Hi Florian!
I took a quick glance at RFC 1459, but i couldnt find any specification of a maximum password length, so I bumped CLIENT_PASS_LEN to 17 in src/ngircd/defines.h . Is there a particular reason why it is restricted to 8? (Or why it was chosen in the first place?)
It has been choosen because I couldn't find a restriction in the RFCs either, and because UNIX passwords are historically limited to 8 characters. That's it. Not a strong reason ;-)
It should indeed be safe to raise this limit ...
Regards Alex