Greetings,

I've updated the NTAuth program (link at bottom) I posted the other day - 
I've added some additional commenting in the code (to clarify what's going 
on and why), and I've added logging of all auth attempts (this will allow 
administrators to look at the log and see who authenticated and who didn't).

As a side effect, this will reveal user's passwords to whomever has access 
to the log. I realise this is insecure, but since the log should not be 
available to anyone but administrators, I figure it's an acceptable risk. 
If you don't want the passwords exposed, you can modify the source code 
that builds the log line - I recommend leaving failed attempts showing the 
password - this will tell you if someone is attempting to crack a password. 
But even that could be considered insecure, so it's your choice.

I've included a project file for VC++ 6.0, should you wish to change the 
source code and recompile. I've also included a sample .tab file (which 
would get placed in <mailroot>\userauth\pop3 or <mailroot>\userauth\smtp as 
needed, after modification for your mail domain).

If you have any questions about the code or how it's used, feel free to 
contact me. I'll try to answer them, although I don't know that I'll be 
able to...:)

Good luck.

The file is located at:  http://www.arisiasoft.com/misc/ntauth.zip

Tracy


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to