Re: application roles and strong passwords

Yeah...I thought I remember testing while back when I first
read it - I still can't find where I originally read it. I
had not looked at the stored proc though - which does make
it look odd that it works.

-Sue

On Thu, 19 Apr 2007 22:15:18 +0000 (UTC), Erland Sommarskog
<esquel@xxxxxxxxxxxxx> wrote:

Sue Hoegemeier (Sue_H@xxxxxxxxxxxxx) writes:
Yeah...I see that in the stored proc but I'm pretty sure the
password check is bypassed - thought it was on one of the
blogs but only found this reference:
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=576174&SiteID=1
I'm not on a box where I can test it, not until tomorrow.

Indeed. I tested it at a server at work, and the password check did
not catch my lousy password. Hm, I wonder how they do that...

.

Relevant Pages