Re: BugTraq Exploit for OS/400

[rob@xxxxxxxxx]

We're cool.

Also, until we get a current mess straightened up, we have multiple
signon's.  So there may be a one-to-many relationship from employee number
to user id's.  I am sure there are other shops out there like this.  1
signon for payroll from vendor XYZ.  1 signon for ERP from vendor ABC...
that sort of rot.

Rob Berendt
--
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
Benjamin Franklin



                    Chuck Lewis
                    <clewis@iquest.net>       To:     midrange-l@midrange.com
                    Sent by:                  cc:
                    midrange-l-admin@mi       Fax to:
                    drange.com                Subject:     Re: BugTraq Exploit 
for OS/400


                    02/26/2002 10:33 AM
                    Please respond to
                    midrange-l






Rob,

I'm glad you are able to correct what I say to mean what I meant <BG> !
Going
way too fast today :-)

That is what I was wondering !

Chuck

rob@dekko.com wrote:

> Perhaps you meant
> I was just wondering why the user profile name wasn't unique enough to do
> the same thing ?
> instead of
> I was just wondering why the user profile name was unique enough to do
the
> same thing ?
>
> If so, then because our HR system doesn't store the user profile name
into
> the database.  Were you thinking that we could use first initial and last
> name?  1)  We couldn't  - it wouldn't be unique enough.  2)  Doesn't seem
> to be a popular technique lately on this list :-)
>
> Rob Berendt
> --
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
> Benjamin Franklin
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.