Unique UIDs and Security Implications

From: LAURA GRABINSKI <grabilau_at_aquinas.edu>
Date: Thu, 19 Dec 1996 11:00:02 -0500

We have several Digital Unix hosts on campus. Our login names are
unique across all systems. (Example: User Thomas Aquinas will have
a login name of "aquintho." Thomas Aquinas, and only Thomas
Aquinas, will use the login name "aquintho" to access all hosts to
which he has access). Our UIDs are unique across all systems (User
Thomas Aquinas with login name of "aquintho" will have a UID of 299.
Thomas Aquinas, and only Thomas Aquinas, will have the UID of 299 on
all hosts to which he has access.)

We are obtaining another Digital Unix host which will be running an
application which we are initally looking to support as a turnkey
system. This turnkey system will not allow us to display or set the
UID. We will not have access to the root password.

What are security implications of no longer having unique UIDs in a
networked environment? Please indicate which applications/protocols
that could be affected (NFS, ftp, mail, etc).

How does your site handle recycling UIDs for departed users? We have
a high turn over of users in our student population.


Thank you.

------------------------------
Laura Grabinski, Network Administrator
Aquinas College, 1607 Robinson RD SE, Grand Rapids MI 49506 USA
mailto:grabilau_at_aquinas.edu 616-459-8281, http://www.aquinas.edu
Personal e-mail: mailto:laurag9909_at_aol.com
Received on Thu Dec 19 1996 - 17:15:37 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:47 NZDT