Page 1 of 1

Privileges question

Posted: Tue Mar 25, 2008 8:13 pm
by Seether
Hello, I have a (maybe) dumb question: when linking two servers, each of these will have a own config file, so if I own a network and I'm linking another server, what prevents this other server's owner to set privileges (e.g. netadmin) to users I wouldn't want to have?

Re: Privileges question

Posted: Tue Mar 25, 2008 8:30 pm
by Casper
That's something you can't prevent. Anyway, if you link to another server/network you should have 100% trust in them. If they do give users an O:Line you don't want to be oper on your network, you can't trust them as there will be probably made agreements about that subject.

Re: Privileges question

Posted: Tue Mar 25, 2008 8:33 pm
by Seether
So in a network there is no "main server" which gives permission over "admin"... and any single server owner, or anyone he gives permission to, can be a netadmin too, right?

Re: Privileges question

Posted: Tue Mar 25, 2008 9:58 pm
by Jobe
No there isn't. However it is possible, using services to prevent anyone /oper'ing on any server you dont want. Take Anope for example, you can use OperServ's noop command to make it impossible to /oper on a specified server without that server being restarted.

Re: Privileges question

Posted: Tue Mar 25, 2008 11:50 pm
by Seether
This means a server admin could restart his own server and then /NOOP me too? This sounds weird :mrgreen:

Re: Privileges question

Posted: Wed Mar 26, 2008 1:05 pm
by Jobe
Seether wrote:This means a server admin could restart his own server and then /NOOP me too? This sounds weird :mrgreen:
No not /noop, they'd need services access to use OperServ NOOP, which of course you will have control over. You could then set up an eggdrop to monitor server notices for servers linking, and make the eggdrop do the OperServ noop on any server that links except servers you want.

As an additional level, OperServ's NOOP uses SVSNOOP which requires ulines for the server issuing it. So even if he linked his own services type server and used that to OperServ noop you, your server would ignore it since it you would not have his services ulined. (At which point you'd de link him anyway for even trying.