Mark Weaver wrote:

> Albert E. Whale wrote:
> > How do I eliminate the 8 character User ID on LM 8.2?
> >
> > --
> > Albert E. Whale - CISSP
>
> Albert,
>
> I can't help but ask...why in the world would you wish to do so. That
> limitation is part of the system design. Just how many characters did
> you plan on needing per username? most systems I know of, including
> WinNT, Win2K, Novell Netware, and all the *nix systems I've ever seen
> typically use a 3 character username schema.
>
> Mark

Mark,

I am a *nix Advocate, and I've worked in this environment for more than 17
years.  Most recently I am converting from more of a Hands on Administrator to
Enterprise Management and Security.

I have never seen this (ahem) 'DOS' Limitation imposed before.  In my mind the
limitation I am used to seeing in the Commercial Unix environment is 128
characters, and in some points I believe the Limits were stated at 1024
characters.

While I have never needed a Login Id of this magnitude, I must pause and
reflect in this day and age of DOS (Denial of Service) attacks which are aimed
at buffer overflows.  If the Login Buffer is allocated for 1024 characters
(maximize the space for an actual id), how is it possible to overflow this
field?

I digress, I am still wondering if the fix is in the PAM Modules.

ANyone had a chance to review the information while I travel to the customer
site?
--
Albert E. Whale - CISSP
http://www.abs-comptech.com
----------------------------------------------------------------------
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to