Allow oper only for ssl users

joschua · Post by **joschua** » Mon May 03, 2004 7:22 pm

Hi Guys
i wish, that opers only can get oper privileges if they are loged in as ssl user.

I tryed:

class           ssl_clients
{
        pingfreq 90;
        maxclients 9999;
        sendq 100000;
        recvq 8000;
};

allow {
        ip             *@*;
        hostname       *@*;
        class           ssl_clients;
        maxperip 2;
        options {
                ssl;
        };

};

oper joschua {
        class           ssl_clients;
....

But i can get oper rights as a non ssl user.
Is there any solution to do this?

Sorry for my terrible english!
Thanks!
Joschua

_MiF_ · Post by **_MiF_** » Mon May 03, 2004 8:37 pm

Just create another oper line, with :
class clients;

codemastr · Post by **codemastr** » Mon May 03, 2004 9:41 pm

Ignore what _MIF_ said, he's wrong.

Anyway, the class you specify in the oper block has nothing to do with what class the user is in, it has to do with the class the user will be *put in* when they /oper up.

The only way to require SSL would be to use the client cert authentication feature.

_MiF_ · Post by **_MiF_** » Mon May 03, 2004 9:43 pm

oops, sorry there.

Ron2K · Post by **Ron2K** » Tue May 04, 2004 6:29 am

You also might want to take a look at this:
http://unreal.phpmemx.net/forums/viewtopic.php?t=51