home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Monster Media 1994 #1
/
monster.zip
/
monster
/
PCBOARD
/
PWD16.ZIP
/
PASSWORD.CFG
< prev
next >
Wrap
Text File
|
1994-01-02
|
5KB
|
105 lines
Y ; Password.PPE Executed
Y ; Called Never Entered Their Verification Info
Y ; Caller Answered Account Info Did Not Belong to Them
Y ; Caller Answered Account Info Did Belong to Them
Y ; Caller Entered Incorrect Verification Info
Y ; Caller Entered Correct Verification Info
Y ; The Two Passwords Entered Did Not Match
Y ; Caller Entered a Blank Password
Y ; Passwords Were an Incorrect Length
Y ; Caller Entered an Invalid Password
Y ; Password Was Successfully Reset for User
Y ; PWD_PPE.MSG (Message that PASSWORD.PPE was executed)
0 ; Conference the message above should be left in
Y ; VER_FAIL.MSG (Message of mismatch with verification info)
0 ; Conference the message above should be left in
Y ; PWD_PASS.MSG (Message to Sysop that password was reset)
0 ; Conference the message above should be left in
Y ; PWD_USER.MSG (Message to User that password was reset)
0 ; Conference the message above should be left in
SYSOP
Y ; Address PSA Line #1 (address line 1)
Y ; Address PSA Line #2 (address line 2)
Y ; Address PSA Line #3 (city/town)
Y ; Address PSA Line #4 (state)
Y ; Address PSA Line #5 (zip/postal code)
Y ; Address PSA Line #6 (country)
Y ; Home/Voice phone number
Y ; Business/Data phone number
Y ; Last time/date on system
Mother's Maiden (Last) Name
50 ; Highest security level to have a password reset
Y ; Invalid Security Level Executed PASSWORD.PPE
Y ; PWD_SEC.MSG (Message to Sysop if higher security level used)
0 ; Conference the message above should be left in
----------------------------------------------------------------------------
This configuration file allows you to select how/if you wish to be
notified when a caller executes the password.ppe program (either written to
the caller logs and/or messages to the Sysop). It will also help you to know
what types of answers they provided for each prompt. I used this as a
debugging tool and also to assist in determining if a caller was trying to
hack into an existing account (couldn't match the Verification Information).
To select which options you wish to use simply load this configuration
file into your favorite ascii text editor (such as Qedit by SemWare) and
edit the lines as described below.
**NOTE**: Do NOT change the line number these reside on. PASSWORD.PPE is
written to read each line number as is.
Lines 1 - 11
------------
Entering a Y will write the corresponding text to the caller log. Enter
an N if you don't want the text written to the caller log.
Lines 12, 14, 16, 18
--------------------
Entering a Y will create a private message with the designated *.MSG
filename. These *.MSG files must reside in the same directory as your
PASSWORD.PPE and may be edited to your liking. Enter an N if you don't wish
to have the message created.
Lines 13, 15, 17, 19
--------------------
The conference number you would like each of the respective messages to
be left in.
Line 20
-------
Enter the name of the person (either SYSOP or a valid username on your
BBS) you would like the first three messages addressed to (the fourth
message is automatically addressed to the caller). I added this option as we
have a fairly large board with more than one actual "Sysop".
Lines 21-29
-----------
Entering a Y will gather the corresponding information from the caller's
record and the Address PSA and display it to them for verification. If you
don't want a specific line to be displayed to the caller enter an N.
**NOTE** It's suggested you display as much of this information as possible
to use as a duplicate name check. Some systems may wish to display all of
this information while others feel some of this may be a breech of the
callers privacy. That's why everything except for the caller's name has been
made optional.
Line 30
-------
Some systems are using something other than PCBoard's default of
"Mother's Maiden Name" in the Verification PSA field. Whatever text you type
on line #30 will be displayed as the definition of the text in the
Verification PSA.
Lines 31-34
-----------
Line #31 is the maximum security level that you want to be able to reset
a password. It was brought to my attention that if a caller knew the
Verification Information of the Sysop they could feasibly reset the Sysop's
password and gain unlimited access. Whatever number you place line #31 will
be the maximum security level for the program to run.
On line #32 enter a Y if you want the corresponding text written to the
caller log.
On line #33 enter a Y if you want a message sent (to the name designated
on line #20) if a higher security level higher tries to reset a password.
On line #34 enter the conference number the message should be left in.