Re: mac client password changes

From: Alex Salkever (alex_salkever@businessweek.com)
Date: 12/21/01 

Date: Fri, 21 Dec 2001 14:44:10 -0500
From: Alex Salkever <alex_salkever@businessweek.com>
To: "Laura A. Robinson" <larobins@bellatlantic.net>

Sounds like a nightmare if, say, your network has a wireless LAN attached to it
and you are relying on MAC as an access control. Which is not an unusual
situation at all these days.

"Laura A. Robinson" wrote:

> How are the passwords being stored in the domain? Is reversible encryption
> being used?
>
> Laura
> ----- Original Message -----
> From: "paul Carcary" <Paul@Lacewood.co.uk>
> To: <focus-ms@securityfocus.com>
> Sent: Wednesday, December 19, 2001 10:44 AM
> Subject: mac client password changes
>
> > Hi
> >
> > I remember a recent odd posting regarding renaming 2000 user accounts and
> > then being able to log in using either name
> >
> > I found another oddity, this time with passwords.....
> >
> > Running 2000 Active Directory with mixed 2000 Pro and MAC clients,
> password
> > expiry is enforced.
> >
> > When a 2000 client changes the password all works exactly as expected
> > When a MAC client changes the password all appears to work as expected,
> > except that the client can then use either the old or the new password to
> > login
> >
> > This "dual password" works from either a MAC or 2000 client, (if a 2000
> > client changes a password you only get one password)
> >
> > Anyone seen this ?
> >
> > There is only one domain controller for this domain.
> >
> > Any thoughts ?
> >
> > Regards
> >
> > Paul Carcary
> >
> > MCSE-W2K, CNE5, CNE4, ASE, CSE, CCNA, CCDA
> >

Relevant Pages

  • Re: Wireless network glitch
    ... restrict access to the wireless net by MAC address. ... Access Control, not Mac.) ... this, Barb, and you need someone to walk you thru the Airport Extreme ... settings regarding Access control, just let me know. ...
    (comp.sys.mac.comm)
  • Re: Intel Mac Terminology Source (dry)
    ... individual number hard coded into each computers Ethernet chip. ... No, ifs ands or buts about it, Media Access Control address is the proper term. ... MAC addresses are part of the Data Link layer, not specific to ethernet interfaces. ... In the case being discussed the application could grab the MAC address of any interface on the host that uses a MAC address. ...
    (comp.sys.mac.system)
  • Re: Duplicate MAC problems
    ... login/password to authenticate? ... But by changing MAC and IP ... the access control are bypassed. ... Some subs didn't do this in purpose. ...
    (comp.os.linux.networking)
  • Re: Iinternet access control..
    ... We need to set up an Ubuntu box to act as http proxy and also control ... internet access by MAC address. ... Why access control by MAC? ...
    (comp.os.linux.networking)