SASL

From SleepyWiki

Jump to: navigation, search

Contents

About

SASL (Simple Authentication and Security Layer) is a service provided which allows you to identify to NickServ before you're even fully connected to the network. It identifies you purely based off configuration, as well, meaning that even if you've just pinged out and are reconnecting with an unregistered nickname, you will still be identified to your own account. Currently, SASL is a very new feature, and few clients have integration for SASL support; however, the two biggest Linux IRC clients, X-Chat and Irssi, both have scripts which allow for SASL support. Please note that for irssi to work with this SASL script, it must have Perl installed. As well, X-Chat's script require Python.

X-Chat

The X-Chat SASL script is written in Python, and allows for authentication to services before X-Chat is even done sending its USER and NICK commands.

To run X-Chat with SASL support:

  • Restart X-Chat. You can load the plugin with Windows > Plugins and Scripts, however if you have issues getting the script to work this way, simply restart XChat.
  • The supported SASL commands are:
    • /SASL -set <network> <nick> <password>
    • /SASL -unset <network>
  • Configure each network you want to use SASL on with the /SASL -set command, as described above. Note that <network> is the name of the network you want to use, as according to the Network List (Ctrl + S), <nick> is your main NickServ account nick, and that <password> is your NickServ password.

You're done! You can now /reconnect on a network that supports SASL. If the script is working correctly, amoung the MOTD and Server Connection notices, you will see:

* SASL authentication successful


Also, note that if you see a "* SASL :Unknown command" prompt in the server window after each SASL command you enter, this is nothing to worry about, just a little bug with the script.

If you see NickServ either asking you to Identify, or telling you about how you can register your nick, SASL authentication has failed, probably for invalid login credentials. You can view your ~/.xchat2/sasl.conf file and check to make sure your username and password are both correct.

Irssi

The Irssi SASL script is written in Perl, and allows for authentication to services before Irssi is even done sending its USER and NICK commands.

To run Irssi with SASL support:

  • Download the Irssi SASL script to your scripts directory, from here.
  • Rename the script to cap_sasl.pl
  • Load the script into Irssi. Supported SASL commands are:
    • /sasl load - This is used to load the ~/.irssi/sasl.auth file, if you've manually edited it by hand. Note that editing the file by hand is the only way to remove networks. The script loads the sasl.auth file on startup, so changes in the sasl.auth file won't take effect until you issue this command.
    • /sasl save - This is used to dump your SASL information to ~/.irssi/sasl.auth -- You should do this use this command immediately following any usage of the /sasl set command.
    • /sasl show - This command will display all the networks configured for SASL, in your current load of ~/.irssi/sasl.auth
    • /sasl set - This command is used to add a network for SASL authentication. Usage is:
/sasl set [Network Name] [Username] [Password]
  • Configure each network that you want to use SASL on, with the /sasl set command, as described above. Be sure that once you have all your network(s) information inputted, to do a /sasl save, to create the ~/.irssi/sasl.auth file, which will allow the authentication data to preserve through restarts.
  • Once you have configured and saved your data, you can /reconnect to any SASL supported networks. If all has gone correctly, amoung the MOTD and Server Connect notices, you will see:
[SleepyIRC] -!- Irssi: SASL authentication successful

As always, if you need help, be sure to stop by #SleepyIRC for help!

Download Links

Personal tools