RE: Passwords
From: Edward Petrie-Smith (PETRIEE@uk.ibm.com)Date: 10/31/01
- Previous message: Simon Barr: "RE: Passwords"
- Maybe in reply to: Keith Maxon: "Passwords"
- Next in thread: Mark Medici: "RE: Passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Subject: RE: Passwords To: H C <keydet89@yahoo.com>, focus-ms@securityfocus.com, KMaxon@Pulte.com, oreilt@jacobsons.com Message-ID: <OFF867C911.E894B5F9-ON80256AF6.003DB26C@portsmouth.uk.ibm.com> From: "Edward Petrie-Smith" <PETRIEE@uk.ibm.com> Date: Wed, 31 Oct 2001 11:26:19 +0000
Tom,
You are right that in NT 4.0 the dll FPNWCLNT is in default included in the
list of Notification Packages at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Notification
Packages, but isn't included in the system\win32 folder ( I think) so that
the registry edit doesn't point to anything - The .dll is supplied by
Novell.
One of the long established password gathering techniques was to create a
dll called FPNWCLNT that all it did was to alert the craker to the username
as password just changed.
Regards, Edward Petrie-Smith,
H C
<keydet89@yaho To: "O'Reilly, Tom" <oreilt@jacobsons.com>, "'Keith Maxon'"
o.com> <KMaxon@Pulte.com>, "'focus-ms@securityfocus.com'"
<focus-ms@securityfocus.com>
30/10/01 17:03 cc:
Please respond Subject: RE: Passwords
to H C
Tom,
Isn't the DLL you're referring to installed by default
on NT Server? I think it's actually called
"FPNWCLNT.DLL", and is in the "Notification Packeges"
key.
Carv
--- "O'Reilly, Tom" <oreilt@jacobsons.com> wrote:
> I think (correct me if I'm wrong folks) that Novell
> has a dll you can put
> into the notification packages portion of the
> registry on the NT box to
> automatically update Novell when the NT password
> changes. Even if you can't
> find something pre made you could write a custom dll
> yourself and do
> whatever you want with the information. Read
>
http://support.microsoft.com/support/kb/articles/Q151/0/82.ASP
> for more
> information.
>
> -----Original Message-----
> From: Keith Maxon [mailto:KMaxon@Pulte.com]
> Sent: Monday, October 29, 2001 11:39 AM
> To: 'focus-ms@securityfocus.com'
> Subject: Passwords
>
>
> I'm sure this problem has been posted before, but I
> am in an interesting
> position. We run Windows 95 clients (we are
> migrating to 2000), Windows NT
> 4.0 DC's and Novell 4.11. I just had security
> awareness training instructing
> all employees not to give passwords out to the IS
> department, however, as
> all of you know, NT and Novell don't sync very well.
> Is there a way to
> securely sync the two without compromising my
> policy? Any help is
> appreciated. Thanks.
>
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
- Previous message: Simon Barr: "RE: Passwords"
- Maybe in reply to: Keith Maxon: "Passwords"
- Next in thread: Mark Medici: "RE: Passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
