Installing oidentd
oidentd helps provide ident, which is necessary if you're providing a public bouncer or shell account. Ident helps you uniquely identify your users on IRC. Even if a user changes his nick, you can figure out which user it was on your system based on his ident. This makes it easier to prevent abuse.
First, we install oidentd:
$ doas pkg_add oidentd
Afterwards, inside /etc/rc.local, we put the following:
if [ -x /usr/local/sbin/oidentd ]; then echo -n ' oidentd'; /usr/local/sbin/oidentd -u _identd -g _identd fi
Warning: Do not use -a :: as suggested in znc's wiki or ident will not work for IPv4.
This ensures that oident starts at bootup and runs as the user and group _identd.
Now, to start oidentd, run:
$ doas /usr/local/sbin/oidentd -u _identd -g _identd
Spoofing Ident (Optional)
If you need to spoof ident replies, put this inside /etc/oidentd.conf:
user "username" { default { allow spoof allow spoof_all } }
For example, ZNC needs ident spoofing to work.
If you want to force an ident reply, use
user "username" { default { force reply "botnick" } }
Replace botnick with your desired ident.