Install oidentd on Eglide
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	dereckson
	Nov 12 2016, 02:01

Description

As Eglide welcomes IRC activities, we need an oidentd server with the following rules:

use account name by default
can spoof any alphanumerical string
can't spoof other user account name

This required the software an an /etc/oidentd.conf like:

/usr/local/etc/oidentd.conf on Grip

default {
        default {
                allow spoof
                deny spoof_all
                deny spoof_privport
                allow random_numeric
                allow numeric
                allow hide
        }
}

user root {
        default {
                force reply "alexander"
        }
}

Problem we have

Currently, we don't listen to the oidentd requests.

As Scaleway redirects a public IP to a private IP, does oidentd handle that correctly?

Revisions and Commits

rOPS Nasqueron Operations
	D707	rOPS3e4e1c4b24db Install and configure oidentd on Eglide

Related Objects

Mentioned In: T1683: Review oidentd configuration, availability and documenation

Event Timeline

dereckson claimed this task.Nov 12 2016, 02:01

dereckson added a subscriber: dereckson.

Herald added a project: Servers. · View Herald TranscriptNov 12 2016, 02:01

Actually, allow spoof_all and allow spoof_privport are fine.

dereckson removed dereckson as the assignee of this task.Nov 12 2016, 02:06

dereckson added subscribers: dereckson, tomjerr.

In T1047#12375, @dereckson wrote:

Actually, allow spoof_all and allow spoof_privport are fine.

Nope, they aren't.

From the man page:

spoof_all: Allow the usernames of other users to be used as ident responses.
spoof_privport: Allow ident replies to be spoofed on privileged ports (ports lower than 1024).

As user accounts don't use ports < 1024 and we don't have a legitimate case to share usernames, Grip config works fine.

dereckson added a revision: D707: Install and configure oidentd on Eglide.Nov 12 2016, 02:29

dereckson claimed this task.Nov 12 2016, 03:15