KyivBSD 2009 - Creating a corporate instant messaging and information exchange system (ejabberd + Active Directory)
0 likes367 views
Creating a corporate instant messaging and information exchange system (ejabberd + Active Directory)
![10
仂仆亞舒 亠于亠舒
弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆
仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
%%% ================
%%% SERVED HOSTNAMES
{hosts, ["ns1.example.ck.ua", "jabber.example.local"]}.
%%% ===============
%%% LISTENING PORTS
{listen,
[
{5222, ejabberd_c2s, [
{access, c2s},
{shaper, c2s_shaper},
{certfile, "/usr/local/etc/ejabberd/server.pem"}, starttls,
{max_stanza_size, 65536}
{5280, ejabberd_http, [
http_poll,
web_admin
]}
]}.
%%% ==============
%%% AUTHENTICATION
%% Authentication using LDAP
{auth_method, ldap}.
{ldap_servers, ["192.168.1.1"]}.
{ldap_uids, [{"userPrincipalName", "%u@example.local"}]}.
{ldap_base, "dc=example,dc=local"}.
{ldap_rootdn, "CN=ejabberd,CN=Users,dc=example,dc=local"}.
{ldap_password, "password"}.
{ldap_filter, "(memberOf=*)"}.
%%% ============
%%% ACCESS RULES
{access, configure, [{allow, admin}]}.
{modules,
[
{mod_shared_roster_ad,
[{ldap_base, "dc=example,dc=local"},
{ldap_rfilter, "(cn=Jabber)"},
{ldap_filter, "(ObjectClass=*)"},
{ldap_ufilter,"(sAMAccountName)"},
{ldap_groupattr,"cn"},
% {ldap_groupdesc,"description"},
{ldap_groupdesc,"example.local"},
{ldap_memberattr,"memberUid"},
{ldap_memberattr_format,"%u"},
{ldap_userdesc,"cn"}
]},
{mod_stats, []},
{mod_time, []},
{mod_vcard_ldap,
[{host, "users.@192.168.1.1@"},
{ldap_vcard_map,
[{"NICKNAME", "%u", []},
{"GIVEN", "%s", ["givenName"]},
{"MIDDLE", "%s", ["initials"]},
[...]
]}.
/usr/local/etc/ejabberd/ejabberd.cfg
/usr/local/etc/ejabberd/inetrc
{lookup,["file","native"]}.
{host,{127,0,0,1}, ["ns.example.ck.ua","jabber.example.local"]}.
{file, hosts, "/etc/hosts"}.
{file, resolv, "/etc/resolv.conf"}.](https://image.slidesharecdn.com/o-drach-kyivbsd0902ejabberd-121023152110-phpapp01/85/KyivBSD-2009-Creating-a-corporate-instant-messaging-and-information-exchange-system-ejabberd-Active-Directory-10-320.jpg)
KyivBSD 2009 - Creating a corporate instant messaging and information exchange system (ejabberd + Active Directory)
- 1. 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) 仍亠从舒仆亟 舒, 亞仂仍仂于仆亳亶 仗亠舒仍 于亟亟仍 丐 亟亠仗舒舒仄亠仆 亰舒弍亠亰仗亠亠仆仆 亟磿仆仂 于亳从仂仆舒于仂亞仂 从仂仄亠 丼亠从舒从仂 仄从仂 舒亟亳
- 2. 2 仂舒仆仂于从舒 亰舒亟舒 - 弌于仂亳亳 亠亠从亳于仆亳亶 亰仆亳亶 亰舒弍 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 亟仍 于 亟亠仗舒舒仄亠仆于 于亳从仂仆舒于仂亞仂 从仂仄亠 丼亠从舒从仂 仄从仂 舒亟亳 (于 仂仄 亳仍 亶 于亟亟舒仍亠仆亳) 仆舒 仂仆仂于 AD - 亟于亳亳亳 亠亠从亳于仆 仂弍仂亳 从仆亳 仗亟仂亰亟仍于, 亰仂从亠仄舒 于亟亟仍 丐 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 3. 3 亳亰仆舒亠仆仆 仄亠仂亟于 亠舒仍亰舒 1. 亳弍 仗仂仂从仂仍 2. 亳弍 亠于亠舒 3. 亳弍 从仍仆从亳 仗仂亞舒仄 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 4. 4 亳弍 仗仂仂从仂仍 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) IRC (仂亰仂弍仍亠仆仂 1988 .) XMPP (Jabber) (仂亰仂弍仍亠仆仂 1998 .) 仂亢仍亳于仂: - 仗仂于 舒 仂仂弍亳 仗仂于亟仂仄仍亠仆仆 - 弌于仂亠仆仆 从仄仆舒 IRC-仄亠亠亢: - DALnet - EFnet - IRCnet - QuakeNet 仂亟舒从仂于 仄仂亢仍亳于仂: - 亟亳仄从舒 仍ﾐ継于 于 仆 仄亠亠亢 - VoIP - 亟亠仂亰于'磶仂从 亳从仂亳仂于 于 Google, Yahoo, 亊仆亟亠从, 舒 舒从仂亢 于 仍亢弍舒 AOL AIM, Microsoft Office Communications Server IBM Sametime
- 5. 5 亳弍 亠于亠舒 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) 仂从舒亰仆亳从: 1. Openfire 2. ejabberd 3. Jabberd 2 4. Jabberd 1.4 亠仆亰 GPL GPL GPL JOSL/ GPL 仍舒仂仄亳 , 仆舒 磻亳 仗舒ﾑ Java , 仆舒 磻亳 仗舒ﾑ Erlang *BSD, Linux, Solaris, Windows *BSD, Linux, Solaris, Windows 仂弍仍亳于仂 - 亠弍-仆亠亠亶 - LDAP-仆亠亞舒 - 仂从舒仍亰舒 - 舒舒弍仂于舒仆舒 舒亠从舒 亰 于亳从仂亳舒仆仆礆 SEDA - 亟亳仄从舒 仗仍舒亞仆于 - 亠弍-仆亠亠亶 - LDAP-仆亠亞舒 - SASL StartTLS - 仂从舒仍亰舒 - 仂亟仍仆舒 舒亠从舒 - ACL -丐舒仆仗仂亳 - SASL StartTLS - ACL - SASL StartTLS 亟仍 c2s ... 舒仆仆亶 亠仍亰 2007 . 个舒从: Jabber.org 仗亠亠亶仂于 仆舒 ejabberd 仗仍 亳于舒仍仂亞仂 仗仂仂, 仗亳亳仆亠仆仂亞仂 仗仂亞仍亳仆舒仆仆礆 亠于亠仆亳 亠于 jabberd 1.4 仗亟 舒 仗从仂于亳 仆舒于舒仆舒亢亠仆.
- 6. 6 亳弍 从仍仆从亳 仗仂亞舒仄 - 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) 仂从舒亰仆亳从: 1. Jajc 2. Psi 3. Gajim 4. Coccinella 亠仆亰 Freeware GPL GPL GPL 仍舒仂仄亳 Windows NT *BSD, Linux, Solaris, Windows, Mac OS X *BSD, Linux, Windows *BSD, Linux, Solaris, Windows, Mac OS X 仂弍仍亳于仂 - 仂从舒仍亰舒 - 弌仗仂于亠仆仆 - 丿亳于舒仆仆 - 仆仄舒仍亰仄 - 仂从舒仍亰舒 - 丿亳于舒仆仆 - 舒从仍舒亟从亳 - TLS - XML 从仂仆仂仍 - 舒从仍舒亟从亳 - TLS - 仂从舒 亳仆仂于仂从: 亳弍 Jajc 亠亠亰 亶仂亞仂 仄仆仄舒仍亰仄, 仍亠亞从 于舒仆仂于仍亠仆仆, 仆舒仍舒于舒仆仆 于亳从仂亳舒仆仆. 亳弍 Psi 亠亠亰 于亳仂从 仆从仂仆舒仍仆 亰仆亳亶 仆亠亠亶.
- 7. 7 亠舒仍亰舒 1. 仆舒仍 亠于亠舒 2. 舒仍舒于舒仆仆 Active Directory 3. 舒仍舒于舒仆仆 从仍仆于 4. 仂亟舒仍亳亶 仗仂于亟 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 8. 8 仆舒仍 亠于亠舒 - /usr/ports/net-im/ejabberd - 舒 亟仍 于亟仂弍舒亢亠仆仆 仄亠仆 - DNS - TLS (亠亳从舒亳) - 仂仆亞舒亶仆亳亶 舒亶仍 - All Users in Shared Roster 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 9. 9 舒仍舒于舒仆仆 Active Directory - 仂亟舒亳 于 亞仗 Jabber Users - 弌于仂亳亳 从仂亳于舒舒 Jabber - 仄仆舒 仂仄舒 仄亠仆 AD 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 10. 10 仂仆亞舒 亠于亠舒 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) %%% ================ %%% SERVED HOSTNAMES {hosts, ["ns1.example.ck.ua", "jabber.example.local"]}. %%% =============== %%% LISTENING PORTS {listen, [ {5222, ejabberd_c2s, [ {access, c2s}, {shaper, c2s_shaper}, {certfile, "/usr/local/etc/ejabberd/server.pem"}, starttls, {max_stanza_size, 65536} {5280, ejabberd_http, [ http_poll, web_admin ]} ]}. %%% ============== %%% AUTHENTICATION %% Authentication using LDAP {auth_method, ldap}. {ldap_servers, ["192.168.1.1"]}. {ldap_uids, [{"userPrincipalName", "%u@example.local"}]}. {ldap_base, "dc=example,dc=local"}. {ldap_rootdn, "CN=ejabberd,CN=Users,dc=example,dc=local"}. {ldap_password, "password"}. {ldap_filter, "(memberOf=*)"}. %%% ============ %%% ACCESS RULES {access, configure, [{allow, admin}]}. {modules, [ {mod_shared_roster_ad, [{ldap_base, "dc=example,dc=local"}, {ldap_rfilter, "(cn=Jabber)"}, {ldap_filter, "(ObjectClass=*)"}, {ldap_ufilter,"(sAMAccountName)"}, {ldap_groupattr,"cn"}, % {ldap_groupdesc,"description"}, {ldap_groupdesc,"example.local"}, {ldap_memberattr,"memberUid"}, {ldap_memberattr_format,"%u"}, {ldap_userdesc,"cn"} ]}, {mod_stats, []}, {mod_time, []}, {mod_vcard_ldap, [{host, "users.@192.168.1.1@"}, {ldap_vcard_map, [{"NICKNAME", "%u", []}, {"GIVEN", "%s", ["givenName"]}, {"MIDDLE", "%s", ["initials"]}, [...] ]}. /usr/local/etc/ejabberd/ejabberd.cfg /usr/local/etc/ejabberd/inetrc {lookup,["file","native"]}. {host,{127,0,0,1}, ["ns.example.ck.ua","jabber.example.local"]}. {file, hosts, "/etc/hosts"}. {file, resolv, "/etc/resolv.conf"}.
- 11. 11 舒仍舒于舒仆仆 从仍仆舒 - 仍仂亞仆, 仗舒仂仍, jabber-亠于亠, 舒亟亠舒 - 仗舒仂仍 弍亠亰 亳于舒仆仆 (亰舒 亟仂从仄亠仆舒) 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 12. 12 亳仆仂于从亳 - 弌仗仂亠仆仆 仗仂亠 仗仍从于舒仆仆 于 舒亟 (于 .. 亰舒 舒仆仂从 仄舒仂于亳 仗仂于亟仂仄仍亠仆, 舒仆仂仆于) - 亟仂弍舒亢亠仆仆 仆仂仄舒 仗仂 仗亳仆 - 亟于亳亠仆仆 亠亠从亳于仆仂 仂弍仂亳 于亟亟仍 丐 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory)
- 13. 13 亠仗亠从亳于亳 亳亠仄亳 - 亠亠亟 于亟 Active Directory 亟仂 OpenLDAP - 舒仆仂于仍亠仆仆 弍仂舒-仗仂仄仆亳从舒 - 舒仆仂于仍亠仆仆 亟仂亟舒从仂于亳 舒仆仗仂于 - 亠舒仍亰舒 仗亟亳仄从亳 VoIP 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) 仗亠仗亠从亳于舒
- 14. 磻 亰舒 于舒亞! Web-舒亶: http://luckyredhot.blogspot.com E-mail: luckyredhot@gmail.com 弌于仂亠仆仆 从仂仗仂舒亳于仆仂 亳亠仄亳 仄亳于仂亞仂 仂弍仄仆 仗仂于亟仂仄仍亠仆仆礆亳 舒 仆仂仄舒 (ejabberd+Active Directory) 仍亠从舒仆亟 舒 亞仂仍仂于仆亳亶 仗亠舒仍 于亟亟仍 丐 亟亠仗舒舒仄亠仆 亰舒弍亠亰仗亠亠仆仆 亟磿仆仂 于亳从仂仆舒于仂亞仂 从仂仄亠 丼亠从舒从仂 仄从仂 舒亟亳