On Tue, 1 Jun 1999, Wayne Rohret wrote:

> how does one send up commands to the newer versions of diald,

You can use signals, you can use a named pipe (with the fifo
option), or you can use a TCP connection (using the tcpport
option). The dctrl that comes with diald knows about both
fifo and TCP connections.

> and can
> windows users up a connection [on nodemand] without telneting into a
> firewall/masq machine

If you let them :-).

The default is not to let TCP connections do anything but monitor
the link. You can change the default by editing config.h and
recompiling or you can allow TCP connections to increase their
privileges using a simple (and, I suspect, still undocumented)
authentication method:

  In you diald config use:

        authsimple      /etc/diald.auth

  In /etc/diald.auth use:

        # The default settings
        default         control,auth,monitor

        # Someone who can up or down the link manually
        password1       control,auth,monitor,up,down

        # Someone who can block/force the link and toggle demand
        password2       
control,auth,monitor,up,down,block,unblock,force,unforce,demand,nodemand

        # A bigman can do anything and everything
        bigman          0xffffffff

        # Anything else gets the default back
        *               control,auth,monitor

If you use dctrl's "Access name" option on the config menu you
can enter one of those passwords on the left and get the
capabilities listed on the right.

  Now note that dctrl is written in Tcl/Tk and that Windows version
of Tcl and Tk are available from ftp.scriptics.com and you are
set. (You need the images for the buttons as well as the dctrl
script itself and you may want to change the imagepath setting
at the beginning of dctrl for Windows).

  If your users aren't sophisticated enough to use dctrl or they
don't care about the monitor features you could even just use
a couple of CGI scripts and a webserver on the firewall to send
requests to diald's fifo. Come to that I seem to remember a
Tcl/Tk plugin which could be fun to experiment with. Or you could
write a dctrl-a-like in Java. Or...

                                Mike

-- 
.----------------------------------------------------------------------.
| Mike Jagdis                   | Internet: [EMAIL PROTECTED]  |
| 280, Silverdale Road, Earley, | Voice:    +44 118 926 6996           |
| Reading RG6 7NU ENGLAND       | Work:     +44 118 989 0403           |
`----------------------------------------------------------------------'


-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to