AW: weird problem
"Ohlhaut, Marcus" <[email protected]> Tue, 15 Jun 2004 19:27:50 +0200
| Newsgroups | gmane.comp.version-control.vss.sourceoffsite.classic |
|---|---|
| Message-ID | <[email protected]> |
If SOS allows to login based on Windows NT login ("Use network name for =
user log-on" option in VSS admin), its easy to cicrumvent security. =
Simply set up a PC, create a user "xyz" on that PC (to which it is easy =
to log in since it is your own PC), connect to the VSS on the network =
(using some other credentials that allow access to the network share) =
and - bingo - VSS will log you on.
This is due to that fact that a network account consists of user name =
and domain, but the VSS user name ist "just" a user name. Effectively, =
users with the same name coming from different domains are treated =
equally.
M.
-----Urspr=FCngliche Nachricht-----
Von: [email protected]
[mailto:[email protected]]Im Auftrag von Linda Bauer
Gesendet: Freitag, 11. Juni 2004 20:28
An: first last; [email protected]
Betreff: Re: [SOS-LIST] weird problem
Gremlins?
I can't think of any way this could happen with SOS, unless a logged in=20
client was left open on a machine.
Linda Bauer
SourceGear
Technical Support
visit our support forum at
http://support.sourcegear.com