| This module is a part of ZNC.
This module is shipped with ZNC by default. If you have the right "LoadMod" you can activate it with
The code for this module can be found here. This module is part of ZNC since Version 1.0
The SASL module allows you to authenticate to an IRC network via SASL.
This module can be used with the cert module to support the EXTERNAL SASL mechanism. You can do this by setting up a certificate with cert and then setting the module to use the EXTERNAL mechanism. `/msg *sasl mechanism external`.
<*sasl> ------ <*sasl> Command: Help search <*sasl> Description: Generate this output <*sasl> ------ <*sasl> Command: Mechanism [mechanism[ ...]] <*sasl> Description: Set the mechanisms to be attempted (in order) <*sasl> ------ <*sasl> Command: RequireAuth [yes|no] <*sasl> Description: Don't connect unless SASL authentication succeeds <*sasl> ------ <*sasl> Command: Set <username> [<password>] <*sasl> Description: Set username and password for the mechanisms that need them. Password is optional <*sasl> ------ <*sasl> The following mechanisms are available: <*sasl> ------ <*sasl> Mechanism: EXTERNAL <*sasl> Description: TLS certificate, for use with the *cert module <*sasl> ------ <*sasl> Mechanism: PLAIN <*sasl> Description: Plain text negotiation, this should work always if the network supports SASL <*sasl> ------
Basic configuration of the *sasl module. Note that SASL won't be used until you reconnect to the server.
/query *status <you> loadmod sasl <*status> Loaded module [sasl] [/home/znc/.local/lib/znc/sasl.so] /query *sasl <you> mechanism external plain <*sasl> Current mechanisms set: EXTERNAL PLAIN <you> set MyUsername pa$$w0rd <*sasl> Username has been set to [MyUsername] <*sasl> Password has been set to [pa$$w0rd] /query *status <you> jump <*status> Jumping to the next server in the list...
Note: The password is saved unencrypted, so don't make your ZNC data directory readable to other users!
Note: The password is transmitted to IRC server in plain text if you don't use SSL.
Nowadays most of networks support either SASL PLAIN or EXTERNAL. DH-BLOWFISH and DH-AES support were removed due to people believing them to be more secure than SASL PLAIN + SSL which is not the case.
Many networks support SASL including:
- a collection of many different communities, all of whom join in to socialise, have fun, and most importantly, to chat (better known as the home of InspIRCd)
- a place of friends, discussion and fun
- an IRC network providing discussion facilities for the Free and Open Source Software communities, not-for-profit organizations, and related communities (we, #znc, are here too :))
- an IRC network for the global network of Pirate Parties who use IRC as a communication platform for political discussion
- Unofficial Reddit network "run by redditors, for redditors"