RE: Recent bugtraq postings

[rob@xxxxxxxxx]

Something makes me think it limits it.  However I just modified Scott's 
RPG program to do a ldap search and even if I don't bind to it using any 
specific authority I can get pretty good results back.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
04/22/2005 11:00 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
cc

Subject
RE: Recent bugtraq postings






True (although the older I've gotten the more reticent I am to accept
such authority -- it's plausible deniability <grin>).  But if you don't
have Godlike authorities and you try the LDAP "exploit", do you still
get a list of all users?

Joe
 
> From: rob@xxxxxxxxx
> 
> Joe, you and I probably have Godlike authority on most of the machines
we
> work on.  Normal users execution of WRKUSRPRF tells them nasty things
> about their mother.  Their workaround is to do a WRKOBJ QUSRSYS/*ALL
> *MSGQ.

-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.