Re: [Nolug] Email passwords are.. special?

> It wasn't identified before? :)
>
Yes... Overall roundabout manner since the beginning of the thread....
I just had to start some othe way except with he word "umppalumppa" :-)
> "Yet, there is the risk that a compromised email password will then
> compromise the network."
>
> As far as a "switch" in Linux to separate them, you would have to do
> this at the application level. So, for Linux and the VPN, you may
> point them at one type of entry or even a container in LDAP, but for
> email you would use another set of accounts. Or, perhaps your email
> system would use an internal database of user accounts.
>
Perhaps someday I have time to learn these alternatives as well.... or
perferably have enough money to hire someone else to reorganize all the
stuff :-) So far we do not have that many accounts really.... And all
people who only utilize e-mail, their linux shell is set to "false". So
in theory, they can only retrieve e-mails and not log on to the
server..... Unless there is a problem with the idea of having shell set
to false, I'm not aware of....

Petri
WOLU
> ---
> Puryear Information Technology, LLC
> Baton Rouge, LA * 225-706-8414
> http://www.puryear-it.com
>
> Author:
> "Best Practices for Managing Linux and UNIX Servers"
> "Spam Fighting and Email Security in the 21st Century"
>
> Download your free copies:
> http://www.puryear-it.com/publications.htm
>
>
> Thursday, February 15, 2007, 11:08:50 AM, you wrote:
>
>
>> Now that the potential problem has been identified...
>>
>
>
>> I'd like to know what are the options of separating e-mail passwords
>> from the rest of the passwords?
>>
>
>
>> By default, if I create a user account in linux server, the same
>> password is used for logging in, and e-mails etc.... so where is the
>> switch to separate them?
>>
>
>
>> Petri
>>
>
>
>> Dustin Puryear wrote:
>>
>>> So, your users have to remember a separate password for email and one
>>> for ssh/VPN/desktop whatever? I just want to be clear.
>>>
>>> ---
>>> Puryear Information Technology, LLC
>>> Baton Rouge, LA * 225-706-8414
>>> http://www.puryear-it.com
>>>
>>> Author:
>>> "Best Practices for Managing Linux and UNIX Servers"
>>> "Spam Fighting and Email Security in the 21st Century"
>>>
>>> Download your free copies:
>>> http://www.puryear-it.com/publications.htm
>>>
>>>
>>> Wednesday, February 14, 2007, 5:17:05 PM, you wrote:
>>>
>>>
>>>
>>>> On 2/14/07, Dustin Puryear <dustin@puryear-it.com> wrote:
>>>>
>>>>
>>>>> So, there is always this conflict over whether accounts for email
>>>>> (POP3, IMAP) should be tied to your normal account.
>>>>>
>>>>>
>>>
>>>
>>>> We have separated our shell & email accounts. We also do not allow
>>>> unencrypted anything. POPS, IMAPS only.
>>>> ___________________
>>>> Nolug mailing list
>>>> nolug@nolug.org
>>>>
>>>>
>>> ___________________
>>> Nolug mailing list
>>> nolug@nolug.org
>>>
>>>
>>>
>> ___________________
>> Nolug mailing list
>> nolug@nolug.org
>>
>
> ___________________
> Nolug mailing list
> nolug@nolug.org
>
>
___________________
Nolug mailing list
nolug@nolug.org
Received on 02/15/07