding. By default the LDAP driver
  finds out the correct userdn for binding by searching for the uid with the
  configured base or binds with admindn if set.">false</configboolean>
 </configsection>
</configuration>