Re: OS Authentication with winXP client Linux Server

hjr.pythian_at_gmail.com wrote:

> It means that if I were your cleaner, janitor or nightime security
> guard I would simply need to bring in my teenage son's laptop one
> night, plug it into your network, and I then have access to your
> database. My laptop, after all, will happily authenticate me as a
> valid user of that laptop. REMOTE_OS_AUTHENT=TRUE then states that
> such validation is sufficient to get me access to your database. It
> doesn't bear thinking about.

This absolutely the case and I can verify, from personal experience, that it can also be done with a iPOD in the right hands.

-- 
Daniel A. Morgan
University of Washington
damorgan_at_x.washington.edu (replace x with u to respond)
Puget Sound Oracle Users Group
www.psoug.org