Hi, I am trying to make the switch to binkp from binkd and for some reason I am getting CRAM-MD5 password mismatch errors on both of my main connections

Fidonet - runs Taurus
Fsxnet - runs mystic

I have tried
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

what am I missing?

Thanks
Michael

---
þ Synchronet þ fluxcap.dynv6.net:2323 * Portland, OR

Re: binkp
By: Michael Pierce to All on Wed Aug 01 2018 07:43 am

Hi, I am trying to make the switch to binkp from binkd and for some reason I am getting CRAM-MD5 password mismatch errors on both of my main connections

Fidonet - runs Taurus

I am having a problem at the moment with a taurus mailer also. I think one of us has entered the password wrong. This is the first Taurus mailer I have setup so I'm hoping it'll be OK once we get our stuff together.

Let me know how it goes there..

Fsxnet - runs mystic

I have tried
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

Mystic doesn't support crypt BinkpAllowPlainText must be set to true for Mystic and any mailer that doesn't support CRYPT. You already have that.

Mystic supports CRAM-MD5 but it defaults to offf in the mystic echomail node settings. Ask that node to set CRAM-MD5 to yes, or set BinkpAllowPlainAuth to true for that node.

I think most Mystic nodes just don't see that..

Ttyl :-),
Al


... for it is the doom of men that they forget.

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

Michael Pierce wrote to All <=-

Hi, I am trying to make the switch to binkp from binkd and for some
reason I am getting CRAM-MD5 password mismatch errors on both of my
main connections

Fidonet - runs Taurus
Fsxnet - runs mystic

I have tried
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

what am I missing?

My settings for ctrl/sbbsecho.ini:

---
[archive:ZIP]
Sig = 504B
SigOffset = 0
Pack = %@zip -jD %f %s
Unpack = %@unzip -ojC %f -d %s
[archive:ARC]
Sig = 1A
SigOffset = 0
Pack = pak a %f %s
Unpack = pak e %f %s
[archive:LZH]
Sig = 2D6C68
SigOffset = 2
Pack = lha a %f %s
Unpack = lha e %f %s
[archive:ARJ]
Sig = 60EA
SigOffset = 0
Pack = arj a %f %s
Unpack = arj e %f %s
[archive:PAK]


Sig = FE
SigOffset = 0
Pack = pak a %f %s
Unpack = pak e %f %s
[archive:SQZ]
Sig = 484C5351
SigOffset = 0
Pack = sqz a %f %s
Unpack = sqz e %f %s
[archive:ZOO]
Sig = DCA7C4FD
SigOffset = 0
Pack = zoo a %f %s
Unpack = zoo e %f %s
===

Also worth to have a look at your node definition if you got something like:

PacketType = 2+ or PacketType = 2e instead.. (they are different) (NOt sure whether the packettype can also create this issue)

http://wiki.synchro.net/config:sbbsecho.ini


Many thanks..

---
= Synchronet = fluxcap.dynv6.net:2323 * Portland, OR

... A nuclear war can ruin your whole day...
--- MultiMail/Mac v0.51
þ Synchronet þ UNICYBER BBS -- bbs.unicyber.co.uk:2323::ssh bbs.unicyber.co.uk 2424

Al wrote to Michael Pierce <=-

Re: binkp
By: Michael Pierce to All on Wed Aug 01 2018 07:43 am

Hi, I am trying to make the switch to binkp from binkd and for some reason I am getting CRAM-MD5 password mismatch errors on both of my main connections
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

Mystic doesn't support crypt BinkpAllowPlainText must be set to true
for Mystic and any mailer that doesn't support CRYPT. You already have that.

Mystic supports CRAM-MD5 but it defaults to offf in the mystic echomail node settings. Ask that node to set CRAM-MD5 to yes, or set BinkpAllowPlainAuth to true for that node.

I had the same problem with one of the Hubs serving echomails and that was the issue, They have to force their Node to serve me CRAM-MD5. also I had to set BinkpAllowPlainAuth true and the problem was gone.



... Would it help if I got out and pushed?
--- MultiMail/Mac v0.51
þ Synchronet þ UNICYBER BBS -- bbs.unicyber.co.uk:2323::ssh bbs.unicyber.co.uk 2424

Re: Re: binkp
By: Rmh to Al on Wed Aug 01 2018 06:59 pm

I had the same problem with one of the Hubs serving echomails and that was the issue, They have to force their Node to serve me CRAM-MD5. also I had to set BinkpAllowPlainAuth true and the problem was gone.

Yep, when those mystic nodes have CRAM-MD5 set to no their mailer sends the password in plain text. It is best to leave your BinkpAllowPlainAuth to false if those nodes will set CRAM-MD5 to on.

Binkit will accept an inbound session in plain text with the above set to true but it will never send the password in plain text (as far as I know).

That could be a problem with mailers like BBBS that don't support CRAM-MD5. I haven't connected with a BBBS system in quite a few years and that may have changed now, I'm not sure. If not we can get a secure inbound session (with BinkpAllowPlainAuth=true) but not outbound.

I wonder if there are mailers still being used that don't support CRAM-MD5 but I haven't run into any.

Ttyl :-),
Al


... I'm sure it's all clearly explained in the Zmodem DOC's

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

Re: Re: binkp
By: Al to Rmh on Wed Aug 01 2018 12:13 pm

Binkit will accept an inbound session in plain text with the above set to true but it will never send the password in plain text (as far as I know).

When initiating a connection with a BinkP server that doesn't support CRAM-MD5, (and the linked node wasn't configured to require CRAM-MD5), BinkIT will send the password in plain text.

digital man

This Is Spinal Tap quote #32:
Derek Smalls: [A jog?] We don't have time for that.
Norco, CA WX: 94.9øF, 34.0% humidity, 7 mph SE wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 08-01-18 18:59, Rmh wrote to Al <=-

I had the same problem with one of the Hubs serving echomails and that
was the issue, They have to force their Node to serve me CRAM-MD5. also
I had to set BinkpAllowPlainAuth true and the problem was gone.

I run a Mystic hub and have had few issues. I have a few downlinks running BinkD (including my other BBS) and one or two, I think running BinkIT. I always turn on CRAM-MD5 in the node settings on the Mystic end, as I prefer to use that where it's available. So perhaps that's the main issue - making sure the remote end has their settings right.


... Friends are the spice of life! Are you hot or mild?
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Digital Man to Al on Wed Aug 01 2018 03:25 pm

Binkit will accept an inbound session in plain text with the above set
to true but it will never send the password in plain text (as far as I
know).

When initiating a connection with a BinkP server that doesn't support CRAM-MD5, (and the linked node wasn't configured to require CRAM-MD5), BinkIT will send the password in plain text.

Ah.. that's good to know. So a secure link is doable, although plain text if
it needs to be that way?

Ttyl :-),
Al


... IBM: It may be slow, but at least it's expensive.

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

Re: Re: binkp
By: Rmh to Al on Wed Aug 01 2018 06:59 pm

Hi, I am trying to make the switch to binkp from binkd and for some
reason I am getting CRAM-MD5 password mismatch errors on both of my
main connections

I have just noticed, that if I poll the node, it works, but if they poll me, I get the CRAM-MD5 mismatch error
Michael

---
þ Synchronet þ fluxcap.dynv6.net:2323 * Portland, OR

Re: Re: binkp
By: Michael Pierce to Rmh on Wed Aug 01 2018 08:42 pm

Re: Re: binkp
By: Rmh to Al on Wed Aug 01 2018 06:59 pm

Hi, I am trying to make the switch to binkp from binkd and for some
reason I am getting CRAM-MD5 password mismatch errors on both of my
main connections

I have just noticed, that if I poll the node, it works, but if they poll me, I get the CRAM-MD5 mismatch error

What mailer software (and version) is the other node using?

digital man

Synchronet "Real Fact" #39:
Synchronet first supported Windows NT v6.x (a.k.a. Vista/Win7) w/v3.14a (2006). Norco, CA WX: 81.4øF, 50.0% humidity, 5 mph E wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Michael Pierce to Rmh on Wed Aug 01 2018 08:42 pm

I have just noticed, that if I poll the node, it works, but if they poll me, I get the CRAM-MD5 mismatch error

I see that to when a mystic node has CRAM-MD5 off. Their mailer sends a plain text password on inbound calls but does accept CRAM-MD5 on outbound calls.

The only solution is to set BinkpAllowPlainAuth = true, or a better solution is to ask your link to set CRAM-MD5 to yes at their end.

Ttyl :-),
Al


... Scotty, beam me to the Bahamas.

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

On 08-02-18 12:54, Al wrote to Michael Pierce <=-

The only solution is to set BinkpAllowPlainAuth = true, or a better solution is to ask your link to set CRAM-MD5 to yes at their end.

I much prefer the latter solution. :)


... Ignore your health and it will go away.
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Digital Man to Michael Pierce on Wed Aug 01 2018 09:21 pm

I have just noticed, that if I poll the node, it works, but if they poll I get the CRAM-MD5 mismatch error

What mailer software (and version) is the other node using?

Aug 2 06:53:37 fluxcap synchronet: evnt Running timed event: BINKPOLL
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL BinkIT/2.6 invoked with options: -p
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL Attempting poll for node 21:2/100@fsxnet
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL JSBinkP/1.109 callout to 21:2/100@fsxnet started
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL Connecting to error404bbs.ddns.net:24555
Aug 2 06:53:38 fluxcap synchronet: evnt BINKPOLL Peer version: Mystic/1.12A39 binkp/1.0
Aug 2 06:53:38 fluxcap synchronet: evnt BINKPOLL Authentication successful: non-secure

that is what I get when I poll
Michael
--- SBBSecho 3.05-Linux
* Origin: fluxcap.dynv6.net:2323 * Portland, OR (1:340/201)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Michael Pierce to all on Thu Aug 02 2018 09:12 am

Re: Re: binkp
By: Digital Man to Michael Pierce on Wed Aug 01 2018 09:21 pm

I have just noticed, that if I poll the node, it works, but if they poll I get the CRAM-MD5 mismatch error

What mailer software (and version) is the other node using?

Aug 2 06:53:37 fluxcap synchronet: evnt Running timed event: BINKPOLL
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL BinkIT/2.6 invoked with options: -p
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL Attempting poll for node 21:2/100@fsxnet
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL JSBinkP/1.109 callout to 21:2/100@fsxnet started
Aug 2 06:53:37 fluxcap synchronet: evnt BINKPOLL Connecting to error404bbs.ddns.net:24555
Aug 2 06:53:38 fluxcap synchronet: evnt BINKPOLL Peer version: Mystic/1.12A39 binkp/1.0

* MysticBBS v1.12A39 at least has an issue when the CRYPT
* option is included after the CRAM-MD5 challenge. It appends
* three NULs to the end of the challenge data.

Tell the linked node to upgrade his copy of Mystic as this bug has been fixed.

digital man

This Is Spinal Tap quote #30:
Big bottom, big bottom / Talk about mud flaps, my girl's got 'em!
Norco, CA WX: 74.2øF, 66.0% humidity, 1 mph SSE wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 2018 Aug 01 18:56:00, you wrote to Michael Pierce:

Hi, I am trying to make the switch to binkp from binkd and for some
reason I am getting CRAM-MD5 password mismatch errors on both of my
main connections

Fidonet - runs Taurus
Fsxnet - runs mystic

I have tried
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

what am I missing?

My settings for ctrl/sbbsecho.ini:

ummm... the above is about mailer settings... not tosser settings ;)

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... He's surveying his liquor kingdom.
---
* Origin: (1:3634/12.73)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

mark lewis wrote to Rmh <=-

@TZ: 40f0
On 2018 Aug 01 18:56:00, you wrote to Michael Pierce:

Hi, I am trying to make the switch to binkp from binkd and for some
reason I am getting CRAM-MD5 password mismatch errors on both of my
main connections

Fidonet - runs Taurus
Fsxnet - runs mystic

I have tried
BinkpAllowPlainText=true
BinkpAllowPlainAuth=no

what am I missing?

My settings for ctrl/sbbsecho.ini:

ummm... the above is about mailer settings... not tosser settings ;)

The tosser (sbbsecho), also negotiates the connection with the Hub, the Specs also can produce some errors as I have experienced before, so I am was sharing a number of configurations as I have to produce a number of changes before.



... Bank Rule: To get a loan, first prove you don't need it.
--- MultiMail/Mac v0.51
þ Synchronet þ UNICYBER BBS -- bbs.unicyber.co.uk:2323::ssh bbs.unicyber.co.uk 2424

On 2018 Aug 04 15:51:00, you wrote to me:

My settings for ctrl/sbbsecho.ini:

ummm... the above is about mailer settings... not tosser settings ;)

The tosser (sbbsecho), also negotiates the connection with the Hub,

sorry, no it doesn't... the tossers do not negotiate... those values the tossers are concerned with are already negotiated and configured by the operators of each of the involved systems long before the tossers even come into play to toss or pack the mail ;)

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... Aw c'mon. Who's going to find out? - Bill Clinton, 1999
---
* Origin: (1:3634/12.73)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

mark lewis wrote to Rmh <=-

@TZ: 40f0
On 2018 Aug 04 15:51:00, you wrote to me:

My settings for ctrl/sbbsecho.ini:

ummm... the above is about mailer settings... not tosser settings ;)

The tosser (sbbsecho), also negotiates the connection with the Hub,

sorry, no it doesn't... the tossers do not negotiate... those values
the tossers are concerned with are already negotiated and configured by the operators of each of the involved systems long before the tossers even come into play to toss or pack the mail ;)

True all what you have said.

When I spoke I had in mind where Synchronet was holding the configurations, so that file, but I completely messed up with what I said.
In a way, also catching up with SYnchronet, I am too new to the software and getting familiar to quite a few things. Also re-learning the ways again as I have forgotten so much, just apologies.


Thanks Mark



... Careful. I know Karate and a few other foreign words.
--- MultiMail/Mac v0.51
þ Synchronet þ UNICYBER BBS -- bbs.unicyber.co.uk:2323::ssh bbs.unicyber.co.uk 2424

On 2018 Aug 05 14:52:00, you wrote to me:

My settings for ctrl/sbbsecho.ini:

ummm... the above is about mailer settings... not tosser settings
;)

The tosser (sbbsecho), also negotiates the connection with the Hub,

sorry, no it doesn't... the tossers do not negotiate... those values
the tossers are concerned with are already negotiated and configured
by the operators of each of the involved systems long before the
tossers even come into play to toss or pack the mail ;)

True all what you have said.

i try... i've been doing this since not long before fidonet's P4 was presented and voted into place ;)

When I spoke I had in mind where Synchronet was holding the configurations, so that file, but I completely messed up with what I
said. In a way, also catching up with SYnchronet, I am too new to the software and getting familiar to quite a few things. Also re-learning
the ways again as I have forgotten so much, just apologies.

you're doing just fine, man... you'll get it all straight soon :)

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... Be happy, if only to spite your parents.
---
* Origin: (1:3634/12.73)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Digital Man to Michael Pierce on Thu Aug 02 2018 11:52 pm

* MysticBBS v1.12A39 at least has an issue when the CRYPT
* option is included after the CRAM-MD5 challenge. It appends
* three NULs to the end of the challenge data.

Tell the linked node to upgrade his copy of Mystic as this bug has been fixe

actually, v1.12A39 *IS* the most current version - I just installed it - soo please, WHAT other options are there to get these 2 to connect???

Michael
--- SBBSecho 3.05-Linux
* Origin: fluxcap.dynv6.net:2323 * Portland, OR (1:340/201)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Michael Pierce to all on Sun Aug 05 2018 10:04 am

actually, v1.12A39 *IS* the most current version - I just installed it - soo please, WHAT other options are there to get these 2 to connect???

I connect with three mystic systems with binkit. I don't see any problem here. I have BinkpAllowPlainText = true and BinkpAllowPlainAuth = false but those nodes have CRAM-MD5 = yes at their end. If you are getting errors about CRAM-MD5 set BinkpAllowPlainAuth = true and I think you'll be OK.

Or is there a different problem?

Ttyl :-),
Al


... No special reason, just government policy

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

Re: Re: binkp
By: Michael Pierce to all on Sun Aug 05 2018 10:04 am

Re: Re: binkp
By: Digital Man to Michael Pierce on Thu Aug 02 2018 11:52 pm

* MysticBBS v1.12A39 at least has an issue when the CRYPT
* option is included after the CRAM-MD5 challenge. It appends
* three NULs to the end of the challenge data.

Tell the linked node to upgrade his copy of Mystic as this bug has been fixe

actually, v1.12A39 *IS* the most current version - I just installed it - soo please, WHAT other options are there to get these 2 to connect???

g00r00 released an update since then which fixed this issue, perhaps only for alpha sites? - anyway, it was discussed on fsxNet. You can either disable CRAM-MD5 and loosen the requirement (allow plain-text passwords) on the link partner or download and install the update.

It looks like there's also a work-around in binkit.js for the broken-CRAM logic in Mystic:
http://cvs.synchro.net/cgi-bin/viewcvs.cgi/exec/binkit.js?view=log

If the node running BinkIt is using v1.77 or later, it should "just work".

digital man

Synchronet/BBS Terminology Definition #34:
LF = Line Feed (ASCII 10, Ctrl-J)
Norco, CA WX: 82.4øF, 45.0% humidity, 0 mph WSW wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 08-08-18 06:58, Al wrote to Michael Pierce <=-

I connect with three mystic systems with binkit. I don't see any
problem here. I have BinkpAllowPlainText = true and BinkpAllowPlainAuth
= false but those nodes have CRAM-MD5 = yes at their end. If you are getting errors about CRAM-MD5 set BinkpAllowPlainAuth = true and I
think you'll be OK.

I'd be one of them? :)


... What the f___ was that? - Mayor Of Hiroshima, 1945
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Re: binkp
By: Tony Langdon to Al on Thu Aug 09 2018 07:32 am

I connect with three mystic systems with binkit. I don't see any
problem here. I have BinkpAllowPlainText = true and
BinkpAllowPlainAuth = false but those nodes have CRAM-MD5 = yes at
their end. If you are getting errors about CRAM-MD5 set
BinkpAllowPlainAuth = true and I think you'll be OK.

I'd be one of them? :)

QWK-net yes, binkit no.. although we could do that.

Ttyl :-),
Al


... Luxuriantly hand-crafted from only the finest ASCII.

---
þ Synchronet þ The Rusty MailBox - Penticton, BC Canada

On 08-08-18 19:29, Al wrote to Tony Langdon <=-

I'd be one of them? :)

QWK-net yes, binkit no.. although we could do that.

Ahh OK, well, I'm happy to leave things as they are. But I'm easy. :)


... Remember that the customs of your tribe are not laws of nature!
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Once I emailed the sysop, and asked him to turn on CRAM, that fixed the
problem -but I was also having a problem with my fidohub who runs Tarus?? his system took a bit longer to get it to work but finally did

I had tried BinkpAllowPlainAuth via editing sbbsecho.ini not via echocfg

I connect with three mystic systems with binkit. I don't see any problem here. I have BinkpAllowPlainText = true and BinkpAllowPlainAuth = false but those nodes have CRAM-MD5 = yes at their end. If you are getting errors about CRAM-MD5 set BinkpAllowPlainAuth = true and I think you'll
be OK.

Or is there a different problem?

---
þ Synchronet þ fluxcap.dynv6.net:2323 * Portland, OR

It looks like there's also a work-around in binkit.js for the
broken-CRAM logic in Mystic:

I thought I'd let you know that I did get it all sorted - was actually a
couple of problems, turns out when I put my fsxnet node # I transposed the
node #

Michael

---
þ Synchronet þ fluxcap.dynv6.net:2323 * Portland, OR

Re: Re: binkp
By: Mansion to Digital Man on Fri Aug 10 2018 08:50 am

It looks like there's also a work-around in binkit.js for the broken-CRAM logic in Mystic:

I thought I'd let you know that I did get it all sorted - was actually a couple of problems, turns out when I put my fsxnet node # I transposed the node #

Okay, cool.

digital man

Synchronet "Real Fact" #41:
Synchronet's cross-platform library is called XPDEV (named before Windows XP). Norco, CA WX: 89.0øF, 41.0% humidity, 8 mph ENE wind, 0.00 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net