• New user e-mail/password issues

    From Brian Davidson@1:154/140 to All on Fri Jul 31 09:27:12 2026
    I'm on 3.21e, and I have just gotten 2 user reports that they could not register. Once said that they kept trying to set their password, but it would not accept it, no matter how complex (letters numbers and symbols). I monitored this activity to confirm it was so. That's where the user got frustrated and disconnected.

    User 2 (me, actually) wanted to validate the issue so I created a Test User account to go through the process. When it got to e-mail address (netmail address, actually), it correctly refused my own e-mail address as a duplicate, but when I used another account hosted by the same domain, it accepted it until it got to e-mail validation, where it said that the e-mail address was invalid. The only options at that point were to enter another address or hangup. I obviously chose the later.

    I've turned off HQ passwords in the meantime to try and at least let some users through, but that's not a real solution IMO.

    Thanks for any assistance!

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...Civil engineers do it behind schedule
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Brian Davidson@1:154/140 to All on Sat Aug 1 02:28:24 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to All on Fri Jul 31 2026 09:27 am

    I'm on 3.21e, and I have just gotten 2 user reports that they could not register. Once said that they kept trying to set their password, but it would not accept it, no matter how complex (letters numbers and symbols). I monitored this activity to confirm it was so. That's where the user got frustrated and disconnected.

    User 2 (me, actually) wanted to validate the issue so I created a Test User account to go through the process. When it got to e-mail address (netmail address, actually), it correctly refused my own e-mail address as a duplicate, but when I used another account hosted by the same domain, it accepted it until it got to e-mail validation, where it said that the e-mail address was invalid. The only options at that point were to enter another address or hangup. I obviously chose the later.

    I've turned off HQ passwords in the meantime to try and at least let some users through, but that's not a real solution IMO.

    Ok, some updates.

    My SMTP relay account was somehow locked out, so fixing hthat fixed the ability to send validation e-mail.

    I did, however, have to turn on Internet e-mail forwarding because it is tied to the flag that tests the contents of the e-mail address. I'd rather not have my users have Internet e-mail accounts, just me and my staff.

    So my 2 questions are now:

    1. What could be causing hq_passwords to reject a sufficient e-mail address that is 8 chracters, has letters numbers and symbols?

    2. Is there a way to allow e-mail validation without havning to enable "Users can send internet e-mail"? I'm using e-mail validation solely to ensure my users are real people with accounts I could contaact if needed.

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...Marriage is not a word but a sentence.
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Digital Man@1:103/705 to Brian Davidson on Sun Aug 2 14:23:53 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to All on Fri Jul 31 2026 09:27 am

    I'm on 3.21e, and I have just gotten 2 user reports that they could not register. Once said that they kept trying to set their password, but it would not accept it, no matter how complex (letters numbers and symbols). I monitored this activity to confirm it was so. That's where the user got frustrated and disconnected.

    What's the terminal server log say about this interaction? Do you have additions to the password.can file?

    User 2 (me, actually) wanted to validate the issue so I created a Test User account to go through the process. When it got to e-mail address (netmail address, actually), it correctly refused my own e-mail address as a duplicate, but when I used another account hosted by the same domain, it accepted it until it got to e-mail validation, where it said that the e-mail address was invalid. The only options at that point were to enter another address or hangup. I obviously chose the later.

    Do you have Internet email enabled in SCFG->Networks->Internet?

    I've turned off HQ passwords in the meantime to try and at least let some users through, but that's not a real solution IMO.

    Did it make any difference?
    --
    digital man (rob)

    Sling Blade quote #17:
    Charles Bushman: A shovel just makes too goddamned much racket.
    Norco, CA WX: 96.8øF, 27.0% humidity, 6 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Brian Davidson on Sun Aug 2 14:37:53 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to All on Sat Aug 01 2026 02:28 am

    So my 2 questions are now:

    1. What could be causing hq_passwords to reject a sufficient e-mail address that is 8 chracters, has letters numbers and symbols?

    Nothing: passwords and e-mail addresses are totally separate things.

    2. Is there a way to allow e-mail validation without havning to enable "Users can send internet e-mail"? I'm using e-mail validation solely to ensure my users are real people with accounts I could contaact if needed.

    I just committed a change to emailval.js that'll do that: https://gitlab.synchro.net/main/sbbs/-/commit/bc4f969f2a47c7bdff1d79180e4ed0
    --
    digital man (rob)

    Synchronet "Real Fact" #29:
    Rob Swindell first called BBSes (at 300bps) with an Apple II computer in 1982 Norco, CA WX: 96.0øF, 31.0% humidity, 7 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Brian Davidson@1:154/140 to Digital Man on Sun Aug 2 20:36:22 2026
    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Sun Aug 02 2026 02:23 pm

    What's the terminal server log say about this interaction? Do you have additions to the password.can file?

    I think the user was messing with me. No symbol in the logs, just letter and numbers, and does not appear in passwords.can. Still won't meet hq requirements, so this is behing normally, and he needs to suck it up on this one.

    Do you have Internet email enabled in SCFG->Networks->Internet?

    I had to turn it on to get it to work. The undesired side effect was that users were getting their own @bbs.winzlo.com e-mail accounts which I did not want to provide for spam score reasons. You said that you made a change to emailval.js, so this may now be resolved, and I will validate this in the coming day or two when I get brave or bored enough to go off-tag. :)

    Did it make any difference?

    It appeared to let the user log in with the password they chose. I can't be sure what the original password, if it was different than the one he used when it worked, but it worked, and was not in passwords.can.

    Thanks!

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...A fail-safe circuit will destroy others.
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Brian Davidson@1:154/140 to Digital Man on Mon Aug 3 12:13:20 2026
    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Sun Aug 02 2026 02:37 pm

    I just committed a change to emailval.js that'll do that: https://gitlab.s ynchro.net/main/sbbs/-/commit/bc4f969f2a47c7bdff1d79180e4ed0 --

    Confirmed, turning off Allow Users to send Internet e-mail still allows the validation of the address to take place and to proceed through the regitration process.

    Thanks DM!

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...I have the world's largest collection of seashells. I keep it on all the beaches of the world... perhaps you've seen it....
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Brian Davidson@1:154/140 to Digital Man on Mon Aug 3 13:48:58 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to Digital Man on Mon Aug 03 2026 12:13 pm

    Ok, I need to take this back. By turning that setting off, I again caused the validation to not provide an opportunity to send a validation e-mail. The only options users have is to change their e-mail address or hangup.

    I really picked the wrong wee to stop huffing paint thinner...


    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Digital Man@1:103/705 to Brian Davidson on Mon Aug 3 17:20:25 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to Digital Man on Mon Aug 03 2026 01:48 pm

    Re: New user e-mail/password issues
    By: Brian Davidson to Digital Man on Mon Aug 03 2026 12:13 pm

    Ok, I need to take this back. By turning that setting off, I again caused the validation to not provide an opportunity to send a validation e-mail.

    Turn which setting off?

    The only options users have is to change their e-mail address or hangup.

    What version of exec/emailval.js are you using?

    If you're using the latest, you should see this in there:
    if (netaddr_type(user.netmail) == NET_INTERNET || system.check_netmail_addr(user.netmail))
    break;
    alert("Sorry, that is an unsupported netmail address");

    Also make sure you don't have another copy of emailval.js in your mods directory (or anywhere else).
    --
    digital man (rob)

    Synchronet/BBS Terminology Definition #15:
    CGA = Color Graphics Adapter (IBM)
    Norco, CA WX: 90.3øF, 39.0% humidity, 13 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Brian Davidson@1:154/140 to Digital Man on Tue Aug 4 00:58:08 2026
    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Mon Aug 03 2026 05:20 pm

    Ok, I need to take this back. By turning that setting off, I again caused
    the validation to not provide an opportunity to send a validation e-mail.

    Turn which setting off?

    Neworks -> Internet -> Allow users to send netmail. That setting should not affect email validation - validation codes should still be able to be sent, just like password resets.

    What version of exec/emailval.js are you using?
    If you're using the latest, you should see this in there: if (netaddr_type(user.netmail) == NET_INTERNET || system.check_netmail_addr(user.netmail))
    break;
    alert("Sorry, that is an unsupported netmail address");

    Here's my snippet, it matches:
    if (netaddr_type(user.netmail) == NET_INTERNET || system. check_netmail_addr(user.netmail))
    break;
    alert("Sorry, that is an unsupported netmail address");

    Also make sure you don't have another copy of emailval.js in your mods directory (or anywhere else).

    No other copies of hte script exist in exe or mods.

    My build is from master/bc4f969f2a, which was the newest when I built yesterday.

    Hope this helps,

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...Pure drivel tends to drive ordinary drivel off the TV screen.
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)
  • From Digital Man@1:103/705 to Brian Davidson on Tue Aug 4 01:03:46 2026
    Re: New user e-mail/password issues
    By: Brian Davidson to Digital Man on Tue Aug 04 2026 12:58 am

    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Mon Aug 03 2026 05:20 pm

    Ok, I need to take this back. By turning that setting off, I again caused
    the validation to not provide an opportunity to send a validation e-mail.

    Turn which setting off?

    Neworks -> Internet -> Allow users to send netmail. That setting should not affect email validation - validation codes should still be able to be sent, just like password resets.

    I don't recall having a "password reset" (via email) feature.

    What version of exec/emailval.js are you using?
    If you're using the latest, you should see this in there: if (netaddr_type(user.netmail) == NET_INTERNET || system.check_netmail_addr(user.netmail))
    break;
    alert("Sorry, that is an unsupported netmail address");

    Here's my snippet, it matches:
    if (netaddr_type(user.netmail) == NET_INTERNET || system. check_netmail_addr(user.netmail))
    break;
    alert("Sorry, that is an unsupported netmail address");

    Also make sure you don't have another copy of emailval.js in your mods directory (or anywhere else).

    No other copies of hte script exist in exe or mods.

    My build is from master/bc4f969f2a, which was the newest when I built yesterday.

    The build doesn't matter, just the script. And it does appear you have the latest. What is the script displaying when a user attempts to validate their Internet email address:
    "Sorry, that is an unsupported netmail address"
    or
    "Invalid NetMail address: user@some.where"
    ?

    The second one isn't a fatal error - the user can still validate.
    --
    digital man (rob)

    Sling Blade quote #18:
    Karl Childers: Some folks call it Hell, I call it Hades.
    Norco, CA WX: 68.0øF, 85.0% humidity, 2 mph W wind, 0.00 inches rain/24hrs
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Brian Davidson on Tue Aug 4 01:26:35 2026
    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Tue Aug 04 2026 01:03 am

    "Invalid NetMail address: user@some.where"
    ?

    The second one isn't a fatal error - the user can still validate.

    Correction: The second message was also a fatal error (would disable the [S]end code option

    I just made a commit whereby you can set ctrl/modopts/emailval.ini check_netmail_addr = false to disable both of those checks in the script.
    --
    digital man (rob)

    Rush quote #35:
    Static on your frequency, electrical storm in your veins
    Norco, CA WX: 67.7øF, 86.0% humidity, 3 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Brian Davidson@1:154/140 to Digital Man on Tue Aug 4 04:21:55 2026
    Re: New user e-mail/password issues
    By: Digital Man to Brian Davidson on Tue Aug 04 2026 01:26 am

    Correction: The second message was also a fatal error (would disable the [S]end code option

    I just made a commit whereby you can set ctrl/modopts/emailval.ini check_netmail_addr = false to disable both of those checks in the script.

    I pulled the latest source and performed a full build and install. I also went back into SCFG -> Network -> Internet E-mail -> Allow sending of Netmail -> NO.

    I then logged in as a new user. E-mail address duplicate checks still succeed, the process progresses past feedback to User #1 and the password setup untl it gets to the exact following:

    You have created an account with an email address that must be validated. Invalid NetMail address: music@winzlo.com [E] Edit/Update email address [H] Hangup Your selection?

    No "S" option, which is what I assumed this change was meant to fix.

    -Winzlo

    ===
    þ The Down-Lo BBS þ bbs.winzlo.com

    ...The writer does the most who gives the reader the most
    --- SBBSecho 3.37-Linux
    * Origin: The Down-Lo BBS * bbs.winzlo.com (1:154/140)