Home » Forums » ejabberd & XMPP » ejabberd Administration

No DIGEST-MD5 mechanism

Submitted by DannyP on Tue, 2015-06-16 19:24

Hi,

i'm using the latest Debian release and installed ejabberd throug apt-get (version 14.07-4+deb8u1)
I need for come clients the DIGEST-MD5 mechanism, but ejabberd doesn't offer it.

<stream:features>
<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
  <mechanism>PLAIN</mechanism>
  <mechanism>SCRAM-SHA-1</mechanism>
</mechanisms>
<c xmlns='http://jabber.org/protocol/caps' hash='sha-1' node='http://www.process-one.net/en/ejabberd/' ver='/nWL9StXSXhEsL2wg0+s4xo/UdA='/>
<register xmlns='http://jabber.org/features/iq-register'/>
</stream:features>

In ejabberd.yml I have set fqdn to the domainname, ejabberd runs on.
auth_method: internal is set

What is wrong, that I don't get DIGEST-MD5 mechanism?

Thanks in advance!

Best regards
Daniel

‹ ejabberd MAM does not work for MUC Auto add everyone to friends list ›

And do you have the passwords

Submitted by badlop on Tue, 2015-06-16 23:01.

And do you have the passwords stored in plain or in scram?

With scram, digest auth isn't available:

auth_password_format: scram
»

Hi, passwords are stored in

Submitted by DannyP on Wed, 2015-06-17 05:31.

Hi,

passwords are stored in plain. scram is not activated.

Best regards
Daniel

»

Scram is not activated NOW,

Submitted by badlop on Wed, 2015-06-17 13:55.

Scram is not activated NOW, but maybe it was activated sometime in the past? If the first password stored in the internal table is scrammed, then DIGEST-MD5 is disabled, regardless of what option you set.

I tried this in my test server, where I have only one account:

> mnesia:dirty_read(passwd, mnesia:dirty_first(passwd)).
[{passwd,{<<"user1">>,<<"localhost">>},<<"mypass11">>}]

1> ejabberd_auth:store_type(<<"localhost">>).
plain

> cyrsasl:listmech(<<"localhost">>).        
[<<"PLAIN">>,<<"DIGEST-MD5">>,<<"SCRAM-SHA-1">>]

Then I set this and start ejabberd

auth_password_format: scram

Later I stop ejabberd, set this and start ejabberd again:

auth_password_format: plain

As there is some scrammed password, then ejabberd doesn't show DIGEST-MD5:

> mnesia:dirty_read(passwd, mnesia:dirty_first(passwd)).
[{passwd,{<<"user1">>,<<"localhost">>},
         {scram,<<"G2jTZua9GufUpwViWR9H8MnKDaU=">>,
                <<"PP1AODhPY5SEPZ8FOzgnqYtsDYA=">>,
                <<"jsQdxV3ygB7xMH+DpkNjgw==">>,4096}}]

> ejabberd_auth:store_type(<<"localhost">>).
scram

> cyrsasl:listmech(<<"localhost">>).      
[<<"PLAIN">>,<<"SCRAM-SHA-1">>]
»
Syndicate content

User login