Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: NETWARE SECURITY/REMOTE LOGINS
From: Davyd Norris <Davyd . Norris @ fcollins . com . au>
Organization: Franklin Collins Pty. Ltd.
Date: Thu, 31 Oct 1996 10:07:27 +1100
To: Firewalls @ GreatCircle . COM
References: <199610300900 . BAA20976 @ miles . greatcircle . com>

The NetWare RCONSOLE password is stored as plain text on the load line
of the RCONSOLE NLM. Anyone with access to the server can load the
startup (text) files to find it. If the server console is locked, you
just have to reboot the server, crash to DOS and read it from there in
the NWSERVER directory.

This is a great reason to NOT use RCONSOLE, or to password protect your
server console, and to create an RCONSOLE user with limited ability.

DONT EVER USE THE Admin PASSWORD FOR RCONSOLE!!!

Regards,
Dave.
-- 
Davyd Norris - Systems Manager
Franklin Collins Pty. Ltd.
Melbourne, Australia.
http://www.fcollins.com.au/


Follow-Ups:
Indexed By Date Previous: Re: Opinions wanted
From: Thutchens @ framatech . com
Next: Re: firewall configs
From: Frank Willoughby <frankw @ in . net>
Indexed By Thread Previous: RE: NETWARE SECURITY/REMOTE LOGINS
From: "Osterwald, Paul" <posterwald @ XLConnect . com>
Next: Re: NETWARE SECURITY/REMOTE LOGINS
From: Dave Sroelov <dsroelov @ pacbell . net>

Google
 
Search Internet Search www.greatcircle.com