Page 1 of 1

Disable OP for all except few users

Posted: Mon Jun 15, 2015 1:49 pm
by Neubivljiv
Hello,

I am using UnrealIRCd 3.2.10.4 on Ubuntu server with kiwi irc client (temporary) and have some issues.
I could not set operators. Whatever I do, always first connected user gets Operator privileges.

This is my config example:

Code: Select all

oper Neubivljiv {
	class           clients;
	from {
		userhost Neubivljiv@Server_IP;
	};
	password "some_password";
	flags
	{
		netadmin;
		can_zline;
		can_gzline;
		can_gkline;
		global;
	};
};
What I want to achieve is that users can not automatically become operators on any channel. It is necessary to set only 2 or more moderators/operators with full privileges.
Is this possible?

Thanks in advance.

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 2:47 pm
by katsklaw
set::level-on-join <none|voice|halfop|op|protect|owner>;
The mode that a user will get when he's the first to join a channel. The default is 'op' (channel operator).

Code: Select all

set {
    level-on-join none;
};
You are also confusing IRCop status with ChanOp status. IRCops operate the IRC server and are not granted ChanOp status in any channels unless they are the first to join the channel.

ChanOps are non-privileged users that operate IRC channels. They are denoted by having a &, ~, or @ symbol in front of their nick.

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 3:59 pm
by Neubivljiv
@katsklaw,
thanks to the fast response.

Yes, it confused me, that the server operator is not the operator of the channel. :) However, I set level-on-join and it's fine.
Still I am unable to set ChanOp. Right now I am reading /docs and find the following:

Code: Select all

set::modes-on-oper <+modes>;
The modes that will be set on a user when they /oper.
So I tried to use the command:
/oper Neubivljiv password
which gives me the following:
You are now an IRC Operator
But I don't have any operator command. Also, I tried to set wrong password and it also gives me the following: You are now an IRC Operator

So basically I want to set global ChanOp with all commands, but without success. I'm probably missing something.
Also, other users can not use OP nicknames?

I plan to integrate the users of the website and forums with their names on the IRC server.

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 4:54 pm
by katsklaw
IRCops are not supposed to be ChanOps in all channels. That's not how IRC works. This is because, again, IRCops manager the SERVER, not CHANNELS.

IRCops: manage servers.
ChanOps: manage channels.

It is a common misconception that IRcops somehow "outrank" users or chanops. They do not! IRCop status allows for maintenance of the server and as a last resort, remove unruly users from the server or network. It is not within the IRCops privilege to babysit channels. the channel belongs to the chanops, even if it's on your server.

set::modes-on-oper sets USER modes, not CHANNEL modes.

There is no setting in Unreal that will allow you to gain ChanOps status just because you are an IRCop.

UPDATE: "Also, other users can not use OP nicknames?"

There is no such setting.

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 5:02 pm
by katsklaw
I edited my post since your last login, please re-read it.

Thanks.

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 5:35 pm
by Neubivljiv
Well, it was clear somewhat.
It is not necessary that the user be IRCop.
I simply can not set Channel Operator for specific user.
whatever I do get the message
You're not channel operator

Reading the documentation did not help, because does not say where (or how) to set the Channel Operator.
Although it may sound strange to me is absolutely illogical that's how it works: the server operator can not perform various operations on channels. It's like you're an IT administrator in some company, and you can not install and uninstall applications because other users using it, but only monitor (and maintain) the network. This is my view and maybe someone does not agree, but I think it makes sense.
But ok, it's not so important.
However, the problem is that now appears that the name is already taken (after restarting services). After that I get the following: "No O-lines for your host" when I try to use /oper command. Than again, I get the message the name is already taken.
It should be noted that I have not changed anything in config and now it appears that some login errors. It seems to me that I lost a lot of time :( . I'll try some servers to get acquainted with the various options offered, maybe might have more luck, although I like this server.

Thanks for your help and time spent (I might still try again later).

Regards,
Ivan

Re: Disable OP for all except few users

Posted: Mon Jun 15, 2015 6:21 pm
by katsklaw
Neubivljiv wrote: I simply can not set Channel Operator for specific user.
whatever I do get the message
You're not channel operator
This is because only ChanOps are supposed to allow/deny chanop status to other users in their respective channel.

Think of it this way, you rent an apartment, while you do not own the building, the manager/owner cannot legally just barge in all willy nilly whenever they feel like. the apartment is legally yours to occupy and the manager/owner has the legal obligation to stay out. this is how IRC is meant to be. You are the manager/owner of the network(building), not the channel(apartment).
It's like you're an IT administrator in some company, and you can not install and uninstall applications because other users using it, but only monitor (and maintain) the network. This is my view and maybe someone does not agree, but I think it makes sense.
This is a different scenario. In this example the company owns, manages, and maintains company owned equipment that the user doesn't have access or authority to do on their own.

----------------

I hope you understand now. If you run a public network allowing others to set-up channels, then you need to let them run their own channels. not let them create them and YOU run the channel.

If you are setting up a private network/server where users are not allowed to create their own channel and you don't want anyone running channels such as the latter, company, example then:

Code: Select all

/quote helpops ?samode
I say that with the warning that if you abuse /samode, you will not have any users, they will all go elsewhere.

Re: Disable OP for all except few users

Posted: Tue Jun 16, 2015 3:50 pm
by Neubivljiv
OK, some things are clear.

But I have to change the server. I personally wrote an IRC server in php (as a service), which supports MySQL, a huge number of connections, advanced options for operators (who is also the bot). Now works great, and will soon be released to the public.