Connecting using SASL

Automatically log into your account while connecting

SASL Connectivity

SASL is a method that allows identification to services (NickServ) during the connection process, before anything else happens - therefore eliminating the need to /msg nickserv identify. This feature also allows you to bypass most DNSBL scans and connection restrictions, which is useful for users of some ISPs.

To use SASL, you must register your nickname.

We support the PLAIN and EXTERNAL mechanisms.


SASL client configuration

Below are instructions on how to configure SASL for some IRC clients.

Configuring SASL for irssi

The setup for SASL on irssi differs depending on the version you have (you can find out by running irssi -v in your nearest shell).

Irssi 0.8.18 or later

Recent Irssi versions include built-in SASL support via /network:

/network add -sasl_username <login> -sasl_password <password> -sasl_mechanism PLAIN hybridirc | /server add -auto -net hybridirc -ssl -ssl_verify cloud.hybridirc.com 6697 | /save
Troubleshooting

To check that the setting was correct, run /network and confirm that the hybridirc entry looks like this:

hybridirc: sasl_mechanism: plain, sasl_username: gryllida, sasl_password: (pass)

All three items (mechanism, username, and password) must be set.

Older versions

These versions need a separate script in order to support SASL: cap_sasl.pl. You can install it from https://scripts.irssi.org:

mkdir -p ~/.irssi/scripts/autorun | cd ~/.irssi/scripts/autorun | wget https://scripts.irssi.org/scripts/cap_sasl.pl -O ../cap_sasl.pl | ln -sf ../cap_sasl.pl .

Now load and configure it inside Irssi:

/script load cap_sasl | /network add hybridirc | /server add -auto -net hybridirc -ssl -ssl_verify cloud.hybridirc.com 6697 | /sasl set hybridirc <login> <password> PLAIN | /sasl save | /save
Configuring SASL for mIRC

Using the latest available release of mIRC (https://mirc.com/news.html).

  1. From the "File" menu, click "Select Server"
  2. In the "Connect" -> "Servers" section of the Options menu, select the correct server inside the HybridIRC folder and click "Edit".
  3. Set the "Login method" to "SASL (/CAP)".
  4. In the second Password box at the bottom of the window, enter your NickServ username, then a colon, then your NickServ password. For example, schizo:6f2e72.
  5. Click the "Ok" button.
Configuring SASL for AdiIRC

SASL support is built into the Serverlist and the /server command.

Using the Serverlist to enable SASL:

  1. Set the login method to "SASL (username + password)".
  2. Set the "Username" to your HybridIRC account username.
  3. Set the "Password" to your HybridIRC account password.
Configuring SASL for AndroIRC

SASL options are per server, which are configured via the Servers section of Preferences.

Assuming you have added a server for irc.hybridirc.com:

  1. Enable the authentication system, and select "SASL".
  2. For authentication type, select "PLAIN".
  3. Set the "Username" to your HybridIRC account username.
  4. Set the "Password" to your HybridIRC account password.
Configuring SASL for HexChat

SASL options are per network in HexChat.

  1. Open the Network List (Ctrl + S)
  2. If the HybridIRC network does not exist, you'll need to create it (see servers page); otherwise, find it and select "Edit".
  3. Set the "Username" to your HybridIRC account username.
  4. Set the "Login method" to "SASL (username + password)".
  5. Set the "Password" to your HybridIRC account username.

If you are unable to edit the User name field, the change can be made in the User Information section on the Network List window.

If everything was configured correctly, you should see a SASL authentication successful message when you connect. You will already be identified to NickServ, so you don't need to do this again.

Configuring SASL for WeeChat

Here's a simple guide for password-based authentication, based on the WeeChat quick-start guide.

If you haven't already set up your connection to HybridIRC, use this command:

/server add hybridirc cloud.hybridirc.com/6697 -ssl

If you have already set up a connection to hybridirc, or if that command fails with a message like irc: server "hybridirc" already exists, can't add it!, then use these commands to ensure that SSL/TLS is enabled for your connection:

/set irc.server.hybridirc.addresses "cloud.hybridirc.com/6697" | /set irc.server.hybridirc.ssl on

Now, configure SASL:

/set irc.server.hybridirc.sasl_mechanism PLAIN | /set irc.server.hybridirc.sasl_username <nickname> | /set irc.server.hybridirc.sasl_password <password> | /save

For more complete instructions, including non-password-based mechanisms, see the official Weechat documentation.

Configuring SASL for IRCCloud

The below instructions were valid as of the web version (irccloud.com) as of May 2019

  1. In the channel list, click on the settings cog for HybridIRC and select "Edit".
  2. Set the "Nickname" to a nickname that is registered to your account.
  3. Click "advanced options".
  4. Set the "NickServ password" to your HybridIRC account password.
  5. Cick "Save".
Configuring SASL for Chatzilla

This script is by Gryllida, for the ChatZilla add-on to Firefox.

  1. Install the cz_sasl script as you would any other script, following the instructions here.
  2. Enter /plugin-pref cz_sasl..
  3. Enter /plugin-pref cz_sasl sasl.username YOUR_USERNAME replacing YOUR_USERNAME with your registered nickname.
  4. Enter /plugin-pref cz_sasl sasl.password YOUR_PASSWORD replacing YOUR_PASSWORD with your NickServ password.
  5. If you want to continue connecting when SASL authentication fails, enter /plugin-pref cz_sasl sasl.proceed_on_fail true.

If everything has been configured correctly, the next time you connect you should see the message SASL authentication successful.

Configuring SASL for Epic5

EPIC5 has the sasl_auth script built-in. Mikhail contributed this explanation of how to use it.

Open your EPIC5 configuration file, ~/.epicrc or ~/.ircrc, in your preferred editor. Add the following lines:

  1. load builtins.
  2. load sasl_auth..
  3. sasl_auth *.hybridirc.com plain username password.

Replace username with your primary nick. The password may be replaced with your password or omitted, in which case EPIC5 will prompt for the password when it connects. You may change *.hybridirc.com to something more specific if desired, but the * means SASL authentication will be attempted for any hybridirc.com server. Only plain is supported as the authentication mechanism. You may want to use SSL to protect your password.

If everything has been configured correctly, the next time you connect you should see the message: SASL authentication successful.

Configuring SASL for Konversation

Documentation: https://userbase.kde.org/Konversation/Configuring_SASL_authentication.


Originally found at: https://freenode.net/kb/answer/sasl mirrored for HybridIRC users. © freenode.