Setting up SASL EXTERNAL authentication with ZNC

By chimo on (updated on )

A long time ago, I setup CertFP authentication in ZNC for both oftc.net and libera.chat.

Today, while connecting to libera.chat, I noticed a message saying something like “You’ve been authenticated via NickServ. SASL is preferred.” (I forget the actual wording now).

Switching from “CertFP + NickServ” to “SASL EXTERNAL” with ZNC is pretty simple since both methods use the same “cert” module, so you can leverage the configuration you did for CertFP with SASL.

It goes something like this:

# Ensure the SASL module is loaded
chimo@libera.chat> /msg *status loadmod sasl
<*status> Loaded module [sasl] [/home/znc/.local/lib/znc/sasl.so]
# Configure mechanism
chimo@libera.chat> /msg *sasl mechanism external
<*sasl> Current mechanisms set: EXTERNAL
# Optionally, require authentication
chimo@libera.chat> /msg *sasl RequireAuth yes

At the time of writing, oftc doesn’t support SASL authentication.

Reply by email