Re: Add users and multi mysql

2012-03-22 Thread Tomasz Sterna
Dnia 2012-03-21, śro o godzinie 17:39 -0500, Ladar Levison pisze:
 I use a custom authreg plugin for authentication that uses the same
 auth database as the rest of my website

BTW, this is intentionally hidden feature, but you're able to define DB
queries for RDBMS authreg plugins in c2s.xml config file, without
modyfing jabberd2 code.

Just define
authreg.mysql.sql.create
authreg.mysql.sql.select
authreg.mysql.sql.setpassword
authreg.mysql.sql.delete

See
https://github.com/Jabberd2/jabberd2/blob/master/storage/authreg_mysql.c#L476
or
https://github.com/Jabberd2/jabberd2/blob/master/storage/authreg_pgsql.c#L443 
for default queries and work from there.


 While I have your attention, I noticed the link to the ChangeLog at 
 http://codex.xiaoka.com/wiki/jabberd2:start uses the wrong Github 
 account 

Thanks for the info. Fixed.


-- 
Tomasz Sterna
Instant Messaging Consultant : Open Source Developer
http://tomasz.sterna.tv/  http://www.xiaoka.com/portfolio





Re: Add users and multi mysql

2012-03-22 Thread Tomasz Sterna
Dnia 2012-03-21, śro o godzinie 16:59 -0600, Stephen Mahood pisze:
 Would this support a sasl with Channel Binding? (I will admit I am not
 entirely familiar with channel binding) 

http://xmpp.org/rfcs/rfc3920.html#rfc.section.14.6
Looks like XMPP does not support channel binding.


-- 
Tomasz Sterna
Instant Messaging Consultant : Open Source Developer
http://tomasz.sterna.tv/  http://www.xiaoka.com/portfolio





Re: Add users and multi mysql

2012-03-22 Thread Marek Červenka

Dne 21.3.2012 23:20, Tomasz Sterna napsal(a):

Dnia 2012-03-21, śro o godzinie 22:50 +0100, Marek Červenka pisze:

i'm modified PBX integration to set highest possible priority. now my
contacts can see that i'm on the phone
BUT
if they send me message, the message is lost because PBX module
cannot
receive messages

i can sponsor patch which reroute the message for PBX module to
highest priority connected client. programmers?  dont write me all ;)

Could you create a feature request on Launchpad for this?




i cant find feature request  method. i filled bug

https://bugs.launchpad.net/jabberd2/+bug/961958


--
---
Marek Cervenka
===





Re: Add users and multi mysql

2012-03-22 Thread Marek Červenka

Dne 21.3.2012 23:17, Tomasz Sterna napsal(a):



P.S. If anyone volunteers to fix the documentation, I will be more than
happy. :-)
[1] https://github.com/Jabberd2/jabberd2/blob/master/etc/c2s.xml.dist.in
[2] https://github.com/Jabberd2/jabberd2/blob/master/etc/sm.xml.dist.in
[3] 
https://github.com/Jabberd2/jabberd2/wiki/InstallGuide-CommonConfigurationTasks



we will be happy if you will be happy ;)
we will try fix the documentation
BUT
what will be the final state?

everything on github?
everything on github except launchpad for bugs?
what will be the primary website (google indexing and marketing)?

i offered you www.jabberd2.org domain. i redirected *.jabberd2.org to 
http://codex.xiaoka.com/wiki/ NOW (registrator doesnt support : in 
this url http://codex.xiaoka.com/wiki/jabberd2:start)


https://github.com/Jabberd2/jabberd2/wiki/InstallGuide-CommonConfigurationTasks 
this document is not linked from github wiki imho


--
---
Marek Cervenka
===





Re: Add users and multi mysql

2012-03-22 Thread Ladar Levison

On Thu, 03/22/12 3:24 AM, Tomasz Sterna wrote:

BTW, this is intentionally hidden feature, but you're able to define DB
queries for RDBMS authreg plugins in c2s.xml config file, without
modyfing jabberd2 code.

Just define
authreg.mysql.sql.create
authreg.mysql.sql.select
authreg.mysql.sql.setpassword
authreg.mysql.sql.delete


Alas my plugin does more than execute a SQL query. I had to build logic 
that strips off the domain portion of the username if its lavabit.com 
but leave it intact for everyone else. Then I run the cleansed username 
and plain text password through SHA 512. The SQL query then searches the 
database for a match. If that fails, I look for a matching email address 
in the mailboxes table and use that to map back to a username so I can 
repeat the process with the correct username...


I also added logic to detect and handle situations where the credentials 
are valid, but the account is locked. Or if the account is configured to 
require SSL for access, I'll check the connection status and enforce 
that rule on XMPP connections.


There are a few more things its doing, but I'd have to check the code to 
get the list accurate. :)