Re: pls help: numeric username



On Tue, 27 Mar 2007 04:40:15 -0700, wst305@xxxxxxxxx wrote this:

On Mar 25, 4:05 pm, " claude" <c...@xxxxxxxxxxxxxxxx> wrote:
In fact no problem but the convention whith Unix/Linux is using letters
. . .
When you look for the PID of yourusername? I think it's a problem to
recognize which is PID or Unsername ? it's dangerous ?

Claude

I voiced out it's bad idea to use all numbers in username but
managers insist (can't understand why...). I thus try to collect proof
to against their idea. Although still can't find a doc stating it
clearly, I found some tools dislike numeric usernames. Will let managers
know the down side of numeric usernames as you all mentioned. See if life
can become easier here... :-|

Thanks a lot.
/st

In the big scheme it's only risky because it's easier to guess numeric
passwords than alpha-numeric passwords, otherwise there's no difference
between 1234 and j47n as userids.

Just make sure username is linked to userid in passwd file and keep super
secret list cross-referencing user id to user name. Maybe variable
length numeric ids, ie, John Doe = 12345678, Abraham Lincoln =
123456789012345

And don't use SSN, employee id or any type of official serial numbers.
.