Quote:
Originally Posted by dansgalaxy
I have a client which is getting very frustrated, as his old passwords still work (as well as new).
I have spoken to the company responsible for my server license and ended up changing password from command line and that seemed to wipe out old passwords, but now hes changed the password to his own one the problem remains and all his old passwords still work.
This is a urgent security issue for the client as he gave access to someone to do something and is now unable to revoke it.
Any ideas as to why and how the hell this is happening?
|
Can you provide me with detailed steps as to what the user is doing that is resulting in old passwords working? This will assist me in replicating this issue.