How can I figure out valid account names on Novell Netware?
Any limited account should have enough access to allow you to run SYSCON, located in the SYS:PUBLIC directory. If you get in, type SYSCON and enter. Now go to User Information and you will see a list of all defined accounts. You will not get much info with a limited account, but you can get the account and the user’s full name. If you’re in with any valid account, you can run USERLST.EXE and get a list of all valid account names on the server. If you don’t have access (maybe the sys admin deleted the GUEST account, a fairly common practice), you can’t just try any account name at the LOGIN prompt. It will ask you for a password whether the account name is valid or not, and if it is valid and you guess the wrong password, you could be letting the world know what you’re up to if Intruder Detection is on. But there is a way to determine if an account is valid. From a DOS prompt use a local copy (on your handy floppy you carry everywhere) of MAP.EXE. After you’ve loaded the Netware TSRs up
