Hello

Been busy today, first I got rlogin implemented. Then SSH :)

with SSH the client connects to the server with SSH, then the server
connects to itself with rlogin.

I think it's similar to synchronet? rlogin takes a password as the client username field, but if someone logged in with random details to ssh,
login would fail but it would just show a login prompt, rather than just closing the connection like magicka does.

I'm not sure if it's any more / less secure this way.

This is all working on Windows, I've yet to test it on Linux.

Andrew



--- MagickaBBS v0.12alpha (Linux/x86_64)
* Origin: The Fat Sandwich - sandwich.hopto.org:2023 (21:1/125)

Re: Titan SSH!
By: apam to All on Thu Apr 25 2019 03:10 pm

I think it's similar to synchronet? rlogin takes a password as the client username field, but if someone logged in with random details to ssh,
login would fail but it would just show a login prompt, rather than just closing the connection like magicka does.

Synchronet has it's own ssh server built-in, so I don't believe it has anything
to do with rlogin in Synchro at all. (That said, I
am not a developer and don't know all of the mechanisms involved). Just like a
regular openssh session, username has to be
provided when making the ssh connection, no login prompt is ever given.

I hope I haven't misunderstood what you were asking.
--- SBBSecho 3.07-Linux
* Origin: VA7AQD's Tavern in Kamloops, BC! - bbs.isurf.ca (21:4/150)

This is all working on Windows, I've yet to test it on Linux.

Working on Linux now too :)

I've setup my test bbs to listen for SSH connections on port 2028

so:
ssh://psychosis.hopto.org:2028/
telnet://psychosis.hopto.org:2027/

Andrew

--- MagickaBBS v0.12alpha (Linux/x86_64)
* Origin: The Fat Sandwich - sandwich.hopto.org:2023 (21:1/125)

Re: Titan SSH!
By: apam to All on Thu Apr 25 2019 03:10 pm

I think it's similar to synchronet? rlogin takes a password as the username field, but if someone logged in with random details to ssh login would fail but it would just show a login prompt, rather than closing the connection like magicka does.

Synchronet has it's own ssh server built-in, so I don't believe it
has anything
to do with rlogin in Synchro at all. (That said, I
am not a developer and don't know all of the mechanisms involved).
Just like a
regular openssh session, username has to be
provided when making the ssh connection, no login prompt is ever
given.

It does use an intermediary socket, I'm just not sure how. Rob was
talking about it when we were talking about socket sharing with doors and
SSH.

Titan does also have an SSH server built in, but in this case, the SSH
server upon connect stores the username and password and uses them to
connect to rlogin and proxies the data through. And the login prompt is
only shown if the supplied one is wrong, rather than just disconnecting.

Magicka (my other bbs software) uses a built in SSH server that doesn't
do any proxying (and so doors using shared sockets don't work with SSH).
I'm not sure about Mystic, but I'm fairly certain it can't do doors with
socket sharing either.

Andrew

--- MagickaBBS v0.12alpha (Linux/x86_64)
* Origin: The Fat Sandwich - sandwich.hopto.org:2023 (21:1/125)

Re: RE: Titan SSH!
By: apam to Va7aqd on Thu Apr 25 2019 04:56 pm

It does use an intermediary socket, I'm just not sure how. Rob was
talking about it when we were talking about socket sharing with doors and SSH.

Ah, cool, fair enough!
--- SBBSecho 3.07-Linux
* Origin: VA7AQD's Tavern in Kamloops, BC! - bbs.isurf.ca (21:4/150)

Re: Titan SSH!
By: apam to All on Thu Apr 25 2019 03:10 pm

Hello

Been busy today, first I got rlogin implemented. Then SSH :)

with SSH the client connects to the server with SSH, then the server connects to itself with rlogin.

I think it's similar to synchronet? rlogin takes a password as the client username field, but if someone logged in with random details to ssh,
login would fail but it would just show a login prompt, rather than just closing the connection like magicka does.

There's no rlogin involved with SSH connections to Synchronet. I reuse some variables for SSH connections (e.g. rlogin_name, rlogin_pass) - but the protocol is not used at all for SSH can even be disabled in the terminal server while still supporting SSH connections.

digital man

Synchronet/BBS Terminology Definition #72:
TLS = Transport Layer Security (successor to SSL)
Norco, CA WX: 65.6øF, 70.0% humidity, 6 mph E wind, 0.00 inches rain/24hrs
--- SBBSecho 3.07-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (21:1/183)

Re: RE: Titan SSH!
By: apam to Va7aqd on Thu Apr 25 2019 04:56 pm

Re: Titan SSH!
By: apam to All on Thu Apr 25 2019 03:10 pm

I think it's similar to synchronet? rlogin takes a password as the username field, but if someone logged in with random details to ssh login would fail but it would just show a login prompt, rather than closing the connection like magicka does.

Synchronet has it's own ssh server built-in, so I don't believe it
has anything
to do with rlogin in Synchro at all. (That said, I
am not a developer and don't know all of the mechanisms involved).
Just like a
regular openssh session, username has to be
provided when making the ssh connection, no login prompt is ever
given.

It does use an intermediary socket, I'm just not sure how.

Just for doors.

Rob was
talking about it when we were talking about socket sharing with doors and SSH.

Yup. There's a middle-man socket for doors that use socket-I/O, that's all. Nothing to do with rlogin.

digital man

This Is Spinal Tap quote #5:
Nigel Tufnel: Authorities said... best leave it... unsolved.
Norco, CA WX: 65.6øF, 70.0% humidity, 6 mph E wind, 0.00 inches rain/24hrs
--- SBBSecho 3.07-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (21:1/183)

Yup. There's a middle-man socket for doors that use socket-I/O, that's all. Nothing to do with rlogin.

Ah ok!

Thanks for the info :)

Andrew


--- TitanFTN
* Origin: Psychosis - psychosis.hopto.org:2027 (21:1/125.2)