RE: NDS Password Audit

["Steven A. Fletcher" <sfletcher () integrityts com>]

You might try Pandora, a password cracker for NetWare 4 and 5.  You can
find more details at http://www.nmrc.org/project/pandora/.

Hope this helps.

Steve Fletcher
Senior Network Engineer, MCSE, Master ASE, CCNA
Integrity Technology Solutions
Phone: (309)664-8129
Toll Free: (888) 764-8100 ext. 129
Fax: (309) 662-6421
sfletcher () integrityts com

-----Original Message-----
From: Mitchell Rowton [mailto:mrowton () bdo com] 
Sent: Thursday, March 04, 2004 2:02 PM
To: security-basics () securityfocus com
Subject: NDS Password Audit


What's the best way to audit for password compliance in a Novell NDS
tree?  I've used l0pht for Microsoft domain accounts, but never tried
Novell.  Anyone have good or bad stories/software for this?

--
Mitchell


NOTICE:
The contents of this email and any attachments to it may contain
privileged and confidential information from BDO Seidman, LLP.  This
information is only for the viewing or use of the intended recipient.
If you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution or use of, or the taking of any action
in reliance upon, the information contained in this e-mail, or any of
the attachments to this e-mail, is strictly prohibited and that this
e-mail and all of the attachments to this e-mail, if any, must be
immediately returned to BDO Seidman, LLP or destroyed and, in either
case, this e-mail and all attachments to this e-mail must be immediately
deleted from your computer without making any copies thereof.  If you
have received this e-mail in error, please notify BDO Seidman, LLP by
e-mail immediately.


------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------