Integration/Ejabberd.iRedMail.with.OpenLDAP/Ubuntu - Revision history

Shake.chen: /* Monitor the log */

Shake.chen — Sun, 18 Apr 2010 08:06:04 GMT

Monitor the log

← Older revision		Revision as of 08:06, 18 April 2010
Line 144:		Line 144:
	===Monitor the log===		===Monitor the log===

-	~~After restart~~ the ~~openldap service~~ and ~~monitor the~~ log	+	Monitor the OpenLDAP and Ejabberd log

	<pre>		<pre>

Shake.chen: /* Eable ldap log */

Shake.chen — Sun, 18 Apr 2010 08:05:17 GMT

Eable ldap log

← Older revision		Revision as of 08:05, 18 April 2010
Line 134:		Line 134:
	{{cfg\|/etc/ldap/slapd.conf \|<pre>		{{cfg\|/etc/ldap/slapd.conf \|<pre>
	loglevel 256 # <-- change form 0 to 256		loglevel 256 # <-- change form 0 to 256
		+	</pre>}}
		+
		+	Restart ldap
		+
		+	{{cmd\|<pre>
		+	/etc/init.d/slapd restart
	</pre>}}		</pre>}}

Shake.chen: /* =Monitor the log */

Shake.chen — Sun, 18 Apr 2010 08:04:33 GMT

=Monitor the log

← Older revision		Revision as of 08:04, 18 April 2010
Line 136:		Line 136:
	</pre>}}		</pre>}}

-	===Monitor the log==	+	===Monitor the log===

	After restart the openldap service and monitor the log		After restart the openldap service and monitor the log

Shake.chen: /* XMPP Federation and DNS Link */

Shake.chen — Sun, 18 Apr 2010 08:03:42 GMT

XMPP Federation and DNS Link

← Older revision		Revision as of 08:03, 18 April 2010
Line 126:		Line 126:

	The "target" of the SRV record should point to the publicly routable hostname for that machine (e.g. "mail.example.com"). The priority and weight should both be set to 0.		The "target" of the SRV record should point to the publicly routable hostname for that machine (e.g. "mail.example.com"). The priority and weight should both be set to 0.
		+
		+	==Troubleshooting==
		+
		+	===Eable ldap log===
		+
		+	* Open /etc/ldap/slapd.conf and set correct values:
		+	{{cfg\|/etc/ldap/slapd.conf \|<pre>
		+	loglevel 256 # <-- change form 0 to 256
		+	</pre>}}
		+
		+	===Monitor the log==
		+
		+	After restart the openldap service and monitor the log
		+
		+	<pre>
		+
		+	root@mail:~# tail -0f /var/log/openldap.log
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=125 op=12 SRCH
		+
		+	base="o=domains,dc=example,dc=com" scope=2 deref=0
		+
		+	filter="(&(mail=www@example.com)(&(objectClass=mailUser)(accountStatus=active)(enabledService=jabber)))"
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=125 op=12 SEARCH RESULT tag=101 err=0 nentries=1 text=
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=124 op=10 BIND anonymous mech=implicit ssf=0
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=124 op=10 BIND
		+
		+	dn="mail=www@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com" method=128
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=124 op=10 BIND
		+
		+	dn="mail=www@example.com,ou=Users,domainName=example.com,o=domains,dc=example,dc=com" mech=SIMPLE ssf=0
		+	Mar 10 16:51:33 u910 slapd[3643]: conn=124 op=10 RESULT tag=97 err=0 text=
		+
		+	# tail -0f /var/log/ejabberd/ejabberd.log
		+	=INFO REPORT==== 2010-03-10 16:53:18 ===
		+	I(<0.257.0>:ejabberd_listener:116) : (#Port<0.2811>) Accepted connection
		+
		+	{{192,168,1,147},59815} -> {{192,168,1,10},5222}
		+
		+	=INFO REPORT==== 2010-03-10 16:53:19 ===
		+	I(<0.474.0>:ejabberd_c2s:559) : ({socket_state,tls,{tlssock,#Port<0.2811>
		+
		+	,#Port<0.2813>},<0.473.0>}) Accepted authentication for www
		+
		+	=INFO REPORT==== 2010-03-10 16:53:19 ===
		+	I(<0.474.0>:ejabberd_c2s:804) : ({socket_state,tls,{tlssock,#Port<0.2811>,
		+
		+	#Port<0.2813>},<0.473.0>}) Opened session for www@example.com/15964533191268211199203489
		+
		+	=INFO REPORT==== 2010-03-10 16:53:30 ===
		+	I(<0.474.0>:ejabberd_c2s:1306) : ({socket_state,tls,{tlssock,#Port<0.2811>,
		+
		+	#Port<0.2813>},<0.473.0>}) Close session for www@example.com/15964533191268211199203489
		+
		+	</pre>

Shake.chen: /* Config iptables */

Shake.chen — Sun, 18 Apr 2010 07:59:23 GMT

Config iptables

← Older revision		Revision as of 07:59, 18 April 2010
Line 83:		Line 83:
	*5280 Web administration		*5280 Web administration

-	* Open /etc/default/iptables and set correct values:	+	Open /etc/default/iptables and set correct values:
	{{cfg\|/etc/default/iptables \|<pre>		{{cfg\|/etc/default/iptables \|<pre>

Line 96:		Line 96:
	/etc/init.d/iptables restart		/etc/init.d/iptables restart
	</pre>}}		</pre>}}
-

	==Web Access Ejabberd Admin Console==		==Web Access Ejabberd Admin Console==

Shake.chen: /* Setting Ejabberd */

Shake.chen — Sun, 18 Apr 2010 07:58:40 GMT

Setting Ejabberd

← Older revision		Revision as of 07:58, 18 April 2010
Line 56:		Line 56:

	</pre>}}		</pre>}}
		+
		+	===Start ejabberd and check the status===
		+
		+	{{cmd\|<pre>
		+	# /etc/init.d/ejabberd start
		+	Starting jabber server: ejabberd.
		+	# ejabberdctl status
		+	Node ejabberd@u910 is started. Status: started
		+	ejabberd is running
		+	</pre>}}
		+
		+	==Enable jabber service for mail user==
		+
		+	Use phpLDAPadmin or other tools to add LDAP values for exist mail user.
		+
		+	*Login in the phpLDAPadmin
		+	*Find the exit mail user www@example.com
		+	*Enable jabber service for the user www@example.com.
		+
		+	==Config iptables==
		+
		+	Standard ports:
		+	*5222 Main client port
		+	*5223 Obsolete secure jabber port
		+	*5269 Server to server port
		+	*5280 Web administration
		+
		+	* Open /etc/default/iptables and set correct values:
		+	{{cfg\|/etc/default/iptables \|<pre>
		+
		+	# http/https, smtp/smtps, pop3/pop3s, imap/imaps, ssh
		+	-A INPUT -p tcp -m multiport --dport 80,443,25,465,110,995,143,993,587,465,22,5222,5223,5269,5280 -j ACCEPT # <-- Add 5222 5223 5269 5280
		+
		+	</pre>}}
		+
		+	Restart the iptables service.
		+
		+	{{cmd\|<pre>
		+	/etc/init.d/iptables restart
		+	</pre>}}
		+
		+
		+	==Web Access Ejabberd Admin Console==
		+
		+	Now you can access http://192.168.1.10:5280/admin/
		+
		+	Login in the ejabberd web admin, We have seting www@example.com as admin for the ejabberd server
		+
		+	You can not create user in webadmin. If you want to create user, you need first add user in iRedAdmin, then enable the jabber service for the user in phpldapadmin.
		+
		+	If you want to add the second virtual domain, you need first create a new domain in iRedAdmin, then modify /etc/ejabberd/ejabberd.cfg .
		+
		+	* Open /etc/ejabberd/ejabberd.cfg and set correct values:
		+	{{cfg\|/etc/ejabberd/ejabberd.cfg\|<pre>
		+	%% Hostname
		+	{hosts, ["example.com","test.com"]}.
		+	</pre>}}
		+
		+	==XMPP Client: Pidgin==
		+
		+	You can choose your favor XMPP client, now I use Pidgin for test. Download the newst version of Pidgin and install. The setting is simple.
		+
		+	==XMPP Federation and DNS Link==
		+
		+	To ensure that your ejabberd instance will federate properly with the rest of the XMPP network, particularly with Google's "GTalk" service (i.e. the "@gmail.com" chat tool,) we must set the SRV records for the domain to point to the server where the ejabberd instance is running. We need three records, which can be created in the DNS Management tool of your choice:
		+
		+	* 1. Service: _xmpp-server Protocol: TCP Port: 5269
		+	* 2. Service: _xmpp-client Protocol: TCP Port: 5222
		+	* 3. Service: _jabber Protocol: TCP Port: 5269
		+
		+	The "target" of the SRV record should point to the publicly routable hostname for that machine (e.g. "mail.example.com"). The priority and weight should both be set to 0.

Shake.chen: /* Setting Ejabberd */

Shake.chen — Sun, 18 Apr 2010 07:51:16 GMT

Setting Ejabberd

← Older revision		Revision as of 07:51, 18 April 2010
Line 28:		Line 28:
	*LDAP auth		*LDAP auth

-	* Open /etc/ejabberd/ejabberd.cfg and set correct values:	+	Open /etc/ejabberd/ejabberd.cfg and set correct values:
	{{cfg\|/etc/ejabberd/ejabberd.cfg\|<pre>		{{cfg\|/etc/ejabberd/ejabberd.cfg\|<pre>

Shake.chen: /* Setting Ejabberd */

Shake.chen — Sun, 18 Apr 2010 07:50:46 GMT

Setting Ejabberd

← Older revision		Revision as of 07:50, 18 April 2010
Line 24:		Line 24:
	In Erlang, comments begin with the % sign.		In Erlang, comments begin with the % sign.

		+	*Setting admin and domain, now we setting www@example.com as admin.
		+	*Auth not use internal.
		+	*LDAP auth

	* Open /etc/ejabberd/ejabberd.cfg and set correct values:		* Open /etc/ejabberd/ejabberd.cfg and set correct values:

Shake.chen: Created page with '==Install Ejabberd== {{cmd|

 apt-get install ejabberd

}} ==Configure ejabberd== ===Find cn=vmail password=== vmail password was random create duiring iredmail insta…'

Shake.chen — Sun, 18 Apr 2010 07:49:27 GMT

Created page with '==Install Ejabberd== {{cmd|<pre> apt-get install ejabberd </pre>}} ==Configure ejabberd== ===Find cn=vmail password=== vmail password was random create duiring iredmail insta…'

New page

==Install Ejabberd==

{{cmd|<pre>
apt-get install ejabberd
</pre>}}

==Configure ejabberd==

===Find cn=vmail password===

vmail password was random create duiring iredmail install.you can find the password in /etc/postfix/ldap_virtual_mailbox_domains.cf

* Open /etc/postfix/ldap_virtual_mailbox_domains.cf and check values:
{{cfg|/etc/postfix/ldap_virtual_mailbox_domains.cf |<pre>
bind_dn = cn=vmail,dc=example,dc=com
bind_pw = InYTi8qGjamTb6Me2ESwbb6rxQUs5y #cn=vmail password

</pre>}}

===Setting Ejabberd===

Ejabberd's configuration files are written in Erlang syntax, which might be difficult to comprehend. Thankfully, the modifications we need to make are relatively minor and straightforward. The main ejabberd configuration file is located at /etc/ejabberd/ejabberd.cfg. We'll cover each relevant option in turn.

In Erlang, comments begin with the % sign.

* Open /etc/ejabberd/ejabberd.cfg and set correct values:
{{cfg|/etc/ejabberd/ejabberd.cfg|<pre>

[...]
%% Admin user
{acl, admin, {user, "www", "example.com"}}.
%% Hostname
{hosts, ["example.com"]}.

[...]

%%{auth_method, internal}.

[...] Add below at the botton.
%%% Authenticate against LDAP.
{auth_method, ldap}.
{ldap_servers, ["127.0.0.1"]}.
%%% {ldap_encrypt, tls}.
{ldap_port, 389}.
{ldap_base, "o=domains,dc=example,dc=com"}.
{ldap_rootdn, "cn=vmail,dc=example,dc=com"}.
{ldap_password, "InYTi8qGjamTb6Me2ESwbb6rxQUs5y"}. #cn=vmail password
%%% Enable both normal mail user and mail admin.
{ldap_filter, "(&(objectClass=mailUser)(accountStatus=active)(enabledService=jabber))"}.
{ldap_uids, [{"mail", "%u@%d"}]}.

</pre>}}