[ic] open login warning (?)

Dan McFarland dan@mailturtle.com
Wed, 21 Mar 2001 13:43:56 -0600


You can delete all except for your own user account.  You can always add
additional accounts through the admin tool if necessary, but make sure you
have at least your personal admin account in there.


----- Original Message -----
From: Dan Garwood <res087jh@verizon.net>
To: <interchange-users@lists.akopia.com>
Sent: Wednesday, March 21, 2001 1:25 PM
Subject: RE: [ic] open login warning (?)


I am on a modified 4.6.3 Interhange and I tried this little back door easter
egg. It does work. I looked in the access.asc file and it appears there are
several account sin there, that are not needed. Mike are these accounts
needed for the proper function of the UI or interchange. Or can we clear you
the asccess.asc file and start fresh to eliminate this security risk? Thank
you for your help.

Dan Garwood
E-Profit Designs

-----Original Message-----
From: interchange-users-admin@lists.akopia.com
[mailto:interchange-users-admin@lists.akopia.com]On Behalf Of Rene
Hertell
Sent: Wednesday, March 21, 2001 1:57 PM
To: interchange-users@lists.akopia.com
Subject: RE: [ic] open login warning (?)


> ":backup" with no
> password.  I believe it is a group definition.  It allows logins without a
> password and possesses nearly full permissions.
> I'm asterisk-ing out the password field to prevent logins.

It works also on 4.6.3...

René


_______________________________________________
Interchange-users mailing list
Interchange-users@lists.akopia.com
http://lists.akopia.com/mailman/listinfo/interchange-users


_______________________________________________
Interchange-users mailing list
Interchange-users@lists.akopia.com
http://lists.akopia.com/mailman/listinfo/interchange-users