On Tue, 24 Apr 2001, Charles Daminato wrote:

> A talks to B and sets the domain profile for blah.com to some agreeable
> username/password combination.  B then immediately logs in and changes his
> username/password.  Bada-boom, bada-bing :)

Thanks, that clears that up.  But brings up a new question:

Let's say B *does* already have domains and a profile with opensrs.  When
A goes into "manage profile" why does he need to know B's password?  I
realize B could temporarily change his password, but it seems clunky to do
it this way.  Are we afraid of someone pushing lots of domains onto
unsuspecting users?

Cliff


Reply via email to