• ctrl/ircd.ini docs/v322_new.md exec/load/ircd/config.js

    From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Sat Aug 1 00:57:18 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/ee17eeb83f49a80542a226f6
    Modified Files:
    ctrl/ircd.ini docs/v322_new.md exec/load/ircd/config.js
    Log Message:
    ircd: fix defects in the stock ircd.ini and the [Operator] password rule

    An [Operator] section carrying the S flag authenticates against the BBS
    system password and never consults Password=, but ini_Operator required Password= to be present regardless and discarded the whole section
    without it. The stock ircd.ini's only operator example is exactly that
    shape, so uncommenting it as written produced no operator at all.
    Require a password only when S is absent, and say which of the two is
    missing when a section is rejected.

    The stock ircd.ini also:

    - shipped [Server:vert] and [Server:cvs] active, with placeholder
    passwords, in a class whose ConnectFrequency is non-zero. Every
    install with the IRCd enabled therefore dialed both hubs every five
    minutes and failed to authenticate. Commented out, with a pointer to
    the link-registration procedure.
    - put its catch-all *@* [Allow] entry above the specific example.
    Client authorization is first-match in file order, so the example
    below it could never match. Reordered, with the ordering rule stated.
    - presented SSL= on [Port:N] as if it selected TLS. Nothing reads that
    key; TLS is decided by port number. Noted as the annotation it is.
    - left [Capab] commented out. Enforce=false is already the default, but
    writing it explicitly documents the knob ahead of the network turning
    enforcement on.

    Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net