FreeTDS Development Group

[Frediano Ziglio <freddyz77 AT tin.it>]

Il giorno ven, 04-02-2005 alle 07:24 -0500, James K. Lowden ha scritto:
> "Bort, Paul" <pbort AT tmwsystems.com> wrote:
> > My freetds.conf has a line "try domain login = no". You
> > might need to change that line in yours if you haven't
> > already.
> 
> Hi Paul, 
> 
> Just to be clear, that line should have no effect anymore.  It might
> defeat domain logins, but only as an artifact.  
> 
> The current logic is, unlike some parts of FreeTDS, quite elegant: if the
> username includes a '\', a domain login is attempted, else not.  
> 
> I'm pretty sure we established that a '\' character is invalid within a
> username in every TDS server, so nothing's lost.  
> 

Just some news about this stuff in 0.64

In 0.64 we removed these settings from code
  try server login
  try domain login
  nt domain
  cross domain login
(only present in documentation as obsoleted)
Also trying to use domain login with TDS 4.x or 5.0 cause connection to
fail without even sending any packet to server. This cause:
- username cannot contain \
- if user use wrong protocol you have not a security problem

freddy77