Re: Login anomaly or security issue?

Stephen Fisher (lithium@cia-g.com)
Fri, 25 Jul 1997 11:36:21 -0600 (MDT)

I believe Livingston Radius 2.0 or 2.0.1 fixed it so that this can't
happen anymore?

On Fri, 25 Jul 1997, Jason Robbins wrote:

> A user, lets call him 'joe' accidentally logged in yesterday with his
> username, a space and his lastname, 'joe last'. He authenticated just
> fine, and a show session listed him as 'joe last', as did the detail
> file. We are using radius, system authentication to a linux box.
> Haven't checked yet to see if I can log into linux as 'joe testguy' (but
> I seriously doubt it). I don't know if this is a security issue, but at
> the very least, it makes examining the detail file a little more
> difficult.