ejabberd - Comments for "[SOLVED !!] mod_shared_roster_ldap"

mod_shared_roster x mod_shared_roster_ldap

robsontex — Tue, 13 Mar 2007 19:05:30 +0000

primski,

You have to configure mod_shared_roster_ldap and comment the lines referring to mod_shared_roster. So, replace your code with the lines below in ejabberd.cfg and it must work.

Quote:

" {mod_shared_roster, []},
{mod_shared_roster_ldap, [
{ldap_base,"dc=example,dc=com"},
{ldap_groupattr,"ou"},
{ldap_groupdesc,"employees"},
{ldap_memberattr,"uid"},
{ldap_filter,"(uid=*)"}
]

Best regards,
Robson

still not working

primski — Thu, 08 Mar 2007 09:42:41 +0000

Hi,

you seem to be a professional, maybe you can help me out a bit.

I followed your instructions yet i cannot get it to work by all means.

here's an extract of my ldif file:

Quote:

# entry-id: 43
dn: uid=jdoe,ou=IT,ou=employees,dc=example,dc=com
uid: jdoe
givenName: john
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
sn: doe
cn: john doe
userPassword: [somepassword]
creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot
modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo
t
createTimestamp: 20070303140238Z
modifyTimestamp: 20070303140238Z
nsUniqueId: c0388f01-c98f11db-807482aa-0bf53725

here's what i did to my ejabberd.cfg

Quote:

...
{mod_roster, []},
{mod_shared_roster, [
{ldap_base,"dc=example,dc=com"},
{ldap_groupattr,"ou"},
{ldap_groupdesc,"employees"},
{ldap_memberattr,"uid"},
{ldap_filter,"(uid=*)"}
]
...

Im not really sure about ldap_groupattr what's supposed to be there, but since my groups are ou=IT and ou=employees i figured it should be setup to "ou", was i right?

Also, is the adding "new shared roster group" in the "shared roster" menu on the web admin page necessary when authenticating against LDAP?

Any help would be greatly appreciated.

Greetz,
primski

Hi bodomizer.Normally,

elshaa — Mon, 05 Feb 2007 17:16:21 +0000

Hi bodomizer.
Thanks for purposing Russian to me. I learned it some years ago but can't remember anything :)
Let's continue to english.

Normally, nothing else needs to be done than configuring those 5 parameters, and of course, checking that the ldap server can be reached by the ejabberd one. If you can, run your ldap server in debug mode, and check the output when you login a user.)
I could help you much better if you could post an ldif of your ldap db.
For instance :

Quote:

ldapsearch -b ou=Groups,dc=my_company,dc=com -v -u -h ldap.server.com -D cn=xxx,dc=my_company,dc=com

and remove or change the personnal informations. Would be great.

Hello, Thanks for detailed

bodomizer — Wed, 31 Jan 2007 12:54:27 +0000

Hello,

Thanks for detailed explanation (btw I do not insist to continue this thread in English, you can switch to Russian if it is more comfortable for you :)).
I've configured mod_shared_roster_ldap per your example and wondering if there is something else needed to be done? I do not see any changes to roster or ejabberd web-admin interface of shared roster...
How can I put my group neighbours to my roster now?

Likewise, I did not get any results with "you can create groups with everything" method.
Thanks in advance