This file is indexed.

/etc/horde/passwd/conf.xml is in php-horde-passwd 5.0.7-1ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
<?xml version="1.0"?>
<!-- $Id: afef93e939103554c1ec47b6cb4ae47e8ed5145b $ -->
<configuration>
 <configsection name="backend">
  <configheader>Backend Settings</configheader>
  <configenum name="backend_list" desc="Should we display a list of backends
  (defined in config/backends.php) for users to choose from? If 'hidden', then
  you can use the 'preferred' mechanism in backends.local.php to auto-select
  based on an HTTP virtualhost or another piece of data. If 'shown', the user
  will be able to pick from any of the options.">hidden
   <values>
    <value>shown</value>
    <value>hidden</value>
   </values>
  </configenum>
 </configsection>

 <configsection name="user">
  <configboolean name="change" desc="Should we allow the user to specify the
  username?" required="false">true</configboolean>
  <configlist name="refused" required="false" desc="Define usernames for which
  we will refuse to change passwords (usernames should be separated by a
  comma).">
  root,bin,daemon,adm,lp,shutdown,halt,uucp,ftp,anonymous,nobody,httpd,operator,guest,diginext,bind,cyrus,courier,games,kmem,mailnull,man,mysql,news,postfix,sshd,tty,www
  </configlist>
 </configsection>

 <configsection name="password">
  <configboolean name="strengthtests" desc="Should strength tests be done on
  the new password?" required="false">true</configboolean>
 </configsection>
</configuration>