URONode.perms file is read at program startup with the knowledge of users username (call), connection type (AX.25, NET/ROM, ROSE, TCP/IP), peers IP address (for TCP/IP) and port name (for AX.25). The first entry matching this information is taken and user is asked for password and given permissions according to it.
The lines within uronode.perms must either be a comment line, which starts with a # in the first column, or a permission entry in the following format, each field being delimited by white space:
username type portname password permissions
The field descriptions are:
This is matched against users username (call) without SSID. An asterisk (*) matches any username.
This is matched against the type of the connection to user. Possible values for this field are:
matches any type of connection.
matches users coming in with AX.25 and FlexNet.
matches users coming in with NET/ROM.
matches users coming in with ROSE.
matches TCP/IP connections where users host is in "local" network as defined in uronode.conf(5).
matches TCP/IP connections where users host is in amprnet (22.214.171.124/8).
matches TCP/IP connections where users host is neither in "local" network nor in amprnet.
matches users starting URONode from shell.
If user is coming in with AX.25 this field is matched against the local port name the user is coming in via. An asterisk (*) matches any port name.
If the previous three fields match and this field is not a single asterisk (*) the user is asked for a password. The password is then matched against this field.
This field represents a a bitmask of operations the user is permitted to do. It is a sum of the values listed here:
permits logging in even if no other permissions are given.
permits outgoing AX.25 and Flexnet connects.
permits outgoing NET/ROM connects.
permits telneting to hosts in the "local" network as defined in uronode.conf(5).
permits telneting to hosts in amprnet.
permits telneting to hosts neither in the "local" network nor in amprnet.
ANSI Color flag. Enable per interface to allow the user to have ANSI color graphics on their terminal. A "*" for the interface will flag color ON for all interfaces for that callsign. Suggested to leave OFF unless requested by the end user... but looks kewl in a shell terminal.
permits outgoing ROSE connects.
The no-escape flag. Disables the escape mechanism for this user.
uronode(8), uronode.conf(5), axports(5), ax25(4).
flexd.conf(5), uronode(8), uronode.conf(5).