Unsolved
This post is more than 5 years old
1 Message
0
10057
August 15th, 2005 19:00
PowerConnect 3448 authentication bug
The 3448 (and possibly others in the 34xx family) have an authentication bug.
If a user is created with level 15 priviledge with a single line such as:
username testid password password level 15
The user operates correctly.
If a user is created and then changed to level 15 priviledge via a second line such as:
username testid password password
username testid level 15
That user is not prompted to enter a password and is granted full access to the switch. If the admin user is set to level 15 priviledge via an after the fact line such as:
username admin level 15
The admin can be logged in with no password and full access.
A show run shows the users with encrypted passwords and level 15 priviledge, but the switch does not prompt for a password and allows the user to log in with full access.
If a user is created with level 15 priviledge with a single line such as:
username testid password password level 15
The user operates correctly.
If a user is created and then changed to level 15 priviledge via a second line such as:
username testid password password
username testid level 15
That user is not prompted to enter a password and is granted full access to the switch. If the admin user is set to level 15 priviledge via an after the fact line such as:
username admin level 15
The admin can be logged in with no password and full access.
A show run shows the users with encrypted passwords and level 15 priviledge, but the switch does not prompt for a password and allows the user to log in with full access.
No Events found!


DELL-Cuong N.
1K Posts
0
August 15th, 2005 19:00
Thanks for reporting this problem. That's a good catch. I have notified my group of the problem. We will try to have it corrected in future releases. I believe I understand what's happening:
We will also put this information in our release notes. So in fact, if anyone else is reading this, please make sure you always define the user to include password and user level on one single line. Do not set the level without specifying password otherwise the password will be blanked.
Thanks again for catching this user interface problem.
Cuong.
GregM_1
2 Intern
•
112 Posts
0
August 15th, 2005 19:00
jeffeager
2 Posts
0
August 16th, 2005 12:00
The 3348 SW ver. 1.2.0.6 has the same issue.
The 3248 SW ver. 1.0.1.7 does NOT have the issue.