Page 1 of 1

Allow oper only for ssl users

Posted: Mon May 03, 2004 7:22 pm
by joschua
Hi Guys
i wish, that opers only can get oper privileges if they are loged in as ssl user.

I tryed:

Code: Select all

class           ssl_clients
{
        pingfreq 90;
        maxclients 9999;
        sendq 100000;
        recvq 8000;
};

allow {
        ip             *@*;
        hostname       *@*;
        class           ssl_clients;
        maxperip 2;
        options {
                ssl;
        };

};

oper joschua {
        class           ssl_clients;
....

But i can get oper rights as a non ssl user.
Is there any solution to do this?

Sorry for my terrible english!
Thanks!
Joschua

Posted: Mon May 03, 2004 8:37 pm
by _MiF_
Just create another oper line, with :
class clients;

Posted: Mon May 03, 2004 9:41 pm
by codemastr
Ignore what _MIF_ said, he's wrong.

Anyway, the class you specify in the oper block has nothing to do with what class the user is in, it has to do with the class the user will be *put in* when they /oper up.

The only way to require SSL would be to use the client cert authentication feature.

Posted: Mon May 03, 2004 9:43 pm
by _MiF_
oops, sorry there. :shock:

Posted: Tue May 04, 2004 6:29 am
by Ron2K
You also might want to take a look at this:
http://unreal.phpmemx.net/forums/viewtopic.php?t=51