Hi ports@, the last revision which introduced the ident flavor to net/ngircd was missing a patch for pledge().
The patch below allows ident request to actually work. There is no point in adding extra logic to construct the pledge() promise depending on the config option here; this solution should be good enough. Tested on amd64. Index: Makefile =================================================================== RCS file: /cvs/ports/net/ngircd/Makefile,v retrieving revision 1.24 diff -u -p -r1.24 Makefile --- Makefile 5 Feb 2023 22:40:12 -0000 1.24 +++ Makefile 26 Feb 2023 20:26:19 -0000 @@ -1,7 +1,7 @@ COMMENT = lightweight irc server DISTNAME = ngircd-26.1 -REVISION = 1 +REVISION = 2 CATEGORIES = net Index: patches/patch-src_ngircd_proc_c =================================================================== RCS file: /cvs/ports/net/ngircd/patches/patch-src_ngircd_proc_c,v retrieving revision 1.3 diff -u -p -r1.3 patch-src_ngircd_proc_c --- patches/patch-src_ngircd_proc_c 5 Feb 2023 22:40:12 -0000 1.3 +++ patches/patch-src_ngircd_proc_c 26 Feb 2023 20:26:19 -0000 @@ -13,8 +13,8 @@ Index: src/ngircd/proc.c return -1; case 0: /* New child process: */ -+ /* XXX no PAM, fork only for DNS */ -+ if (pledge("stdio dns", NULL) == -1) ++ /* XXX no PAM, fork only for DNS and IDENT */ ++ if (pledge("stdio dns inet", NULL) == -1) + err(1, "pledge"); #ifdef HAVE_ARC4RANDOM_STIR arc4random_stir();