<b><u><font color="#0000FF">ldapauth README</font></u></b></h2> <p> This module came out of my specific needs in search of a possible solution to use a member directory for authentication. I am still not sure if this is the best approach to this problem. But it works for my specific needs and I have tested it under a certain amount of load.&nbsp;So, if you happen to use it, please forward your platform setup, thoughts and ideas to email: <a href="mailto:zadk@mynet.com"> zadk@mynet.com</a>&nbsp;&nbsp; jid: <a href="mailto:zad@jabber.org">zad@jabber.org</a></p> <p><font color="#0000FF"><u><b>Module Description</b></u></font></p> <p>The module has a simple purpose, bypass the standard jabber server authentication, and perform authentication (NOT registration) against an LDAP directory. As an example, I have a membership directory for my site which has recorded a number of users, and I want my current users to use jabber IM. However, I want the jabber specific data (such as roster) to still remain on the xdb (spool). Only authentication is to be performed against the LDAP. Currently ldapauth supports 2 of the 3 jabber authentication types, namely plain text and digest (which uses SHA1 -- the Secure Hash Algorithm developed by NIST).</p> <p>I have used this module with jabber server 1.4.1 running on redhat 6.2/7.1, and Microsoft Membership Directory (Siteserver 3.0) running on Windows 2000 servers for about 6 months with average 4k daily logins.&nbsp;It has been setup and run under other configurations (Redhat 7.1 and openLDAP are the first to come to my mind, but I'm sure others on the jadmin and jdev list who have tested other environments).</p> <p><b><u><font color="#0000FF"> To do list&nbsp;</font></u></b></p> <ul> <li>Implement 0k auth</li> <li>New user registration has to be handled&nbsp;</li> <li>Documentation</li> </ul> <p><b><u><font color="#0000FF">ldapauth Setup</font></u></b></p> <p>1 - edit server config file. Add ldapauth modules (printed in red) and remove mod_auth_plain, mod_auth_digest, mod_auth_0k modules. Mine lookes somthing like this after editing:&nbsp;</p> <p> &lt;load main="jsm"><br> &lt;jsm>./jsm/jsm.so&lt;/jsm><br> &lt;mod_echo>./jsm/jsm.so&lt;/mod_echo><br> &lt;mod_roster>./jsm/jsm.so&lt;/mod_roster><br> &lt;mod_time>./jsm/jsm.so&lt;/mod_time><br> &lt;mod_vcard>./jsm/jsm.so&lt;/mod_vcard><br> &lt;mod_last>./jsm/jsm.so&lt;/mod_last><br> &lt;mod_version>./jsm/jsm.so&lt;/mod_version><br> &lt;mod_announce>./jsm/jsm.so&lt;/mod_announce><br> &lt;mod_agents>./jsm/jsm.so&lt;/mod_agents><br> &lt;mod_browse>./jsm/jsm.so&lt;/mod_browse><br> &lt;mod_admin>./jsm/jsm.so&lt;/mod_admin><br> &lt;mod_filter>./jsm/jsm.so&lt;/mod_filter><br> &lt;mod_offline>./jsm/jsm.so&lt;/mod_offline><br> &lt;mod_presence>./jsm/jsm.so&lt;/mod_presence><br> <font color="#FF0000"> &lt;mod_auth_ldap_digest>./jsm/jsm.so&lt;/mod_auth_ldap_digest>&nbsp;&nbsp;<br> &lt;mod_auth_ldap_z>./jsm/jsm.so&lt;/mod_auth_ldap_z></font><br> &lt;mod_log>./jsm/jsm.so&lt;/mod_log><br> &lt;mod_register>./jsm/jsm.so&lt;/mod_register><br> &lt;mod_xml>./jsm/jsm.so&lt;/mod_xml><br> &lt;/load><br> </p> <p> 2 - Replace mod_register.c if you don't want user password to be saved on 'user.xml'. This should work for ldapauth2 as well although I haven't tested with it. </p> <p> 3 - Add the new ldapchk tag to jabber.xml. I put mine right after &lt;/welcome> tag<br> <br> &lt;!-- used for ldap authentication by mod_auth_ldap_z and mod_auth_ldap_digest --><br> &lt;ldapchk><br> &lt;host&gt;210.10.1.48&lt;/host><br> &lt;port>1004&lt;/port><br> &lt;binddn&gt;cn=admin,ou=members,o=mysite1&lt;/binddn><br> &lt;bindpw&gt;taz1&lt;/bindpw><br> &lt;basedn>ou=members, o=mysite1&lt;/basedn><br> &lt;/ldapchk> </p> <p>4 - Edit jabber-1.4.1/platform-settings file and add LDAP lib&nbsp;to the 'LIBS' environment variable. Mine was nss_ldap-2.1.3 (note that this file will be over-written everytime you run&nbsp;configure). Typical LIBS looks like this: LIBS= -lpth -ldl -lresolv -lnss_ldap-2.1.3</p> <p>5 - Edit jsm/Makefile and jsm/modules/Makefile. add mod_auth_ldap_z.o and mod_auth_ldap_digest.o to jsm_EXOBJECTS. Example:</p> <p>jsm_EXOBJECTS = \<br> modules/mod_admin.o \<br> modules/mod_agents.o \<br> modules/mod_browse.o \<br> modules/mod_announce.o \<br> modules/mod_auth_ldap_z.o \<br> modules/mod_auth_ldap_digest.o \</p> <p> 6 - fire 'make'.&nbsp;&nbsp;</p> <p> Good luck,</p> <p> Zad -- JID: zad@jabber.org