🚀 go-pugleaf

tpo@slip.net wrote:

: In article <Pine.OSF.3.91j.950522200536.2099B-100000@saul5.u.washington.edu>, 
: <jessicar@u.washington.edu> writes:


: (((snip ....snip ..snip...)))
: 
: > Please help me!
: > 
: > Problem:
: > Our main server crashed this afternoon.  I believe the crash was caused 
: > by a MAC user trying to install a program from the network.  (He was not 
: > supposed to do this, but unfortunately I didn't deny access to the 
: > directory.)  
: > 
: > Details:
: > We are running Novell 3.11
: > I downed the server and brought it back up.
: > SYS volume would not mount.
: > I ran vrepair and it found many errors which it wrote to disk.
: > I downed the server and brought it back up again, this time SYS mounted.
: > 
: > Now, no one can login.  When anyone tries to login the server console 
: > gives the message:
: > 
: > NCP request received with invalid security signature.
: > Possible intruder or network corruption.

If you don't have passwords you must not be too concerned with security,
so... why is the server requesting NCP Packet Signatures from the clients?
Or vice versa?

Check the AUTOEXEC.NCF file for a line like:
SET NCP PACKET SIGNATURE OPTION = (number)
 
Check the clients NET.CFG file for a line under "Netware DOS Requester"
heading like:  SIGNATURE LEVEL = (number)

Allowed values are 1-3, if the server is 3 and the client is 0
or if the client is 3 and the server is 0, there is no logging in allowed.
The default is client = 1, server = 2, if active.
Check the manuals for the explanations of the other combinations.

If you change these you must reboot whichever machine you change.
Do you have anyone on your net that could, or would want to, falsify
an address within a packet just to read or run a file that the false
address can run and they can't.? 

I am a CNA with two tests to go to be a CNE and I'm not a hacker or
a PHD EE, so I couldn't hand write a false packet and send it to a 
server to look like a ligit packet if I wanted to, I guess someone can
or Novell would'nt have built this capability into Netware. It's for 
government security level qualification of the NOS.

I hope this helps, I'm just a beginner so I don't know if I'm telling you
something you already know, but I'm trying.... 8)

: > 
: > None of our users have passwords.  I can't even login as supervisor with 
: > the right password.
: > 
: >*********** 
: >
: > luckily I backed up the crashed server a couple weeks ago.  
: > 
: >***********
: >
: > I've been working on this for over four hours now.  Any suggestions are 
: > greatfully appreciated!
: > 
: > Thanks,
: > Jessica
: > 
: > TPO States:

:    lemme get this straight....  it's been a cpuple of WEEKS since you backed up 
:    the server ???

: why not try :::    misc.jobs.available   ??????


: tpo
: >