help with removing ircop from system

niknak · Post by **niknak** » Sun Nov 21, 2004 8:24 am

somewone has managed to add ircops on my irc server using ADDLINE
is there a way to undo that without getting inside the linux and deleting those lines?

I also found that my ircop password dosen't work anymore and by doing /stats o i found that someone made 3 ircop useres with the same name

O *@* * ChatAdmin rDRhgwlcLkKbBnGAaNCzWHtZv clients
O *@* * ChatAdmin rDRhgwlcLkKbBnGAaNCzWHtZv clients
O *@* * ChatAdmin rDRhgwlcLkKbBnGAaNCzWHtZv clients

does doing that cause a problem with the password?
will the last password be the effective or none of the passwords will work.

so, if someone make an IrcOp user:
O *@* * lamerchat rDRhgwlcLkKbBnGAaNCzWHtZv clients
if i'll make another user called:
O *@* * lamerchat rDRhgwlcLkKbBnGAaNCzWHtZv clients

will he be able to log in using the old password?
will he be able to log in using the new password (in case he'll get it)
or he won't be able to log at all?

thanks for the help.

Dukat · Post by **Dukat** » Sun Nov 21, 2004 9:10 am

This is exactly why you shouldn't give ANYONE the "can_addline" flag. It's too dangerous.

You can't remove lines from your config file without connecting to the box. Where's the problem with that? SSH to your server and edit the unrealircd.conf file.
Remove the bad oper blocks.
Set all opers new passwords.
Remove the can_addline flag from all oper blocks.

I urge you to read http://www.vulnscan.org/UnrealIRCd/unre ... l#security

If you have more than one oper block with the same Login, the last one in the config file "wins".
You can only log in with the password specified in the last identical oper block. All other passwords will not work.

niknak · Post by **niknak** » Sun Nov 21, 2004 9:33 am

thank you.
well, though i'm the IrcOp I'm not the system admin, he installed the chat - and made me as his IrcOp.

I tried to use putty in order to connect to the box, but didn't managed to.
any other way to connect to ssh ? maybe via telnet?

b.t.w, I'm not the one who created this IrcOp useres, I just got it.

well, not criticle any more, just created more ircop identicle useres with my passwords, so he wont be able to do that again.

Dukat · Post by **Dukat** » Sun Nov 21, 2004 10:22 am

If you don't have a login on the server, you can't SSH to it... (I doubt you could telnet to it... telnet is disabled on most servers (for security reasons)).

Ask the server admin to clean up the unrealircd.conf file ASAP.

niknak · Post by **niknak** » Sun Nov 21, 2004 10:28 am

Thanks
I'll do it.

AngryWolf · Post by **AngryWolf** » Sun Nov 21, 2004 4:49 pm

and by doing /stats o i found that someone made 3 ircop useres with the same name

I know you were right, but just a note: it's not always true that if /stats o shows 3 oper logins with the same name, they all belong to different oper blocks. That's because /stats o displays each oper::from::userhost values on different lines. (That's the way it works.) See the following example:

Code: Select all

oper test
{
        class           opers;
        from            { userhost *; userhost *; userhost *; };
        password        "test";
        flags           { local; };
};

/stats oper
243 O * * test rhgwlckbBn opers
243 O * * test rhgwlckbBn opers
243 O * * test rhgwlckbBn opers

GouroB · Post by **GouroB** » Tue Nov 23, 2004 4:58 pm

Dukat wrote

This is exactly why you shouldn't give ANYONE the "can_addline" flag. It's too dangerous.

ummm is there any Flag called " Can_addline " ? i couldnt find that in the doc's ...

o local Makes you a local operator
O global Makes you a global operator
C coadmin Makes you a coadmin
A admin Makes you a admin
a services-admin Makes you a services admin
N netadmin Makes you a Network Admin
r can_rehash Oper may use /rehash
D can_die Oper may use /die
R can_restart Oper may use /restart
h helpop Oper receives umode +h (helpop)
w can_wallops Oper can send /wallops
g can_globops Oper can send /globops
c can_localroute Can connect servers locally
L can_globalroute Can connect servers globally
k can_localkill Can /kill local users
K can_globalkill Can /kill global users
b can_kline Can use /kline
B can_unkline Can use /kline -u@h
n can_localnotice Can send local server notices
G can_globalnotice Can send global server notices
z can_zline Can use /zline
t can_gkline Can use /gline
Z can_gzline Can use /gzline
W get_umodew Sets umode +W when u oper
H get_host Sets your host to an oper host
v can_override Can use OperOverride

And if this flag is available then what word should i use to add this in ma config file as i am using oper block in

" rDRhgwlcLkKbBnGAaNCzWHtZv " this style .......

Dukat · Post by **Dukat** » Tue Nov 23, 2004 5:14 pm

You're probably using an old version, then....
http://www.vulnscan.org/UnrealIRCd/unre ... #operblock

BTW, not that it matters, but... Don't you think the new oper flags system is more intuitive and easier to manage than this cryptic letters?