East County Internet Services, Inc -Jess- CFO System Admin On Fri, 10 Oct 1997, Andrew wrote: > On Fri, 10 Oct 1997 ascend@digistar.com wrote: > > > please hack the code to show the password that the user mistakenly typed > > in for their password... like so: > > > > Fri Oct 10 13:03:53 1997: Authenticate: 56k-1.getonthe.net.1026, id=185: Neither User Nor Default Name: joebloggs / joesmistype > > Right... so anyone who manages to get ahold of your log files can figure out > what people's passwords are simply by studying their mistypes. > > No, this is not a good idea, which is why no system I'm aware of (UNIX, > RADIUS, or otherwise) logs failed passwords. Some even give the option of > not logging failed usernames (in case someone typed his password in the > usename field), a feature I take advantage of. > > -- > Andrew O. Smith - aos@insync.net | "Reality is that which, when you stop > Sysadmin, Insync Internet Services | believing in it, doesn't go away." > BOFH, Wielder of the sacred LART | -- Philip K. Dick > > ++ Ascend Users Mailing List ++ > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com > To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> > ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!--X-Follow-Ups-End--> <!--X-References--> <HR> <STRONG>References</STRONG>: <UL> <LI><STRONG><A HREF="msg09624.html">Re: (ASCEND) ASCEND RADIUS FEATURE REQUEST</A></STRONG></LI> <UL> <LI><EM>From</EM>: Andrew <aos@insync.net></LI> </UL> </UL> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg09631.html">Re: (ASCEND) Weirdness with Ap27 or am I missing something</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg09637.html">(ASCEND) Where to send bug reports?</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg09624.html">Re: (ASCEND) ASCEND RADIUS FEATURE REQUEST</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg09634.html">Re: (ASCEND) ASCEND RADIUS FEATURE REQUEST</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="mail16.html#09632"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd201.html#09632"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>