Skip to content
Snippets Groups Projects
  1. Apr 12, 2025
  2. Apr 11, 2025
  3. Apr 10, 2025
    • Rob Swindell's avatar
      Allow optional pepper to be specified with '-h' (hashed password) option · a54caff6
      Rob Swindell authored
      e.g. '-hSEVERNAME'
      
      This allows server-unique hashing so that if one BBS auto-registers
      /authenticates its users with *multiple* Rlogin servers, the credentials
      stored on of the rlogin servers may not be used to authenticate on the others.
      a54caff6
    • Rob Swindell's avatar
      Add '-h' option to send a salted and hashed password to the server · 0b011cc8
      Rob Swindell authored
      Like the -p option, except the server won't get a copy of the client BBS
      user's password or be able to decode it.
      
      The user's password, user number and account creation date are used to generate
      the password hash (along with the salt), so changing any of these will change
      the resulting hashed password sent (and presumably logged/stored) on the
      server. The resulting SHA-1 hash is sent as 40 hexadecimal digits.
      
      The default salt is the system's QWK-ID, but the sysop can specify their own
      salt (e.g. random number or secret passphrase) via the "salt" key in the
      [rlogin] section of modopts.ini or root section of ctrl/modopts/rlogin.ini
      0b011cc8
    • Rob Swindell's avatar
    • Rob Swindell's avatar
      Fix default mode value (should *not* be 10, i.e TG_NODESYNC|TG_CRLF) · dbbdd109
      Rob Swindell authored
      Bug introduced in commit 49053f31
      
      the 'mode' value was by default, undefined.
      the 'timeout' value is by default, 10.
      
      When mode value/flags was not provided on the command-line, undefined
      was passed to bbs.rlogin_gate() as the 5th parameter, but the number 10
      is passed as the 6th parameter (for time-out). The problem is, the first
      Number parameter passed to bbs.rlogin_gate() is interpretted as the mode
      value and so that becomes 10 (0x0A) which includes TG_NODESYNC thus enabling
      all node messages/activity being displayed to the rlogin user and interrupting
      their rlogin session (e.g. game play).
      
      Just make the 0 the default value for mode, like we did in telgate.js.
      dbbdd109
  4. Apr 03, 2025
  5. Apr 01, 2025
  6. Mar 30, 2025
  7. Mar 29, 2025
  8. Mar 24, 2025
  9. Mar 19, 2025
  10. Mar 18, 2025
  11. Mar 13, 2025
  12. Mar 12, 2025
  13. Mar 05, 2025
  14. Mar 04, 2025
  15. Mar 03, 2025
Loading