Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) LAN security errors

At 05:25 PM 8/22/98 -0500, you wrote:
>On Sat, 22 Aug 1998, Technical Support wrote:
>
<snipped out a part>

>Yeah, if they're running some version of Windows9x or NT, make sure that
>they don't have any of the following checked in the properties for the
>Dial Up Networking connection: Log on to network, Enable Software
>Compression, Require Encrypted Password, Use LCP Protocol Extensions. 
 
 What's wrong with enable software compression? I admit log on to network
wastes a user's time during the login process. Most of the others than 'rq
encrypted password' are NT based and I agree with all your observations on
those settings.

>
>Also, make sure their user names are being typed correctly and that
>they're not sending the domain name as part of their login (particularly
>in NT).  One of the hardest ones to spot is when they put a space before
>the user name.  Also, make sure their [CapsLock] is off.  

  Bingo!  99.5% of the time, the user doesn't have any client program
installed (not so bad with Win98 as BG finally decided to make DUN a
Typical Install feature) so the password is not saved and they have their
Caps Lock key on, we eventually walk them thru the procedure to add Client
for M$ Networks and then they can save the password.  I also normally set
the rule that all login names and passwords are lower case - tho numbers
are allowed as well - and makes it real easy to find the errors with a user
login by checking the Auth Failures.

>
>We have a wonderful util that we use called radauth (originally from the
>Livingston radius, but modified greatly in-house) which allows tech
>support to verify that a password is correct (it returns the error
>message, if any, or the shell assigned to that account).   Sometimes
>people's passwords aren't what they think they are.

 Using Linux, you can just sit at the prompt and try log in as the user -
if that fails, then their pw is wrong (at least according to the system). I
don't really see any need for an extra utility for that feature!

 
***** Top Net InterNet Services *****
Omaha, Nebraska         Husker Heaven
www.top.net            (402) 291-1542
 Visit Our BBS at: www.hawgwild.com 
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: References: