From 80f72ecf23869557ce4c17abb1aa6e144f15dec0 Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Tue, 29 Jun 2021 17:00:37 +0300 Subject: [PATCH] irc/limnoria/hardening.md: temporarily document passwordless accounts --- irc/limnoria/hardening.md | 24 +++++++++++++++++++++++- 1 file changed, 23 insertions(+), 1 deletion(-) diff --git a/irc/limnoria/hardening.md b/irc/limnoria/hardening.md index 2881583..785909d 100644 --- a/irc/limnoria/hardening.md +++ b/irc/limnoria/hardening.md @@ -1 +1,23 @@ -https://docs.limnoria.net/use/security.html +# Hardening Limnoria + +* Upstream documentation: https://docs.limnoria.net/use/security.html + +## Passwordless users + +*This is subject to moving to the upstream documentation, see [Limnoria/Limnoria-doc#91](https://github.com/Limnoria/Limnoria-doc/issues/91)* + +Passwordless user accounts have been supported since version 2021-05-27. +They must login by some other mechanism such as NickAuth, GPG or hostmasks. + +Registering a passwordless user happens by `/msg Limnoria user register !`, +and existing user may remove their password by `/msg Limnoria user set password !` + +It's also possible (while not recommended) to edit `users.conf` by hand. + +1. `/msg bot flush` to save all current configuration changes to disc +1. `/msg bot config flush false` to disable automatic config file writing +1. Open `botdir/conf/users.conf` with your favourite text editor and remove + the lines beginning with `password` +1. `/msg bot config reload` and all the accounts should be passwordless. You + may also check that `config flush` is `True`, but the `False` shouldn't + have gotten stored to disc anyway as it wasn't written to disc.