<![CDATA[<b><u><font color="#0000FF">ldapauth README</font></u></b></h2>
<p>
This module came out of my specific needs in search of a possible solution to
use a member directory for authentication.
I am still not sure if this is the best approach to this problem. But it works
for my specific needs and I have tested it under a certain amount of load. So, if you happen to
use it,
please forward your platform setup, thoughts and ideas to email: <a href="mailto:zadk@mynet.com"> zadk@mynet.com</a>
jid: <a href="mailto:zad@jabber.org">zad@jabber.org</a></p>
<p><font color="#0000FF"><u><b>Module Description</b></u></font></p>
<p>The module has a simple purpose, bypass the standard jabber server
authentication, and perform authentication (NOT registration) against an LDAP
directory. As an example, I have a membership
directory for my site which has recorded a number of users, and
I want my current users to use jabber IM. However, I want the jabber specific data
(such as roster) to still remain on the xdb (spool). Only authentication is to be performed against
the LDAP. Currently ldapauth supports 2 of the 3 jabber authentication types,
namely plain text and digest (which uses SHA1 -- the Secure Hash Algorithm
developed by NIST).</p>
<p>I have used this module with jabber server 1.4.1 running on redhat 6.2/7.1,
and Microsoft Membership Directory (Siteserver 3.0) running
on Windows 2000 servers for about 6 months with average 4k daily logins. It
has been setup and run under other configurations (Redhat 7.1 and openLDAP are the first to
come to my mind, but I'm sure others on the jadmin and jdev list who have tested other environments).</p>
<p><b><u><font color="#0000FF">
To do list </font></u></b></p>
<ul>
<li>Implement 0k auth</li>
<li>New user registration has to be handled </li>
<li>Documentation</li>
</ul>
<p><b><u><font color="#0000FF">ldapauth Setup</font></u></b></p>
<p>1 - edit server config file. Add ldapauth modules (printed in red) and remove
mod_auth_plain, mod_auth_digest, mod_auth_0k modules. Mine lookes somthing like this after
editing: </p>
<p> <load main="jsm"><br>
<jsm>./jsm/jsm.so</jsm><br>
<mod_echo>./jsm/jsm.so</mod_echo><br>
<mod_roster>./jsm/jsm.so</mod_roster><br>
<mod_time>./jsm/jsm.so</mod_time><br>
<mod_vcard>./jsm/jsm.so</mod_vcard><br>
<mod_last>./jsm/jsm.so</mod_last><br>
<mod_version>./jsm/jsm.so</mod_version><br>
<mod_announce>./jsm/jsm.so</mod_announce><br>
<mod_agents>./jsm/jsm.so</mod_agents><br>
<mod_browse>./jsm/jsm.so</mod_browse><br>
<mod_admin>./jsm/jsm.so</mod_admin><br>
<mod_filter>./jsm/jsm.so</mod_filter><br>
<mod_offline>./jsm/jsm.so</mod_offline><br>
<mod_presence>./jsm/jsm.so</mod_presence><br>
<font color="#FF0000"> <mod_auth_ldap_digest>./jsm/jsm.so</mod_auth_ldap_digest> <br>
<mod_auth_ldap_z>./jsm/jsm.so</mod_auth_ldap_z></font><br>
<mod_log>./jsm/jsm.so</mod_log><br>
<mod_register>./jsm/jsm.so</mod_register><br>
<mod_xml>./jsm/jsm.so</mod_xml><br>
</load><br>
</p>
<p> 2 - Replace mod_register.c if you don't want user password to be saved on
'user.xml'. This should work for ldapauth2 as well although I haven't tested
with it.
</p>
<p> 3 - Add the new ldapchk tag to jabber.xml. I put mine right after </welcome> tag<br>
<br>
<!-- used for ldap authentication by mod_auth_ldap_z and mod_auth_ldap_digest --><br>
<ldapchk><br>
<host>210.10.1.48</host><br>
<port>1004</port><br>
<binddn>cn=admin,ou=members,o=mysite1</binddn><br>
<bindpw>taz1</bindpw><br>
<basedn>ou=members, o=mysite1</basedn><br>
</ldapchk>
</p>
<p>4 - Edit jabber-1.4.1/platform-settings file and add LDAP lib to
the 'LIBS' environment variable. Mine was nss_ldap-2.1.3 (note that this file will be over-written everytime you run configure).
Typical LIBS looks like this: LIBS= -lpth -ldl -lresolv -lnss_ldap-2.1.3</p>
<p>5 - Edit jsm/Makefile and jsm/modules/Makefile. add mod_auth_ldap_z.o and mod_auth_ldap_digest.o
to jsm_EXOBJECTS. Example:</p>
<p>jsm_EXOBJECTS = \<br>
modules/mod_admin.o \<br>
modules/mod_agents.o \<br>
modules/mod_browse.o \<br>
modules/mod_announce.o \<br>
modules/mod_auth_ldap_z.o \<br>
modules/mod_auth_ldap_digest.o \</p>
<p>
6 - fire 'make'. </p>
<p>
Good luck,</p>
<p>
Zad -- JID: zad@jabber.org
]]>