Mike Jackson writes: >Hallvard B Furuseth wrote: > >> Could easily happen by accident: Someone with access to several of an >> account's addresses didn't remember which password went with which >> address. > > In that case, it doesn't really matter :-)
What matters is that you can _discover_ in that manner that you can use any password with any of the account's addresses. One you know that, you (or someone else you tell) can make use of that to log in with an address he should not have access to. Darrell, a few other notes: Check out attribute options. If Radius and the LDAP server supports privately defined ones, then instead of defining 2*5 attributes, you could define 2 attributes and an option range named e.g. "x-num-". Then use attribute "mail;x-num-1" ... "mail;x-num-5". With OpenLDAP that's keyword "attributeoptions" in the slapd.conf manpage. I said to use 5 different views with a common root. Maybe that's unnecessary: Maybe the rwm overlay can mirror one entry onto several different entries in a single relay database, or one database can have 5 rwm overlays. I have not checked. -- Regards, Hallvard --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
