Game account management tool, validated by a real SRP6 login

With the server console disabled, accounts are managed by a dedicated tool that computes the SRP6 salt and verifier exactly like the core. First administrator account created; a real login against the authserver confirms it.

Tool

Commands: create, password, gm, list.
The password is never passed as an argument or displayed: masked input, or read from standard input for automation.
Verifier: v = g^x mod N with x = SHA1(salt | SHA1(NAME:PASSWORD)), g = 7, little-endian integers, random 32-byte salt — identical to the core implementation.
3.3.5a client constraints: alphanumeric name up to 17 characters, password up to 16 characters.

Validation

A client script implements the 3.3.5a client authentication exchange (AUTH_LOGON_CHALLENGE then AUTH_LOGON_PROOF) against the authserver:

correct password: login accepted and server proof (M2) verified;
wrong password: rejected with code 4.

Account

One administrator account (level 3) was created to administer the realm.