I am not a LocalDirector expert and don't have access to a test machine,
but I just checked this with the Those Who Know. I am informed that
control-C will work as an enable password only if you haven't actually
set a password. In fact, *any* string will work if you haven't set a
password. If you've set an enable password on the box, control-C will
not work. This was verified by testing on a 1.6.3 LocalDirector.
If control-C worked for you on a machine with a password properly set,
*please* contact me directly with details of how you configured it.
You're right, however, that you shouldn't let people you don't trust log
in to your equipment in the first place.
-- John B.