Re: SPAM-LOW: RE: FM8 / Multi-File Login

To play devil's advocate here, many books and even FMI publications I've 
read have suggested that at least one full-access account be stored 
internally to facilitate offline use and/or emergency access if the 
external server is unavailable. Is this advice unsound? Or sound, but 
only with a very complex/lengthy password perhaps? I was under the 
impression that FMP7 was leaps and bounds better at hiding passwords 
than previous versions, but perhaps that just means .fp5 files were 
*really* bad :)

Personally, I really love the ability to authenticate against an Active 
Directory server, but I also find internal accounts to be very handy 
when it comes time to making changes. It would be nice to be able to 
depend on both methods...


Richard DeShong wrote:

> First, Steven H. Blackwell responds to my suggestion:
>  
>
> > I recommend that you do NOT use such a system. It is inherently insecure
> >    
> and there is no need to use it.
>
> He suggests using External Server Authentication (ESA).  I agree.  For
> security, that is the better way to go.  I once forgot the name/password for
> an FM7 file and went on the internet, got a utility that displayed the user
> names and passwords in the file.  Using ESA allows you to put your trust in
> a system that was designed to maintain security.  Then just trust FM to
> maintain your data.
>