Services Admin: Permission Denied (??)

Fussi · Post by **Fussi** » Tue May 03, 2005 2:38 pm

Hi again...

i have a.. uhm.. strange problem with the services admin flag.
In the serverconfig, there are 5 oper accounts. (With maxlogin 1)
One account (mine) has the flags:

Code: Select all

admin;
can_die;
can_restart;
can_gzline;
can_gkline;
can_zline;
get_host;
can_override;

3 have these flags:

Code: Select all

global;
can_override;

and the last 2:

Code: Select all

services-admin;
can_gzline;
can_gkline;
can_zline;
get_host;
can_override;

Now my problem:

My 2 service admins do the /oper thing, it says "You are now an IRC Operator", the other opers see "..... is now a services administrator (a)", BUT, the 'a' isnt set. If they do
"/mode <own nick>", it says something like "+iowghrsx". eg: They cant use the /sa commands.

Can anybody help me with this?

btw, i'm using unreal 3.2.1 and ircservices 5.0.48

Dukat · Post by **Dukat** » Tue May 03, 2005 4:44 pm

That's a stupid "feature" of ircservices: It will remove the services-admin flag from an oper if she's not also a services-admin in operserv... Kinda annoying...
You have to add these two users to the operserv services-admin list, then it might work...

btw: You should upgrade to the latest version of Unreal IRCD

katsklaw · Post by **katsklaw** » Tue May 03, 2005 5:47 pm

Anope does it too. It's not exactlly stupid though. I think it's required to help keep Server Admins honest.

Lets face it .. there is a difference between a Services admin and a Server Admin. Being a Server Admin doesn't give you access to Services. If SRA's don't want a Server Admin to be a Services Admin I think they should have the power to deny it. The main problem I had is new Server Admins would make themselves Net Admins in their conf and I would have de-link them because of it. If Services could stop that as well I'd applaud happily.

Before anyone says "trust your opers/admin" I'm well aware of the trust thing. However, trust can be betrayed at anytime. At least with Services keeping the access at the correct levels and denying unathorized access, I sleep better at night.

Winbots · Post by **Winbots** » Wed May 04, 2005 2:37 am

katsklaw wrote:The main problem I had is new Server Admins would make themselves Net Admins in their conf and I would have de-link them because of it. If Services could stop that as well I'd applaud happily.

KickChat Services (the ones i use) have that feature, only SRA can have Netadmin... and I think I saw an anope module to do the same...

Fussi · Post by **Fussi** » Wed May 04, 2005 4:42 am

Allright, makes sense...
Ok, will try that today, thanks for your help!