AW: weird problem

"Ohlhaut, Marcus" <[email protected]> Tue, 15 Jun 2004 19:27:50 +0200
Newsgroups gmane.comp.version-control.vss.sourceoffsite.classic
Message-ID <[email protected]>
If SOS allows to login based on Windows NT login ("Use network name for =
user log-on" option in VSS admin), its easy to cicrumvent security. =
Simply set up a PC, create a user "xyz" on that PC (to which it is easy =
to log in since it is your own PC), connect to the VSS on the network =
(using some other credentials that allow access to the network share) =
and - bingo -  VSS will log you on.

This is due to that fact that a network account consists of user name =
and domain, but the VSS user name ist "just" a user name. Effectively, =
users with the same name coming from different domains are treated =
equally.

M.

-----Urspr=FCngliche Nachricht-----
Von: [email protected]
[mailto:[email protected]]Im Auftrag von Linda Bauer
Gesendet: Freitag, 11. Juni 2004 20:28
An: first last; [email protected]
Betreff: Re: [SOS-LIST] weird problem


Gremlins?

I can't think of any way this could happen with SOS, unless a logged in=20
client was left open on a machine.

Linda Bauer
SourceGear
Technical Support

visit our support forum at
http://support.sourcegear.com