{"id":161443,"date":"2012-12-05T12:56:03","date_gmt":"2012-12-05T08:56:03","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=161443"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=161443","title":{"rendered":"\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Prosody v0.8 (Jabber-\u0441\u0435\u0440\u0432\u0435\u0440) \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438\u0437 LDAP<\/span>"},"content":{"rendered":"
\t\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0432\u0441\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0443\u0442\u043e\u043a!
\u0412\u0441\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043c\u043d\u043e\u0439 OpenFire \u0441 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0438\u0437 80 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043d\u0430\u0447\u0430\u043b \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043e\u043a\u043e\u043b\u043e 2\u0445 \u0413\u0431 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0420\u0435\u0441\u0443\u0440\u0441\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u044d\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438, \u043d\u043e \u044f \u0434\u0443\u043c\u0430\u044e, \u0447\u0442\u043e \u0432\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u044f\u0442\u0441\u044f \u2014 \u044d\u0442\u043e \u043d\u0435 \u0445\u043e\u0440\u043e\u0448\u043e. \u0418 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenFire \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439, \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440.
\u0421\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c\u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430: \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043d\u0435\u043f\u043e\u0442\u0440\u0435\u0431\u043d\u044b\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c jabber-\u0441\u0435\u0440\u0432\u0435\u0440, \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u043e ldap-\u0437\u0430\u043f\u0438\u0441\u044f\u043c, \u0438 \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u043e\u0432 \u0438\u0437 ldap-\u0433\u0440\u0443\u043f\u043f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.
\u0418\u0437 \u0432\u0441\u0435\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u044f \u0432\u044b\u0431\u0440\u0430\u043b Prosody. \u041d\u043e \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u043b\u0438\u0442\u0435\u0440\u0430\u0442\u0443\u0440\u044b \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435. \u041f\u043e\u0434 \u043a\u0430\u0442\u043e\u043c \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u0441\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u043d\u043e.
<\/a>
\u041d\u0430\u0447\u0430\u043b \u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438<\/a> \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f AcidumIrae<\/a>
\u0412\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043a\u0443\u0447\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0422\u043e saslauthd \u043d\u0435 \u0445\u043e\u0442\u0435\u043b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a LDAP, \u043f\u043e\u0442\u043e\u043c \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0447\u0442\u043e saslauthd \u0438\u0449\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e \u043a\u043b\u044e\u0447\u0443 userPrincipalName, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043c\u043e\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445 LDAP \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0443\u0434\u043e\u0431\u043d\u043e. \u0411\u044b\u043b\u0438 \u0435\u0449\u0435 \u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u043c\u0435\u043b\u043e\u0447\u0438, \u0441\u0435\u0439\u0447\u0430\u0441 \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043c\u043d\u044e, \u043d\u043e \u043f\u0440\u043e\u0432\u043e\u0437\u0438\u043b\u0441\u044f \u0431\u0435\u0437\u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043d\u043e \u0434\u043d\u044f \u0434\u0432\u0430.
\u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u0440\u0435\u0448\u0435\u043d\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u043d\u0443\u043b\u044f, \u0431\u0435\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Prosody \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.<\/p>\n

\u041f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043c.
\u0421\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0443\u0434\u0443 \u043d\u0430 Debian 6.0, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0431\u0443\u0434\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0434 \u0440\u0443\u0442\u043e\u043c.<\/p>\n

\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u043a\u0435\u0442 prosody, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 LDAP \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u0443\u0434\u043e\u0431\u043d\u043e, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u0443 \u043c\u0435\u043d\u044f \u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041f\u043e\u0442\u043e\u043c\u0443 \u0441\u0442\u0430\u0432\u043b\u044e \u043f\u0430\u043a\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 0.8 \u0434\u043b\u044f 64bit-\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442\u0441\u044e\u0434\u0430<\/a>. \u0422\u0430\u043c \u0436\u0435 \u0435\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430\u043e\u0434\u043d\u043e \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u043c\u043e\u0434\u0443\u043b\u044c LuaSec \u043e\u0442\u0442\u0443\u0434\u0430 \u0436\u0435.<\/p>\n

# \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u0435\u0431\u0438\u0430\u043d \u0440\u0443\u0433\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 apt-get install lua5.1 liblua5.1-0 liblua5.1-expat0 liblua5.1-socket2 liblua5.1-filesystem0 # \u0410 \u0442\u0435\u043f\u0435\u0440\u044c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Prosody wget http:\/\/prosody.im\/downloads\/debian\/prosody_0.8.2-1_amd64.deb wget http:\/\/prosody.im\/downloads\/debian\/liblua5.1-sec0_0.3.2-2prosody1_amd64.deb dpkg -i liblua5.1-sec0_0.3.2-2prosody1_amd64.deb dpkg -i prosody_0.8.2-1_amd64.deb <\/code><\/pre>\n
  \u0414\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 LDAP \u043d\u0430\u043c \u043f\u043e\u043d\u044f\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0443\u043b\u0435\u0439 Prosody, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u0442\u0430\u0432\u044f\u0442\u0441\u044f \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438:
  mod_auth_ldap, mod_storage_ldap, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u0442\u0435\u043a\u0438 ldap.lib.lua(mod_lib_ldap) \u0438 vcard.lib.lua
  \u0414\u043e\u0431\u044b\u043b \u044f \u0438\u0445 \u0437\u0434\u0435\u0441\u044c \u2014 0-8.prosody-modules.googlecode.com\/hg\/<\/a>
  \u041a\u0440\u043e\u043c\u0435 mod_auth_ldap, \u0435\u0433\u043e \u0441\u043a\u0430\u0447\u0430\u043b \u0441 scm.stefant.org\/svn\/tools\/stuff\/trunk\/patches\/prosody\/<\/a>, \u0442\u0430\u043a \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443 \u043c\u0435\u043d\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u0438. \u041d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441\u0443\u043d\u0443 \u0432 \u0441\u043f\u043e\u0439\u043b\u0435\u0440 \u0442\u0435\u043a\u0441\u0442 \u043c\u043e\u0434\u0443\u043b\u044f  <\/p>\n
mod_auth_ldap.lua<\/b><\/p>\n
\n
local new_sasl = require "util.sasl".new; local nodeprep = require "util.encodings".stringprep.nodeprep; local log = require "util.logger".init("auth_ldap");  local ldap_server = module:get_option("ldap_server") or "localhost"; local ldap_rootdn = module:get_option("ldap_rootdn") or ""; local ldap_password = module:get_option("ldap_password") or ""; local ldap_tls = module:get_option("ldap_tls"); local ldap_base = assert(module:get_option("ldap_base"), "ldap_base is a required option for ldap"); local ldap_scope = module:get_option("ldap_scope") or "onelevel"; local ldap_filter = module:get_option("ldap_filter") or "";  local lualdap = require "lualdap"; local ld = assert(lualdap.open_simple(ldap_server, ldap_rootdn, ldap_password, ldap_tls)); module.unload = function() ld:close(); end  local function ldap_filter_escape(s) return (s:gsub("[\\\\*\\\\(\\\\)\\\\\\\\%z]", function(c) return ("\\\\%02x"):format(c:byte()) end)); end  local function find_userdn(username) \tlocal iter, err = ld:search { \t\tbase = ldap_base; \t\t-- we need to set scope here, else ldap-search may fail (silently!!) \t\tscope = ldap_scope; \t\tfilter = "(&(uid="..ldap_filter_escape(username)..")"..ldap_filter..")"; \t} \tif not iter then \t    module:log("error", "LDAP usersearch failed (%s): %s", username, err); \t    return false; \tend \tfor dn, attribs in iter do \t   return dn; \tend \treturn false; end  local provider = { name = "ldap" };  function provider.test_password(username, password) \tlocal userdn = find_userdn(username); \tif not userdn then return false; end \t \tlocal ldu = lualdap.open_simple(ldap_server, userdn, password, ldap_tls); \tif not ldu then return false; end  \tldu:close(); \treturn true; end  function provider.user_exists(username) \treturn find_userdn(username); end  function provider.get_password(username) return nil, "Passwords unavailable for LDAP."; end function provider.set_password(username, password) return nil, "Passwords unavailable for LDAP."; end function provider.create_user(username, password) return nil, "Account creation\/modification not available with LDAP."; end  function provider.get_sasl_handler() \tlocal realm = module:get_option("sasl_realm") or module.host; \tlocal testpass_authentication_profile = { \t\tplain_test = function(sasl, username, password, realm) \t\t\tlocal prepped_username = nodeprep(username); \t\t\tif not prepped_username then \t\t\t\tlog("debug", "NODEprep failed on username: %s", username); \t\t\t\treturn "", nil; \t\t\tend \t\t\treturn provider.test_password(prepped_username, password), true; \t\tend \t}; \treturn new_sasl(realm, testpass_authentication_profile); end  module:add_item("auth-provider", provider); <\/code><\/pre>\n<\/div>\n<\/div>\n
  <\/p>\n
# \u041f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0433\u0434\u0435 \u043b\u0435\u0436\u0430\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 Prosody \u0438 \u0441\u043a\u0430\u0447\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u0442\u0443\u0434\u0430 # \u0423 \u043c\u0435\u043d\u044f \u044d\u0442\u043e \/usr\/lib\/prosody\/modules cd \/usr\/lib\/prosody\/modules wget http:\/\/scm.stefant.org\/svn\/tools\/stuff\/trunk\/patches\/prosody\/mod_auth_ldap.lua wget http:\/\/0-8.prosody-modules.googlecode.com\/hg\/mod_storage_ldap\/mod_storage_ldap.lua wget http:\/\/0-8.prosody-modules.googlecode.com\/hg\/mod_lib_ldap\/ldap.lib.lua # \u0411\u0438\u0431\u043b\u0438\u0442\u0435\u043a\u0430 vcard.lib.lua \u0434\u043e\u043b\u0436\u043d\u0430 \u043b\u0435\u0436\u0430\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 ldap mkdir ldap cd ldap wget http:\/\/0-8.prosody-modules.googlecode.com\/hg\/mod_storage_ldap\/ldap\/vcard.lib.lua <\/code><\/pre>\n
  \u0422\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0438.<\/p>\n
  \/etc\/prosody\/prosody.cfg.lua
  1. \u0412\u043a\u043b\u044e\u0447\u0438\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430:
  \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u043e\u043f\u0446\u0438\u044e "—c2s_require_encryption = false", \u0440\u0430\u0441\u0441\u043a\u043e\u043c\u043c\u0435\u043d\u0447\u0438\u0432\u0430\u0435\u043c \u0438 \u043c\u0435\u043d\u044f\u0435\u043c false \u043d\u0430 true
  2. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e LDAP:
  \u043d\u0430\u0445\u043e\u0434\u0438\u043c authentication = \u00abinternal_plain\u00bb \u0438 \u043c\u0435\u043d\u044f\u0435\u043c  <\/p>\n
authentication = "ldap"; ldap_server = "localhost"; ldap_base = "ou=users,dc=example,dc=com"; ldap_rootdn = "cn=manager,dc=example,dc=com"; ldap_password = "password"; <\/code><\/pre>\n
\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u2014 code.google.com\/p\/prosody-modules\/wiki\/mod_auth_ldap<\/a>
  3. \u0418\u043d\u043a\u043b\u044e\u0434\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433 \u0434\u043b\u044f \u043c\u043e\u0434\u0443\u043b\u044f mod_storage_ldap  <\/p>\n
Include '\/etc\/prosody\/prosody-posix-ldap.cfg.lua' <\/code><\/pre>\n
4. \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u043d\u0430\u0448 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0445\u043e\u0441\u0442, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0432 \u0441\u0435\u043a\u0446\u0438\u044e Virtual hosts  <\/p>\n
VirtualHost "example.com"         ssl = {                 key = "\/etc\/prosody\/certs\/localhost.key";                 certificate = "\/etc\/prosody\/certs\/localhost.cert";         } <\/code><\/pre>\n
  \u0412 \u0438\u0442\u043e\u0433\u0435 \u0443 \u043c\u0435\u043d\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0433:  <\/p>\n
\/etc\/prosody\/prosody.cfg.lua<\/b><\/p>\n
\n
-- Prosody XMPP Server Configuration -- -- Information on configuring Prosody can be found on our -- website at http:\/\/prosody.im\/doc\/configure -- -- Tip: You can check that the syntax of this file is correct -- when you have finished by running: luac -p prosody.cfg.lua -- If there are any errors, it will let you know what and where -- they are, otherwise it will keep quiet. --  ---------- Server-wide settings ---------- -- Settings in this section apply to the whole server and are the default settings -- for any virtual hosts  -- This is a (by default, empty) list of accounts that are admins -- for the server. Note that you must create the accounts separately -- (see http:\/\/prosody.im\/doc\/creating_accounts for info) -- Example: admins = { "user1@example.com", "user2@example.net" } admins = { }  -- Enable use of libevent for better performance under high load -- For more information see: http:\/\/prosody.im\/doc\/libevent use_libevent = false;  -- This is the list of modules Prosody will load on startup. -- It looks for mod_modulename.lua in the plugins folder, so make sure that exists too. -- Documentation on modules can be found at: http:\/\/prosody.im\/doc\/modules modules_enabled = {  \t-- Generally required \t\t"roster"; -- Allow users to have a roster. Recommended ;) \t\t"saslauth"; -- Authentication for clients and servers. Recommended if you want to log in. \t\t"tls"; -- Add support for secure TLS on c2s\/s2s connections \t\t"dialback"; -- s2s dialback support \t\t"disco"; -- Service discovery  \t-- Not essential, but recommended \t\t"private"; -- Private XML storage (for room bookmarks, etc.) \t\t"vcard"; -- Allow users to set vCards \t\t--"privacy"; -- Support privacy lists \t\t--"compression"; -- Stream compression  \t-- Nice to have \t\t"legacyauth"; -- Legacy authentication. Only used by some old clients and bots. \t\t"version"; -- Replies to server version requests \t\t"uptime"; -- Report how long server has been running \t\t"time"; -- Let others know the time here on this server \t\t"ping"; -- Replies to XMPP pings with pongs \t\t"pep"; -- Enables users to publish their mood, activity, playing music and more \t\t"register"; -- Allow users to register on this server using a client and change passwords \t\t"adhoc"; -- Support for "ad-hoc commands" that can be executed with an XMPP client  \t-- Admin interfaces \t\t"admin_adhoc"; -- Allows administration via an XMPP client that supports ad-hoc commands \t\t--"admin_telnet"; -- Opens telnet console interface on localhost port 5582  \t-- Other specific functionality \t\t"posix"; -- POSIX functionality, sends server to background, enables syslog, etc. \t\t--"bosh"; -- Enable BOSH clients, aka "Jabber over HTTP" \t\t--"httpserver"; -- Serve static files from a directory over HTTP \t\t--"groups"; -- Shared roster support \t\t--"announce"; -- Send announcement to all online users \t\t--"welcome"; -- Welcome users who register accounts \t\t--"watchregistrations"; -- Alert admins of registrations \t\t--"motd"; -- Send a message to users when they log in };  -- These modules are auto-loaded, should you -- (for some mad reason) want to disable -- them then uncomment them below modules_disabled = { \t-- "presence"; -- Route user\/contact status information \t-- "message"; -- Route messages \t-- "iq"; -- Route info queries \t-- "offline"; -- Store offline messages };  -- Disable account creation by default, for security -- For more information see http:\/\/prosody.im\/doc\/creating_accounts allow_registration = false;  -- These are the SSL\/TLS-related settings. If you don't want -- to use SSL\/TLS, you may comment or remove this ssl = { \tkey = "\/etc\/prosody\/certs\/localhost.key"; \tcertificate = "\/etc\/prosody\/certs\/localhost.cert"; }  -- Only allow encrypted streams? Encryption is already used when -- available. These options will cause Prosody to deny connections that -- are not encrypted. Note that some servers do not support s2s -- encryption or have it disabled, including gmail.com and Google Apps -- domains.  c2s_require_encryption = true --s2s_require_encryption = false  -- Select the authentication backend to use. The 'internal' providers -- use Prosody's configured data storage to store the authentication data. -- To allow Prosody to offer secure authentication mechanisms to clients, the -- default provider stores passwords in plaintext. If you do not trust your -- server please see http:\/\/prosody.im\/doc\/modules\/mod_auth_internal_hashed -- for information about using the hashed backend.  --authentication = "internal_plain" authentication = "ldap"; ldap_server = "localhost"; ldap_base = "ou=users,dc=example,dc=com"; ldap_rootdn = "cn=manager,dc=example,dc=com"; ldap_password = "password"; --ldap_filter = "(authorizedService=jabber)"; -- optional  Include '\/etc\/prosody\/prosody-posix-ldap.cfg.lua'  -- Select the storage backend to use. By default Prosody uses flat files -- in its configured data directory, but it also supports more backends -- through modules. An "sql" backend is included by default, but requires -- additional dependencies. See http:\/\/prosody.im\/doc\/storage for more info.  --storage = "sql" -- Default is "internal"  -- For the "sql" backend, you can uncomment *one* of the below to configure: --sql = { driver = "SQLite3", database = "prosody.sqlite" } -- Default. 'database' is the filename. --sql = { driver = "MySQL", database = "prosody", username = "prosody", password = "secret", host = "localhost" } --sql = { driver = "PostgreSQL", database = "prosody", username = "prosody", password = "secret", host = "localhost" }  -- Logging configuration -- For advanced logging see http:\/\/prosody.im\/doc\/logging -- Hint: If you create a new log file or rename them, don't forget  -- to update the logrotate config at \/etc\/logrotate.d\/prosody log = {         -- Log all error messages to prosody.err \terror = "\/var\/log\/prosody\/prosody.err";         -- Log everything of level "info" and higher (that is, all except "debug" messages)         -- to prosody.log         info = "\/var\/log\/prosody\/prosody.log"; -- Change 'info' to 'debug' for more verbose logging         --"*syslog"; -- Uncomment this for logging to syslog }  -- Pidfile, used by prosodyctl and the init.d script pidfile = "\/var\/run\/prosody\/prosody.pid";  ----------- Virtual hosts ----------- -- You need to add a VirtualHost entry for each domain you wish Prosody to serve. -- Settings under each VirtualHost entry apply *only* to that host.  VirtualHost "localhost"  VirtualHost "example.com" \t-- enabled = false -- Remove this line to enable this host  \t-- Assign this host a certificate for TLS, otherwise it would use the one \t-- set in the global section (if any). \t-- Note that old-style SSL on port 5223 only supports one certificate, and will always \t-- use the global one.         ssl = {                 key = "\/etc\/prosody\/certs\/localhost.key";                 certificate = "\/etc\/prosody\/certs\/localhost.cert";         }  ------ Components ------ -- You can specify components to add hosts that provide special services, -- like multi-user conferences, and transports. -- For more information on components, see http:\/\/prosody.im\/doc\/components  ---Set up a MUC (multi-user chat) room server on conference.example.com: --Component "conference.example.com" "muc"  -- Set up a SOCKS5 bytestream proxy for server-proxied file transfers: --Component "proxy.example.com" "proxy65"  ---Set up an external component (default component port is 5347) -- -- External components allow adding various services, such as gateways\/ -- transports to other networks like ICQ, MSN and Yahoo. For more info -- see: http:\/\/prosody.im\/doc\/components#adding_an_external_component -- --Component "gateway.example.com" --\tcomponent_secret = "password" <\/code><\/pre>\n<\/div>\n<\/div>\n
  \u041d\u0430\u043c \u043d\u0443\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u043a\u043e\u043d\u0444\u0438\u0433 \u0434\u043b\u044f mod_lib_ldap, \u044f \u0441\u043a\u0430\u0447\u0430\u044e \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u0438 \u0438\u0437\u043c\u0435\u043d\u044e \u0435\u0433\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0438 \u043d\u0443\u0436\u0434\u044b  <\/p>\n
cd \/etc\/prosody wget http:\/\/0-8.prosody-modules.googlecode.com\/hg\/mod_lib_ldap\/dev\/prosody-posix-ldap.cfg.lua chmod 755 prosody-posix-ldap.cfg.lua <\/code><\/pre>\n
  \u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0438 \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u043b\u0435\u0436\u0430\u0442 \u0437\u0434\u0435\u0441\u044c \u2014 0-8.prosody-modules.googlecode.com\/hg\/mod_lib_ldap\/dev\/<\/a>
  \u041f\u0440\u0438\u0432\u0435\u0434\u0443 \u0441\u0440\u0430\u0437\u0443 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u0433\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0430:  <\/p>\n
\/etc\/prosody\/prosody-posix-ldap.cfg.lua<\/b><\/p>\n
\n
-- Use Include 'prosody-posix-ldap.cfg.lua' from prosody.cfg.lua to include this file authentication = 'ldap' -- Indicate that we want to use LDAP for authentication --storage        = 'ldap' -- Indicate that we want to use LDAP for roster\/vcard storage storage = {         roster = "ldap";         vcard = "ldap"; }  ldap = {    hostname      = 'localhost',                    -- LDAP server location     bind_dn       = 'cn=manager,dc=example,dc=com', -- Bind DN for LDAP authentication (optional if anonymous bind is supported)     bind_password = 'password',                      -- Bind password (optional if anonymous bind is supported)      user = {       basedn        = 'ou=users,dc=example,dc=com', -- The base DN where user records can be found       filter        = 'objectClass=posixAccount',   -- Filter expression to find user records under basedn       usernamefield = 'uid',                        -- The field that contains the user's ID (this will be the username portion of the JID)       namefield     = 'cn',                         -- The field that contains the user's full name (this will be the alias found in the roster)     },      groups = {       basedn      = 'ou=groups,dc=example,dc=com', -- The base DN where group records can be found       memberfield = 'memberUid',                   -- The field that contains user ID records for this group (each member must have a corresponding entry under the user basedn with the same value in usernamefield)       namefield   = 'cn',                          -- The field that contains the group's name (used for matching groups in LDAP to group definitions below)        {         name  = 'First Group', -- The group name that will be seen in users' rosters         cn    = 'first_group', -- This field's key *must* match ldap.groups.namefield! It's the name of the LDAP group this definition represents         admin = false,      -- (Optional) A boolean flag that indicates whether members of this group should be considered administrators.       },       {         name  = 'Second Group',         cn    = 'second_group',         admin = true,       },     },      vcard_format = {       displayname = 'cn', -- Consult the vCard configuration section in the README       nickname    = 'uid',     }, } <\/code><\/pre>\n<\/div>\n<\/div>\n
  \u0412 \u044d\u0442\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0435 groups \u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0438\u043b \u0433\u0440\u0443\u043f\u043f\u044b \u0438\u0437 LDAP. \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0432\u0438\u0434\u0435\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0445\u0441\u044f \u043a \u0435\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0435. 
  \u041d\u043e \u043c\u043d\u0435 \u043d\u0430\u0434\u043e \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432\u0438\u0434\u0435\u043b \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435\u0445 \u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0435\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0442\u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0432\u044b \u0432 \/usr\/lib\/prosody\/modules\/mod_storage_ldap.lua. \u0415\u0441\u043b\u0438 \u0443 \u0412\u0430\u0441 \u043d\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u0443\u043d\u043a\u0442<\/u>
  \u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0432 \/usr\/lib\/prosody\/modules\/mod_storage_ldap.lua \u0441\u0442\u0440\u043e\u043a\u0443  <\/p>\n
    local filter      = memberfield .. '=' .. tostring(username); <\/code><\/pre>\n
\u0417\u0430\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u043c \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u044a\u044f\u0432\u0438\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e, \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f:  <\/p>\n
    --local filter      = memberfield .. '=' .. tostring(username);     local filter; <\/code><\/pre>\n
  \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 (\/var\/log\/prosody) \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. 
  \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c lualdap, \u0438 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u043e\u0432.
  \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0430\u0434\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0441\u044b\u0440\u0446\u044b lualdap<\/a> \u0438 compat<\/a>  <\/p>\n
# \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 apt-get install libldap-dev liblua5.1-0-dev # \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u0432 \u043d\u0435\u0435 mkdir \/tmp\/lualdap cd \/tmp\/lualdap # \u0441\u043a\u0430\u0447\u0430\u0435\u043c \u0441\u044b\u0440\u0446\u044b wget http:\/\/files.luaforge.net\/releases\/lualdap\/lualdap\/LuaLDAP1.1.0\/lualdap-1.1.0.tar.gz wget http:\/\/files.luaforge.net\/releases\/compat\/Compat-5.1\/Compat-5.1release5\/compat-5.1r5.tar.gz # \u0440\u0430\u0441\u043f\u0430\u043a\u0443\u0435\u043c  tar xvfz compat-5.1r5.tar.gz tar xvfz lualdap-1.1.0.tar.gz <\/code><\/pre>\n
  \u0422\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u0434\u043e \u043f\u043e\u0434\u0440\u0435\u0445\u0442\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0438, \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438. \u041c\u043e\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0442\u0430\u043a:  <\/p>\n
lualdap-1.1.0\/config<\/b><\/p>\n
\n
# Installation directories # System's libraries directory (where binary libraries are installed) LUA_LIBDIR= \/usr\/lib\/lua\/5.1 # Lua includes directory LUA_INC= \/usr\/include\/lua5.1 # OpenLDAP includes directory OPENLDAP_INC= \/usr\/include # OpenLDAP library (an optional directory can be specified with -L<dir>) OPENLDAP_LIB= -lldap  # OS dependent LIB_OPTION= -shared #for Linux #LIB_OPTION= -bundle -undefined dynamic_lookup #for MacOS X  # Lua version number (first and second digits of target version) LUA_VERSION_NUM= 500 LIBNAME= $T.so.$V COMPAT_DIR= ..\/compat-5.1r5  # Compilation parameters WARN= -O2 -Wall -fPIC -W -Waggregate-return -Wcast-align -Wmissing-prototypes -Wnested-externs -Wshadow -Wwrite-strings -ansi INCS= -I$(LUA_INC) -I$(OPENLDAP_INC) -I$(COMPAT_DIR) CFLAGS= $(WARN) $(INCS) CC= gcc  # $Id: config,v 1.5 2006\/07\/24 01:42:06 tomas Exp $<\/code><\/pre>\n<\/div>\n<\/div>\n
lualdap-1.1.0\/Makefile<\/b><\/p>\n
\n
# $Id: Makefile,v 1.30 2007\/03\/13 22:07:33 godinho Exp $  T= lualdap V= 1.1.0 CONFIG= .\/config  include $(CONFIG)  ifeq "$(LUA_VERSION_NUM)" "500" COMPAT_O= $(COMPAT_DIR)\/compat-5.1.o endif  OBJS= src\/lualdap.o $(COMPAT_O)   src\/$(LIBNAME): $(OBJS)         export MACOSX_DEPLOYMENT_TARGET="10.3"; $(CC) $(CFLAGS) $(LIB_OPTION) -o src\/$(LIBNAME) $(OBJS) $(OPENLDAP_LIB)  $(COMPAT_DIR)\/compat-5.1.o: $(COMPAT_DIR)\/compat-5.1.c         $(CC) -c $(CFLAGS) -o $@ $(COMPAT_DIR)\/compat-5.1.c  install: src\/$(LIBNAME)         mkdir -p $(LUA_LIBDIR)         cp src\/$(LIBNAME) $(LUA_LIBDIR)         cd $(LUA_LIBDIR); ln -f -s $(LIBNAME) $T.so  clean:         rm -f $(OBJS) src\/$(LIBNAME) <\/code><\/pre>\n<\/div>\n<\/div>\n
  \u041a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c  <\/p>\n
make make install <\/code><\/pre>\n
  \u041d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0435, \u0441\u043f\u0430\u0441\u0438\u0431\u043e \u0437\u0430 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435!<\/p>\n
  \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438   <\/p>\n