*************************************************************************** APLogin - Replacement Login program for IBM TCP/IP. Version 1.00á Copyright (c)1993 Andy Collins, Eric D. Mudama, All Rights Reserved *************************************************************************** INCLUDED FILES: READ.ME -The file you should already have read... :-) install.txt -This file that you are reading bin.zip -This includes the following: Note that by unpacking bin.zip, you agree to the terms below. (See DISCLAIMER) -aplogin.exe -Replacement login program -adduser.exe -Utility to add users to your passwd file -greeting.txt -Sample Greeting message file -welcome.txt -Sample Welcome message file -badlogin.txt -Sample Badlogin message file *************************************************************************** INSTALLATION: To install APLogin, use the following procedure: 1. Rename the LOGIN.EXE that is included with IBM TCP/IP to another name. This allows you to return to the old state if you decide not to use APLogin. 2. Create a directory to hold APLogin. We recommend that APLogin and its support files be contained in their own directory. 3. Using a PKUNZIP 2.x compatible program, unzip the included BIN.ZIP into this directory. This will unpack aplogin.exe, adduser.exe, as well as the included sample text files. 4. Add the following environment variables to your config.sys file: Variable: Used for: =========================================================================== ATLPAC_PASSWD_FILE location of passwd file (required) ATLPAC_GREETING_FILE location of greeting file (optional) ATLPAC_WELCOME_FILE location of welcome file (optional) ATLPAC_BADLOGIN_FILE location of badlogin file (optional) ATLPAC_LOG_FILE location of event log (optional) Example: =========================================================================== SET ATLPAC_PASSWD_FILE=C:\TCPIP\APLOGIN\PASSWD SET ATLPAC_GREETING_FILE=C:\TCPIP\APLOGIN\GREETING.TXT SET ATLPAC_WELCOME_FILE=C:\TCPIP\APLOGIN\WELCOME.TXT SET ATLPAC_BADLOGIN_FILE=C:\TCPIP\APLOGIN\BADLOGIN.TXT SET ATLPAC_LOG_FILE=c:\TCPIP\APLOGIN\MYLOG.TXT 5. Copy the APLOGIN.EXE file to LOGIN.EXE in your TCPIP\BIN directory. This replaces the existing LOGIN.EXE, so be sure that you copied the old one to another location. 6. Reboot your computer, to set the environment variables. Enjoy! *************************************************************************** OPERATION: The following section describes how this software works: APLogin replaces your existing LOGIN.EXE program, and includes a login procedure that supports multiple users with an encrypted password file. We saw how the original TCP/IP login program only asked for a password, which was contained in plain text in your config.sys file. We thought that this could be improved, so we wrote APLOGIN.EXE. Note that this does not secure the actual operation of your system, once someone has successfully logged in. Behavior of your system after login will not change by the use of this program. The passwd file is a plain text file, like on any normal unix system. Nobody, including root, can read another user's password from this file, nor can a password be decoded. We believe that this program cannot be broken unless someone has your actual username and password. To allow for customization, we have included the ability to use your own message files. These could announce any rules on your system, bulletins, or current events to each person who logged in. The first of these files, greeting.txt, is displayed before the user is prompted for a username and a password. If a login is successful, welcome.txt is displayed and the user is given a command prompt on your system. This will usually be CMD.EXE. (Unless you have changed your default command interpreter to 4OS2, or something else.) If a user fails to get a correct password in three tries, the file badlogin.txt is displayed and the connection is terminated. This file will usually just say "Maximum retries exceeded." or something similiar. You are free to customize these files as you wish. Keep in mind that these message files are optional. If the files are not found, simple default messages will be displayed. Once you have installed the software, set the environment variables, and rebooted your computer, it is time to create the passwd file. Move to the location specified by the environment variable ATLPAC_PASSWD_FILE and type 'adduser'. If a passwd file does not exist here, one will be created. Adduser will prompt you for a username and a password, which is hidden, then it will prompt you to confirm the password. If the two passwords match, it will add the user to the end of the password file. If the two passwords do not match, the program will notify you of this and exit. Also, adduser does not check to see if a user already exists. To change a user's password, use any text editor to delete the line beginning with their username. Then run adduser to add them to this file. Once you have set up a user or two, you can try the program out, to simulate a login, by typing 'aplogin' at the prompt. What is displayed is that same information that someone 'telneting' into your machine will see. Once you are satisfied with how it looks, you are ready to allow other users to use your system. If you wish to enable event logging, set the ATLPAC_LOG_FILE variable to a text file of your choice. If this file does not exist, it will be created at run time. This option allows logging of all successful and unsuccessful logins to this file. -Enjoy, Eric D. Mudama and Andy Collins *************************************************************************** REGISTRATION: To register this software, please send check or money order for $5.00 to either of the following addresses: Eric D. Mudama Andy Collins 119 Bay State Road 12564 Scully Avenue Boston, MA 02215 Saratoga, CA 95070 Please include the following form with your payment: It allows us to enter you as a user in our database, and will get you upgrades in the future. Also, if you don't include this form, we will have no idea what the money is meant for. Thanks for your time... ====================== APLogin Registration Form ========================== Name:______________________________________________________________________ Address:___________________________________________________________________ City:_______________________________ State:_________ Zip:________________ Internet E-Mail:___________________________________________________________ Host Address where it will be used: (optional) ______.______.______.______ Version of APLogin:______________________________________________ (1.00á) # of copies of APLogin in use:_____________ x $5.00 = ___________________ Total: ___________________ OPTIONAL: Where did you get this copy of APLogin? How did you hear about APLogin? What suggestions do you have for future copies of APLogin? ================== End of APLogin Registration Form ======================= *************************************************************************** If you like this software, let us know. If you don't, let us know too. We have a couple of other projects in mind, so some encouragement would be great. If this software does not work with your setup, let us know. We will devote what time we can to getting it to work with your machine. Note that this software has been tested under OS/2 2.1, and therefore ought to work under OS/2 2.0, but this cannot be guaranteed. Also, it ought to work with any recent release of IBM's base TCP/IP package. Also note that this software is a 32-bit application, and therefore will not work with versions of OS/2 prior to OS/2 2.0. Thank you for your time, Eric D. Mudama (edmudama@athena.mit.edu) Andy Collins (acollins@uclink.berkeley.edu) *************************************************************************** COPYRIGHT NOTICE AND DISCLAIMER: Andy Collins and Eric D. Mudama disclaim all warranties, whether expressed or implied, including without limitation, warranties of fitness and merchantability with resspect to this software and the accompanying documentation. Neither Andy Collins nor Eric D. Mudama, nor any other people associated with us are responsible for any damages incurred through the use of or the inability to use this software. By using this software, you agree to these terms. This software is shareware. If you like it, or decide to continue to use this software beyond the 15-day trial period, a $5 registration fee is required. By registering this software, you will recieve notification of new releases of this software, and be entitled to free upgrades forever when they become available. This software may be distributed freely, provided that there is no fee charged for the program, and that all of the original files are included in the distribution without modifications. A distribution fee may be charged, provided that no special fee is charged for this software. Copyright (c)1993 Andy Collins, Eric D. Mudama, All Rights Reserved *************************** End of Document *******************************