Re: (RADIATOR) Blank password lets users in!

1999-04-15 Thread Brian
I found my problem, those users in fact had no passwords! I didn't realize nothing could encrypt with a salt, to produce a encrypted password of NOTHING. open(SHADOW,"shadow"); while() { ($username,$fullpasswd)=(split(/:/,$_))[0,1]; $salt=substr($fullpasswd,0,2); $passwd=substr($fullp

(RADIATOR) Blank password lets users in!

1999-04-15 Thread Brian
Radiator: 2.12.1 Postgres: 6.3.2 Redhat 5.2 We just noticed a problem with our Radiator setup. Some uses can get in by entering a blank password. I have not find out why it is only some users and not others. Take these two users for example, both would be caught by the "DefaultReply" item in