John:

>The reason its not available is due to security complaints from
specific people.  I.e. if you could do it than someone exploiting
other security holes in the OS could execute adduser and make a
new IMail system administrator or host administrator.

<$0.02>
    I cannot agree! If that was the intention, then you guys should have
created a secure means to do it. After all, the way it is, it still *is*
very easy to create such an account or domain. I wrote a small app myself to
create domains and users, since adddomain/adduser/addalias wouldn't fit my
needs. So I'm able to create anything, and the "security" has been
circumvented all the same. The password "cryptography", for instance, is way
too obvious. I should be glad about it, because I was able to wrote my
application, but if we are talking about security, then it's still very
poor. The problem you described could be easily prevented by disabling
remote administration, for instance, if that was the administrator's desire.
</$0.02>

Rubens


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

Reply via email to