This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What is the "smartman" user account?

While reading the log files of SMC I stumbled over the so called smartman account with an base64-encoded password hash.

This account is not mentioned in the manual.

Is this a backdoor?



This thread was automatically locked due to age.
  • Hi Alex,

    at first, I want to emphasize that there is no backdoor within Sophos Mobile Control.

    where exactly did you find something about the 'smartman' user?
    What does the log entry exactly say?
    On my test SMC server, I could only find entries like this:

    2016-03-03 04:05:37,617 INFO  [main data.bo.BoUtil] could not find entry for parameter "config.core.InitialClientPassword", using "xxxxxxxxx"

    2016-03-03 04:05:37,633 INFO  [main data.bo.BoUtil] could not find entry for parameter "config.core.InitialClientUsername", using default "smartman"

    This was used to secure the first connection of Windows Mobile 6.x or old Android devices. This is not relevant anymore and will be removed if you are updating to a SMC 5.

    If you are not referring to these entries, please post a copy of them so I could clarify it for you.

    Best  regards
    Stefan