summaryrefslogtreecommitdiff
path: root/modules/m_sasl.cpp
diff options
context:
space:
mode:
authorAdam <Adam@anope.org>2017-01-22 16:00:06 -0500
committerAdam <Adam@anope.org>2017-01-22 16:00:06 -0500
commitbeac29b1d00235065090aa03b177e8671100bbc2 (patch)
tree9b04926c601dfb9be03b15a9a98ad9edc91104ac /modules/m_sasl.cpp
parent35d6437d45101e45a52e90701210ddd6e04a322a (diff)
m_sasl: don't allow logging into unconfirmed accounts
Diffstat (limited to 'modules/m_sasl.cpp')
-rw-r--r--modules/m_sasl.cpp2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/m_sasl.cpp b/modules/m_sasl.cpp
index 7ec294575..cbda5d64c 100644
--- a/modules/m_sasl.cpp
+++ b/modules/m_sasl.cpp
@@ -109,7 +109,7 @@ class External : public Mechanism
user = mysess->hostname + " (" + mysess->ip + ")";
NickCore *nc = certs->FindAccountFromCert(mysess->cert);
- if (!nc || nc->HasExt("NS_SUSPENDED"))
+ if (!nc || nc->HasExt("NS_SUSPENDED") || nc->HasExt("UNCONFIRMED"))
{
Log(Config->GetClient("NickServ"), "sasl") << user << " failed to identify using certificate " << mysess->cert << " using SASL EXTERNAL";
sasl->Fail(sess);