[comp.sources.wanted] Secure dialback program

jxh@attain.teradyne.com (Jim Hickstein) (11/03/90)

I need a program that will dial back a prospective dialup user at a
predtermined phone number and connect that person with a getty.  Such
a thing must exist, but I've looked through the source archives I could
find and have been watching comp.archives for a while, but nothing surfaced,
so here's my (probably too-often seen) request.

This program should be specified as the user's shell in /etc/passwd,
determine whether the port in use is a dialup line (if not, pass control
to /bin/csh, configurable per user), and demand a dialup password.
It then hangs up the phone.  If the password was specified correctly, it
will place an outgoing call, preferably on another line to avoid insecure
"collisions" in the central office, and hand the user to a getty or login
(I'm not sure how this should work) so a normal login sequence can then
happen.

Two things are thus accomplished; first another level of security is
introduced in the normal dialup path; second, tolls would accrue for
the originator of the dialed-back call, namely the computer, rather
than the user.  Optionally, the secondary password, if accepted, could
bypass the dial-back and simply pass control through to the normal login
process so that this toll reversal does not take place.  This should be
up to the user somehow, perhaps by using different dialup passwords to
indicate different actions.

I suspect there are boxes out there (read: $) that can do this, but clearly
the computer itself is capable of all this.  I'm running a Sun-3/180 under
SunOS 4.1, and I can get do FTP's to the Internet at a pinch.  Any information
would be warmly appreciated.
-- 
"Figures don't lie, but liars can figure."
--
Jim Hickstein, Teradyne/Attain, San Jose CA, (408) 434-0822 FAX -0252
jxh%attain.teradyne.com@apple.com ...!{amdcad!teda,sun!teda,apple}!attain!jxh

root@cca.ucsf.edu (Systems Staff) (11/10/90)

In article <2298@certes.attain.teradyne.com>, jxh@attain.teradyne.com (Jim Hickstein) writes:
> I need a program that will dial back a prospective dialup user at a
> predtermined phone number and connect that person with a getty.  Such
> a thing must exist, but I've looked through the source archives I could
> find and have been watching comp.archives for a while, but nothing surfaced,
> so here's my (probably too-often seen) request.
> 
> 

Two related programs were in comp.sources.misc:

    v04i036  ringback   (by Jon Zeeff)
    v10i001  callback   (by Howard Gayle)

I don't know how closely these fit your needs but they may give you
a start.

 Thos Sumner       Internet: thos@cca.ucsf.edu
 (The I.G.)        UUCP: ...ucbvax!ucsfcgl!cca.ucsf!thos
                   BITNET:  thos@ucsfcca

 U.S. Mail:  Thos Sumner, Computer Center, Rm U-76, UCSF
             San Francisco, CA 94143-0704 USA

I hear nothing in life is certain but death and taxes -- and they're
working on death.

#include <disclaimer.std>