Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: User Edit
By: Mortifis to All on Thu Oct 18 2018 14:45:09

Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

Not that I'm aware of. 'uedit' lets you change all of these things without a GUI, but you can't just do it all in one shot from the command line.

It wouldn't be very hard to create such a utility if there's a real use case for it. (I modify users so rarely that going into uedit to do so isn't much of a hardship.)

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: User Edit
By: Mortifis to All on Thu Oct 18 2018 02:45 pm

Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

Not that I can think of off hand, but if you take a look at exec/makeuser.js it wouldn't be hard to create a moduser.js (as an example) or modify makeuser.js to do what you want.

digital man

This Is Spinal Tap quote #12:
Nigel Tufnel: Well, I don't know - wh-wh-... what're the hours?
Norco, CA WX: 84.0oF, 18.0% humidity, 0 mph E wind, 0.00 inches rain/24hrs
--- SBBSecho 3.06-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

On 10-18-18 14:35, echicken wrote to Mortifis <=-

@TZ: 40f0
Re: User Edit
By: Mortifis to All on Thu Oct 18 2018 14:45:09

Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

Not that I'm aware of. 'uedit' lets you change all of these things without a GUI, but you can't just do it all in one shot from the
command line.

It wouldn't be very hard to create such a utility if there's a real use case for it. (I modify users so rarely that going into uedit to do so isn't much of a hardship.)

Same here. I can see an issue if someone is wanting to script those changes for some reason, but I haven't had a need to do that yet.


... ########################-----o*'= (Explosive Tagline)
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Re: User Edit
By: Mortifis to All on Thu Oct 18 2018 14:45:09

Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

Not that I'm aware of. 'uedit' lets you change all of these things without a GUI, but you can't just do it all in one shot from the command line.

It wouldn't be very hard to create such a utility if there's a real use case for it. (I modify users so rarely that going into uedit to do so isn't much of a hardship.)

I think the statement "wouldn't be very hard" is relative, I mean, a programmer I am not, I am having a difficult time 'learning' js and c by disecting source code, lol, that is how I learned BASIC and TP way back in the day as well as PHP, I did manage to compile a hello world script :P

The scenaio is similar to the makeuser command questions I had before ... just to automate an interface between my php driven website with sbbs to keep some user details in sync.

Looking at makeuser.js I see var newuser = system.new_user(alias);
if(password) newuser.security.password = password;

Looking at useredit.cpp I see putuserrec(&cfg,user.number,U_PASS,LEN_PASS,user.pass);

I am not sure where to look to examine the js functions list so I can figure out how to use them :P

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: User Edit
By: Mortifis to All on Thu Oct 18 2018 02:45 pm

Is there a command line utility that would allow changing a users password, alias, realname, etc, similar to makeuser?

Not that I can think of off hand, but if you take a look at exec/makeuser.js it wouldn't be hard to create a moduser.js (as an example) or modify makeuser.js to do what you want.

digital man

Since replying to echicken, I had a look at js_user.c and think I have an idea of what's going on ... disecting code is a hard way to learn a language, but I am trying, not going to ask anyone to write it for me :-P

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 18:35:26

I think the statement "wouldn't be very hard" is relative, I mean, a programmer I am not, I am having a difficult time 'learning' js and c by

Oh, I didn't necessarily mean that you would have to do it. I meant that if it there's a good case for such a script to exist, I or someone might make it.

The scenaio is similar to the makeuser command questions I had before ... just to automate an interface between my php driven website with sbbs to keep some user details in sync.

Okay, I can see this being useful in some scenarios.

(I can also see some consistency problems. Are you doing a one-way push from your website into Synchronet when a new user is created? Is your BBS closed to new users? What happens if someone creates an account on your BBS first and then on your website second, with the same username? I would try to make this all bi-directional, or require users to sign up on the web first. Of course I would probably make this all too complicated because that's what I do.)

Looking at makeuser.js I see var newuser = system.new_user(alias); if(password) newuser.security.password = password;

Looking at useredit.cpp I see putuserrec(&cfg,user.number,U_PASS,LEN_PASS,user.pass);

The JS stuff is sort of a layer on top of this. I rarely turn to the C/C++ source unless I need to figure out something undocumented. There's probably a 'js_user.c' file kicking around that would be better to look at ... but there's an easier way:

I am not sure where to look to examine the js functions list so I can figure out how to use them :P

If you do want to know, the "Synchronet JS Object Model" is documented here:

http://synchro.net/docs/jsobjs.html

These are the special things that Synchronet exports to its JS environment.

That page on its own isn't usually enough for newcomers to go on. You'd want to comb through scripts in exec/ to see some real usage examples.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 18:35:26

I think the statement "wouldn't be very hard" is

relative, I mean, a

programmer I am not, I am having a difficult time

'learning' js and c

by

Oh, I didn't necessarily mean that you would have to do it.

I meant that if

it there's a good case for such a script to exist, I or

someone might make

it.

The scenaio is similar to the makeuser command

questions I had before

... just to automate an interface between my php

driven website with

sbbs to keep some user details in sync.

Okay, I can see this being useful in some scenarios.

(I can also see some consistency problems. Are you doing a

one-way push

from your website into Synchronet when a new user is

created? Is your BBS

closed to new users? What happens if someone creates an

account on your BBS

first and then on your website second, with the same

username? I would try

to make this all bi-directional, or require users to sign

up on the web

first. Of course I would probably make this all too

complicated because

that's what I do.)

Lol, I just complicate my questions. The sbbs <-> only needs
to be uni-directional...the web user has no need to access the
bbs it is only for some of the websites internal usage ...ie
emailing a dispatch to a driver as a relay service, etc

Looking at makeuser.js I see var newuser =

system.new_user(alias);

if(password) newuser.security.password = password;

Looking at useredit.cpp I see

putuserrec(&cfg,user.number,U_PASS,LEN_PASS,user.pass);

The JS stuff is sort of a layer on top of this. I rarely

turn to the C/C++

source unless I need to figure out something undocumented.

There's probably

a 'js_user.c' file kicking around that would be better to

look at ... but

there's an easier way:

I am not sure where to look to examine the js

functions list so I can

figure out how to use them :P

If you do want to know, the "Synchronet JS Object Model" is

documented here:

http://synchro.net/docs/jsobjs.html

These are the special things that Synchronet exports to its

JS environment.

That page on its own isn't usually enough for newcomers to

go on. You'd

want to comb through scripts in exec/ to see some real

usage examples.

---
echicken

Thank you, I've been browsing some js files for some sort of
references to saving user info, using various grep -rnw
'/sbbs/exec' ... searches ... I found a lot of examples but
not really one that is as straight forward as new user in
makeuser. I more concerned about a change of password than
anything else

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 22:00:20

not really one that is as straight forward as new user in
makeuser. I more concerned about a change of password than
anything else

If that's *really* all you want, then a script like this would probably (untested) work:

// jsexec [filename] [alias] [password]
var usr = new User(system.matchuser(argv[0]));
if (usr.number > 0) {
usr.security.password = argv[1];
}

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 22:00:20

not really one that is as straight forward as new user

in

makeuser. I more concerned about a change of password

than

anything else

If that's *really* all you want, then a script like this

would probably

(untested) work:

// jsexec [filename] [alias] [password]
var usr = new User(system.matchuser(argv[0]));
if (usr.number > 0) {
usr.security.password = argv[1];
}

---
echicken

Thank you, your example explains the usage of many things I
was looking at ... expounded the script to parse command-line
args including user permission to execute the script

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 06:35 pm

I am not sure where to look to examine the js functions list so I can figure out how to use them :P

Start here:
http://wiki.synchro.net/custom:javascript
and here:
http://synchro.net/docs/js.html

digital man

This Is Spinal Tap quote #33:
Nigel Tufnel: Well, so what? What's wrong with bein' sexy?
Norco, CA WX: 71.3oF, 27.0% humidity, 1 mph SSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 23:56:08

Thank you, your example explains the usage of many things I
was looking at ... expounded the script to parse command-line
args including user permission to execute the script

It would also be wise to check that the arguments are supplied and meet some minimum requirements:

load('sbbsdefs.js');
if (argv.length < 2) exit();
if (argv[1].length < 1 || argv[1].length > LEN_PASS) exit();
// rest of original script goes here

And so on.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 23:56:08

Thank you, your example explains the usage of many things I
was looking at ... expounded the script to parse command-line
args including user permission to execute the script

It would also be wise to check that the arguments are supplied and meet some minimum requirements:

load('sbbsdefs.js');
if (argv.length < 2) exit();
if (argv[1].length < 1 || argv[1].length > LEN_PASS) exit();
// rest of original script goes here

And so on.

I chose to do an:

while(argv.length > 0) {
..
var arg = argv.shift();
switch(arg[1].toUpperCase()) {
case "P": password= argv.shift(); if(system.trashcan("password", password) { error = true; } break; ... } then later if(password) edituser.security.password = password; ... assuming that security.password already tests for LEN_PASS

the script seems to work, though I still have some condition checks to put in but the edituser.security.alias = newalias; doesn't seem to take affect?

edituser.security.handle = newhandle; works but if I try to change it back by rerunning the script it errors newhandle already exists, so it seems some residual value is left lingering

I'll work it out ... your example set me in the right direction to start to understand JS scripting :)

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 10:23:04

the script seems to work, though I still have some condition checks to put in but the edituser.security.alias = newalias; doesn't seem to take affect?

Take another look at the JS Object Model docs to see how the User object is structured.

user.alias = 'whatever';
user.security.password = 'loldongs';

(Basically User.alias is a thing but User.security.alias isn't.)

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 06:35 pm

I am not sure where to look to examine the js functions list so I can figure out how to use them :P

Start here:
http://wiki.synchro.net/custom:javascript
and here:
http://synchro.net/docs/js.html

digital man

how's this look? wget http://asmf-etrucker.com/edituser-js.zip

the only 'trouble' I am having is pulling the system password for permission to run the script (set for comparison on commandline as -V pass) ... is it bbs.system.password??

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 10:23:04

the script seems to work, though I still have some condition checks to put in but the edituser.security.alias = newalias; doesn't seem to take affect?

Take another look at the JS Object Model docs to see how the User object is structured.

user.alias = 'whatever';
user.security.password = 'loldongs';

(Basically User.alias is a thing but User.security.alias isn't.)

Ya, I figured that out after I replied to you. :-P

Got the script working as expected to accept commandline args the same as makeuser.js just need to figure out how to pull the system password for comparison using the -V syspass commandline switch. It'll come to me after I have a beer later :-P

wget http://asmf-etrucker.com/edituser-js.zip

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 13:32:41

makeuser.js just need to figure out how to pull the system password for comparison using the -V syspass commandline switch. It'll come to me after

How / when / in what context are you executing this script? I'm not sure that requiring the system password is a necessary step.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 10:23 am

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 23:56:08

Thank you, your example explains the usage of many things I
was looking at ... expounded the script to parse command-line
args including user permission to execute the script

It would also be wise to check that the arguments are supplied and meet some minimum requirements:

load('sbbsdefs.js');
if (argv.length < 2) exit();
if (argv[1].length < 1 || argv[1].length > LEN_PASS) exit();
// rest of original script goes here

And so on.

I chose to do an:

while(argv.length > 0) {

var arg = argv.shift();
switch(arg[1].toUpperCase()) {
case "P": password= argv.shift(); if(system.trashcan("password", password) { error = true; } break; ... } then later if(password) edituser.security.password = password; ... assuming that security.password already tests for LEN_PASS

It'll truncate the password to 8 chars and convert it to uppercase. So if you pass it a 9-char password, it'll only save the first 8.

the script seems to work, though I still have some condition checks to put in but the edituser.security.alias = newalias; doesn't seem to take affect?

That should just be user.alias (not user.security.alias).

edituser.security.handle = newhandle;

Same thing here: "handle" is not part of the user.security object.

digital man

This Is Spinal Tap quote #7:
Nigel Tufnel: That's just nitpicking, isn't it?
Norco, CA WX: 82.0oF, 21.0% humidity, 0 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to Digital Man on Fri Oct 19 2018 01:27 pm

Re: Re: User Edit
By: Mortifis to echicken on Thu Oct 18 2018 06:35 pm

I am not sure where to look to examine the js functions list so I can figure out how to use them :P

Start here:
http://wiki.synchro.net/custom:javascript
and here:
http://synchro.net/docs/js.html

how's this look? wget http://asmf-etrucker.com/edituser-js.zip

I'll see if I can take a look and get back to you.

the only 'trouble' I am having is pulling the system password for permission to run the script (set for comparison on commandline as -V pass) ... is it bbs.system.password??

No. The system password itself is not modeled (for security reasons), but there are 2 methods of confirming a system password entered is correct:

bbs.check_syspass() and system.check_syspass()

If you're running your script via JSexec, use the system.check_syspass() method.

digital man

This Is Spinal Tap quote #45:
I don't really think the end can be assessed as of itself as being the end Norco, CA WX: 82.0oF, 21.0% humidity, 0 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 13:32:41

makeuser.js just need to figure out how to pull the system password for comparison using the -V syspass commandline switch. It'll come to me after

How / when / in what context are you executing this script? I'm not sure that requiring the system password is a necessary step.

---
echicken

No, it is not a required step, just a preferred step, this script is excecuted from a remote server, to be specific, my cloud based Transportation Management Suite has Administrators that manage their own company databases which also have email addresses managed by SBBS, when a new user is added to eTrucker it passes the information on the remote server running SBBS which executes makeuser.js to add that user to the BBS mainly for email access. When a user changes their username, alais, password, email adress (which is typically in the form of sms xxx-xxx-xxxx@cell-carrier.xxx) on the eTrucker then that triggers edituser.js on the remote SBBS server. having an SBBS system password paramater check will ensure that the script is being executed by an authorized person. Tested and working correctly.

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 10:23 am

edituser.security.handle = newhandle;

Same thing here: "handle" is not part of the user.security object.

digital man

Thank you, DM, I eventually figured that out ... wasm just buggy eyed when I asked :)

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 15:57:36

mainly for email access. When a user changes their username, alais, password, email adress (which is typically in the form of sms xxx-xxx-xxxx@cell-carrier.xxx) on the eTrucker then that triggers edituser.js on the remote SBBS server. having an SBBS system password paramater check will ensure that the script is being executed by an authorized person. Tested and working correctly.

One concern I'd have with this is that you have one password and many users. If every authorized person needs to know the syspass in order to make a successful request, you'd need to change your syspass if you ever deauthorize someone. (Maybe that's not a problem.)

I would lean toward giving each remote system an API key / password to use for this purpose which you can revoke without affecting everyone else. Validate the request in your PHP application before it even gets to SBBS/jsexec.

Or make them supply their current password before they change it to a new one, or alter any other details.

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to Digital Man on Fri Oct 19 2018 01:27 pm

No. The system password itself is not modeled (for security reasons), but

there are 2 methods of confirming a system password entered is correct:

bbs.check_syspass() and system.check_syspass()

If you're running your script via JSexec, use the system.check_syspass() method.

digital man

Thank you,

case "V":
syspass = argv.shift();
if(!system.check_syspass(syspass)) {
. writeln("* Invalid System Password *");
. error = true;
. } else authorized = true;

break;

/* if there was an error parsing arguments, exit */
.if(!authorized) {
..writeln("* Unauthorized Access Denied *");
..return false;
.}

works great! Thank you.

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 15:57:36

mainly for email access. When a user changes their username, alais, password, email adress (which is typically in the form of sms xxx-xxx-xxxx@cell-carrier.xxx) on the eTrucker then that triggers edituser.js on the remote SBBS server. having an SBBS system password paramater check will ensure that the script is being executed by an authorized person. Tested and working correctly.

One concern I'd have with this is that you have one password and many users. If every authorized person needs to know the syspass in order to make a successful request, you'd need to change your syspass if you ever deauthorize someone. (Maybe that's not a problem.)

I would lean toward giving each remote system an API key / password to use for this purpose which you can revoke without affecting everyone else. Validate the request in your PHP application before it even gets to SBBS/jsexec.

Or make them supply their current password before they change it to a new one, or alter any other details.

---
echicken

Without getting into the inner workers of the portal, no one has access to the SBBS password as there are already user levels and keys in place ... I'm not new to programming, just javascript and especially SBBS's use there of, but I do appreciate the concern :)

---
* Synchronet * Twisted Truckers BBS web asmf-etrucker.com:81 telnet asmf-etrucker.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: User Edit
By: Mortifis to echicken on Fri Oct 19 2018 17:31:13

Without getting into the inner workers of the portal, no one has access to the SBBS password as there are already user levels and keys in place ... I'm not new to programming, just javascript and especially SBBS's use there of, but I do appreciate the concern :)

Mkay - this still just makes me think that the syspass is unnecessary here, but I'll leave you to it. :D

---
echicken
electronic chicken bbs - bbs.electronicchicken.com - 416-425-5435
* Synchronet * electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)