Skip to content

Commit

Permalink
Merge pull request #2032 from slingamn/scram.1
Browse files Browse the repository at this point in the history
recommended default: advertise SCRAM
  • Loading branch information
slingamn authored Jan 15, 2023
2 parents 177133a + 46d3252 commit b208797
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 2 deletions.
4 changes: 4 additions & 0 deletions default.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -450,6 +450,10 @@ accounts:
# this is useful for compatibility with old clients that don't support SASL
login-via-pass-command: true

# advertise the SCRAM-SHA-256 authentication method. set to false in case of
# compatibility issues with certain clients:
advertise-scram: true

# require-sasl controls whether clients are required to have accounts
# (and sign into them using SASL) to connect to the server
require-sasl:
Expand Down
3 changes: 1 addition & 2 deletions irc/config.go
Original file line number Diff line number Diff line change
Expand Up @@ -303,7 +303,7 @@ func (t *ThrottleConfig) UnmarshalYAML(unmarshal func(interface{}) error) (err e
type AccountConfig struct {
Registration AccountRegistrationConfig
AuthenticationEnabled bool `yaml:"authentication-enabled"`
AdvertiseSCRAM bool `yaml:"advertise-scram"` // undocumented, see #1782
AdvertiseSCRAM bool `yaml:"advertise-scram"`
RequireSasl struct {
Enabled bool
Exempted []string
Expand Down Expand Up @@ -1390,7 +1390,6 @@ func LoadConfig(filename string) (config *Config, err error) {
}

saslCapValue := "PLAIN,EXTERNAL,SCRAM-SHA-256"
// TODO(#1782) clean this up:
if !config.Accounts.AdvertiseSCRAM {
saslCapValue = "PLAIN,EXTERNAL"
}
Expand Down
4 changes: 4 additions & 0 deletions traditional.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -423,6 +423,10 @@ accounts:
# this is useful for compatibility with old clients that don't support SASL
login-via-pass-command: false

# advertise the SCRAM-SHA-256 authentication method. set to false in case of
# compatibility issues with certain clients:
advertise-scram: true

# require-sasl controls whether clients are required to have accounts
# (and sign into them using SASL) to connect to the server
require-sasl:
Expand Down

0 comments on commit b208797

Please sign in to comment.