Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Hacking a GroupWise Account

428 views
Skip to first unread message

lee

unread,
May 3, 2002, 5:41:39 AM5/3/02
to
One of our directors wants to be able to hack a groupwise user's account to
determine whether or not the user is relaying sensitive company data. The
user has a password on their account. Unfortunately I cannot change this
password as this may spook the user. Is there a way to hack the account
without the user knowing.

Furthermore is it possible, other than checking their sent items and trash
folders, to see if they have been sending large files out of the company.

Thanks.

Lee


Arjan Anthonisse

unread,
May 3, 2002, 7:13:39 AM5/3/02
to

If I were you, I would check the GWIA log files
And, you can always reset the password, and then say it was "Due to
systems maintenance, all passwords have been reset".

Kind regards,

Arjan Anthonisse
IT-specialist
Chemproha ChemiePartner BV

Evan Mintzer

unread,
May 3, 2002, 8:16:16 AM5/3/02
to
If the client set the password, then it is stored in the user db - which
you cannot hack. Unlike some of the other groupware products on the market,
GW is designed with security - security was not thrown in later. (You know
who I am referring to)

Since you are worried about internet messages, it would be better to look
at the gateways - look at the GWIA logs. You can also invest in a SMTP
scanner which will look at all messages and get copies (or store) messages
by different criteria - ie. sender, subject, attachement, filtered words.

Evan

lee <l...@hotmail.com> wrote in article
<nXsA8.826$xR1....@prv-forum2.provo.novell.com>...

Roland Gaspar

unread,
May 3, 2002, 3:43:04 PM5/3/02
to
OR, you could set "password not needed with NDS" and login as that NDS user,
then, GW would not ask for passwords..

--
----------------------
Roland Gaspar
rga...@patlq.com


"lee" <l...@hotmail.com> wrote in message
news:nXsA8.826$xR1....@prv-forum2.provo.novell.com...
: One of our directors wants to be able to hack a groupwise user's account

:
:


support-forums.novell.com

unread,
May 3, 2002, 7:02:40 PM5/3/02
to
You could backup the users database; reset the password, check his box out.
Then restore the original database--downside is you will have to do it when
the user is not around. Gwava or Guinivier could log that users iter-mta or
gwia messages respectively for you as well.

"lee" <l...@hotmail.com> wrote in message
news:nXsA8.826$xR1....@prv-forum2.provo.novell.com...

Jim Michael

unread,
May 3, 2002, 7:21:40 PM5/3/02
to
Backup the user's database and then restore it to a new location and then
reset the password on it. This will work without a POA assuming you have
your POA set to "client server or direct"...

--
Jim Michael
Novell Support Connection Sysop

Joe Whited

unread,
May 3, 2002, 10:09:48 PM5/3/02
to
Another downside:you will probably have to kick everyone out of that
postoffice to restore that DB.

Would disabling user db caching solve this?

Lee Garner

unread,
May 6, 2002, 12:41:23 PM5/6/02
to
If the concern is for mail transiting the GWIA, you could use the
third-party directory function of GWIA to intercept all messages. You'd
need a small program to move the files to keep mail flowing, but this way
would be transparent to the users.

"lee" <l...@hotmail.com> wrote in message
news:nXsA8.826$xR1....@prv-forum2.provo.novell.com...

tomas.gu...@taif.nu

unread,
May 8, 2002, 4:05:05 AM5/8/02
to
TO SEE TO WHERE MESSAGES ARE SENT:
- Look in the GWIA log files

LOGING IN TO THE ACCOUNT:
- Be sure the user is not around
- Copy the user's User Database
- Change password from within NWAdmin
- Login, Check user's mails (eventually also download them to Remote
database to your local PC) and then Logout
- Change back to the original User database

BR, Tomas

Richard Beels

unread,
May 9, 2002, 3:44:11 AM5/9/02
to

Gwava can copy messages sent through the mta it's attached to - they
call it archiving and you can trap messagea based on all manner of
criteria....


--
Cheers!
Richard Beels
??in a world without fences, who needs gates??


Michael Bell

unread,
May 11, 2002, 5:55:38 PM5/11/02
to
Right, and a fothcoming version includes a full fledged archive viewer.

--
Michael J. Bell
Novell Support Connection Volunteer Sysop

PLEASE: Do not e-mail me privately unless specifically asked.
I'm a volunteer, not a Novell employee!

All opinions and advice provided are MINE alone and NOT Novell's unless
specifically identified as such.

Novell does not officially monitor these forums.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

Richard Beels <be...@technologist.com> wrote in message
news:VA.0000002...@technologist.com...

Richard Beels

unread,
May 14, 2002, 3:24:27 AM5/14/02
to

Hey, go see your message in semipriv....


--
Cheers!
Richard Beels
http://www.dsi-consulting.com
Bringing order to bleeding edge technology


0 new messages