DOCUMENT:Q196945 13-JUN-2001 [sna] TITLE :Host Account Manager May Display User Password In Clear Text PRODUCT :Microsoft SNA Server PROD/VER:WINDOWS:4.0,4.0 SP1 OPER/SYS: KEYWORDS: ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft SNA Server, versions 4.0, 4.0 SP1 ------------------------------------------------------------------------------- SYMPTOMS ======== If a new user account is created using Windows NT User Manager and an SNA Server host security domain is configured with "User ID is Mapped" and "Password is Mapped", the Host Account Manager may display the new user's password if the "Use Windows NT Password" radio button is clicked. CAUSE ===== When a new user is added to the host cache, the SNA Server Host Account Manager normally indicates the user password as . However, when a new user is added to Windows NT and password caching was configured, and the password radio button is switched, the actual user password could appear in clear text. RESOLUTION ========== Microsoft has confirmed this to be a problem in SNA Server versions 4.0 and 4.0 Service Pack 1. This problem was corrected in the latest SNA Server version 4.0 U.S. Service Pack. For information on obtaining this Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces): S E R V P A C K STATUS ====== Microsoft has confirmed this to be a problem in the Microsoft SNA Server 4.0 and 4.0 Service Pack 1. Additional query words: ====================================================================== Keywords : Technology : kbAudDeveloper kbSNAServSearch kbSNAServ400 kbSNAServ400SP1 Version : WINDOWS:4.0,4.0 SP1 Issue type : kbbug Solution Type : kbfix ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2001.