[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: same root and user password by default



On Sat, Mar 18, 2000 at 06:33:37AM +0000, bug1 wrote:
> I just installed w2k and i noticed that with there user/password setup
> they ask for one user name and password, they use the supplied password
> for both the uspecified user and the adminstrator (root) password.
> 
> This to me seems like an ok idea, it cuts down on a question for the
> install, and forces the creation of a user account rather than just
> asking.
> 
> The bad thing may be that assuming anything reduces the flexibility of
> the install (but makes it simpler).
> Also using the same password for root and the user account bye default
> is probably a bad practice to encourage, i beleive users can be forced
> to change there password ar regular intervals anyway, so this could
> overcome this bad practice.
> 
> Thoughts ?

It is a BAD idea!  The root account is separate for a particular
reason, and for the same reason it should have a separate password.

Dan

/--------------------------------\  /--------------------------------\
|       Daniel Jacobowitz        |__|        SCS Class of 2002       |
|   Debian GNU/Linux Developer    __    Carnegie Mellon University   |
|         dan@debian.org         |  |       dmj+@andrew.cmu.edu      |
\--------------------------------/  \--------------------------------/


Reply to: