Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!yale!cmcl2!rosenblg From: rosenblg@cmcl2.NYU.EDU (Gary J. Rosenblum) Newsgroups: comp.unix.ultrix Subject: 4.0 Enhanced Security & root/field accts Summary: Using auth with root/field Keywords: ultrix 4.0 Message-ID: <48811@cmcl2.NYU.EDU> Date: 12 Sep 90 05:17:56 GMT Organization: New York University Lines: 13 Background - Ultrix 4.0 installed, ENHANCED security enabled. (Using the auth database). The way it is distributed, the root and field accounts both have uid 0, gid 1. Problem is, when you set the password for root, field gets set the same, and vice-versa. This is due to the uid being the key into the database. This is not "fatal", but it might introduce problems to the non-wary ranging from passwords seemingly changing, to a security hole. BTW: Would getauthuid return, on subsequent calls, the other entries if they existed (I don't have source yet).