search for: k4init

...ethods, which require authenticate to possibly loop multiple times. What makes it even more of a security problem is the first time around, "authenticate" returns 0 (but with reenter set to 1) for any password. The entry we have in /etc/security/user is: demo: admin=false auth1=k4init SYSTEM="NONE" An obvious simple fix is to put the block in a loop, which reenter is non-zero, but on a quick test we did, that seemed to still fail. We are currently looking into why this failed, but decided to also report the problem now, due to the security risk. Frank Crawford...