Anope IRC Services

Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: [1]   Go Down

Author Topic: The Non-existant Oper  (Read 7481 times)

0 Members and 1 Guest are viewing this topic.

zEkE

  • Anope User
  • Offline Offline
  • Posts: 34
The Non-existant Oper
« on: January 31, 2009, 08:03:27 PM »

This could be something simple, then again...

One of the staff on a network I admin has been having long-term issues with services access. Most of the time it's not noticed because we rarely need to do anything. It does however, concern me that someone with admin access isn't being able to use it..

From everything I can tell, everything is as it should be. We both sit on another network with the same setup and the same access and there are no problems. Any suggestions would be welcomed, as I said it could just be something mind-numbingly simple that I've overlooked..

Running Anope-1.8.0 with Unreal3.2.7 on FreeBSD servers

Quote
[Jan 31 14:52:57.321018 2009] debug: Received: :Mack PRIVMSG operserv :akill add *@not.at.this.com +1m test
[Jan 31 14:52:57.321088 2009] OperServ: Mack: akill add *@not.at.this.com +1m test
[Jan 31 14:52:57.321168 2009] debug: Sent: :OperServ NOTICE Mack :Access denied.
[Jan 31 14:52:57.321193 2009] Access denied for Mack with service OperServ and command akill

[Jan 31 14:54:05.723224 2009] debug: Received: :zEkE PRIVMSG operserv@services.uccn :akill add *@not.at.this.com +1m test
[Jan 31 14:54:05.723279 2009] OperServ: zEkE: akill add *@not.at.this.com +1m test
[Jan 31 14:54:05.723503 2009] debug: Sent: TKL + G * not.at.this.com zEkE 1233604445 1233431645 :[zEkE] +1m test
[Jan 31 14:54:05.723820 2009] debug: Sent: :OperServ NOTICE zEkE :*@not.at.this.com added to the AKILL list.
[Jan 31 14:54:05.724007 2009] debug: Sent: :OperServ GLOBOPS :zEkE added an AKILL for *@not.at.this.com ([zEkE] +1m test) (expires in 30 days)

Now, Mack is a registered user, holds OperServ Admin access, and a Network Administrator O:Line that he is identified to.

Specific to us:
Quote
Mack is ~P0WeRZ0nE@uccn-B675C2E0.nc.res.rr.com * P0WeRZ0nE11
Mack is using modes +iowghAxNWG
Mack is connecting from *@[censored].nc.res.rr.com [censored]
Mack on #opers #uccn #infinitech
Mack using romans.il.us.godsirc.com UCCN
Mack is a Network Administrator
Mack is available for help.
mack End of /WHOIS list.
-
zEkE is desktop@7B7AC4D0.BEBA8317.D687471D.IP * Chat @ irc.unitedchristianchat
zEkE is using modes +iowghraAsxNWzG +kcfFGnNSso
zEkE is connecting from desktop@[censored] [censored]
zEkE is a registered nick
zEkE on #services #opers #infinitech #christcentered #Help #mowse #uccn
zEkE using infinite.va.awesomechristians.us UCCN
zEkE is a Network Administrator
zEkE is available for help.
zEkE is using a Secure Connection
zEkE has been idle 6secs, signed on Thu Jan 29 21:11:48
zeke End of /WHOIS list.

Quote
[14:59:51] -NickServ- Mack is P0WeRZ0nE11
[14:59:51] -NickServ- Mack is a services admin.
[14:59:51] -NickServ- Last seen address: ~P0WeRZ0nE@staff.unitedchristianchat.net
[14:59:51] -NickServ-   Time registered: Feb 01 23:08:47 2008 EST
[14:59:51] -NickServ-    Last seen time: Jan 31 14:46:24 2009 EST
[14:59:51] -NickServ- Last quit message: Quit:
[14:59:51] -NickServ-    E-mail address: [censored]
[14:59:51] -NickServ-           Options: Security, Private, Auto-op
[14:59:51] -NickServ- This nickname will not expire.
[14:59:55] -NickServ- zEkE is zEkE
[14:59:55] -NickServ- zEkE is a services root administrator.
[14:59:55] -NickServ-    Is online from: desktop@7B7AC4D0.BEBA8317.D687471D.IP
[14:59:55] -NickServ-   Time registered: Aug 28 18:58:34 2007 EDT
[14:59:55] -NickServ- Last quit message: Connection reset by peer
[14:59:55] -NickServ-    E-mail address: [censored]
[14:59:55] -NickServ-     Greet message: "Careful, we don't want to learn from this." -- Calvin
[14:59:55] -NickServ-           Options: Security, Private
[14:59:55] -NickServ- Expires on: Mar 17 15:33:47 2009 EDT

Staff list:
Quote
[14:51:08] -OperServ- On Level Nick
[14:51:08] -OperServ-  * OPER  ProxyScan
[14:51:08] -OperServ-  * ADMN  intricatic
[14:51:08] -OperServ-  * ADMN  Mack
[14:51:08] -OperServ-  * ADMN  Midorikawa|Psychosis
[14:51:08] -OperServ-    ADMN  mowse
[14:51:08] -OperServ-    ROOT  Jacob
[14:51:08] -OperServ-  * ROOT  zEkE
[14:51:08] -OperServ-    ROOT  mink
[14:51:08] -OperServ-  * ROOT  neo [peer]
[14:51:08] -OperServ- End of Staff list.

Our modules list:
Quote
[14:57:04] -OperServ- Current Module list:
[14:57:04] -OperServ- Module: cs_appendtopic [$Id: cs_appendtopic.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Supported]
[14:57:04] -OperServ- Module: cs_enforce [$Id: cs_enforce.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Supported]
[14:57:04] -OperServ- Module: enc_none [$Id: enc_none.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Encryption]
[14:57:04] -OperServ- Module: hs_request [$Id: hs_request.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Supported]
[14:57:04] -OperServ- Module: ns_maxemail [$Id: ns_maxemail.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Supported]
[14:57:04] -OperServ- Module: os_info [$Id: os_info.c 1826 2008-12-05 21:07:22Z jantje_85 $] [Supported]
[14:57:04] -OperServ- Module: unreal32 [$Id: unreal32.c 1858 2008-12-21 17:49:04Z jantje_85 $] [Protocol]
[14:57:04] -OperServ- 7 Modules loaded.
Logged

LEthaLity

  • Team
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 307
    • LEthaLity
Re: The Non-existant Oper
« Reply #1 on: January 31, 2009, 09:38:27 PM »

Mack is using modes +iowghAxNWG  - he doesn't have "a" in his umodes, which is "services admin", your both on the same services arn't you?
Logged

Naram Qashat

  • Team
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 192
    • CBX's Sprite Animations
Re: The Non-existant Oper
« Reply #2 on: January 31, 2009, 10:03:03 PM »

To me it looks like he is not identified to his nick in NickServ, assuming you did that /ns info command while he was online.  He should use /ns identify on his nick and try again.  If that doesn't work, let us know.
Logged

Jan Milants

  • Team
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1372
Re: The Non-existant Oper
« Reply #3 on: January 31, 2009, 10:10:38 PM »

To me it looks like he is not identified to his nick in NickServ, assuming you did that /ns info command while he was online.  He should use /ns identify on his nick and try again.  If that doesn't work, let us know.
even if he wasn't online when you did /ns info, he wasn't identified when you /whois'ed him either...

Quote
zEkE is a registered nick
but no such line for Mack... so while he is opered, he is not identified.

as for him having no Services-Admin usermode ("a"), that would also be an effect of not having identified as services may be configured to remove +a from any users not identified to a nick with services admin rights.. the missing "a" by itself shouldn't affect his ability to access operserv though.
« Last Edit: January 31, 2009, 10:13:00 PM by Viper »
Logged
If you like me donate coins to 1FBmZVT4J8WAUMHKqpWhgNVj3XXnRN1cCk :)

zEkE

  • Anope User
  • Offline Offline
  • Posts: 34
Re: The Non-existant Oper
« Reply #4 on: February 01, 2009, 05:35:36 AM »

The plot thickens..

I had him reidentify, and the command executed as expected - all the lines show up etc. So the next question is, what could cause services to believe he was no longer identified? <-- Checking logs better, he hasn't been auto-identifying.. However;

In the earlier logs you'll notice that while the "Registered nick" and logged in lines are missing from his whois and nickserv status, the staff list still showed the * for being "Online" - what drives this on/off status?
« Last Edit: February 01, 2009, 05:44:31 AM by zEkE »
Logged

Jan Milants

  • Team
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1372
Re: The Non-existant Oper
« Reply #5 on: February 01, 2009, 11:39:06 AM »

Because he was indeed online.. the online status does not require one to be identified, it s enough if someone is using the nickname and isn't being killed for it by nickserv..

While I do agree that making it show the ID status might make more sense, the current implementation doesn't care about it..
« Last Edit: February 01, 2009, 11:50:24 AM by Viper »
Logged
If you like me donate coins to 1FBmZVT4J8WAUMHKqpWhgNVj3XXnRN1cCk :)

Master

  • Anope User
  • Offline Offline
  • Posts: 56
Re: The Non-existant Oper
« Reply #6 on: February 17, 2009, 04:30:02 PM »

I believe this behavior can be changed in the services config file, but it's not recommended to do so as it removes a security layer...
Logged
Always believe Murphy's Law. If you don't, watch what happens.

Jobe

  • Contributor
  • *
  • Offline Offline
  • Gender: Male
  • Posts: 1023
    • Anope IRC Services
Re: The Non-existant Oper
« Reply #7 on: February 17, 2009, 08:30:31 PM »

This looks oddly to me like a possible case of ulines not being right on romans.il.us.godsirc.com Well at least for the no +r and no "is registered" in /whois. Which may also help towards solving the overall problem.

For the record, ULines must be the same on ALL servers on a network.
Logged
Your IP: ()
My IRC Status:

Come along and visit http://www.anopequotes.org/

zEkE

  • Anope User
  • Offline Offline
  • Posts: 34
Re: The Non-existant Oper
« Reply #8 on: February 21, 2009, 05:38:52 PM »

Owing to a global remote include and regular checking of 'the important stuff' this was not an issue (I just checked it again)

The issue was more that I skipped the 'is online' and 'is registered parts in both whois and ns info because it was showing him as online (and incorrectly assumed identified) in os staff.

As such the topic is resolved owing to user error based on misunderstood output leading to ignoring important data ;-)
Logged
Pages: [1]   Go Up