Novell Groupwise

[f1r3flie]

Like many other schools, my high school uses Novell Groupwise (I believe version 6) for the school network. I take programming as one of my subjects, and naturally have a lot of time in front of a computer, and I'm set to finish my end of year project a month early. I am curious as to what vulnerabilities are present in this setup, and how to learn them to help the school build a more secure network.

Here's what I know:
The systems all connect remotely to a number of blade servers running Novell Groupwise 6. We have to use it to log in.
Everyone has local administrator access over their machine.
The machines run on their own processing power, but all of the applications and files are stored by the servers (unless Groupwise does something weird, these are just shared network drives).
There are a number of network drives used by the teachers to store exams etc. that are invisible to students.
The IT people are incompetent, so the default configuration is probably in place.

Note: I do not intend to do anything illegal, I simply want to understand the system I work with every day.

[fashizzlepop]

Did you bother to Google this at all before you posted?

Fyi, trying to do ANYTHING other than what intended is considered "illegal" and "hacking."

[f1r3flie]

I did Google this before posting and came up with nothing of use. I'll reword my question: are there any out of the box problems with Novell Groupwise that I need to tell my school's IT people about which they can fix?

[Dwere134]

You try searching Novell's webpage, for any bugs/bug fixes listed? That might get you somewhere. Donno. Just an idea.

[fabianhjr]

Did you bother to Google this at all before you posted?

Fyi, trying to do ANYTHING other than what intended is considered "illegal" and "hacking."

Even tough I hate when people misuse 'hack'. Can't they see the differences between a hacker and a criminal?
FYI, a hack is the appropriate application of ingenuity.

[insomaniacal]

I'm guessing the computers all run with a limited account? Chances are, if they're running everything off a shared drive, they might be more lax on individual computer security. See if you can get admin access and if that allows you to access some more interesting parts of the networked drives.

[fashizzlepop]

Did you bother to Google this at all before you posted?

Fyi, trying to do ANYTHING other than what intended is considered "illegal" and "hacking."

Even tough I hate when people misuse 'hack'. Can't they see the differences between a hacker and a criminal?
FYI, a hack is the appropriate application of ingenuity.

"Hack" is not misused. "Hacker" and "Cracker" are often mixed up. To "hack" is considered doing anything other then what is specifically authorized for you. If they don't tell you you can use Google on their computer and you do, that can be considered hacking in the law's eyes.