[Samba] Re: A possible big security issue

Rex Dieter rdieter at math.unl.edu
Sun Sep 18 06:35:13 GMT 2005


AndyLiebman at aol.com wrote:

> net use M: \\netbiosname\sharename "password"  /USER:username
> 
> But if I simply leave out the "password" the share mounts  all the same. And 
> I can read and write to the share. Seems kind of dangerous to  me. 

In my experience, when leaving out the "password", windows supplies the 
users' current (windows) password for (initial) authentication purposes. 
  If the initial (supplied) username and password fails, it prompts for 
another.

-- Rex



More information about the samba mailing list