Login anomaly or security issue?
Jason Robbins (robbins@auscsmp.sps.mot.com)
Fri, 25 Jul 1997 08:59:19 -0500
A user, lets call him 'joe' accidentally logged in yesterday with his
username, a space and his lastname, 'joe last'. He authenticated
just fine, and a show session listed him as 'joe last', as did the detail
file. We are using radius, system authentication to a linux box.
Haven't checked yet to see if I can log into linux as 'joe testguy'
(but I seriously doubt it). I don't know if this is a security
issue, but at the very least, it makes examining the detail file a
little more difficult.
Jason