]> jfr.im git - irc/rqf/shadowircd.git/blobdiff - src/s_user.c
Document need_ssl flags in example.conf.
[irc/rqf/shadowircd.git] / src / s_user.c
index 2d189ce6416c97889be4609c20f7a491e3e67b4b..7405256056137ce3395e41e0ada61ce0bc85eea5 100644 (file)
@@ -31,8 +31,7 @@
 #include "client.h"
 #include "common.h"
 #include "hash.h"
-#include "irc_string.h"
-#include "sprintf_irc.h"
+#include "match.h"
 #include "ircd.h"
 #include "listener.h"
 #include "msg.h"
 #include "snomask.h"
 #include "blacklist.h"
 #include "substitution.h"
+#include "chmode.h"
 
 static void report_and_set_user_flags(struct Client *, struct ConfItem *);
 void user_welcome(struct Client *source_p);
 
-extern char *crypt();
-
 char umodebuf[128];
 
 static int orphaned_umodes = 0;
@@ -293,7 +291,7 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
                char note[NICKLEN + 10];
 
                del_from_client_hash(source_p->name, source_p);
-               strlcpy(source_p->name, source_p->preClient->spoofnick, NICKLEN + 1);
+               rb_strlcpy(source_p->name, source_p->preClient->spoofnick, NICKLEN + 1);
                add_to_client_hash(source_p->name, source_p);
 
                rb_snprintf(note, NICKLEN + 10, "Nick: %s", source_p->name);
@@ -304,7 +302,7 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
        {
                sendto_one_notice(source_p, ":*** Notice -- You have an illegal character in your hostname");
 
-               strlcpy(source_p->host, source_p->sockhost, sizeof(source_p->host));
+               rb_strlcpy(source_p->host, source_p->sockhost, sizeof(source_p->host));
        }
  
 
@@ -316,6 +314,14 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
                return (CLIENT_EXITED);
        }
 
+       if(IsConfSSLNeeded(aconf) && !IsSSL(source_p))
+       {
+               ServerStats.is_ref++;
+               sendto_one_notice(source_p, ":*** Notice -- You need to use SSL/TLS to use this server");
+               exit_client(client_p, source_p, &me, "Use SSL/TLS");
+               return (CLIENT_EXITED);
+       }
+
        if(!IsGotId(source_p))
        {
                const char *p;
@@ -364,7 +370,7 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
                if(EmptyString(source_p->localClient->passwd))
                        encr = "";
                else if(IsConfEncrypted(aconf))
-                       encr = crypt(source_p->localClient->passwd, aconf->passwd);
+                       encr = rb_crypt(source_p->localClient->passwd, aconf->passwd);
                else
                        encr = source_p->localClient->passwd;
 
@@ -470,14 +476,14 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
        /* end of valid user name check */
 
        /* Store original hostname -- jilles */
-       strlcpy(source_p->orighost, source_p->host, HOSTLEN + 1);
+       rb_strlcpy(source_p->orighost, source_p->host, HOSTLEN + 1);
 
        /* Spoof user@host */
        if(*source_p->preClient->spoofuser)
-               strlcpy(source_p->username, source_p->preClient->spoofuser, USERLEN + 1);
+               rb_strlcpy(source_p->username, source_p->preClient->spoofuser, USERLEN + 1);
        if(*source_p->preClient->spoofhost)
        {
-               strlcpy(source_p->host, source_p->preClient->spoofhost, HOSTLEN + 1);
+               rb_strlcpy(source_p->host, source_p->preClient->spoofhost, HOSTLEN + 1);
                if (irccmp(source_p->host, source_p->orighost))
                        SetDynSpoof(source_p);
        }
@@ -494,7 +500,7 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
        /* To avoid inconsistencies, do not abort the registration
         * starting from this point -- jilles
         */
-       inetntop_sock((struct sockaddr *)&source_p->localClient->ip, ipaddr, sizeof(ipaddr));
+       rb_inet_ntop_sock((struct sockaddr *)&source_p->localClient->ip, ipaddr, sizeof(ipaddr));
 
        sendto_realops_snomask(SNO_CCONN, L_ALL,
                             "Client connecting: %s (%s@%s) [%s] {%s} [%s]",
@@ -529,7 +535,6 @@ register_local_user(struct Client *client_p, struct Client *source_p, const char
                Count.invisi++;
 
        s_assert(!IsClient(source_p));
-       del_unknown_ip(source_p);
        rb_dlinkMoveNode(&source_p->localClient->tnode, &unknown_list, &lclient_list);
        SetClient(source_p);
 
@@ -583,6 +588,7 @@ introduce_client(struct Client *client_p, struct Client *source_p, struct User *
        char *p;
        hook_data_umode_changed hdata;
        hook_data_client hdata2;
+       char sockhost[HOSTLEN];
 
        if(MyClient(source_p))
                send_umode(source_p, source_p, 0, 0, ubuf);
@@ -595,70 +601,48 @@ introduce_client(struct Client *client_p, struct Client *source_p, struct User *
                ubuf[1] = '\0';
        }
 
-       /* if it has an ID, introduce it with its id to TS6 servers,
-        * otherwise introduce it normally to all.
-        */
-       if(has_id(source_p))
+       s_assert(has_id(source_p));
+
+       if(source_p->sockhost[0] == ':')
        {
-               char sockhost[HOSTLEN];
-               if(source_p->sockhost[0] == ':')
-               {
-                       sockhost[0] = '0';
-                       sockhost[1] = '\0';
-                       strlcat(sockhost, source_p->sockhost, sizeof(sockhost));
-               } else
-                       strcpy(sockhost, source_p->sockhost);
+               sockhost[0] = '0';
+               sockhost[1] = '\0';
+               rb_strlcat(sockhost, source_p->sockhost, sizeof(sockhost));
+       } else
+               strcpy(sockhost, source_p->sockhost);
                
-               if (use_euid)
-                       sendto_server(client_p, NULL, CAP_EUID | CAP_TS6, NOCAPS,
-                                       ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s",
-                                       source_p->servptr->id, nick,
-                                       source_p->hopcount + 1,
-                                       (long) source_p->tsinfo, ubuf,
-                                       source_p->username, source_p->host,
-                                       IsIPSpoof(source_p) ? "0" : sockhost,
-                                       source_p->id,
-                                       IsDynSpoof(source_p) ? source_p->orighost : "*",
-                                       EmptyString(source_p->user->suser) ? "*" : source_p->user->suser,
-                                       source_p->info);
-
-               sendto_server(client_p, NULL, CAP_TS6, use_euid ? CAP_EUID : NOCAPS,
-                             ":%s UID %s %d %ld %s %s %s %s %s :%s",
-                             source_p->servptr->id, nick,
-                             source_p->hopcount + 1,
-                             (long) source_p->tsinfo, ubuf,
-                             source_p->username, source_p->host,
-                             IsIPSpoof(source_p) ? "0" : sockhost,
-                             source_p->id, source_p->info);
-
-               sendto_server(client_p, NULL, NOCAPS, CAP_TS6,
-                             "NICK %s %d %ld %s %s %s %s :%s",
-                             nick, source_p->hopcount + 1,
-                             (long) source_p->tsinfo,
-                             ubuf, source_p->username, source_p->host,
-                             source_p->servptr->name, source_p->info);
-       }
-       else
-               sendto_server(client_p, NULL, NOCAPS, NOCAPS,
-                             "NICK %s %d %ld %s %s %s %s :%s",
-                             nick, source_p->hopcount + 1,
-                             (long) source_p->tsinfo,
-                             ubuf, source_p->username, source_p->host,
-                             source_p->servptr->name, source_p->info);
+       if (use_euid)
+               sendto_server(client_p, NULL, CAP_EUID | CAP_TS6, NOCAPS,
+                               ":%s EUID %s %d %ld %s %s %s %s %s %s %s :%s",
+                               source_p->servptr->id, nick,
+                               source_p->hopcount + 1,
+                               (long) source_p->tsinfo, ubuf,
+                               source_p->username, source_p->host,
+                               IsIPSpoof(source_p) ? "0" : sockhost,
+                               source_p->id,
+                               IsDynSpoof(source_p) ? source_p->orighost : "*",
+                               EmptyString(source_p->user->suser) ? "*" : source_p->user->suser,
+                               source_p->info);
+
+       sendto_server(client_p, NULL, CAP_TS6, use_euid ? CAP_EUID : NOCAPS,
+                     ":%s UID %s %d %ld %s %s %s %s %s :%s",
+                     source_p->servptr->id, nick,
+                     source_p->hopcount + 1,
+                     (long) source_p->tsinfo, ubuf,
+                     source_p->username, source_p->host,
+                     IsIPSpoof(source_p) ? "0" : sockhost,
+                     source_p->id, source_p->info);
 
        if (IsDynSpoof(source_p))
        {
                sendto_server(client_p, NULL, CAP_TS6, use_euid ? CAP_EUID : NOCAPS, ":%s ENCAP * REALHOST %s",
                                use_id(source_p), source_p->orighost);
-               sendto_server(client_p, NULL, NOCAPS, CAP_TS6, ":%s ENCAP * REALHOST %s",
-                               source_p->name, source_p->orighost);
        }
+
        if (!EmptyString(source_p->user->suser))
        {
                sendto_server(client_p, NULL, CAP_TS6, use_euid ? CAP_EUID : NOCAPS, ":%s ENCAP * LOGIN %s",
                                use_id(source_p), source_p->user->suser);
-               sendto_server(client_p, NULL, NOCAPS, CAP_TS6, ":%s ENCAP * LOGIN %s",
-                               source_p->name, source_p->user->suser);
        }
 
        if(MyConnect(source_p) && source_p->localClient->passwd)
@@ -673,11 +657,21 @@ introduce_client(struct Client *client_p, struct Client *source_p, struct User *
                        else
                                identifyservice_p = NULL;
                        if (identifyservice_p != NULL)
-                               sendto_one(identifyservice_p, ":%s PRIVMSG %s :%s %s",
-                                               get_id(source_p, identifyservice_p),
-                                               ConfigFileEntry.identifyservice,
-                                               ConfigFileEntry.identifycommand,
-                                               source_p->localClient->passwd);
+                       {
+                               if (!EmptyString(source_p->localClient->auth_user))
+                                       sendto_one(identifyservice_p, ":%s PRIVMSG %s :%s %s %s",
+                                                       get_id(source_p, identifyservice_p),
+                                                       ConfigFileEntry.identifyservice,
+                                                       ConfigFileEntry.identifycommand,
+                                                       source_p->localClient->auth_user,
+                                                       source_p->localClient->passwd);
+                               else
+                                       sendto_one(identifyservice_p, ":%s PRIVMSG %s :%s %s",
+                                                       get_id(source_p, identifyservice_p),
+                                                       ConfigFileEntry.identifyservice,
+                                                       ConfigFileEntry.identifycommand,
+                                                       source_p->localClient->passwd);
+                       }
                }
                memset(source_p->localClient->passwd, 0, strlen(source_p->localClient->passwd));
                rb_free(source_p->localClient->passwd);
@@ -989,6 +983,8 @@ user_mode(struct Client *client_p, struct Client *source_p, int parc, const char
                                        source_p->localClient->opername = NULL;
 
                                        rb_dlinkFindDestroy(source_p, &local_oper_list);
+                                       privilegeset_unref(source_p->localClient->privset);
+                                       source_p->localClient->privset = NULL;
                                }
 
                                rb_dlinkFindDestroy(source_p, &oper_list);
@@ -1209,7 +1205,7 @@ user_welcome(struct Client *source_p)
        sendto_one_numeric(source_p, RPL_YOURHOST, form_str(RPL_YOURHOST),
                   get_listener_name(source_p->localClient->listener), ircd_version);
        sendto_one_numeric(source_p, RPL_CREATED, form_str(RPL_CREATED), creation);
-       sendto_one_numeric(source_p, RPL_MYINFO, form_str(RPL_MYINFO), me.name, ircd_version, umodebuf);
+       sendto_one_numeric(source_p, RPL_MYINFO, form_str(RPL_MYINFO), me.name, ircd_version, umodebuf, cflagsmyinfo);
 
        show_isupport(source_p);
 
@@ -1274,6 +1270,7 @@ oper_up(struct Client *source_p, struct oper_conf *oper_p)
 
        source_p->flags2 |= oper_p->flags;
        source_p->localClient->opername = rb_strdup(oper_p->name);
+       source_p->localClient->privset = privilegeset_ref(oper_p->privset);
 
        rb_dlinkAddAlloc(source_p, &local_oper_list);
        rb_dlinkAddAlloc(source_p, &oper_list);
@@ -1300,7 +1297,8 @@ oper_up(struct Client *source_p, struct oper_conf *oper_p)
        sendto_one_numeric(source_p, RPL_SNOMASK, form_str(RPL_SNOMASK),
                   construct_snobuf(source_p->snomask));
        sendto_one(source_p, form_str(RPL_YOUREOPER), me.name, source_p->name);
-       sendto_one_notice(source_p, ":*** Oper privs are %s", get_oper_privs(oper_p->flags));
+       sendto_one_notice(source_p, ":*** Oper privilege set is %s", oper_p->privset->name);
+       sendto_one_notice(source_p, ":*** Oper privs are %s", oper_p->privset->privs);
        send_oper_motd(source_p);
 
        return (1);
@@ -1437,14 +1435,14 @@ change_nick_user_host(struct Client *target_p,  const char *nick, const char *use
                                target_p->host, nick);
        }
 
-       strlcpy(target_p->username, user, sizeof target_p->username);
-       strlcpy(target_p->host, host, sizeof target_p->host);
+       rb_strlcpy(target_p->username, user, sizeof target_p->username);
+       rb_strlcpy(target_p->host, host, sizeof target_p->host);
 
        if (changed)
                add_history(target_p, 1);
 
        del_from_client_hash(target_p->name, target_p);
-       strlcpy(target_p->name, nick, NICKLEN);
+       rb_strlcpy(target_p->name, nick, NICKLEN);
        add_to_client_hash(target_p->name, target_p);
 
        if(changed)