ForumsHQ

Configuring Worldgroup (3.x)

Add an option to the Games menu of your Worldgroup board called "Doorgame menu" or something similar. Have this option execute your rlogin module, and simply have Worldgroup launch an rlogin connection to the address of the computer Synchronet is installed on. Worldgroup v3 has a built-in rlogin module; you simply set it to connect to the IP address of the computer Synchronet is on.



Configure Worldgroup (2.x)

If you are using an older version of Worldgroup with Vircom's TCP/IP, have the rlogin module use the syntax "l xx.xx.xx.xx %U %U ansi", where xx.xx.xx.xx is the IP address of the computer Synchronet is installed on. (Please note that the first character is the letter l, not the number 1.)



Also, in Worldgroup, you should either change the port number for incoming rlogin, or disable Worldgroup's incoming rlogin altogether. This will prevent Worldgroup's inbound rlogin server from conflicting with Synchronet's inbound rlogin.

does that prompt for a username/password pair?

RLOGIN should (from my understanding) pass user and calling ip information

ie.

Ghaleon@quicksilverbbs.com

TurboBitch@realmud.com

GaySysop@entmud.com

It basically creates an account with that name on the SyncroBBS. Obviously the domain would be resolved but it doesnt have as good of an effect in this example :)

In WG2.x you need to put %U which is basically the user variable.

In WG3.x it automatically has that built into the module so you dont have to worry about it.

Can you try to telnet from yours to mine. I think Ray's right here. My bbs didnt record anything extra in the User database. I was able to hijack an account.

zomg u rerolled me in dmud!!!!!

j/k :P

Couple things we CAN try:

1) Upgrade Synchro to newest version (3.14a)

2) Try and see if one rlogin can hijack another rlogin (from another bbs) eg. what happens if you disable direct telnet and only allow rlogins

3) All else fails try contacting Rob.



Here are a list of changes in 3.14a dealing with rlogin/telnet



* Telnet/RLogin Server

o Secure Shell (SSH) support thanks to Deuce and Cryptlib

This feature is in the beta development stage, so testing and verification is needed, feedback and/or bug reports welcome!

o Daily maintenance event (resets statistics, deletes logon.lst, backs-up data, expires/purges old users and e-mail)

will now run in the event thread, if it's running

Solves the problem of statistics and other data not being correctly maintained if no one logs on (via Telnet or RLogin) for an entire day

o External message editors now always use a DOS-compatible (8.3 format) file in the node's temp directory which solves two problems:

1. editors restricted to the temp dir (e.g. PICO) can now be used to edit files in other directories (e.g. data/user/*.sig files)

2. DOS editors can now be used to edit files with long filenames (e.g. data/user/*.plan files)

o Added supoprt for RESULT.ED external-editor drop file (e.g. from WWIVedit)

- can now modify the message subject/title from within some external editors (e.g. fseditor.js)

o New users can no longer change the subject/title of the "New user validation" feedback

o When reading messages and updating existing message header and index records, always lock the entire message base - preventing corruption

o When replying to a message, if the posting user was the author of the original message, use the original message's recipient as the recipient of the new reply message as well (no need to post "to" yourself)

o When replying to an Internet e-mail which includes a REPLY-TO header field, send the reply to the reply-to address (by default) instead of the FROM address

o Bug-fix: potential buffer over-runs in the expansion of some @-codes

o Bug-fix: uninitialized pointer dereference in temporary file section

o Bug-fix: split-screen chat corruption

o Bug-fix: do not adjust for daylight savings time when generating QWK and Fido date/time stamps

o Bug-fix: do not adjust for daylight savings time when calculating time until next event

o Bug-fix: ignore disabled events when calculating time until next event

o Bug-fix: bad drop file path if using startup-dir (e.g. c:\sbbs\xtrn\game\/door.sys)

o Bug-fix: data/hungup.log wasn't being updated

o Bug-fix: exceptions occurring in JS script run from another JS script would not be reported to the console/log

o Bug-fix: report JS script compilation errors (exceptions) immediately

o Bug-fix: only allowed 7 digits when editing credit value of file - increased to 10 digits

o Bug-fix: ctrl key handler no longer ignores Ctrl-J (LF)

o Put Micros~1 shortened filenames in the DOSXTRN.ENV file,

allowing at least some XSDK doors to possibly work when run from C:\Synchronet\...

o When generating drop files for 16-bit DOS programs, put Micros~1 shortened paths in the drop files

Another fix for installations to e.g. "C:\Synchronet"

o Telegard and Renegade "pipe codes" actually must have 2 decimal digits

This will reduce the liklihood of false-positive TG/RG pipe code interpretation

o ANSI output optimization (combine attribute changes into a single ESC[m code):

ESC[0;1;5;32;40m

Is shorter than:

ESC[0mESC[1mESC[5mESC[32mESC[40m

...by about eight chars.

o Include QWK text files (e.g. HELLO, GOODBYE, BBSNEWS, BLT-*) when prepacking QWK packets (or packing for FTP download)

o Introduced K_NOSPIN mode flag for getkey()

to over-ride (temporarily disable) user's spinning cursor setting

o Don't use the SyncTerm/RLogin "password" parameter for new user accounts unless it meets minimum secure-password requirements

(e.g. isn't the same as the user's name or alias)

o Bug-fix: delete environment variables from the processes environment block when adding new environment strings

otherwise, existing values (for say "SBBSNODE") would not be over-ridden

This was cause of the well-known DoorMUD incompatibility with v3.13a.

o If a file name doesn't include a suffix/extension in the native program list, then any command-line executing a program with the same base filename will be considered "native"

(e.g. "unzip.exe" will be considered native if "unzip" is in the native program list)

o When executing a module via "*modname ...", with no file extension specified

if modname.js exists, it will be executed instead of modname.bin

Previously, the .bin extension was always assumed if it wasn't specified on the command-line

This modification allows exec/bullseye.js to take precedence over exec/bullseye.bin without any change to the command-line configuration

Execute "*modname.bin" if you want to specifically execute modname.bin and not modname.js (if it exists)

o External program yielding interval on Windows NT is now handled in exec/sbbsexec.ini

(not in ctrl/sbbs.ini or in SBBSCTRL:Telnet->Configure->External Yield)

See Virtual Device Driver section for more details

o New option to allow socket-based file transfer protocols on *nix

o Bug-fix: disable file upload/attach mode if SCFG->Message Options->Allow Uploads in E-mail is set to "No".

This option has been in SCFG for 10(+?) years and was never used. :-)

o Better seeding of random number generator

o Rework the output buffer loop to simplify slightly and fix an issue with the highwater/timeout being innefective when the ring buffer received many small writes very quickly (ie: During the "Synch" logo display)

For some reason, this seems to happen most on fast connections

(Possibly the socket implementation manages to combine the write()s on a slow connection)

o If the highwater mark is zero, and TCP_MAXSEG is supported (BSD and Linux),

then automatically tune the highwater mark to be the MSS and never send() a buffer larger than that

o Stale (> 24 hours old) mutex files (e.g. data/pack####.lock) are now ignored

so crashed instances with locked mutexes will no longer need manual clean-up (auto-revovery)

o Bug-fix: 100% CPU utilization while sitting at Inter-BBS Instant Message menu prompt

o New global JS function: write_raw()

used for sending strings with NULLs and other control characters to the remote client

o Provide example RLogin "Game Server" option in exec/logon.js (disabled by default)

o Added support for random logon screens (text/menu/random*.*) in exec/logon.js

o Added "E-mail Forgotten Password" feature in exec/login.js

Set email_passwords=false to disable

o Skip Win32 hidden and system files when bulk-uploading

o Use Deuce's xp_printf module for Baja/PCMS printf/sprintf/fprintf functions:

+ eliminates segfaults/AVs on incorrect usage

+ auto-converts arguments to correct format type

+ eliminates portability problems with non-x86 platforms