User Tools
сервис_openfire
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_openfire [2020/12/02 13:51] val [Установка] |
сервис_openfire [2025/07/27 19:17] (current) val [Windows] |
||
|---|---|---|---|
| Line 28: | Line 28: | ||
| | | ||
| <code> | <code> | ||
| - | # OPENFIRE=openfire_4.4.4_all.deb | + | # OPENFIRE=openfire_4.6.2_all.deb |
| # wget -O $OPENFIRE http://www.igniterealtime.org/downloadServlet?filename=openfire/$OPENFIRE | # wget -O $OPENFIRE http://www.igniterealtime.org/downloadServlet?filename=openfire/$OPENFIRE | ||
| Line 34: | Line 34: | ||
| # wget http://val.bmstu.ru/unix/Openfire/$OPENFIRE | # wget http://val.bmstu.ru/unix/Openfire/$OPENFIRE | ||
| - | # wget http://gate.isp.un/unix/Openfire/openfire_4.4.4_all.deb | + | # wget http://gate.isp.un/unix/Openfire/openfire_4.6.2_all.deb |
| + | |||
| + | ubuntu24# ###wget http://www.igniterealtime.org/downloadServlet?filename=openfire/openfire_5.0.1_all.deb -O openfire_5.0.1_all.deb | ||
| # dpkg -i openfire_*_all.deb | # dpkg -i openfire_*_all.deb | ||
| + | |||
| + | ubuntu24# ###systemctl enable openfire.service --now | ||
| </code> | </code> | ||
| ===== Подключение и предварительная настройка ===== | ===== Подключение и предварительная настройка ===== | ||
| + | |||
| + | * Административная (без LDAP) учетка: admin | ||
| <code> | <code> | ||
| Line 51: | Line 57: | ||
| ===== Spark ===== | ===== Spark ===== | ||
| - | * Административная (без LDAP) учетка: admin | + | ==== Windows ==== |
| - | ==== Установка ==== | ||
| <code> | <code> | ||
| - | http://val.bmstu.ru/unix/Openfire/spark_2_8_3.exe | + | http://val.bmstu.ru/unix/Openfire/spark_2_9_4-with-jre.exe |
| - | http://gate.isp.un/unix/Openfire/spark_2_8_3.exe | + | http://gate.isp.un/unix/Openfire/spark_2_9_4-with-jre.exe |
| + | |||
| + | ### http://www.igniterealtime.org/downloadServlet?filename=spark/spark_3_0_2-with-jre.exe | ||
| </code> | </code> | ||
| - | ==== Запуск в linux ==== | + | ==== Linux ==== |
| * [[Сервис JRE]] | * [[Сервис JRE]] | ||
| + | * Не открывает окно чата при получении сообщения | ||
| <code> | <code> | ||
| + | # wget http://gate.isp.un/unix/Openfire/spark_2_9_4.deb | ||
| + | |||
| + | # wget http://val.bmstu.ru/unix/Openfire/spark_2_9_4.deb | ||
| + | |||
| + | $ unset LANG # Может понадобиться | ||
| + | |||
| $ /opt/Spark/Spark & | $ /opt/Spark/Spark & | ||
| </code> | </code> | ||
| Line 81: | Line 95: | ||
| C:\>"C:\Program Files (x86)\Spark\jre\bin\keytool.exe" -list -keystore "C:\Program Files (x86)\Spark\jre\lib\security\cacerts" -storepass changeit -v | find "=corp" | C:\>"C:\Program Files (x86)\Spark\jre\bin\keytool.exe" -list -keystore "C:\Program Files (x86)\Spark\jre\lib\security\cacerts" -storepass changeit -v | find "=corp" | ||
| </code> | </code> | ||
| + | |||
| ===== Управление учетными записями ===== | ===== Управление учетными записями ===== | ||
| Line 96: | Line 111: | ||
| ==== Использование LDAP каталога ==== | ==== Использование LDAP каталога ==== | ||
| - | * !!! Не заработало в spark 2.8.0 | ||
| * Не требует базы mysql | * Не требует базы mysql | ||
| - | * Проверено в 4.0.3 для домена gate.corpX.un (можно не отключать tls) | + | * можно отключать tls) |
| === Microsoft AD ==== | === Microsoft AD ==== | ||
| Line 109: | Line 123: | ||
| Base DN: cn="Users",dc="corpX",dc="un" !!!При тестировании "сбрасывается" надо опять заполнить | Base DN: cn="Users",dc="corpX",dc="un" !!!При тестировании "сбрасывается" надо опять заполнить | ||
| Administrator DN: cn="Administrator",cn="Users",dc="corpX",dc="un" !!!При тестировании "сбрасывается" надо опять заполнить | Administrator DN: cn="Administrator",cn="Users",dc="corpX",dc="un" !!!При тестировании "сбрасывается" надо опять заполнить | ||
| + | |||
| + | Administrator Account: Administrator | ||
| </code> | </code> | ||
| Line 116: | Line 132: | ||
| Host: server.corpX.un | Host: server.corpX.un | ||
| Port: 389 | Port: 389 | ||
| - | Base DN: ou=users,dc=corpX,dc=un | + | Base DN: ou=People,dc=corpX,dc=un |
| Administrator DN: cn=admin,dc=corpX,dc=un | Administrator DN: cn=admin,dc=corpX,dc=un | ||
| Admin user (Administrator Account): user1 (через Apache Directory Studio задать пароль password1) | Admin user (Administrator Account): user1 (через Apache Directory Studio задать пароль password1) | ||
| + | </code> | ||
| + | |||
| + | ===== bash xmpp ===== | ||
| + | |||
| + | <code> | ||
| + | # apt install sendxmpp | ||
| + | |||
| + | $ cat .sendxmpprc | ||
| + | admin@corp13.un Pa$$w0rd | ||
| + | |||
| + | $ chmod 600 .sendxmpprc | ||
| + | |||
| + | $ echo "Hello Ivan!" | sendxmpp -s Hello user1@corp13.un | ||
| </code> | </code> | ||
| Line 199: | Line 228: | ||
| <code> | <code> | ||
| C:\>ktpass -princ xmpp/gate.corpX.un@CORPX.UN -mapuser gatexmpp -pass 'Pa$$w0rd' -out gatexmpp.keytab | C:\>ktpass -princ xmpp/gate.corpX.un@CORPX.UN -mapuser gatexmpp -pass 'Pa$$w0rd' -out gatexmpp.keytab | ||
| - | |||
| - | для openfire 3 | ||
| - | C:\>ktpass -princ xmpp/corp15.un@CORP15.UN -mapuser xmpp -pass 'Pa$$w0rd' -out xmpp.keytab | ||
| </code> | </code> | ||
| + | ==== Samba4 ==== | ||
| + | <code> | ||
| + | server# samba-tool user create gatexmpp | ||
| + | |||
| + | server# samba-tool user setexpiry gatexmpp --noexpiry | ||
| + | |||
| + | server# samba-tool spn add xmpp/gate.corpX.un gatexmpp | ||
| + | |||
| + | server# samba-tool spn list gatexmpp | ||
| + | |||
| + | server# samba-tool domain exportkeytab gatexmpp.keytab --principal=xmpp/gate.corpX.un | ||
| + | </code> | ||
| ==== MIT (пока не удалось) ==== | ==== MIT (пока не удалось) ==== | ||
| <code> | <code> | ||
| Line 212: | Line 250: | ||
| kadmin.local: ktadd -k gatexmpp.keytab xmpp/gate.CORPX.UN | kadmin.local: ktadd -k gatexmpp.keytab xmpp/gate.CORPX.UN | ||
| - | kadmin.local: addprinc -randkey xmpp/corpX.un | + | ### kadmin.local: addprinc -randkey xmpp/corpX.un |
| - | kadmin.local: addprinc -e rc4-hmac:normal -randkey xmpp/CORPX.UN | + | ### kadmin.local: addprinc -e rc4-hmac:normal -randkey xmpp/CORPX.UN |
| - | kadmin.local: ktadd -k xmpp.keytab xmpp/corpX.un | + | ### kadmin.local: ktadd -k xmpp.keytab xmpp/corpX.un |
| - | kadmin.local: ktadd -k xmpp.keytab xmpp/CORPX.UN | + | ### kadmin.local: ktadd -k xmpp.keytab xmpp/CORPX.UN |
| - | </code> | + | </code><code> |
| + | Запросы с win клиента не наблюдаются, запросы с lin клиента такие: | ||
| + | root@server.corp13.un:~# tail -f /var/log/auth.log | ||
| + | |||
| + | Oct 5 08:14:30 server krb5kdc[831]: TGS_REQ (6 etypes {18 17 20 19 16 23}) 192.168.13.105: ISSUE: authtime 1664946134, etypes {rep=18 tkt=18 ses=18}, user1@CORP13.UN for xmpp/gate.corp13.un@CORP13.UN | ||
| + | Oct 5 08:14:30 server krb5kdc[831]: AS_REQ (2 etypes {18 17}) 192.168.13.1: NEEDED_PREAUTH: xmpp/gate.corp13.un@CORP13.UN for krbtgt/CORP13.UN@CORP13.UN, Additional pre-authentication required | ||
| + | Oct 5 08:14:31 server krb5kdc[831]: preauth (encrypted_timestamp) verify failure: Preauthentication failed | ||
| + | Oct 5 08:14:31 server krb5kdc[831]: AS_REQ (2 etypes {18 17}) 192.168.13.1: PREAUTH_FAILED: xmpp/gate.corp13.un@CORP13.UN for krbtgt/CORP13.UN@CORP13.UN, Preauthentication failed | ||
| + | </code> | ||
| ==== Настройка сервиса ==== | ==== Настройка сервиса ==== | ||
| <code> | <code> | ||
| Line 291: | Line 337: | ||
| </code> | </code> | ||
| - | ==== Openfire3 Ubuntu14 без openjdk-7-jre ==== | ||
| - | * [[https://community.igniterealtime.org/thread/51990|invoke-rc.d: initscript openfire, action "stop" failed.]] | ||
| - | |||
| - | <code> | ||
| - | # rcsdiff /etc/init.d/openfire | ||
| - | </code><code> | ||
| - | diff -r1.1 /etc/init.d/openfire | ||
| - | 29d28 | ||
| - | < /usr/lib/jvm/java-7-openjdk-amd64 \ | ||
| - | </code><code> | ||
| - | root@server.corpX.un:~# apt-get autoremove | ||
| - | </code> | ||
сервис_openfire.1606906294.txt.gz · Last modified: 2020/12/02 13:51 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
