Private IRC server with local user accounts? reddit / selfhosted ---------------------------------------------------------------------- myamazingaltaccount · 2023-10-28 21:38 Hi, I´m looking to set up a local IRC server on the latest Debian for me and some friends. I´d like to somehow restrict access to this server to only local \*nix accounts. I don´t want to make the server only accessible to users who are logged in over SSH. I also want to be able to use clients on our phones etc. I also don´t trust my friends completely, I don´t want them to be able to impersonate each other. So, what I´m looking for is some basic auth on my IRC server, preferably something that hooks into the standard \*nix accounts (via PAM?). I´ve searched around a bit, and the only things I came up with: - Make the server localhost only => then I won´t be able to use phone apps anymore. - Server password => this doesn´t solve the auth issue, my friends will still be able to impersonate each other. - Make the server localhost only and then let users connect via ZNC, which hooks into Cyrus SASL => this was a huge pain in the ass to set up, and still doesn´t work. - Do this via services somehow? What would be the "correct" way to implement this? ---------------------------------------------------------------------- badass6 · 2023-10-28 23:10 Remindme! 1 day ---------------------------------------------------------------------- RemindMeBot · 2023-10-28 23:11 I will be messaging you in 1 day on [**2023-10-29 23:10:40 UTC**](http ://www.wolframalpha.com/input/?i=2023-10- 29%2023:10:40%20UTC%20To%20Local%20Time) to remind you of [**this link **](https://www.reddit.com/r/selfhosted/comments/17insce/private_irc_s erver_with_local_user_accounts/k6vvkw2/?context=3) [**CLICK THIS LINK**](https://www.reddit.com/message/compose/?to=Remin dMeBot&subject=Reminder&message=%5Bhttps%3A%2F%2Fwww.reddit.com%2Fr%2F selfhosted%2Fcomments%2F17insce%2Fprivate_irc_server_with_local_user_a ccounts%2Fk6vvkw2%2F%5D%0A%0ARemindMe%21%202023-10- 29%2023%3A10%3A40%20UTC) to send a PM to also be reminded and to reduce spam. ^(Parent commenter can ) [^(delete this message to hide from others.)] (https://www.reddit.com/message/compose/?to=RemindMeBot&subject=Delete %20Comment&message=Delete%21%2017insce) ***** |[^(Info)](https://www.reddit.com/r/RemindMeBot/comments/e1bko7/remind mebot_info_v21/)|[^(Custom)](https://www.reddit.com/message/compose/?t o=RemindMeBot&subject=Reminder&message=%5BLink%20or%20message%20inside %20square%20brackets%5D%0A%0ARemindMe%21%20Time%20period%20here)|[^(Yo ur Reminders)](https://www.reddit.com/message/compose/?to=RemindMeBot& subject=List%20Of%20Reminders&message=MyReminders%21)|[^(Feedback)](ht tps://www.reddit.com/message/compose/?to=Watchful1&subject=RemindMeBot %20Feedback)| |-|-|-|-| ---------------------------------------------------------------------- LostLetterbox · 2023-10-28 23:35 I was playing around with prosody which is xmpp not IRC but does allow group chat, I have it behind authelia though I haven't gotten single sign on to work properly (I think it's due to it being an xmpp server). Ive got the conversejs plugin installed for a web chat service (if I choose to continue with it I'll want to clean up an auto redirect). I have it hooked into an LDAP user store as opposed to p. It looks like there is a pam module/extension available. Still need to check out if I'd prefer an web IRC application instead, or try the matrix line which looks heavier. At the moment I haven't exposed anything Ive been playing with outside my home network so I also want to start playing with mtls sometime in the future. ---------------------------------------------------------------------- NikStalwart · 2023-10-28 23:36 [Ergo](https://github.com/ergochat/ergo), formerly oragono, supports LDAP and possibly SAML. This is not something I have set up, but I have hosted a public ergo server before. Good luck. cc /u/badass6  —  no need to wait a day. ---------------------------------------------------------------------- badass6 · 2023-10-28 23:39 Oh, thanks for the heads up. ---------------------------------------------------------------------- RedditSlayer2020 · 2023-10-29 03:46 Classic irc does have a totally different design philosophy. Try some other text based chat servers with user authentication. ---------------------------------------------------------------------- Grumpy_Austrian · 2023-10-29 08:19 try Rocket Chat: **https://www.rocket.chat/install** ---------------------------------------------------------------------- phein4242 · 2023-10-29 11:17 ngircd has the concept of a global password. Distribute this password and you’ve got a simple psk based acl mechanism ---------------------------------------------------------------------- WiseCookie69 · 2023-10-29 11:33 Ahh, good old IRC. Look into something like InspIRCd. It should already allow you to restrict channel creation to registered accounts. Then combine that with something like Atheme or Anope IRC Services. I couldn't find any PAM modules, but Atheme should at least support an external database (back in the day we used a mysql backend). ---------------------------------------------------------------------- Brutus5000 · 2023-10-29 19:35 Ergo is the right choice. You can configure it to call your shell script that returns a json response. I used this to implement OAuth SSO but you can use it to check local permissions too.