Subj : webv4 telnet window To : echicken From : DesotoFireflite Date : Wed Mar 02 2022 17:26:42 Re: webv4 telnet window By: echicken to DesotoFireflite on Wed Mar 02 2022 08:22 pm ec> Re: webv4 telnet window ec> By: DesotoFireflite to echicken on Wed Mar 02 2022 13:21:23 ec>>> If you use SyncTERM to connect directly to Gamesrv, via RLOGIN, and ec>>> deliberately supply a valid username but invalid password, what do De>> Logs in both ways, but with rlogin reversed, it uses the password De>> as the name, and the name as a password, and creates a new account. ec> Just to clarify, I meant that you should use a *valid* username and an ec> *invalid* password - meaning an account that already exists on Gamesrv, ec> but with a password that shouldn't work. Is that what you did? No, I missunderstood you, but I just logged in from syncterm using Rlogin, with the correct name, but wrong password, and it let me in. I'm assuming it just made a new account in gameserver, as there are 3 for me in there now. The logs didn't show anything, but here is the log where I just logged in 3/2/2022 5:03:36 PM Node 6 (LOGON): Desotofireflite Logging on 3/2/2022 5:03:36 PM Node 6: Desotofireflite: Running Logon Process 3/2/2022 5:03:36 PM Node 6: Desotofireflite: Displaying ansi\logon_success (with pause) 3/2/2022 5:03:37 PM Node 6: Desotofireflite: Running REMIND01 3/2/2022 5:03:41 PM Node 6: Desotofireflite: External terminated with exit code: 0 3/2/2022 5:03:41 PM Node 6: Desotofireflite: Changing to MAIN menu 3/2/2022 5:03:41 PM Node 6: Desotofireflite: At MAIN menu 3/2/2022 5:03:50 PM Node 6: Desotofireflite: Logging off 3/2/2022 5:03:50 PM Node 6: Desotofireflite: Running Logoff Process 3/2/2022 5:03:53 PM Node 6 (LOGOFF): Desotofireflite: Logging off ec> (I'm assuming that Gamesrv actually keeps user accounts and does password ec> authentication. Maybe it doesn't. I don't know very much about it.) It's fairly loose, as it's set for a login with rlogin, and it set's up the user account with the info optained from rlogon, the user name and password. If it finds it, it logs them in, if it doesn't find it, it creates a new account, and logs them in. I use Handles(alias) only, so users can log in from other systems and play the same games using the same alias. ec> What I'm looking for is some indication that Gamesrv would log a failure ec> to authenticate. ec>>> ,'syncterm/115200' // terminal-type De>> No difference, still won't log in through games. ec> I guess that doesn't prove much, but makes a termtype issue less likely. De>> maybe this is one of those unsolvable issues. I don't need it on the De>> web, ec> Nah, there's always a solution. Will we find it? I dunno. I'll stick with it as long as you are willing :) ec> You said that after the connection to Gamesrv fails, the user is sent back ec> to your games menu - correct? In other words, they're still connected to ec> your BBS via ftelnet, they're just not on Gamesrv via the BBS. correct, it just fails, but doesn't kick you out of the website, you can choose another game and play it. ec> And the other items on your Games page work, just not the Gamesrv ones. Correct De>> Is there any chance this switch in gamesrv would have anything to do De>> with the problem. If so what should it be set to for webv4. De>> ; IP and Port to listen for flash socket policy requests on ec> Definitely not. That's a legacy service for Flash applets, and nothing ec> should be using it these days. I thought so, but I wanted to be sure. ec> The only other thing I can ask you to try at the moment is another change ec> to rlogin.js. As last time, please copy the file to mods/ and change these ec> lines: ec> ,argv[2] // client-name ec> ,argv[3] // server-name ec> to these: ec> ,user.alias // client-name ec> ,user.security.password // server-name ec> I may have those backward, so if the password ends up being used as the ec> username, just swap those lines around. It would not allow me in with these, but you do have it correct, as I changed the lines around, and it passed the wrong info to the other games. ec> As before, delete the file after testing (unless it works, then just leave ec> it for now). It's mack to the way it was, but I left the lines in the rlogon.js, I just commented them out for now. SysOp: C.G. Learn, AKA: DesotoFireflite Valhalla Home Services! - (Synchronet) - bbs.valhallabbs.com Valhalla II! - (GAP) - bbs.valhallabbs.com:24 Valhalla III! - (RemoteAccess) - bbs.valhallabbs.com:5023 Valhalla IIII! - (Dungeons & Dragons BBS) - bbs.valhallabbs.com:26 Valhalla Home Services Web! - http://bbs.valhallabbs.com A Gamers Paradise - Over 150 Registered Online Game Doors! Home Of Odin's Maze Game Server! --- Sticks and stones may break my bones but whips and chains excite me. þ Synchronet þ Valhalla Home Services þ USA þ http://valhalla.synchro.net * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705) .