ejabberd - Comments for "Shared group roster - Empty"

Well, the problem with

gregoryzero — Mon, 06 Apr 2015 21:18:54 +0000

Well, the problem with mod_shared_roster is resolved. For real this time )

The solution was - I'm not really sure why, but you need to enable mod_roster for shared roster to work.
EDIT - should have read the documentation more carefully... (

And now, if I could make mod_shared_roster_ldap to work, I could die happy )

I've paused a bit with

gregoryzero — Sun, 05 Apr 2015 19:31:56 +0000

I've paused a bit with mod_shared_roster and now I am trying to configure mod_shared_roster_ldap.
This is the current module config:

 
mod_shared_roster_ldap:
           ldap_base: "ou=ejabberd,ou=Groups,ou=Jabber,dc=company1,dc=local"
           ldap_rfilter: "(objectClass=group)"
           ldap_gfilter: "(&(objectClass=group)(cn=%g))"
           ldap_groupdesc: "description"
           ldap_memberattr: "member"
           ldap_memberattr_format:  "member=%u,ou=ejabberd,ou=Groups,ou=Jabber,dc=company1,dc=local"
           ldap_ufilter: "(&(objectClass=person)(cn=%u))"
           ldap_userdesc: "displayName"

Active Directory server receives what looks to be correct information, it finds 2 groups which are located in ou=ejabberd,ou=Groups,ou=Jabber,dc=company1,dc=local, but these groups do not show up in the roster of members of these groups.
Is there a mistake in the module configuration?

I've managed to make groups

gregoryzero — Thu, 02 Apr 2015 20:38:06 +0000

I've managed to make groups appear by creating a group with no more than 2-3 users, and when the group appeared, I add more users to the group and they appear in contact list.

I think there is a delay in

mremond — Thu, 02 Apr 2015 14:03:47 +0000

I think there is a delay in querying the LDAP. I am not convinced that there is an actual problem. It seems to work but is "slow". Not sure what slow means here. Did you look at the XMPP stream from the client ? What do you receive ? Maybe the client is delaying the display ?

Interesting thing

gregoryzero — Thu, 02 Apr 2015 10:58:18 +0000

Interesting thing noticed.
Groups do appear, and in other XMPP-clients to, but very slow.
Adding users and removing users from groups that have appeared, happens as soon as Submit button is pressed.
But with groups it is weird...

Yes, authentication works

gregoryzero — Thu, 02 Apr 2015 09:44:22 +0000

Yes, authentication works fine.
Every person in group gr_company1.chat can login and authenticate.
I'm planning on adding virtual hosts and that is why I declare some modules in append_host_config
But for now, I have to configure at least one virtual host, the way I want it.
I can't say for sure about mod_shared_roster, because at that time it looked like it is working.
The situation is like this:
The client I'm using is PSI+. I delete all shared groups through web-interface.
Then I log on into my account greg@company1.chat, account shows no groups and 0 users.
Then I go to web-interface and create a group IT-dept. with 3 users:
greg@company1.chat
john@company1.chat
jim@company1.chat
and set Display groups to IT-dept..
And when I press Submit button, sometimes, group appears, but only in PSI+.
I've tested with Pidgin - nothing appears.
Loglevel 4 shows no errors, when I launch ejabberctl live

In previous version, you had

mremond — Thu, 02 Apr 2015 08:21:08 +0000

In previous version, you had issues with modules declared at root level.

Can you authenticate with user@company1.local instead of localhost now ? As I understand it, you seem to say it was working fine now.

mremond wrote: You seem to

gregoryzero — Wed, 01 Apr 2015 22:00:18 +0000

mremond wrote:

You seem to have indentation problems.

Moreover, hosts refer to 'company1.local', while host_config refers to 'company1', without local. This looks incorrect.

I've cleaned up my ejabberd.yml a bit.

loglevel: 4
hosts: 
      - "company1.local"
acl: 
  admin: 
    user: 
      - "admin": "company1.local"
host_config: 
    "company1.local": 
      auth_method: ldap
      ldap_servers: 
        - "LDAP-FQDN"
      ldap_base: "dc=company1,dc=local"
      ldap_rootdn: "cn=ejabberd_bind,ou=Jabber,dc=company1,dc=local"
      ldap_password: "password"
      ldap_uids: ["sAMAccountName"]
      ldap_filter: "(memberOf=cn=gr_company1.chat,ou=Groups,ou=Jabber,dc=company1,dc=local)"   
access:
  proxy65_access:
      proxy_users: allow
      all: deny 
  
  c2s: 
      blocked: deny
      all: allow
  
  configure: 
      admin: allow
  
  local: 
      local: allow
  
  muc_admin:
      admin: allow
  
  max_user_offline_messages: 
      admin: 500
      all: 100
  
  max_user_sessions: 
      all: 10
listen: 
     - port: 5242
       starttls: true
       starttls_required: true
       certfile: "/etc/ejabberd/certs/company1.local.c2s.pem"
       module: ejabberd_c2s
       max_stanza_size: 65536
       access: c2s
  
     - port: 5279
       module: ejabberd_s2s_in
       max_stanza_size: 131072
       certfile: "/etc/ejabberd/certs/company1.local.s2s.pem"
  
     - port: 5280
       module: ejabberd_http
       web_admin: true
modules:
     #mod_vcard: [] 
      mod_adhoc: []
      mod_announce: 
        access: announce
      mod_caps: []
      mod_configure: []
      mod_disco: []
      mod_last: []
      mod_muc_log: []
      mod_offline: 
        access_max_user_messages: max_user_offline_messages
      mod_privacy: []
      mod_private: []
      mod_service_log: []
      mod_stats: []
      mod_time: []
      mod_shared_roster: []
      mod_version: []
append_host_config:
    "company1.local":
      modules:
        #mod_vcard: []
        mod_proxy65:
          host: "proxy.@HOST@"
          name: "File Transfer Proxy"
          port: 7771
        mod_muc: 
          host: "conf.@HOST@"
          access: all
          access_persistent: all
          access_create: muc_admin
          access_admin: muc_admin
          max_users: 50
        mod_vcard_ldap:
          ldap_base: "ou=Employees,dc=company1,dc=local"
          ldap_uids:
            "mail": "%u@company1.net"
          ldap_filter: ["(memberOf=cn=gr_company1.chat,ou=Groups,ou=Jabber,dc=company1,dc=local)"]
          ldap_vcard_map:
            "NICKNAME":
              "%s (%s) (%s)":
               - "displayName"
               - "title" 
               - "l"
            "FN":
              "%s":
               - "displayName"
            "ORGNAME":
              "%s":
               - "company"
            "ORGUNIT":
              "%s":
               - "department"
            "ROLE":
              "%s":
               - "title"
            "TEL":
              "%s":
               - "mobile"
            "URL":
              "%s":
               - "wWWHomePage"
            "EMAIL":
              "%s":
               - "mail"
            "PHOTO":
              "%s":
               - "thumbnailPhoto"

Could you point to where is the problem with indentation?

You seem to have indentation

mremond — Wed, 01 Apr 2015 13:10:06 +0000

You seem to have indentation problems.

Moreover, hosts refer to 'company1.local', while host_config refers to 'company1', without local. This looks incorrect.

mremond wrote: This is

gregoryzero — Wed, 01 Apr 2015 10:32:54 +0000

mremond wrote:

This is strange as node name as nothing to do with XMPP domain.

I agree, this is strange...
Here, this is my ejabberd.yml

loglevel: 4
hosts:
  - "company1.local"
#  - "company2.local"
#  - "company3.local"
acl:
  admin:
    user:
      - "admin": "company1.local"
      - "admin": "comapny2.local"
      - "admin": "company3.local"
host_config:
  "company1":
    auth_method: ldap
    ldap_servers:
      - "LDAP-FQDN'
    ldap_base: "dc=company1,dc=local"
    ldap_rootdn: "cn=ejabberd_bind,ou=Jabber,dc=company1,dc=local"
    ldap_password: "password"
    ldap_uids: ["sAMAccountName"]
    ldap_filter: "(memberOf=cn=gr_company.chat,ou=Groups,ou=Jabber,dc=company1,dc=local)"
  "company2":
    auth_method: ldap
    ldap_servers:
      - "LDAP-FQDN"
    ldap_base: "dc=company2,dc=local"
    ldap_rootdn: "cn=ejabberd_bind,ou=Jabber,dc=company2,dc=local"
    ldap_password: "password"
    ldap_uids: ["sAMAccountName"]
    ldap_filter: "(memberOf=cn=company2.chat,ou=Jabber,dc=company2,dc=local)"
  "company3":
    auth_method: ldap
    ldap_servers:
     - "LDAP-FQDN"
    ldap_base: "dc=company3,dc=,dc=local"
    ldap_rootdn: "cn=ejabberd_bind,ou=Jabber,dc=company3,dc=local"
    ldap_password: "password"
    ldap_uids: ["sAMAccountName"]
    ldap_filter: "(memberOf=cn=company3.chat,ou=Jabber,dc=company3,dc=local)"
access:
  proxy65_access:
    proxy_users: allow
    all: deny
  c2s:
    blocked: deny
    all: allow
  configure:
    admin: allow
  local:
    local: allow
  muc_admin:
    admin: allow
  max_user_offline_messages:
    admin: 500
    all: 100
  max_user_sessions:
    all: 10
listen:
  - port: 5242
    starttls: true
    starttls_required: true
    certfile: "/etc/ejabberd/certs/company1.chat.c2s.pem"
    module: ejabberd_c2s
    max_stanza_size: 65536
    #shaper: c2s_shaper
    access: c2s
  - port: 5279
    module: ejabberd_s2s_in
    max_stanza_size: 131072
    certfile: "/etc/ejabberd/certs/company1.chat.s2s.pem"
    #shaper: s2s_shaper
  - port: 5280
    module: ejabberd_http
    web_admin: true
modules:
  #mod_vcard: []
  mod_adhoc: []
  mod_announce:
    access: announce
  mod_caps: []
  mod_configure: []
  mod_disco: []
  mod_last: []
  mod_muc_log: []
  mod_offline:
    access_max_user_messages: max_user_offline_messages
  mod_privacy: []
  mod_private: []
  mod_service_log: []
  mod_stats: []
  mod_time: []
  mod_shared_roster: []
  mod_version: []
#shaper:
  #normal: 50000
  #fast: 1000000
append_host_config:
  "company1.chat":
    modules:
     #mod_vcard: []
     mod_proxy65:
       host: "proxy.@HOST@"
       name: "File Transfer Proxy"
       port: 7771
 mod_muc:
       host: "conf.@HOST@"
       access: all
       access_persistent: all
       access_create: muc_admin
       access_admin: muc_admin
       max_users: 50
     mod_vcard_ldap:
       ldap_base: "ou=employees,dc=company1,dc=local"
       ldap_uids:
         "mail": "%u@company1.net"
       ldap_filter: ["(memberOf=cn=gr_company1.chat,ou=Groups,ou=Jabber,dc=company1,dc=local)"]
       ldap_vcard_map:
          "NICKNAME":
           "%s (%s) (%s)":
            - "displayName"
            - "title"
            - "l"
          "FN":
            "%s":
             - "displayName"
          "ORGNAME":
            "%s":
             - "company"
          "ORGUNIT":
            "%s":
             - "department"
          "ROLE":
            "%s":
             - "title"
          "TEL":
          "URL":
            "%s":
             - "wWWHomePage"
          "EMAIL":
            "%s":
             - "mail"
          "PHOTO":
            "%s":
             - "thumbnailPhoto"
      #"BDAY":
      #  "%s":
      #    - "birthDay"
      # ldap_search_fields:
      #   "User": "%u"
      #   "Name": "givenName"
      #   "Family Name": "sn"
      #   "Email": "mail"
      #   "Birthday": "birthDay"
      # ldap_search_reported:
      #   "Full Name": "FN"
      #   "Nickname": "NICKNAME"
      #   "Birthday": "BDAY"

This is strange as node name

mremond — Tue, 31 Mar 2015 16:36:38 +0000

This is strange as node name as nothing to do with XMPP domain.

No, XMPP domain is correct.

gregoryzero — Sun, 29 Mar 2015 13:49:52 +0000

No, XMPP domain is correct. However, nodename is ejabberd@localhost...
I think, I've resolved this issue by changing ldap_base variable in ejabberd.yml to search for users in the whole domain, not just the specific OU, and separate them by using ldap-filters.
Thanks anyway )

Check your host in your

mremond — Fri, 27 Mar 2015 18:20:51 +0000

Check your host in your configuration file. I bet your XMPP domain is set to "localhost", which is likely not what you want.