Skip to content

Fix IRC SASL PLAIN using wrong credentials (NickServNick/Password) - #3

Closed
johnnyxmas wants to merge 1 commit into
masterfrom
fix/irc-sasl-credentials
Closed

Fix IRC SASL PLAIN using wrong credentials (NickServNick/Password)#3
johnnyxmas wants to merge 1 commit into
masterfrom
fix/irc-sasl-credentials

Conversation

@johnnyxmas

Copy link
Copy Markdown
Owner

Summary

  • UseSASL wired girc.SASLPlain to NickServNick/NickServPassword, but those fields hold the NickServ target to message (default "NickServ", or e.g. QuakeNet's Q@CServe.quakenet.org) for the non-SASL post-connect IDENTIFY path — not an account name.
  • Any standard NickServ setup using SASL therefore authenticated as an account literally named "NickServ", failing with Account does not exist on ircds that don't have one (e.g. Ergo).
  • Adds dedicated SASLLogin/SASLPassword config fields and wires SASL to those instead, falling back to Nick when SASLLogin is unset (matches prior implicit behavior for the common case where nick == account).

Test plan

  • Verified live against a real Ergo ircd using a standalone harness that exercises the actual Birc.Connect() code path (not just a compile check): AUTHENTICATE PLAIN900 ... logged in as <account>903 Authentication successful.
  • go build / go vet / gofmt clean on bridge/config and bridge/irc.
  • Full-binary build not exercised — bridge/slack currently fails to build on this fork independent of this change (slackevents.MessageEvent missing fields the code expects), pre-existing on master.

UseSASL wired girc.SASLPlain to NickServNick/NickServPassword, but
those fields hold the NickServ *target* to message (defaults to
"NickServ", e.g. QuakeNet's "Q@CServe.quakenet.org") for the
non-SASL post-connect IDENTIFY path, not an account name. Any
standard NickServ setup using SASL therefore authenticated as an
account literally named "NickServ", failing with "Account does not
exist" on ircds that don't have one (e.g. Ergo).

Adds dedicated SASLLogin/SASLPassword config fields and wires SASL
to those instead, falling back to Nick when SASLLogin is unset.
Verified live against an Ergo ircd: SASL PLAIN now completes with
900/903 (logged in / authentication successful) using SASLLogin.
@johnnyxmas

Copy link
Copy Markdown
Owner Author

Wrong target — meant to open this against upstream 42wim/matterbridge instead.

@johnnyxmas johnnyxmas closed this Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant