🚀 go-pugleaf

----------------------------Original message----------------------------
On Wed, 26 Jun 1996, Ted Dodson - Neteran Vaxoholic wrote:

>   Looks like a HUGE loophole to me.  Anyone could steal the account of someone
> who hasn't previously logged in.  If you are using page counting software
> for printing you should expect it to happen a lot when people start using up
> their own quota.  You certainly couldn't hold the user responsiable for their
> own account when it was created without a password.

It could be.  We were planning to not do the adduser until they had
supplied us with a PIN.  And what they wanted their id to be.  This would
be done from a web page.  We have some experience with web applications
producing data for other applications.  We do something very similar when
assigning students' ids on our unix box (where they currently do their
mail processing.)  So far, that's been fairly secure.

As far as users being responsible for accounts that get their printing
quota usurped unscrupulously...we'd probably up their quota again.  We are
pretty loose.  Obviously, we have very close to no print management
currently.  It's basically this, after spitting out about 50 pages on one
print job we may cancel your job if we notice.

Ken Schriner                            kens@comp.uark.edu