[no subject]

for fun, change DBA's password to 2048 random bytes or longer. the pam_md5
module should be able to handle that...

-----Original Message-----
From: Danny Cox [<a  rel="nofollow" href="mailto:danscox";>mailto:danscox</a> at mindspring.com]
Sent: Monday, May 24, 2004 5:32 PM
To: Atlanta Linux Enthusiasts
Subject: Re: [ale] Access Control Challenge


Thomas,

On Sun, 2004-05-23 at 01:17, Thomas Wood wrote:
&gt; Has 
&gt; anyone else found a more elegant solution?  I'd really like to keep my 
&gt; DBAs in the loop, password-wise, but they don't need the password and I 
&gt; think I can prevent them from changing it.
&gt; 
&gt; Any thoughts?  And no, tcp wrappers doesn't let you filter by username. 
&gt;   Oh that it did.  Also, I'm trying to avoid installing a firewall on my 
&gt; DB, so please, no filter rulesets.

	Will passwd -l (see man 1 passwd) do?  It &quot;locks&quot; the account, only
allowing root to gain access.  It may close the door too much, though.

-- 
kernel, n.: A part of an operating system that preserves the
medieval traditions of sorcery and black art.

Danny

_______________________________________________
Ale mailing list
Ale at ale.org
<a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00970.html">[ale] Issues adding guest OS with VMWare 4.5.1</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00972.html">[ale] Access Control Challenge</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00972.html">[ale] Access Control Challenge</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00903.html">[ale] parallel port printer</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00971"><strong>Date</strong></a></li>
<li><a href="threads.html#00971"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>