Re: AW: weird problem

Hi, Marcus,

SOS doesn't support Windows authentication. All VSS users must have a=20
specific username in the VSS database and we recommend using passwords as=
 well.

Were you able to circumvent security using an SOS Client or a VSS client? I=
=20
wasn't able to replicate this, but I may not have used the same steps or=20
have the same network setup.

Linda Bauer
SourceGear
Technical Support

visit our support forum at
http://support.sourcegear.com

At 12:27 PM 6/15/2004, Ohlhaut, Marcus wrote:
>If SOS allows to login based on Windows NT login ("Use network name for=20
>user log-on" option in VSS admin), its easy to cicrumvent security. Simply=
=20
>set up a PC, create a user "xyz" on that PC (to which it is easy to log in=
=20
>since it is your own PC), connect to the VSS on the network (using some=20
>other credentials that allow access to the network share) and - bingo=20
>-  VSS will log you on.
>
>This is due to that fact that a network account consists of user name and=
=20
>domain, but the VSS user name ist "just" a user name. Effectively, users=20
>with the same name coming from different domains are treated equally.
>
>M.
>
>-----Urspr=FCngliche Nachricht-----
>Von: [email protected]
>[mailto:[email protected]]Im Auftrag von Linda Bauer
>Gesendet: Freitag, 11. Juni 2004 20:28
>An: first last; [email protected]
>Betreff: Re: [SOS-LIST] weird problem
>
>
>Gremlins?
>
>I can't think of any way this could happen with SOS, unless a logged in
>client was left open on a machine.
>
>Linda Bauer
>SourceGear
>Technical Support
>
>visit our support forum at
>http://support.sourcegear.com
>_______________________________________________

  =20