I have found something that could be a little scary. I was logged in on a 
thin client as a student , standard user. I wanted to change a setting and 
was prompted for the root pasaword. OK I gave it and did a keyboard change. 
Iwas then able to change user passwords without using being prompted for the 
root password. I then logged off the student account and then logged on as a 
different user. The different user had not special rights so I logged off and 
then logged on as the first user again. To my surprise I could change user 
passwords and do other root functions without the password. This remained the 
case untill I rebooter the LTSP SERVER.

Is this a known issue?  The only change from the default k12ltsp setup was to 
change the DHCP server

I can live with this but it is something I think administrators need to know. 
Is there a way to fix this?

We are having some fun now :)

Mark Raine


-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to