Re: Login automatically

From: Robert M. Riches Jr. (spamtrap42_at_verizon.net)
Date: 03/10/04


Date: Wed, 10 Mar 2004 18:01:34 GMT

In article <c2mqrq$f42$1@news-reader4.wanadoo.fr>, Donny Brasco wrote:
>
> On redhat, I boot on X, but it asks me each time to log.
> is it possible to configure the system to log as a registered username (with
> password) automatically (I don't have to fill the username edit box)

If the machine is on a network, unless it is in a physically
secure environment, do you understand why this is a _very_
_BAD_ thing to do?

If it is physically possible for an unauthorized person to
gain access to the console (maybe a burglar or the office
night cleaning person), automatic login could let that
person send threatening email, engage in fraud, download
child porn and store it on your disk, etc. If your browser
stores passwords or has persistent login cookies, the
intruder could do whatever they wish from your account.
This could cause you a lot of trouble.

Two of the first principles a student of computer security
learns are identification and authentication. The normal
process of entering a username is the identification part.
The user identifies himself/herself to the system. The
password is the authentication part. The user proves he/she
is the person he/she claims to be by providing information
(the password) nobody else could provide. This ensures only
the authorized user has access to the privileges of the
account.

Good luck.

Robert Riches
spamtrap42@verizon.net
(Yes, that is one of my email addresses.)



Relevant Pages

  • RE: Adding a virtual FTP folder to IIS
    ... I think we can follow the Form Authentication modal. ... application will use the ASPNET account. ... If we change the username ... Windows identity different from that of the default process identity. ...
    (microsoft.public.dotnet.framework)
  • Re: How to assign a fixed identity to ASPNET process?
    ... And I tried with both 'Forms' and 'Windows' authentication in the config ... But running the entire ASP.NET application under a write-privileged account ... >> username password when the ASP.NET application attempts to write a file. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Printer Permission Issue
    ... user's domain X account is a member of the local administrator's group? ... The user cannont print to a certain printer on domain Y w/o a username and ... Users computer cached the authentication of that printer ...
    (microsoft.public.win2000.networking)
  • Re: smarthosts with Verizon Hawaii DSL
    ... My Master Username/Password is: wjohndoe@mydomain.com/wjohndoe8. ... It is not the same account ... > both have required that outgoing authentication be enabled, ... >> account or the username and passwords for any accounts we have ...
    (microsoft.public.windows.server.sbs)
  • RE: cannot log on to user account following password change
    ... cannot log on to user account following password change ... I changed the username on the account in ... | on the sbs box. ...
    (microsoft.public.windows.server.sbs)