PWCheck (Version: 111)
Displays all GUARDIAN as well as Alias users, lacking a system password
PWCheck now can be run from a SUPER.SUPER PROGIDed object file.
PWCheck now takes care of the new method to store empty passwords.
PWCheck - Check the existence of passwords
While doing a security review I stumbled into the necessity to find out,
if all users do have a password set.
Knowing the structure of USERID and LUSERID allowed it to me to check
this, but not every security administrator has this information.
So I decided to write a small tool, that checks all user entries and
displays those, NOT having a password.
To successfully run the tool, you MUST be logged on to SUPER.SUPER, or
use a SECOM type command to get run RESETSFC with this ID.
An Alias user, attached to SUPER.SUPER, is NOT accepted.
The command syntax is:
[run] PWCHECK [/OUT /] [-HELP]whereis the OUT file to which RESETSFC has to send to.In case this is a non existant disk file, it becomes createdas an EDIT type file.-HELP causes ResetSFC to display a help screen