Passthough security fix.

[Gerald Carter]

Andrew Tridgell wrote:
> 
> > Simple, elegant and works with all broken versions
> > of NT. Can anyone see any disadvanages ?
> 
> there is a minor one. The logs on the NT server will get filled with
> messages about a bad password being entered. Hmmm, does NT log those
> by default?

First auditing would have to be enabled ( is not by default ) and the
failed login attempts would need to be selected (again not by default).

Although IMHO the should be audited by default and mostly likely will be
enabled by sysadmins once attached to the network.



j-
________________________________________________________________________
                            Gerald ( Jerry ) Carter	
Engineering Network Services                           Auburn University 
jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw

       "...a hundred billion castaways looking for a home."
                                  - Sting "Message in a Bottle" ( 1979 )