Hot answers tagged

13

Conversations provides a list of XEPs requiring server-side support, reproduced below with links to the corresponding Prosody 0.9.x modules. For encrypted group chat (OMEMO support), you strictly need only mod_pep and mod_roster. The other modules account for additional functionality in an OMEMO context (e.g. sharing files) and environments (e.g. mobile ...


9

The solution is: Jabber requires starttls: openssl s_client -connect my.jabber.server.net:5222 </dev/null -starttls xmpp returns the certificate


8

The _jabber SRV resource record is deprecated. Don't worry about it unless you want to support old, legacy clients. http://mailman.jabber.org/pipermail/jadmin/2007-January/098908.html SRV records are described in RFC 2782. They are DNS records that applications can use to locate services on the network.


7

This is an old question, but I wanted to add an updated answer for anyone searching and finding this, but using a more modern version of ejabberd (14.12 at the time of this writing). The following options (in the new YAML configuration format) should make starttls required, change the ciphers list to something decent, and disable legacy SSL support for s2s ...


5

These are a little tricky to find out on the internet - hopping randomly through the "StartSSL" marked ones in this public directory, some were using self-signed certificates, and others were using the same certificates as on their HTTP services (not an "XMPP" cert). Of the couple that I did find using these special XMPP certs, there were two differences ...


4

You need to follow the clustering guide here http://docs.ejabberd.im/admin/guide/clustering/


3

Yes, you need a certificate for example.com, it being valid for xmpp.example.net does not matter. This is because DNS is considered untrusted: it would be very easy to poof your SRV record to point to a malicous server, for which an attacker might have a valid and trusted certificate. There are some proposed solutions to this problem (including DANE and ...


3

Requiring StartTLS: {s2s_use_starttls, require}. instead of {s2s_use_starttls, true}. (keep in mind this will currently make you unable to connect to gmail.com and all domains they host). Weak ciphers: See http://www.process-one.net/docs/ejabberd/guide_en.html#sec27. I think this means doing something like adding {ciphers, "..."} to the ejabberd_c2s ...


3

From the Prosody users mailing list, mod_proxy65 is itself the "bytestream proxy" service, and proxy.example.com is just a different DNS record pointing to the same Prosody server. If you don't want to set up an additional DNS record, use proxy65_address to direct the client to the existing DNS record of your Prosody server. See the mailing list message (...


2

I think that the reason why this hasn't been covered by anybody because a initial google turns up absolutely nothing.. Slightly more advanced goggle-fu shows that when the priority of all resources of a given user are the same then the message will be multicast to all available resources https://www.ejabberd.im/node/4994 I could also find someone who put ...


2

This is because google uses its internal way of communicating through jabber protocol. If you disable Talk/Hangout in your google apps configuration, it will start to work (after few hours).


2

I'm biased (I work for Frozen Mountain), but you should check out WebSync. WebSync v4 uses WebSockets in addition to falling back to long-polling/callback-polling as needed. The WebSockets in WebSync are all over standard HTTP ports as well, so there won't be any issues with routers/filrewalls/etc. On a "normal" system, you should see ~20k concurrent (per ...


2

Some XMPP clients (e.g. libpurple-based clients such as Adium and Pidgin) use DNS SRV records, cf.: http://wiki.xmpp.org/web/SRV_Records#STUN_SRV_records _stun._tcp.example.net. TTL IN SRV priority weight port target _stun._udp.example.net. TTL IN SRV priority weight port target e.g. _stun._tcp.example.net. 86400 IN SRV 5 50 3478 server1.example.net. ...


2

This is not announcement. It seems to be standard message with subject. You simply need to find the abuse user and block their account and tighten control and validation on account registration. It is for example a good idea to block in-band registration and handle registration through a web form.


2

I guess you're out of luck. Why can't I get a larger heap with the 32-bit JVM? The maximum theoretical heap limit for the 32-bit JVM is 4G. Due to various additional constraints such as available swap, kernel address space usage, memory fragmentation, and VM overhead, in practice the limit can be much lower. On most modern 32-bit Windows ...


2

every time I restart the server, the history of every room is lost. The room recent discussion history is keep only in RAM, because it isn't expected to be stored permanently. It is configured with the option history_size, and it doesn't make sense to set a high value, as it only allows a new occupant to know recent comments in the current discussion. It is ...


2

What error message does it show? In ejabberd.yml it is important the line indentation. For example, this is correct: modules: mod_http_upload: {} This is incorrect: modules: mod_http_upload: {} and throws that error: 14:30:29.207 [error] Cannot load /etc/ejabberd/ejabberd.yml: Syntax error on line 756 at position 3: did not find expected key


1

The culprit is found: Diffie-Hellman parameters are controlled by erlang-p1-tls. So when you upgrade ejabberd to the version from the testing repository, you should upgrade erlang-p1-tls package to the version from the testing as well! sudo apt-get install erlang-p1-tls/testing Actually, to get testing version of ejabberd to work properly on the stable ...


1

Lync client cannot work as an XMPP client. XMPP supports in Lync is only relating to gateway. It means that users of a Lync Server can talk with users of an XMPP server. However, it does not mean you can use Lync client to connect directly to an XMPP server.


1

It may be worthwhile noting that the XMPP API will be permanently disabled on October 31, 2017: XMPP API Turndown. Please see Alternatives to the XMPP API for information on how to replicate functionality with other Google Cloud Platform products. For example, developers using the API for direct messaging with XMPP clients can easily build a similar ...


1

You need to enable mod_log_auth https://code.google.com/p/prosody-modules/wiki/mod_log_auth Then you need to add the following on your config file: log_auth_ips = "all" This will log the IP of all incoming connections (failed or not).


1

This is controlled entirely by the client. The server can control which rooms are able to be auto-joined, with the autojoin attribute of the conference element element, but it's up to the XMPP client to actually do so. Note that the default value for the autojoin attribute is false, but once you set that to true on the server, its entirely up to whatever ...


1

bitlbee has XMPP support for a whole bunch of XMPP options.


1

I increased debug verbosity and I saw the SSL certificate CN didn't match the Satellite server's FQDN. Seems that SSL cert was not properly created at Spacewalk server setup


1

This is fixed now. It was a silly mistake from me. I had put all the files (tigase.mydomain.crt, tigase.mydomain.csr, tigase.mydomain.key, tigase.mydomain.pem) generated. And the "tigase.mydomain.crt" is the certificate without any private key also gets picked up for adding to the keystore and this is where the server throws the exception. This time I just ...


1

You can use my tool jabber-migrate: This tool simplifies migrating of a roster (contact list in XMPP terminology) from one Jabber server (including GTalk!) to another. Note: I'm the author of this tool.


1

It uses the clustering capabilities of Erlang : - The ability to message any process on a any node in the erlang cluster - it also uses mnesia, erlang's distributed database for storing the routing table, which contains the JID <-> client process id mapping. When a message enters ejabberd, it looks up the recipient JID in this table, and sends it to the ...


1

If you're using Google Apps, then you need to set some SRV records in your DNS. You can use this great tool to check if your domain's DNS is setup correctly, and if not - howto. I ran a check on myserver.com.ua - The Jabber records were not found for that domain.


1

The official solution is for clients to declare support for message carbons. This is the modern way of delivering, which supports multiple devices.


1

There's a plugin to handle user registration. See here.


Only top voted, non community-wiki answers of a minimum length are eligible