On Thu, 5 Jun 2003, Tracy wrote:

> Greetings,
>
> I've updated the NTAuth program (link at bottom) I posted the other day -
> I've added some additional commenting in the code (to clarify what's going
> on and why), and I've added logging of all auth attempts (this will allow
> administrators to look at the log and see who authenticated and who didn't).
>
> As a side effect, this will reveal user's passwords to whomever has access
> to the log. I realise this is insecure, but since the log should not be
> available to anyone but administrators, I figure it's an acceptable risk.
> If you don't want the passwords exposed, you can modify the source code
> that builds the log line - I recommend leaving failed attempts showing the
> password - this will tell you if someone is attempting to crack a password.
> But even that could be considered insecure, so it's your choice.
>
> I've included a project file for VC++ 6.0, should you wish to change the
> source code and recompile. I've also included a sample .tab file (which
> would get placed in <mailroot>\userauth\pop3 or <mailroot>\userauth\smtp as
> needed, after modification for your mail domain).
>
> If you have any questions about the code or how it's used, feel free to
> contact me. I'll try to answer them, although I don't know that I'll be
> able to...:)
>
> Good luck.
>
> The file is located at:  http://www.arisiasoft.com/misc/ntauth.zip

Can you setup a simple HTML page and give me the link ? It is better to
have links to HTML pages instead of zip files directly.



- Davide

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to