RCONN@SIMTEL20.ARPA (03/28/84)
From: Rick Conn <RCONN@SIMTEL20.ARPA>
ZCPR3 - Wheel Users and Passwords
As the reader has seen, password protection
is common under ZCPR3. To be exact, several of the
ZCPR3 utilities respond one way if the user is
priveleged (a Wheel) or not priveleged. A user
becomes priveleged by running the WHEEL command and
giving the Wheel Password.
A0:BASE>mkdir
MKDIR, Version 3.0
Permission to Run MKDIR Denied - Not Wheel
A0:BASE>pwd pass
PWD, Version 1.0
Password Request Denied - Not Wheel
DU : DIR Name DU : DIR Name DU : DIR Name DU : DIR Name
---- -------- ---- -------- ---- -------- ---- --------
A 0: BASE A 1: PRIVATE A 15: ROOT
B 0: WORK1 B 1: WORK2 B 2: WORK3 B 4: WORK4
B 5: TEXT B 6: MAIL
A0:BASE>wheel /s
WHEEL, Version 3.0
Wheel Password? Wheel Byte is ON
A0:BASE>pwd pass
PWD, Version 1.0
DU : DIR Name - Password DU : DIR Name - Password
---- -------- -------- ---- -------- --------
A 0: BASE - A 1: PRIVATE - MYPASS
A 15: ROOT -
B 0: WORK1 - B 1: WORK2 -
B 2: WORK3 - B 4: WORK4 -
B 5: TEXT - B 6: MAIL -
A0:BASE>private:
PW? mypass
A1:PRIVATE>root:
A15:ROOT>mkdir sys.ndr
MKDIR, Version 3.0
MKDIR Command (? for Help)? C
** MKDIR Change Mode **
Directory Entry (?<RETURN> for Help)? a2:priv2
Adding PRIV2 -- Password? mypass2
10 Entries in Directory
Directory Entry (?<RETURN> for Help)?
DU : DIR Name - Password DU : DIR Name - Password
---- -------- -------- ---- -------- --------
A 0: BASE - A 1: PRIVATE - MYPASS
A 2: PRIV2 - MYPASS2 A 15: ROOT -
B 0: WORK1 - B 1: WORK2 -
B 2: WORK3 - B 4: WORK4 -
B 5: TEXT - B 6: MAIL -
Directory Entry (?<RETURN> for Help)? x
MKDIR Command (? for Help)? X
Directory has changed since last Write
Do you want to write Directory to Disk (Y/N)? Y
Name of File (<RETURN> = A 15: SYS .NDR)? special.ndr
Writing Directory to Disk ... Done
As another part of the protection afforded
under ZCPR3, if a user knows the right passwords
and has the proper Wheel privelege, he can
radically change the directory structure, bringing
new directories which were previously undefined
into existence.
Under ZCPR3, the ability to log into a
directory can be controlled by the installer. At
installation time, the ability to allow the user to
use DU and to use DIR forms to log into directories
or reference directories can be established. On a
more secure system, for example, the ability to use
the DU form may be denied. Then, only directories
defined by name may be accessed (DIR form), and, if
these directories have passwords associated with
them, the proper passwords must be given.
A15:ROOT>ldr special.ndr
ZCPR3 LDR, Version 1.0
Loading SPECIAL.NDR
A15:ROOT>pwd
PWD, Version 1.0
DU : DIR Name DU : DIR Name DU : DIR Name DU : DIR Name
---- -------- ---- -------- ---- -------- ---- --------
A 0: BASE A 1: PRIVATE A 2: PRIV2 A 15: ROOT
B 0: WORK1 B 1: WORK2 B 2: WORK3 B 4: WORK4
B 5: TEXT B 6: MAIL
A15:ROOT>priv2:
PW? mypass2
A2:PRIV2>wheel system r
WHEEL, Version 3.0
Wheel Byte is OFF
A2:PRIV2>pwd pass
PWD, Version 1.0
Password Request Denied - Not Wheel
DU : DIR Name DU : DIR Name DU : DIR Name DU : DIR Name
---- -------- ---- -------- ---- -------- ---- --------
A 0: BASE A 1: PRIVATE A 2: PRIV2 A 15: ROOT
B 0: WORK1 B 1: WORK2 B 2: WORK3 B 4: WORK4
B 5: TEXT B 6: MAIL
-------