Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: NETWARE SECURITY/REMOTE LOGINS
From: Dave Sroelov <dsroelov @ pacbell . net>
Date: Wed, 30 Oct 1996 17:21:59 -0800
To: Davyd Norris <Davyd . Norris @ fcollins . com . au>
Cc: Firewalls @ GreatCircle . COM
References: <199610300900 . BAA20976 @ miles . greatcircle . com> <3277DFAF . 513A @ fcollins . com . au>

i don't remember exactly where i saw this, but there is either a patch
or a newer version of rconsole that lets you specify the password once
and then remembers it.  a couple of years ago i ran into the problem and
absolutely refused to put the plain text password in the autoexec.ncf
file.  more than likely i found it on the novell ftp site or the novell
web site.

good hunting.

	dave


Davyd Norris wrote:
> 
> The NetWare RCONSOLE password is stored as plain text on the load line
> of the RCONSOLE NLM. Anyone with access to the server can load the
> startup (text) files to find it. If the server console is locked, you
> just have to reboot the server, crash to DOS and read it from there in
> the NWSERVER directory.
> 
> This is a great reason to NOT use RCONSOLE, or to password protect your
> server console, and to create an RCONSOLE user with limited ability.
> 
> DONT EVER USE THE Admin PASSWORD FOR RCONSOLE!!!
> 
> Regards,
> Dave.
> --
> Davyd Norris - Systems Manager
> Franklin Collins Pty. Ltd.
> Melbourne, Australia.
> http://www.fcollins.com.au/



References:
Indexed By Date Previous: Re: NCSA membership
From: Frank Willoughby <frankw @ in . net>
Next: Re: Firewalls vs Blocking Sites
From: Ryan Mooney <ryan @ pcslink . com>
Indexed By Thread Previous: Re: NETWARE SECURITY/REMOTE LOGINS
From: Davyd Norris <Davyd . Norris @ fcollins . com . au>
Next: RE: NETWARE SECURITY/REMOTE LOGINS
From: "Charles L. Getty" <cgetty @ netvisioninc . com>

Google
 
Search Internet Search www.greatcircle.com