| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-08-18 | write_whoreply(): respect hostname cloaking | Alexander Barton | |
| 2010-08-17 | IRC_USERHOST(): respect hostname cloaking | Alexander Barton | |
| 2010-08-17 | IRC_USERHOST(): Code cleanup & some documentation | Alexander Barton | |
| 2010-08-17 | Send_Message(): respect hostname cloaking | Alexander Barton | |
| 2010-08-17 | IRC_WriteStrClientPrefix() / Get_Prefix(): respect hostname cloaking | Alexander Barton | |
| 2010-08-17 | Refactor IRC_WriteStr{Channel|Related}Prefix(); support cloaking | Alexander Barton | |
| Move common code to new local function Send_Marked_Connections() and respect hostname cloaking. | |||
| 2010-08-17 | Implement user mode "x": hostname cloaking (closes: #102) | Alexander Barton | |
| When a client has user mode "x" set, its real hostname is cloaked by substituting it with the server name (as configured in ngircd.conf). Restricted clients (user mode "r") aren't allowed to change mode "x". Please note that hostname cloaking is only in effect in server-client communication! The server still uses the real hostname for its own logging and for all server-server communication -- therefore all servers in the network must support user mode "x" to prevent older servers from leaking the real hostname of a cloaked client! | |||
| 2010-08-17 | WHOWAS: respect hostname cloaking | Alexander Barton | |
| Store cloaked hostname if user mode "x" is set when the client disconnects from the server. | |||
| 2010-08-17 | WHOIS: respect hostname cloaking | Alexander Barton | |
| 2010-08-17 | Implement Client_HostnameCloaked() and Client_MaskCloaked() | Alexander Barton | |
| These two functions return the cloaked hostname, if the client has enabled hostname cloaking indicated by the -- still to implement -- user mode "x". See furter patches :-) | |||
| 2010-08-17 | Clean up an document Client_Hostname() and Client_Mask() | Alexander Barton | |
| 2010-08-17 | Make configure switch "--docdir" work (closes: #108) | Alexander Barton | |
| 2010-08-13 | Reformat and update FAQ.txt a little bit | Alexander Barton | |
| 2010-08-12 | INSTALL: mention SSL and IPv6 | Florian Westphal | |
| 2010-08-12 | INSTALL: mention changed handling of MotdFile. | Florian Westphal | |
| 2010-08-12 | ngircd: change MOTD file handling | Florian Westphal | |
| previously, the given MotdFile file was read whenever a client requested it. Change handling to read the MotdFile contents into memory once during config file parsing. Two side effects: - changes to the MOTD file do not have any effect until ngircds configuration is reloaded - MOTD file does no longer have to reside in the chroot directory (the MOTD contents will then not be re-read on reload in that case) | |||
| 2010-08-01 | startup: open /dev/null before chroot | Florian Westphal | |
| before people had to create a /dev/null inside the chroot to make redirection work. | |||
| 2010-07-25 | Allow IRC ops to change channel modes even without OperServerMode set | Alexander Barton | |
| 2010-07-25 | Allow IRC operators to use MODE command on any channel (closes: #100) | Florian Westphal | |
| This allows IRC operators to change channel modes of ANY channel, even without joining these channels first. | |||
| 2010-07-25 | Added mailmap file for git-[short]log and git-blame | Alexander Barton | |
| 2010-07-14 | Remove Proc_Kill(), use timeout to kill child processes | Alexander Barton | |
| This avoids a race and potentionally killing the wrong process on systems that use randomized process IDs; now the child itself is responsible to exit in a timely manner using SIGALRM. | |||
| 2010-07-14 | New function Conn_CloseAllSockets() to close all open sockets | Alexander Barton | |
| This is useful in forked child processes, for example, to make sure that they don't hold connections open that the main process wants to close. | |||
| 2010-07-13 | Authenticated users should be registered without the "~" mark | Alexander Barton | |
| 2010-07-13 | Don't Proc_Kill() childs after Proc_Read(): done there already. | Alexander Barton | |
| 2010-07-13 | Don't even fork a PAM-subprocess if "NoPAM" option is set | Alexander Barton | |
| 2010-07-13 | Use Proc_GenericSignalHandler() as handler for SIGTERM by default | Alexander Barton | |
| 2010-07-13 | Mark some variables as "unused" to prevent compiler warnings | Alexander Barton | |
| Some variables are only used when compiling with IDENT or PAM support or when the debug code is enabled. Mark them as "unused" so that gcc doesn't generate warnings when neither of these options is enabled. | |||
| 2010-07-13 | Set NoPAM=yes in configuration files used for the testsuite | Alexander Barton | |
| 2010-07-13 | New configuration option "NoPAM" to disable PAM | Alexander Barton | |
| When the "NoPAM" configuration option is set and ngIRCd is compiled with support for PAM, ngIRCd will not call any PAM functions: all connection attemps without password will succeed instead and all connection attemps with password will fail. If ngIRCd is compiled without PAM support, this option is a dummy option and nothing changes: the global server password will still be in effect. | |||
| 2010-07-12 | io.c: Include conn.h when using the select() API | Alexander Barton | |
| 2010-07-12 | Use correct preprocessor syntax when testing for PAM and IDENTAUTH | Alexander Barton | |
| 2010-07-12 | Make sure signal.h is #include'd when needed | Alexander Barton | |
| 2010-07-12 | Initial documentation for using PAM with ngIRCd | Alexander Barton | |
| 2010-07-12 | Implement asynchronous user authentication using PAM | Alexander Barton | |
| For each client connection a child process is forked which handles the actual PAM authentication and reports the result back to the master process using a pipe for communication. While the PAM authentication is in process the daemon does not block. | |||
| 2010-07-12 | Add new pam.{c|h} module to Xcode project | Alexander Barton | |
| Adjust Xcode project and Mac OS X static config.h header to use PAM. | |||
| 2010-07-12 | Add pam.{c|h} to project and implement PAM_Authenticate() function | Alexander Barton | |
| 2010-07-11 | New functions Client_[Set]OrigUser() to get/set user specified by peer | Alexander Barton | |
| The Client_SetOrigUser() function is used to store the peer-provided user name (see USER command) in its original form, not changed by IDENT results, for example. | |||
| 2010-07-11 | Detect PAM libraries | Alexander Barton | |
| 2010-07-11 | Refactor Resolve_Read() into generic Proc_Read() function | Alexander Barton | |
| 2010-07-11 | Make Proc_Kill() more fault-tolerant | Alexander Barton | |
| 2010-07-11 | New function Conn_GetProcStat() | Alexander Barton | |
| Get PROC_STAT sub-process structure of a given connection. | |||
| 2010-07-11 | Code cleanup: don't reset penalty time on DNS resolver result | Alexander Barton | |
| See commit d4632a727fbee6: it's not necessary any more! | |||
| 2010-07-01 | New function Proc_GenericSignalHandler() | Alexander Barton | |
| 2010-07-01 | Rename Log_[{Init|Exit}_]Resolver to Log_[{Init|Exit}_]Subprocess | Alexander Barton | |
| Rename Log_Init_Resolver, Log_Exit_Resolver, and Log_Resolver to Log_Init_Subprocess, Log_Exit_Subprocess, and Log_Subprocess and make it more generic thereby. | |||
| 2010-06-30 | Don't #include client.h when conn.h/conn-func.h is already included | Alexander Barton | |
| conn.h and cinn-func.h both already #include client.h, so it is not needed to do it twice. | |||
| 2010-06-29 | New function Conn_GetFromProc() to get CONN_ID of a subprocess | Alexander Barton | |
| Get CONN_ID from file descriptor associated to a subprocess structure. | |||
| 2010-06-29 | Resolver: Implement signal handler and catch TERM signal | Alexander Barton | |
| 2010-06-29 | Don't set a penalty time when doing DNS lookups | Alexander Barton | |
| The logic isn't as described in the source and intended by this code: ngIRCd doesn't wait for the asynchronous resolver process until the set penalty time is over, but until the forked process terminates or the initial connection timeout (= PongTimeout) triggers. So don't set the penalty time at all and remove the wrong comment. | |||
| 2010-06-29 | Update comments: subprocesses not only can be resolver processes | Alexander Barton | |
| 2010-06-29 | Refactoring: Rename CONNECTION.res_stat to .proc_stat | Alexander Barton | |
| We want to use this process status variable not only for the resolver subprocesses but other asynchronous tasks as well; so let's name it more generic. | |||