5 Nov
2009
5 Nov
'09
12:46 p.m.
Bob Brandt wrote:
My setup right now works great, however there is only little problem, even if the user is rejected (i.e. incorrect password) all the user attributes are still returned. I think this is a slight security risk, since all you need to know is the username to retrieve information about the network...
That information goes to the NAS. It doesn't go to the end user. There is no security issue. Alan DeKok.