- ngIRCd Users - lists.barton.de

ngIRCd 21.1
by Alexander Barton 07 Mai '14

07 Mai '14

Hi all! Today I released ngIRCd 21.1, a bug-fix only release for ngIRCd 21. This release doesn't contain new features, but fixes a few "glitches" in ngIRCd 21 that have been reported over the past few months. The NEWS file lists the following: • Don't ignore but use the server password when PAM is compiled in but disabled. Thanks to Roy Sindre Norangshol <roy.sindre(a)norangshol.no>! • doc/Platforms.txt: Update from master branch. • doc/Services.txt: Update information for Anope 2.x. • configure: add support for the LDFLAGS_END and LIBS_END variables to add linker flags and libraries at the end of the configure run (CFLAGS_END has been implemented already). • Update Copyright notices for 2014 :-) There are no security fixes included, nevertheless all installations should update: ngIRCd 21.1 is fully backwards compatible and the update should be straight forward, no configuration changes are required. You can find the NEWS file (listing all new and changed features) and the ChangeLog file (listing all changes in greater detail) in the distribution archives as well as online: • <http://ngircd.barton.de/doc/NEWS> • <http://ngircd.barton.de/doc/ChangeLog> And even more information can be found here: • Homepage: <http://ngircd.barton.de/> (<http://ngircd.mirror.3rz.org>) • Bug tracker: <http://ngircd.barton.de/bugzilla/> • Downloads: • HTTP 1: <http://ngircd.barton.de/pub/ngircd/> • HTTP 2: <http://ngircd.mirror.3rz.org/pub/ngircd/> Please note: The BerliOS platform is shutting down, so our BerliOS mirror site will become unavailable and all old links to BerliOS will become unreachable! (see <http://developer.berlios.de/forum/forum.php?forum_id=39220>) But don't worry too much, ngIRCd already gained a new mirror site, located at <http://ngircd.mirror.3rz.org>, provided by Götz Hoffart. Thanks a lot! And as usual, a big thanks to all users, bug reporters, contributors, packagers, and supporters! Regards Alex

3 3

ngIRCd 21.1 on OpenBSD 5.5 / SPARC
by Götz Hoffart 05 Mai '14

05 Mai '14

the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - sparc/unknown/openbsd5.5 gcc 4.2.1 21.1 14-05-03 goetz Y Y Y Y 3 # uname -a OpenBSD qsun.3rz.org 5.5 GENERIC#85 sparc

2 1

message storaging time
by Иван Дементьев 22 Apr '14

22 Apr '14

Hi! I use ngircd under uLinux working on bfin537. And my question is - how long does ngircd storage messages from one user to another if another user has lost connection for a long time (minute / hour / day)? I tried to find the answer in source code, but unfortunately I have not enough expirience in C-programming. So my search stuck in <Conn_Handler(void)> in <conn.c> file. So, how long? :) -- Ivan Dementev

2 1

ngIRCd 21.1 on …
by Götz Hoffart 18 Apr '14

18 Apr '14

the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - i386/unknown/netbsdelf1.5.2 egcs-1.1.2 21.1 14-03-29 root Y Y N Y # uname -a NetBSD 1.5.2 NetBSD 1.5.2 (GENERIC) #3: Sat Aug 18 23:37:05 CEST 2001 he@hamster.urc.uninett.no:/usr/src/sys/arch/i386/compile/GENERIC i386 the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - powerpc/apple/darwin7.9.0 gcc 3.3 21.1 14-04-14 goetz Y Y Y Y 3 jadzia:~/ goetz$ uname -a Darwin jadzia.local 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc jadzia:~/ goetz$ sw_vers ProductName: Mac OS X ProductVersion: 10.3.9 BuildVersion: 7W98

1 0

Proposed patch for COMMAND_LEN "Request too long" disconnect
by lists＠packetmail.net 14 Apr '14

14 Apr '14

Hi, First and foremost, I am not proficient with C. The below patch addresses the forceful disconnect of clients who may paste or compose more data than COMMAND_LEN in ngircd-21.1. RFC 2812 states "IRC messages are always lines of characters terminated with a CR-LF (Carriage Return - Line Feed) pair, and these messages SHALL NOT exceed 512 characters in length, counting all characters including the trailing CR-LF." The below trivial patch avoids client termination. ngricd will already truncate messages at COMMAND_LEN and insert [CUT] into them indicating they have been truncated by the daemon. This patch eliminates some client frustrations when running an RFC-compliant IRCd. I appreciate the insight and wisdom of others regarding this patch. If I unleashed the kracken with this horrible patch I apologize in advance, it's highly likely I've done something wrong with the below :) Cheers, Nathan Fowler --- ./src/ngircd/conn.c 2014-03-18 20:36:34.000000000 -0500 +++ ./src/ngircd/conn.c 2014-04-14 13:33:10.000000000 -0500 @@ -1948,8 +1948,17 @@ "Request too long (connection %d): %d bytes (max. %d expected)!", Idx, array_bytes(&My_Connections[Idx].rbuf), COMMAND_LEN - 1); - Conn_Close(Idx, NULL, "Request too long", true); - return 0; + /* Conn_Close(Idx, NULL, "Request too long", true); */ + Conn_WriteStr( Idx, + ":%s NOTICE %s :%sRequest too long, %d bytes (max. %d expected)!", + Client_ID(Client_ThisServer()), Client_ID(c), + NOTICE_TXTPREFIX, + array_bytes(&My_Connections[Idx].rbuf), + COMMAND_LEN - 1); + + array_trunc(&My_Connections[Idx].rbuf); + + /* return 0; */ } len_processed += (unsigned int)len;

1 0

Ngircd shutting down constantly by client?
by Michiel van Es 30 Mär '14

30 Mär '14

Hello, I am running Ngircd 21 on CentOS 6.5 64 bit. I compiled Ngircd from source with OpenSSL and PAM to provide the CIA triad (Confidentiality, Integrity and Authentication). I store my passwords with htpassword with crypt and a salt (crypt() alone is not safe enough). I have noticed that my Ngircd daemon shuts down whenever a client or an ip makes a connection to my port and sends a bogus SSL handshake: Mar 29 03:42:06 mail ngircd[29098]: Accepted connection 8 from "222.151.83.101:6728" on socket 7. Mar 29 03:42:06 mail ngircd[29098]: SSL protocol error: SSL_accept (error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol) Mar 29 03:42:06 mail ngircd[29098]: Shutting down connection 8 (SSL accept error, closing socket) with "222.151.83.101:6728" ... Mar 29 03:42:06 mail ngircd[29098]: Client unregistered (connection 8): SSL accept error, closing socket. Mar 29 03:42:06 mail ngircd[29098]: Connection 8 with "222.151.83.101:6728" closed (in: 0.0k, out: 0.0k). Mar 29 03:43:06 mail ngircd[29098]: Server going down NOW! Mar 29 03:43:06 mail ngircd[29098]: Shutting down all listening sockets (1 total) ... Mar 29 03:43:06 mail ngircd[29098]: ngIRCd done, served 1 connection. I automatically restart the Ngircd daemon with a check script but directly after it gets hit again: Mar 29 03:44:01 mail ngircd[29168]: ngIRCd 21-IRCPLUS+PAM+SSL+SYSLOG+ZLIB-x86_64/unknown/linux-gnu started. Mar 29 03:44:01 mail ngircd[29168]: Using configuration file "/usr/local/etc/ngircd.conf" ... Mar 29 03:44:01 mail ngircd[29168]: Configuration option "DHFile" not set! Mar 29 03:44:01 mail ngircd[29168]: OpenSSL 1.0.1e-fips 11 Feb 2013 initialized. Mar 29 03:44:01 mail ngircd[29169]: Running as user ngircd(494), group ngircd(495), with PID 29169. Mar 29 03:44:01 mail ngircd[29169]: Not running with changed root directory. Mar 29 03:44:01 mail ngircd[29169]: IO subsystem: epoll (hint size 100, initial maxfd 100, masterfd 4). Mar 29 03:44:01 mail ngircd[29169]: Created pre-defined channel "#pragmasec". Mar 29 03:44:01 mail ngircd[29169]: Created pre-defined channel "#prive". Mar 29 03:44:01 mail ngircd[29169]: Now listening on [0.0.0.0]:6667 (socket 7). Mar 29 03:44:23 mail ngircd[29169]: Accepted connection 8 from "222.151.83.101:62835" on socket 7. Mar 29 03:44:23 mail ngircd[29169]: SSL protocol error: SSL_accept (error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol) Mar 29 03:44:23 mail ngircd[29169]: Shutting down connection 8 (SSL accept error, closing socket) with "222.151.83.101:62835" ... Mar 29 03:44:23 mail ngircd[29169]: Client unregistered (connection 8): SSL accept error, closing socket. Mar 29 03:44:23 mail ngircd[29169]: Connection 8 with "222.151.83.101:62835" closed (in: 0.0k, out: 0.0k). Mar 29 03:45:23 mail ngircd[29169]: Server going down NOW! Mar 29 03:45:23 mail ngircd[29169]: Shutting down all listening sockets (1 total) ... Mar 29 03:45:23 mail ngircd[29169]: ngIRCd done, served 1 connection. This continues all during the night and I notice that the connection is coming from Japan (if the IP is not spoofed or a Tor endpoint): [user@mail ~]$ host 222.151.83.101 101.83.151.222.in-addr.arpa domain name pointer 222-151-083-101.jp.fiberbit.net. I can offcourse block the ip but it seems Ngircd can not withstand the strange SSL connection from the client and shuts itself down. My config is here: http://www.pragmasec.nl/ngircd.txt (its also a manual how to setup Ngircd + SSL + PAM with hashed+salted passwords - something I think a lot of users are looking for who are wanting PAM auth) How can I fix this? Is it Ngircd related or related to my config? THanks for any tips or help. Regards, Michiel

3 5

ngIRCd 21.1 on OS X 10.9.2, llvm/clang
by Götz Hoffart 27 Mär '14

27 Mär '14

the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - x86_64/apple/darwin13.1.0 A-clang 5.1 21.1 14-03-27 gh Y Y Y Y 3 G’Night, Götz

1 0

ngIRCd 21.1 on … Open64, Solaris Studio, tcc
by Götz Hoffart 27 Mär '14

27 Mär '14

the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - x86_64/unknown/linux-gnu Open64 21.1 14-03-27 goetz Y Y Y Y 1 the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - x86_64/unknown/linux-gnu unknown 21.1 14-03-27 goetz Y Y Y Y 1 (Solaris Studio 12.3, 'cc') the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - x86_64/unknown/linux-gnu tcc 0.9.25 21.1 14-03-27 goetz Y Y Y Y 1 Grüße Götz

1 0

ngIRCd 21 still running fine on PowerPC 750, OS X 10.3.9
by Götz Hoffart 13 Jan '14

13 Jan '14

iBook G3/800: jadzia:~/ngircd-21 goetz$ sw_vers ProductName: Mac OS X ProductVersion: 10.3.9 BuildVersion: 7W98 jadzia:~/ngircd-21 goetz$ uname -a Darwin jadzia.local 7.9.0 Darwin Kernel Version 7.9.0: Wed Mar 30 20:11:17 PST 2005; root:xnu/xnu-517.12.7.obj~1/RELEASE_PPC Power Macintosh powerpc jadzia:~/ngircd-21 goetz$ gcc --version gcc (GCC) 3.3 20030304 (Apple Computer, Inc. build 1671) [] ngIRCd 21 has been configured with the following options: Host: powerpc-apple-darwin7.9.0 Compiler: gcc -std=gnu99 Compiler flags: -g -O2 -pipe -W -Wall -Wpointer-arith -Wstrict-prototypes -DSYSCONFDIR='"$(sysconfdir)"' -DDOCDIR='"$(docdir)"' Libraries: -lz 'ngircd' binary: /usr/local/sbin Configuration file: /usr/local/etc Manual pages: /usr/local/share/man Documentation: /usr/local/share/doc/ngircd Syslog support: yes Enable debug code: no zlib compression: yes IRC sniffer: no Use TCP Wrappers: no Strict RFC mode: no IDENT support: no IRC+ protocol: yes IPv6 protocol: no I/O backend: kqueue() PAM support: no SSL support: no libiconv support: no the executable works ("runs") as expected --+ tests run successfully ("make check") --+ | ngIRCd compiles ("make") --+ | | ./configure works --+ | | | | | | | Platform Compiler ngIRCd Date Tester C M T R * --------------------------- ------------ ---------- -------- -------- - - - - - powerpc/apple/darwin7.9.0 gcc 3.3 21 14-01-11 goetz Y Y Y Y 3

2 1

ngircd runs well but generates an error when run as a service
by John Bleichert 12 Jan '14

12 Jan '14

Hello, I am running ngircd on Debian stable. It is SSL enabled via Gnu_TLS and runs fine when run from the command line. However, attempting to start the server with service ngircd start or /etc/init.d/ngircd start generates an SSL error (see below). Any suggestions on how to get more debug data? I installed it as a binary package. Note that I have been running ngircd for years on FreeBSD (thanks!) but am new to running this on Debian. Note also that I am only running an SSL server at the moment, not a “plain” one. Error output is below. Should I take this up with the package maintainer? Thanks! John service ngircd start: Jan 11 13:59:18 boogie ngircd[9566]: ngircd 19.2-SYSLOG+ZLIB+SSL+IRCPLUS+IPv6-x86_64/pc/linux-gnu started. Jan 11 13:59:18 boogie ngircd[9566]: Using configuration file "/etc/ngircd/ngircd.conf" ... Jan 11 13:59:18 boogie ngircd[9566]: Warning: Error during SSL initialization, continuing ... Jan 11 13:59:18 boogie ngircd[9567]: Running as user irc(39), group irc(39), with PID 9567. Jan 11 13:59:18 boogie ngircd[9567]: Not running with changed root directory. Jan 11 13:59:18 boogie ngircd[9567]: IO subsystem: epoll (hint size 100, initial maxfd 100, masterfd 4). Jan 11 13:59:18 boogie ngircd[9567]: Created pre-defined channel "#syborg" Jan 11 13:59:18 boogie ngircd[9567]: Now listening on [192.168.1.120]:2431 (socket 8). command line: Jan 11 14:00:29 boogie ngircd[9714]: ngircd 19.2-SYSLOG+ZLIB+SSL+IRCPLUS+IPv6-x86_64/pc/linux-gnu started. Jan 11 14:00:29 boogie ngircd[9714]: Using configuration file "/etc/ngircd/ngircd.conf" ... Jan 11 14:00:29 boogie ngircd[9714]: gnutls 2.12.20 initialized. Jan 11 14:00:29 boogie ngircd[9715]: Running as user irc(39), group irc(39), with PID 9715. Jan 11 14:00:29 boogie ngircd[9715]: Not running with changed root directory. Jan 11 14:00:29 boogie ngircd[9715]: IO subsystem: epoll (hint size 100, initial maxfd 100, masterfd 4). Jan 11 14:00:29 boogie ngircd[9715]: Created pre-defined channel "#syborg" Jan 11 14:00:29 boogie ngircd[9715]: Now listening on [192.168.1.120]:2431 (socket 8). ------------------------------------------------------------------------------ John Bleichert - syborg(a)earthlink.net The heat from below can burn your eyes out!

3 3