how does TI access pw-protected shares

Hi there,

I'm really amazed at the fact that TrueImage is able to overcome the regular Windows network share password mechanism.
Usually one has to enter username and password to get access to network or admin shares.
TI ignores the name/pw machanism (or did anybody ever enter anything to access shared folders ?) and it works (for Samba shares and Win2000/XP shares as I've tested).
So I'm asking how that is possible. Does this mean that the Windows SMB protocol is completely insecure ? Do we have to fear hacker programs capable of accessing every pw-protected share ?

Rado

 

Normally you have to enter a user name and password. This sounds like a flaw in your network security.

 

So what could that be ?
I'm not running a domain, just simple workgroup shares.
If you share a folder in WinXP or Win2000 you have to use a valid user/pw combo (from the sharing computer) to access that folder from the network.
We don't have guest accounts activated on any computer and every user has a password set.
To access a Samba share one need to have a name/pw combo. You can't access it without login.
But TI can - why ?
Are there any secrets in securing Win/Samba I should know of ?

Rado

 

ATI is not bypassing any kind of SMB password security.

If you are already authenticated with a share, then there is no need for ATI to re-authenticate you.

 

I was assuming that he meant --from the boot disk --- but I could be wrong.

 

Yes, even if I'm booting from rescue disk.
So what could be wrong in my configuration ?

 

The share names will be visible without a password. But have you actually tried to write an image to the share? If so, and it works without a password, then your samba or windows share is indeed misconfigured.