What you describe doesn't seem to be much different than pre-CDE.
People can login with spaces with xdm on Solaris2 as well, but it's
more of a nuisance here than anything else (because they can't run
mailtool, and filemgr breaks, and other things break.) So far there
have been no associated security risks. The user still has the same
uid. His account is somewhat broken though, which is inconvenient.
We've had to add an entry to our local FAQ about it.
--
____________________________________________________________________________
Doug Hughes Engineering Network Services
System/Net Admin Auburn University
doug@eng.auburn.edu