Enter your search terms Submit search form
	Web pdp-10.trailing-edge.com

.ps80,72.npr.lm0.rm72
.ts8
.title PSWCHK.DOC
[PSWCHK.DOC %1; 4-Dec-84]
.sk;PSWCHK is a program to analyze the TOPS-10 passwords 
contained in the system accounting file.
The purpose of the program is to improve the overall security
of the system by finding poorly chosen user passwords.
Those users can then be advised of their error
(see the file PSWCHK.MAI).
.sk;The program can be installed in SYS:
or a private directory as desired.
It begins execution by prompting the user for a command.
The command syntax is the following:
.sk;	PSWCHK>outfile=infile/switches....
.sk;where the file specifications default to DSK:MONRPT.RPT
(for output)
and STD:ACCT.SYS
(for input).
If only one file is specified and the equal sign is omitted,
it will be the output file.
Any or all parts of the command may be omitted,
but if switches are specified,
they must be last.
.sk;At startup the program writes its control data
to both the terminal and the output file.
In addition,
PSWCHK supports the GALAXY library's recognition input
("?", "<esc>", etc.)
feature.
.sk;The switches
determine the type of testing done by the program.
Note that each of them can be negated with the prefix "NO"
(eg, /NOENCRYPT).
Also, each switch supercedes earlier switches.
For example,
"/NONE/WORDS" would cause the WORDS comparison to be selected,
but "/WORDS/NONE" would result in no comparisons being seleted.
.ts10.lm10
.sk.i-10;ENCRYPT	The passwords are encoded.
The encryption technique utilized is the same as used by REACT and LOGIN.
Because the method cannot be inverted,
each potential password must be individually encoded and
compared against each password
stored in the accounting file.
.sk.i-10;ACCNAME	Compare various formats of the user's accounting name
(as given in the accounting file)
against the password.
.sk.i-10;LOGNAME	Compare various formats of the user's login name
(as read from the /NAME switch on the LOGIN line
of each user's SWITCH.INI, if any)
against the password.
.sk.i-10;WORDS	Compare each item in a built-in list
of poorly chosen passwords
against the password.
.sk.i-10;ALL	Causes all comparisons to be selected
(ie, ACCNAME, LOGNAME, PPN, WORDS).
.sk.i-10;NONE	Causes no comparisons to be selected.
.lm0
.sk;The program has been tested under TOPS-10 version 7.02
and GLXLIB %1(1172).
It assumes the accounting file
is in the standard TOPS-10 ACCT.SYS format,
but this and the switch defaults
can easily be modified.
.page
The following is a sample terminal dialog
demonstrating the use of PSWCHK.
.lm8.sk
.lt
.r pswchk

PSWCHK>

 Password check beginning at  4-Dec-84 11:36:10
 Report file is DSK:PSWCHK.RPT
 Examining file STD:ACCT.SYS
 Switches are:  /ENCRYPT /WORDS /ACCNAME /LOGNAME /PPN

 Password check finished at  4-Dec-84 12:28:23
 3 matches found in 1410 accounts

PSWCHK>^C

.type pswchk.rpt

 Password check beginning at  4-Dec-84 11:36:10
 Report file is DSK:PSWCHK.RPT
 Examining file STD:ACCT.SYS
 Switches are:  /ENCRYPT /WORDS /ACCNAME /LOGNAME /PPN

       PPN          User Name     Type      Password

 [123,76543]        J.SMITH       lgnnam    JIM
 [2323,4545]        JONES         lgnnam    AJONES
 [6565,23423]       T.HAZELTON    accnam    HAZEL

 Password check finished at  4-Dec-84 12:28:22
 3 matches found in 1410 accounts
.el
.sk2.lm0
Note that the user accepted the default command.
This was equivalent to typing "DSK:PSWCHK.RPT=STD:ACCT.SYS/ENCRYPT/ALL".