Security Problem?

[JPAYNE at BBNG.ARPA]

	From:  Greg Skinner <EE.GDS%MIT-OZ at mit-mc>

	Some  users  stupidly  have  login and password names the same.
	This happens often when accounts are newly created and the user
	is not present at the creation time.


At LSRHS we have an account called new which runs the program newu.
Newu asks for login name, a password which has to pass the same tests
as the change passwd program, Real name, birthday, Hall, Year of
Graduation, and of course a password for the account.  It then adds a
new entry into the passwd file, and in another file, the inquir file.
The new account can't be used until it is validated with the validate
program.  This is a nice easy way to create accounts with SECURE passwds.

	Jonathan