[13171] in Athena Bugs

home help back first fref pref prev next nref lref last post

sun4 7.7K: login

daemon@ATHENA.MIT.EDU (A.J. Aranyosi)
Fri Feb 3 10:20:03 1995

To: bugs@MIT.EDU
Date: Fri, 03 Feb 1995 10:19:57 EST
From: "A.J. Aranyosi" <aja@MIT.EDU>

System name:		eecs-ath-12
Type and version:	SPARC/Classic 7.7K (1 update(s) to same version)
Display type:		cgthree

What were you trying to do?
	Log in to a workstation, accidentally using my old password.

What's wrong:
	I changed my password yesterday on this same machine.  When
	I tried to log in this morning, I accidentally used the old
	password.  Rather than telling me that the password was
	incorrect, the machine tried to log me in, but failed to 
	obtain any Kerberos instances, attach my home directory, etc.
	Eventually I did get a generic login.  Note that on any
	other machine, entering the old password generates a
	"login failed" message.  Kind of an ugly security breach,
	isn't it?

What should have happened:
	I should've gotten a message saying "login failed".

Please describe any relevant documentation references:
	None that I know of.


home help back first fref pref prev next nref lref last post