I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid SSL certificates", but get an error otherwise. Here is the XChat output when I try to connect to the IRC server locally: * Connecting to {domain_name} ({ip_address}) port 6697... * * Subject: /OU=Domain Control Validated/OU=PositiveSSL/CN={domain_name} * * Issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 * * Subject: /OU=Domain Control Validated/OU=PositiveSSL/CN={domain_name} * * Issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 * * Subject: /OU=Domain Control Validated/OU=PositiveSSL/CN={domain_name} * * Issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 * * Certification info: * Subject: * OU=Domain Control Validated * OU=PositiveSSL * CN={domain_name} * Issuer: * C=GB * ST=Greater Manchester * L=Salford * O=COMODO CA Limited * CN=PositiveSSL CA 2 * Public key algorithm: rsaEncryption (2048 bits) * Sign algorithm sha1WithRSAEncryption * Valid since Nov 7 00:00:00 2012 GMT to Nov 7 23:59:59 2015 GMT * * Cipher info: * Version: TLSv1/SSLv3, cipher DHE-RSA-AES256-SHA (256 bits) * Connection failed. Error: unable to verify the first certificate.? (21) Here is the SSL portion of my ngircd.conf file. I ran ngircd --configtest to test the config file, but it just printed the contents of the file to my terminal. [SSL] CertFile = /etc/pki/tls/certs/{domain_name}.crt DHFile = /etc/pki/tls/private/dhparams.pem KeyFile = /etc/pki/tls/private/{domain_name}.pem KeyFilePassword = {key_file_password} Ports = 6697 I've also tried to connect to the server remotely from a Windows 7 x64 machine using mIRC, but had issues there also. I can't confirm it, but I think Fedora compiles ngircd with GnuTLS and I think my keys were created with OpenSSL. If this were so, would the keys be in a different format? How could I check and convert them? Is it possible that this is a CA trust issue on both of my machines? If so, how/where can I add the CA root certificates in Fedora 18 and Windows 7 so I don't have this problem? Are there any other possible causes? Is there's any other information that I should be providing?

I'm running debian on my home pc. For irc server setup, I installed ircd-hybrid. I happen to have 4G mobile data on my phone and am using it to access the internet using usb tethering through the pc. Now, I'm aware of the fact that tethering ip's are dynamic and they change to a new one on reconnection. But as long as I'm connected to the net, the ip does not change afaik. I am not leaning towards a domain name because it's just a temporary experiment. I guess port forwarding is involved in some way. My objectives are to run the irc server on my home pc, and connect to it from another device through a client not on a local network, but through the internet. Have you tried something like this before? Is it even possible to setup irc server this way? What are your thoughts?

I'm trying to run my ircd-hybrid (IRC) server through the Tor network. How would I go about this? I installed tor, so what's next? I've tried setting the ports for the IRC to 9050 etc.

How do I go about disabling anti-flooding in inspIRCd? It is only an annoyance on a private chat. No anti-flooding modules are enabled and all flooding-limits have been set to maximum - yet it still blocks posting for example an ascii image. Any pointers in the right direction?

I'm trying to get my IRCd running on my VPS. I have everything set up and ready, but I cannot connect. Did a portscan, and the prot isn't open. I have root access. How do I open up ports 6667 and 6697?

I have a problem with my ircd-hybrid server. I can only make myself operator in the status tab but not when I join channels. There is my operator tag in ircd.conf: operator { /* name: the name of the oper */ name = "operator"; /* user: the user@host required for this operator. CIDR is not * supported. multiple user="" lines are supported. */ user = "*@127.0.0.1"; /* password: the password required to oper. By default this will * need to be encrypted using '/usr/bin/mkpasswd'. * WARNING: Please do not mix up the 'mkpasswd' program from * /usr/sbin with this one. If you are root, typing 'mkpasswd' * will run that one instead and you will receive a strange error. * * MD5 is supported. If you want to use it, use mkpasswd -Hmd5. */ #password = "3ZokNTld506nY"; password = "$1$oqD3q/0S$wQ1utcJG9Pcutmq6i3qxS."; /* class: the class the oper joins when they successfully /oper */ class = "opers"; /* privileges: controls the activities and commands an oper are * allowed to do on the server. All options default to no. * Available options: * * global_kill: allows remote users to be /KILL'd (OLD 'O' flag) * remote: allows remote SQUIT and CONNECT (OLD 'R' flag) * kline: allows KILL, KLINE and DLINE (OLD 'K' flag) * unkline: allows UNKLINE and UNDLINE (OLD 'U' flag) * gline: allows GLINE (OLD 'G' flag) * nick_changes: allows oper to see nickchanges (OLD 'N' flag) * via usermode +n * rehash: allows oper to REHASH config (OLD 'H' flag) * die: allows DIE and RESTART (OLD 'D' flag) * admin: gives admin privileges. admins * may (un)load modules and see the * real IPs of servers. */ global_kill = yes; remote = yes; kline = yes; unkline = yes; gline = yes; die = yes; rehash = yes; nick_changes = yes; admin = yes; }; Also, how can I configure the server so that when a user joins a channel first, they do not become an operator for the channel?

I have installed ircd-hybrid on my new CentOS 7 box, and I can run it fine via my normal user, but I want to run it as its own user with reduced permissions (ie, no write access outside /etc/ircd). After hours of trial and error and google, I've found these methods: su - -c This fails because I want to run as a user that doesn't have a shell or password, such as "nobody", and this asks for a password (thus always failing). daemon --user= This fails because "daemon" is a function in /etc/init.d/functions, not a command, so it's not found when running via sudo (which is required to run the script at all) or a boot script. runuser -u sudo -u These are close, and so far as I can tell work the same way. If I run with no options, it works: sudo -u nobody '/etc/ircd/ircd' But because it has no config file, ircd just exits immediately, or at least I assume that's what happens. ps -aux | grep irc returns only the grep process, even when run as my normal user. sudo -u nobody '/etc/ircd/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log' This, however, with either 1 or both arguments, returns: sudo: /etc/ircd/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log: command not found If I run the same command, minus sudo -u nobody, it works exactly as expected. What did I miss? Why in the bloody hells is it so hard to start a daemon as another user? **Update**: Thanks to Arthur2e5's comment, this works as a direct command to start the daemon as "nobody" (omit quotes): sudo -u nobody /etc/ircd/bin/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log However, my original goal was to run this as a startup script, and sudo is not an option there (Jun 13 07:03:00 coldcandor.com sudo: sudo: sorry, you must have a tty to run sudo). runuser seems to be the only way to go in that case, but if I try that the same way, I get: $ runuser -u nobody /etc/ircd/bin/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log runuser: invalid option -- 'o' Usage: runuser [options] -u COMMAND runuser [options] [-] [USER [arg]...] Trying the alternate syntax isn't helping (When run from root account, since runuser requires root to run): $ runuser - nobody /etc/ircd/bin/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log runuser: invalid option -- 'o' $ runuser - nobody '/etc/ircd/bin/ircd -configfile /etc/ircd/ircd.conf -logfile /var/log/ircd/ircd.log' This account is currently not available. What's the last bit of magic?

Running programs as root is dangerous, What's the best way to create a new low privileged user for Irssi and ircd-hybird on Debian?

Is there a way to locate somebody by his nick or IP address on the internet's IRC servers? I guess the protocol doesn't seem to support it! Still... can it be done? like crawling the web for IRC servers and injecting bots to query about if that nick/IP is online on one of the channels? Is there a simpler way?