On 3.9.2012, at 21.26, Kelsey Cummings wrote:

> passdb {
>  args = proxy=y nopassword=y
>  driver = static
> }

I wonder if someone was doing a ton of logins for different usernames? This 
kind of setup where director doesn't verify the username can be attacked that 
way.

Reply via email to