Finding user accounts that are missing passwords

Finding user accounts that are missing passwords

Postby cearnshaw » Tue Mar 17, 2009 8:00 am

We've found a few of our accounts that did not have passwords assigned were being compromised by spammers. Is there a simple way for us to find if there are any other accounts that do not have passwords, i.e. by looking at files on the server, for example.

Thanks,

Cam
cearnshaw
 
Posts: 41
Joined: Tue Jun 17, 2008 9:19 pm

Re: Finding user accounts that are missing passwords

Postby cearnshaw » Thu Apr 02, 2009 7:46 am

Is there no way to see which accounts need to have passwords other than by logging into 3,000 accounts individually?

Cam
cearnshaw
 
Posts: 41
Joined: Tue Jun 17, 2008 9:19 pm

Re: Finding user accounts that are missing passwords

Postby MikeG » Thu Apr 02, 2009 9:41 am

You could try looking in the USERS.INI file for any lines with "pass=" followed by a line-break.
You can probably do this with some clever command line tools, but I've done it in the past by making a copy of users.ini and opening it in Word, then using "Edit / Find" for "pass=^p" (which tells Word to search for "pass=" followed by a "paragraph mark").
Not ideal, but worked for me.
Mike
MikeG
 
Posts: 16
Joined: Wed Sep 19, 2007 10:21 am
Location: Buckingham, UK.

Re: Finding user accounts that are missing passwords

Postby rob » Fri Apr 03, 2009 10:16 am

MikeG is spot on, the users.ini contains all the users login details and so if you look for a empty pass= line, you should be able to identify and quickly fix those users. The users.ini is usually located within the folder...

C:\Program Files (x86)\Code-Crafters\Ability Mail Server 2\config
rob
 
Posts: 415
Joined: Mon Sep 10, 2007 2:34 pm


Return to General

Who is online

Users browsing this forum: No registered users and 15 guests

cron