Privileges question

These are old archives. They are kept for historic purposes only.
Post Reply
Seether
Posts: 3
Joined: Tue Mar 25, 2008 8:10 pm
Location: Italy

Privileges question

Post by Seether »

Hello, I have a (maybe) dumb question: when linking two servers, each of these will have a own config file, so if I own a network and I'm linking another server, what prevents this other server's owner to set privileges (e.g. netadmin) to users I wouldn't want to have?
Casper
Posts: 338
Joined: Sun Jul 08, 2007 7:44 am
Location: The Netherlands

Re: Privileges question

Post by Casper »

That's something you can't prevent. Anyway, if you link to another server/network you should have 100% trust in them. If they do give users an O:Line you don't want to be oper on your network, you can't trust them as there will be probably made agreements about that subject.
Ex Network-Administrator
Seether
Posts: 3
Joined: Tue Mar 25, 2008 8:10 pm
Location: Italy

Re: Privileges question

Post by Seether »

So in a network there is no "main server" which gives permission over "admin"... and any single server owner, or anyone he gives permission to, can be a netadmin too, right?
Jobe
Official supporter
Posts: 1180
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Re: Privileges question

Post by Jobe »

No there isn't. However it is possible, using services to prevent anyone /oper'ing on any server you dont want. Take Anope for example, you can use OperServ's noop command to make it impossible to /oper on a specified server without that server being restarted.
Your IP: Image
Your Country: Image
Seether
Posts: 3
Joined: Tue Mar 25, 2008 8:10 pm
Location: Italy

Re: Privileges question

Post by Seether »

This means a server admin could restart his own server and then /NOOP me too? This sounds weird :mrgreen:
Jobe
Official supporter
Posts: 1180
Joined: Wed May 03, 2006 7:09 pm
Location: United Kingdom

Re: Privileges question

Post by Jobe »

Seether wrote:This means a server admin could restart his own server and then /NOOP me too? This sounds weird :mrgreen:
No not /noop, they'd need services access to use OperServ NOOP, which of course you will have control over. You could then set up an eggdrop to monitor server notices for servers linking, and make the eggdrop do the OperServ noop on any server that links except servers you want.

As an additional level, OperServ's NOOP uses SVSNOOP which requires ulines for the server issuing it. So even if he linked his own services type server and used that to OperServ noop you, your server would ignore it since it you would not have his services ulined. (At which point you'd de link him anyway for even trying.
Your IP: Image
Your Country: Image
Post Reply