1) remove loglevel in zmodem code (use main log level)

2) update session bytes upload/downloaded to handle >4gb
3) better handling of telnet iac codes during file transfers
4) allow settings to control password lengths and strengths, password expiry
5) add PBKDF2 encryption of user passwords
6) Improve caching of download directory contents
7) Improve cps calculations to handle faster transfers
8) add second page of options to account editor
9) add force password reset, account lockout and number of password failures to account editor screen
10) setting a password now requires the user to enter the password twice for verification

axenums.e

@@ -44,3 +44,5 @@ EXPORT ENUM SUBTYPE_ANYCMD=-1, SUBTYPE_CONFCMD=0, SUBTYPE_NODECMD=1, SUBTYPE_CMD
 -> User Keys Flags
    /* show new user message */       /* show all users only once */
 EXPORT ENUM USER_NEWMSG=1,USER_TOCONF1=2, USER_ONETIME_MSG=4,USER_SCRNCLR=8,USER_DONATED=16,USER_ED_FULLSCREEN=32,USER_ED_PROMPT=64,USER_BGFILECHECK=128
+
+EXPORT ENUM PWD_LEGACY=0, PWD_PBKDF2_5=1, PWD_PBKDF2_50=2, PWD_PBKDF2_100=3,PWD_PBKDF2_1000=4,PWD_PBKDF2_10000=5

axobjects.e

@@ -87,10 +87,14 @@ EXPORT OBJECT userMisc
   uploadBytesBCD[8]:ARRAY OF CHAR
   eMail[50]:ARRAY OF CHAR
   lastDlCPS:LONG
-  unused[142]:ARRAY OF CHAR
-  ->unknown[28]:ARRAY OF CHAR
-  ->nodeFlags[32]:ARRAY OF LONG
-  ->confFlags2[10]:ARRAY OF LONG
+  pwdHash[32]:ARRAY OF CHAR
+  salt[8]:ARRAY OF CHAR
+  pwdType:CHAR
+  forcePwdReset:CHAR
+  accountLocked:CHAR
+  invalidAttempts:CHAR
+  pwdLastUpdated:LONG     
+  unused[94]:ARRAY OF CHAR
 ENDOBJECT
 
 EXPORT OBJECT tempAccess