[K12OSN] finding user passwords

[Lewis Holcroft]

Will,

I read this thread, there are many great suggestions and 
recommendations. It sounds like you have it under control.

I was recently at a conference discussing security. The point was 
raised that if passwords are shared with anyone, then security is 
comprimised. So why set passwords at all. Clearly this would not work 
in environments where there is privaleged information. Using your 
situation, if no students had any passwords then the playing field 
would be level. The students would rely on peer honor. It's a system 
that was used in group homes in the UK. Obviously not always with 
possitive results.

Best of luck.

Lewis

On Nov 11, 2004, at 2:34 PM, Will Hatch wrote:

> I had no idea that this question would create so much discussion.  
> Thanks all.  Our program is very strict.  We have to monitor students 
> activity at all times.  They cannot even be out of our sight.  I made 
> it very clear in the beginning of the semester that passwords are not 
> to be changed.  I have since learned how to bypass this.  I have 
> Dansguardian on Ipcop in front of my k12 server.  Its very safe in my 
> experience.  Anyway... I logged in as root, and changed the students 
> password, then logged in.  So, problem solved.  Thanks again everyone.
>>
>> From: Chris Thomas <cwt137 at yahoo.com>
>> Date: 2004/11/11 Thu PM 02:30:49 EST
>> To: "Support list for opensource software in schools." 
>> <k12osn at redhat.com>
>> Subject: Re: [K12OSN] finding user passwords
>>
>> that's in the terminal, i mean in x windows.
>>
>> --- Brian Chase <networkr0 at cfl.rr.com> wrote:
>>
>>> # su <username>
>>>
>>>
>>> Chris Thomas wrote:
>>>
>>>> Hello,
>>>>
>>>> As the administrator (root user), is there a way to
>>>> login to their account (log into gnome or kde),
>>>> without knowing their password?
>>>>
>>>> Chris
>>>>
>>>> --- Will Hatch <fhkms at adelphia.net> wrote:
>>>>
>>>>
>>>>
>>>>> I have a disgruntled student who changed his user
>>>>> password and will not tell faculty what it is.  I
>>>>> can access his home directory from root I know,
>>> but
>>>>> would still like to find out this password.  How
>>> do
>>>>> I do this? I have locked his account out.  Also,
>>> is
>>>>> there a way to make it so they cannot change their
>>>>> password?  thanks!
>>>>>
>>>>> _______________________________________________
>>>>> K12OSN mailing list
>>>>> K12OSN at redhat.com
>>>>> https://www.redhat.com/mailman/listinfo/k12osn
>>>>> For more info see <http://www.k12os.org>
>>>>>
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> K12OSN mailing list
>>>> K12OSN at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/k12osn
>>>> For more info see <http://www.k12os.org>
>>>>
>>>>
>>>
>>> _______________________________________________
>>> K12OSN mailing list
>>> K12OSN at redhat.com
>>> https://www.redhat.com/mailman/listinfo/k12osn
>>> For more info see <http://www.k12os.org>
>>>
>>
>> _______________________________________________
>> K12OSN mailing list
>> K12OSN at redhat.com
>> https://www.redhat.com/mailman/listinfo/k12osn
>> For more info see <http://www.k12os.org>
>>
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>