{"id":194582,"date":"2013-09-20T20:10:02","date_gmt":"2013-09-20T16:10:02","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=194582"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=194582","title":{"rendered":"CentOC 5.x, 6.x \u0438 EJabberd v2.x + Win2008AD<\/span>"},"content":{"rendered":"
\t\u0414\u0430\u0432\u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438 \u043d\u0430 \u043a\u043e\u043d\u0435\u0446 \u044d\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u043a\u0443 EJabberd <\/b>\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0438\u0437 Active Directory Win 2008<\/b>. \u0421 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0442\u0435\u0440\u0430 \u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u0432 AD<\/b>. \u0422.\u043a. \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0442\u0430\u0432 \u043a\u0443\u0447\u0443 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0432\u0435\u0437\u0434\u0435 \u043a\u0443\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0435.
<\/a><\/p>\n

\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c ejabberd <\/b>\u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430, \u043d\u0443\u0436\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 EPEL<\/b>, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c:<\/p>\n

\u0414\u043b\u044f CentOS 5<\/b>:<\/p>\n

rpm -Uvh dl.fedoraproject.org\/pub\/epel\/5\/i386\/epel-release-5-4.noarch.rpm<\/a><\/b><\/p>\n

\u0414\u043b\u044f CentOS 6:<\/p>\n

rpm -Uvh dl.fedoraproject.org\/pub\/epel\/6\/i386\/epel-release-6-7.noarch.rpm<\/a><\/b><\/p>\n

\u0438\u043b\u0438<\/p>\n

rpm -Uvh dl.fedoraproject.org\/pub\/epel\/6\/x86_64\/epel-release-6-8.noarch.rpm<\/a><\/b><\/p>\n

\u0422\u0435\u043f\u0435\u0440\u044c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u043f\u0430\u043a\u0435\u0442 ejabberd<\/b>:<\/p>\n

yum install ejabberd<\/b><\/p>\n

\u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433 \/etc\/ejabberd\/ejabberd.cfg<\/b><\/p>\n

\u041d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e admin<\/b>. \u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0435\u043a\u0446\u0438\u044e:<\/p>\n

%%
%% Remove the Access Control Lists before new ones are added.
%%
%%override_acls.
<\/b><\/p>\n

\u0418 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0443:<\/p>\n

{acl, admin, {user, \u00abadmin\u00bb, \u00abserver.int\u00bb}}.<\/b><\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0435\u043a\u0446\u0438\u044e SERVED HOSTNAMES <\/b>\u0438 \u043f\u0440\u0430\u0432\u0438\u043c \u0438\u043c\u044f \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0441\u0442\u0440\u043e\u043a\u0435:<\/p>\n

{hosts, [\u00abserver.int\u00bb]}.<\/b><\/p>\n

\u041f\u043e\u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 ejabberd:<\/p>\n

service ejabberd start<\/b><\/p>\n

\u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0441\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c:<\/p>\n

ejabberdctl register admin server.int 123456<\/b><\/p>\n

\u0422\u0435\u043f\u0435\u0440\u044c \u0438\u0434\u0435\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440: <\/p>\n

\u041d\u0430\u0431\u0438\u0440\u0430\u0435\u043c server.int<\/a>:5280\/admin\/ <\/b>\u0438 \u0432\u0432\u043e\u0434\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin@server.int <\/b>\u0438 \u043f\u0430\u0440\u043e\u043b\u044c 123456<\/b>. \u041f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0430\u044f \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c ejabberd<\/b>.<\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 \u0432 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a:<\/p>\n

chkconfig ejabberd on<\/b><\/p>\n

\u041f\u0435\u0440\u0432\u0443\u044e \u0438 \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0441\u0442\u0430\u0434\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0438, ejabberd <\/b>\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u044d\u0442\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0443\u043a\u0430\u043c\u0438 \u0438 \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u0445\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 ejabberd<\/b>. \u041d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u044b\u043b\u043e \u0440\u0435\u0448\u0435\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u0442\u044c EJabberd <\/b>\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Win2008AD<\/b>, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443.<\/p>\n

\u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433 \/etc\/ejabberd\/ejabberd.cfg<\/b><\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0443\u044e \u0432\u0435\u0431 \u043f\u0430\u043d\u0435\u043b\u044c:<\/p>\n

{acl, admin, {user, \u00abadmin\u00bb, \u00abserver.int\u00bb}}.<\/b><\/p>\n

\u041f\u043e\u0441\u043b\u0435 \u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043d\u043e\u0432\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443:<\/p>\n

{acl, admin, {user, \u00abuserjabber\u00bb, \u00abserver.int\u00bb}}.<\/b><\/p>\n

\u042d\u0442\u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c userjabber <\/b>\u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d \u0432 AD<\/b>, \u0447\u0442\u043e\u0431\u044b \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u043e\u0439 \u0432\u0435\u0431 \u043f\u0430\u043d\u0435\u043b\u0438.<\/p>\n

\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a AD <\/b>\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c admin<\/b>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u043e\u0439 \u0432\u0435\u0431 \u043f\u0430\u043d\u0435\u043b\u0438, \u0443\u0442\u0440\u0430\u0442\u0438\u0442 \u0441\u0438\u043b\u0443 \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c userjabber <\/b>\u0441\u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d \u043f\u0430\u043d\u0435\u043b\u044c.<\/p>\n

\u0414\u0430\u043b\u0435\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a AD<\/b>.<\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u043a \u0432\u0438\u0434\u0443 (\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e):<\/p>\n

%%{auth_method, internal}.<\/b><\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u043a \u0432\u0438\u0434\u0443 (\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e LDAP<\/b>, AD<\/b>):<\/p>\n

{auth_method, ldap}.<\/b><\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0431\u043b\u043e\u043a:<\/p>\n

%%
%% Authentication using LDAP
%%<\/b><\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 AD<\/b>:<\/p>\n

{ldap_servers, [\u00ab192.168.151.2\u00bb]}.
{ldap_port, 389}.<\/p>\n

{ldap_uids, [{\u00absAMAccountName\u00bb, "%u"}]}.
{ldap_filter, "(objectCategory=person)"}.<\/p>\n

{ldap_base, \u00abDC=developer,DC=com\u00bb}.
{ldap_rootdn, \u00abuserjabber@developer.com\u00bb}.
{ldap_password, \u00ab123456\u00bb}.
<\/b><\/p>\n

\u0422\u0435\u043f\u0435\u0440\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438, \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0442\u0435\u0440\u0430 \u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u0432 AD<\/b>. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0432 AD <\/b>\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 ivanov.i,<\/b> petrov.p<\/b>. \u0412 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043d\u0430 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0435 \u0413\u043b\u0430\u0432\u043d\u0430\u044f<\/b>, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c ivanov.i<\/b> \u0438\u043c\u0435\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0438 \u0424\u0430\u043c\u0438\u043b\u0438\u044f: \u0418\u0432\u0430\u043d\u043e\u0432<\/b>, \u0418\u043c\u044f: \u0418\u0432\u0430\u043d<\/b>, \u0430 \u043d\u0430 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0435 \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f <\/b>\u0432 \u043f\u043e\u043b\u0435 \u041e\u0442\u0434\u0435\u043b: \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438<\/b>. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c petrov.p<\/b>, \u0442\u0430\u043a \u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u043f\u043e\u043b\u0435 \u041e\u0442\u0434\u0435\u043b: \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438<\/b>.<\/p>\n

\u0427\u0442\u043e\u0431\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u0432 \u0434\u0436\u0430\u0431\u0431\u0435\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0431\u044b\u043b\u0430 \u043a\u0440\u0430\u0441\u043e\u0442\u0430 \u0438 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043c\u043e\u0434\u0443\u043b\u0438
mod_shared_roster_ldap<\/b> \u0438 mod_vcard_ldap<\/b>.<\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u043a \u0432\u0438\u0434\u0443:<\/p>\n

%%{mod_shared_roster,[]},<\/b><\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u043e\u0441\u0442\u0435\u0440\u0430 (\u0424\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0438\u0441\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c, \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043a \u0433\u0440\u0443\u043f\u043f\u0435 \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0438\u0437 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432 AD 2008<\/b>, \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0430 \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f<\/b>, \u043f\u043e\u043b\u0435 \u041e\u0442\u0434\u0435\u043b<\/b>.):<\/p>\n

{mod_shared_roster_ldap,
[{ldap_groupattr,\u00abdepartment\u00bb},
{ldap_groupdesc,\u00abdepartment\u00bb},
{ldap_rfilter, "(objectCategory=person)"},
{ldap_memberattr,\u00absAMAccountName\u00bb},
{ldap_userdesc,\u00abcn\u00bb}
]
},<\/b><\/p>\n

\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u043a \u0432\u0438\u0434\u0443:<\/p>\n

%%{mod_vcard, []},<\/b><\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 (\u0427\u0442\u0435\u043d\u0438\u0435 VCard <\/b>\u043f\u043e\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437 AD 2008<\/b>, \u0442.\u0435. \u043f\u043e\u043b\u0435\u0439 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0432 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0418\u043c\u0435\u043d\u0430, \u0444\u0430\u043c\u0438\u043b\u0438\u0438 \u0438 \u0442.\u0434.):<\/p>\n

{mod_vcard_ldap,
[{ldap_vcard_map,
[{\u00abNICKNAME\u00bb, "%s", [\u00abdisplayname\u00bb]},
{\u00abGIVEN\u00bb, "%s", [\u00abgivenName\u00bb]},
{\u00abMIDDLE\u00bb, "%s", [\u00abinitials\u00bb]},
{\u00abFAMILY\u00bb, "%s", [\u00absn\u00bb]},
{\u00abFN\u00bb, "%s", [\u00abdisplayName\u00bb]},
{\u00abEMAIL\u00bb, "%s", [\u00abmail\u00bb]},
{\u00abORGNAME\u00bb, "%s", [\u00abcompany\u00bb]},
{\u00abORGUNIT\u00bb, "%s", [\u00abdepartment\u00bb]},
{\u00abCTRY\u00bb, "%s", [\u00abc\u00bb]},
{\u00abLOCALITY\u00bb, "%s", [\u00abl\u00bb]},
{\u00abSTREET\u00bb, "%s", [\u00abstreetAddress\u00bb]},
{\u00abREGION\u00bb, "%s", [\u00abst\u00bb]},
{\u00abPCODE\u00bb, "%s", [\u00abpostalCode\u00bb]},
{\u00abTITLE\u00bb, "%s", [\u00abtitle\u00bb]},
{\u00abURL\u00bb, "%s", [\u00abwWWHomePage\u00bb]},
{\u00abDESC\u00bb, "%s", [\u00abdescription\u00bb]},
{\u00abTEL\u00bb, "%s", [\u00abtelephoneNumber\u00bb]}]},
{ldap_search_fields,
[{\u00abUser\u00bb, "%u"},
{\u00abName\u00bb, \u00abgivenName\u00bb},
{\u00abFamily Name\u00bb, \u00absn\u00bb},
{\u00abEmail\u00bb, \u00abmail\u00bb},
{\u00abCompany\u00bb, \u00abcompany\u00bb},
{\u00abDepartment\u00bb, \u00abdepartment\u00bb},
{\u00abRole\u00bb, \u00abtitle\u00bb},
{\u00abDescription\u00bb, \u00abdescription\u00bb},
{\u00abPhone\u00bb, \u00abtelephoneNumber\u00bb}]},
{ldap_search_reported,
[{\u00abFull Name\u00bb, \u00abFN\u00bb},
{\u00abNickname\u00bb, \u00abNICKNAME\u00bb},
{\u00abEmail\u00bb, \u00abEMAIL\u00bb}]}
]
},<\/b><\/p>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441:<\/p>\n

service ejabberd restart<\/b><\/p>\n

\u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u043e \u0431\u0435\u0437 \u043e\u0448\u0438\u0431\u043e\u043a, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0434\u0436\u0430\u0431\u0431\u0435\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0441 \u043d\u0430\u0448\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.<\/p>\n

\u041e\u0448\u0438\u0431\u043a\u0438 \u0434\u0430 \u0438 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 \u043b\u043e\u0433\u0430\u0445 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/var\/log\/ejabberd<\/b>.<\/p>\n

\u041f\u043e\u0441\u043b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u0436\u0430\u0431\u0431\u0435\u0440 \u0438\u043c\u0435\u0435\u043c \u043f\u0430\u043f\u043a\u0443 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 <\/b>\u0438 \u0432 \u043d\u0435\u0439 \u0434\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0418\u0432\u0430\u043d\u043e\u0432 \u0418\u0432\u0430\u043d<\/b> \u0438 \u041f\u0435\u0442\u0440\u043e\u0432 \u041f\u0435\u0442\u0440<\/b>.<\/p>\n

\u041f\u0440\u0438\u0432\u043e\u0436\u0443 100%<\/b> \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0433:

%%%
%%% ejabberd configuration file
%%%
%%%’<\/p>\n

%%% The parameters used in this configuration file are explained in more detail
%%% in the ejabberd Installation and Operation Guide.
%%% Please consult the Guide in case of doubts, it is included with
%%% your copy of ejabberd, and is also available online at
%%% www.process-one.net\/en\/ejabberd\/docs\/<\/a><\/p>\n

%%% This configuration file contains Erlang terms.
%%% In case you want to understand the syntax, here are the concepts:
%%%
%%% \u2014 The character to comment a line is %
%%%
%%% \u2014 Each term ends in a dot, for example:
%%% override_global.
%%%
%%% \u2014 A tuple has a fixed definition, its elements are
%%% enclosed in {}, and separated with commas:
%%% {loglevel, 4}.
%%%
%%% \u2014 A list can have as many elements as you want,
%%% and is enclosed in [], for example:
%%% [http_poll, web_admin, tls]
%%%
%%% \u2014 A keyword of ejabberd is a word in lowercase.
%%% Strings are enclosed in "" and can contain spaces, dots,\u2026
%%% {language, \u00aben\u00bb}.
%%% {ldap_rootdn, \u00abdc=example,dc=com\u00bb}.
%%%
%%% \u2014 This term includes a tuple, a keyword, a list, and two strings:
%%% {hosts, [\u00abjabber.example.net\u00bb, \u00abim.example.com\u00bb]}.
%%%<\/p>\n

%%%. =======================
%%%’ OVERRIDE STORED OPTIONS<\/p>\n

%%
%% Override the old values stored in the database.
%%<\/p>\n

%%
%% Override global options (shared by all ejabberd nodes in a cluster).
%%
%%override_global.<\/p>\n

%%
%% Override local options (specific for this particular ejabberd node).
%%
%%override_local.<\/p>\n

%%
%% Remove the Access Control Lists before new ones are added.
%%
%%override_acls.<\/p>\n

{acl, admin, {user, \u00abuserjabber\u00bb, \u00abserver.int\u00bb}}.<\/p>\n

%%%. =========
%%%’ DEBUGGING<\/p>\n

%%
%% loglevel: Verbosity of log files generated by ejabberd.
%% 0: No ejabberd log at all (not recommended)
%% 1: Critical
%% 2: Error
%% 3: Warning
%% 4: Info
%% 5: Debug
%%
{loglevel, 4}.<\/p>\n

%%
%% watchdog_admins: Only useful for developers: if an ejabberd process
%% consumes a lot of memory, send live notifications to these XMPP
%% accounts.
%%
%%{watchdog_admins, [\u00abbob@example.com\u00bb]}.<\/p>\n

%%%. ================
%%%’ SERVED HOSTNAMES<\/p>\n

%%
%% hosts: Domains served by ejabberd.
%% You can define one or several, for example:
%% {hosts, [\u00abexample.net\u00bb, \u00abexample.com\u00bb, \u00abexample.org\u00bb]}.
%%
{hosts, [\u00abserver.int\u00bb]}.<\/p>\n

%%
%% route_subdomains: Delegate subdomains to other XMPP servers.
%% For example, if this ejabberd serves example.org and you want
%% to allow communication with an XMPP server called im.example.org.
%%
%%{route_subdomains, s2s}.<\/p>\n

%%%. ===============
%%%’ LISTENING PORTS<\/p>\n

%%
%% listen: The ports ejabberd will listen on, which service each is handled
%% by and what options to start it with.
%%
{listen,
[<\/p>\n

{5222, ejabberd_c2s, [<\/p>\n

%%
%% If TLS is compiled in and you installed a SSL
%% certificate, specify the full path to the
%% file and uncomment this line:
%%
{certfile, "\/etc\/ejabberd\/ejabberd.pem"}, starttls,<\/p>\n

{access, c2s},
{shaper, c2s_shaper},
{max_stanza_size, 65536}
]},<\/p>\n

%%
%% To enable the old SSL connection method on port 5223:
%%
%%{5223, ejabberd_c2s, [
%% {access, c2s},
%% {shaper, c2s_shaper},
%% {certfile, "\/etc\/ejabberd\/ejabberd.pem"}, tls,
%% {max_stanza_size, 65536}
%% ]},<\/p>\n

{5269, ejabberd_s2s_in, [
{shaper, s2s_shaper},
{max_stanza_size, 131072}
]},<\/p>\n

%%
%% ejabberd_service: Interact with external components (transports, …)
%%
%%{8888, ejabberd_service, [
%% {access, all},
%% {shaper_rule, fast},
%% {ip, {127, 0, 0, 1}},
%% {hosts, [\u00abicq.example.org\u00bb, \u00absms.example.org\u00bb],
%% [{password, \u00absecret\u00bb}]
%% }
%% ]},<\/p>\n

%%
%% ejabberd_stun: Handles STUN Binding requests
%%
%%{{3478, udp}, ejabberd_stun, []},<\/p>\n

{5280, ejabberd_http, [
%%{request_handlers,
%% [
%% {[\u00abpub\u00bb, \u00abarchive\u00bb], mod_http_fileserver}
%% ]},
captcha,
http_bind,
http_poll,
%%register,
web_admin
]}<\/p>\n

]}.<\/p>\n

%%
%% s2s_use_starttls: Enable STARTTLS + Dialback for S2S connections.
%% Allowed values are: false optional required required_trusted
%% You must specify a certificate file.
%%
%%{s2s_use_starttls, optional}.<\/p>\n

%%
%% s2s_certfile: Specify a certificate file.
%%
%%{s2s_certfile, "\/etc\/ejabberd\/ejabberd.pem"}.<\/p>\n

%%
%% domain_certfile: Specify a different certificate for each served hostname.
%%
%%{domain_certfile, \u00abexample.org\u00bb, "\/path\/to\/example_org.pem"}.
%%{domain_certfile, \u00abexample.com\u00bb, "\/path\/to\/example_com.pem"}.<\/p>\n

%%
%% S2S whitelist or blacklist
%%
%% Default s2s policy for undefined hosts.
%%
%%{s2s_default_policy, allow}.<\/p>\n

%%
%% Allow or deny communication with specific servers.
%%
%%{{s2s_host, \u00abgoodhost.org\u00bb}, allow}.
%%{{s2s_host, \u00abbadhost.org\u00bb}, deny}.<\/p>\n

%%
%% Outgoing S2S options
%%
%% Preferred address families (which to try first) and connect timeout
%% in milliseconds.
%%
%%{outgoing_s2s_options, [ipv4, ipv6], 10000}.<\/p>\n

%%%. ==============
%%%’ AUTHENTICATION<\/p>\n

%%
%% auth_method: Method used to authenticate the users.
%% The default method is the internal.
%% If you want to use a different method,
%% comment this line and enable the correct ones.
%%
%%{auth_method, internal}.
%%
%% Store the plain passwords or hashed for SCRAM:
%%{auth_password_format, plain}.
%%{auth_password_format, scram}.
%%
%% Define the FQDN if ejabberd doesn’t detect it:
%%{fqdn, \u00abserver3.example.com\u00bb}.<\/p>\n

%%
%% Authentication using external script
%% Make sure the script is executable by ejabberd.
%%
%%{auth_method, external}.
%%{extauth_program, "\/path\/to\/authentication\/script"}.<\/p>\n

%%
%% Authentication using ODBC
%% Remember to setup a database in the next section.
%%
%%{auth_method, odbc}.<\/p>\n

%%
%% Authentication using PAM
%%
%%{auth_method, pam}.
%%{pam_service, \u00abejabberd\u00bb}.<\/p>\n

%%
%% Authentication using LDAP
%%<\/p>\n

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%% \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a AD 2008. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u043f\u0438\u0441\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
{auth_method, ldap}.<\/p>\n

{ldap_servers, [\u00ab192.168.151.2\u00bb]}.
{ldap_port, 389}.<\/p>\n

{ldap_uids, [{\u00absAMAccountName\u00bb, "%u"}]}.
{ldap_filter, "(objectCategory=person)"}.<\/p>\n

{ldap_base, \u00abDC=developer,DC=com\u00bb}.
{ldap_rootdn, \u00abuserjabber@developer.com\u00bb}.
{ldap_password, \u00ab123456\u00bb}.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%<\/p>\n

%%
%% List of LDAP servers:
%%{ldap_servers, [\u00ablocalhost\u00bb]}.
%%
%% Encryption of connection to LDAP servers:
%%{ldap_encrypt, none}.
%%{ldap_encrypt, tls}.
%%
%% Port to connect to on LDAP servers:
%%{ldap_port, 389}.
%%{ldap_port, 636}.
%%
%% LDAP manager:
%%{ldap_rootdn, \u00abdc=example,dc=com\u00bb}.
%%
%% Password of LDAP manager:
%%{ldap_password, "******"}.
%%
%% Search base of LDAP directory:
%%{ldap_base, \u00abdc=example,dc=com\u00bb}.
%%
%% LDAP attribute that holds user ID:
%%{ldap_uids, [{\u00abmail\u00bb, "%u@mail.example.org"}]}.
%%
%% LDAP filter:
%%{ldap_filter, "(objectClass=shadowAccount)"}.<\/p>\n

%%
%% Anonymous login support:
%% auth_method: anonymous
%% anonymous_protocol: sasl_anon | login_anon | both
%% allow_multiple_connections: true | false
%%
%%{host_config, \u00abpublic.example.org\u00bb, [{auth_method, anonymous},
%% {allow_multiple_connections, false},
%% {anonymous_protocol, sasl_anon}]}.
%%
%% To use both anonymous and internal authentication:
%%
%%{host_config, \u00abpublic.example.org\u00bb, [{auth_method, [internal, anonymous]}]}.<\/p>\n

%%%. ==============
%%%’ DATABASE SETUP<\/p>\n

%% ejabberd by default uses the internal Mnesia database,
%% so you do not necessarily need this section.
%% This section provides configuration examples in case
%% you want to use other database backends.
%% Please consult the ejabberd Guide for details on database creation.<\/p>\n

%%
%% MySQL server:
%%
%%{odbc_server, {mysql, \u00abserver\u00bb, \u00abdatabase\u00bb, \u00abusername\u00bb, \u00abpassword\u00bb}}.
%%
%% If you want to specify the port:
%%{odbc_server, {mysql, \u00abserver\u00bb, 1234, \u00abdatabase\u00bb, \u00abusername\u00bb, \u00abpassword\u00bb}}.<\/p>\n

%%
%% PostgreSQL server:
%%
%%{odbc_server, {pgsql, \u00abserver\u00bb, \u00abdatabase\u00bb, \u00abusername\u00bb, \u00abpassword\u00bb}}.
%%
%% If you want to specify the port:
%%{odbc_server, {pgsql, \u00abserver\u00bb, 1234, \u00abdatabase\u00bb, \u00abusername\u00bb, \u00abpassword\u00bb}}.
%%
%% If you use PostgreSQL, have a large database, and need a
%% faster but inexact replacement for \u00abselect count(*) from users\u00bb
%%
%%{pgsql_users_number_estimate, true}.<\/p>\n

%%
%% ODBC compatible or MSSQL server:
%%
%%{odbc_server, \u00abDSN=ejabberd;UID=ejabberd;PWD=ejabberd\u00bb}.<\/p>\n

%%
%% Number of connections to open to the database for each virtual host
%%
%%{odbc_pool_size, 10}.<\/p>\n

%%
%% Interval to make a dummy SQL request to keep the connections to the
%% database alive. Specify in seconds: for example 28800 means 8 hours
%%
%%{odbc_keepalive_interval, undefined}.<\/p>\n

%%%. ===============
%%%’ TRAFFIC SHAPERS<\/p>\n

%%
%% The \u00abnormal\u00bb shaper limits traffic speed to 1000 B\/s
%%
{shaper, normal, {maxrate, 1000}}.<\/p>\n

%%
%% The \u00abfast\u00bb shaper limits traffic speed to 50000 B\/s
%%
{shaper, fast, {maxrate, 50000}}.<\/p>\n

%%
%% This option specifies the maximum number of elements in the queue
%% of the FSM. Refer to the documentation for details.
%%
{max_fsm_queue, 1000}.<\/p>\n

%%%. ====================
%%%’ ACCESS CONTROL LISTS<\/p>\n

%%
%% The ‘admin’ ACL grants administrative privileges to XMPP accounts.
%% You can put here as many accounts as you want.
%%
%%{acl, admin, {user, \u00abaleksey\u00bb, \u00ablocalhost\u00bb}}.
%%{acl, admin, {user, \u00abermine\u00bb, \u00abexample.org\u00bb}}.<\/p>\n

%%
%% Blocked users
%%
%%{acl, blocked, {user, \u00abbaduser\u00bb, \u00abexample.org\u00bb}}.
%%{acl, blocked, {user, \u00abtest\u00bb}}.<\/p>\n

%%
%% Local users: don’t modify this line.
%%
{acl, local, {user_regexp, ""}}.<\/p>\n

%%
%% More examples of ACLs
%%
%%{acl, jabberorg, {server, \u00abjabber.org\u00bb}}.
%%{acl, aleksey, {user, \u00abaleksey\u00bb, \u00abjabber.ru\u00bb}}.
%%{acl, test, {user_regexp, "^test"}}.
%%{acl, test, {user_glob, \u00abtest*\u00bb}}.<\/p>\n

%%
%% Define specific ACLs in a virtual host.
%%
%%{host_config, \u00ablocalhost\u00bb,
%% [
%% {acl, admin, {user, \u00abbob-local\u00bb, \u00ablocalhost\u00bb}}
%% ]
%%}.<\/p>\n

%%%. ============
%%%’ ACCESS RULES<\/p>\n

%% Maximum number of simultaneous sessions allowed for a single user:
{access, max_user_sessions, [{10, all}]}.<\/p>\n

%% Maximum number of offline messages that users can have:
{access, max_user_offline_messages, [{5000, admin}, {100, all}]}.<\/p>\n

%% This rule allows access only for local users:
{access, local, [{allow, local}]}.<\/p>\n

%% Only non-blocked users can use c2s connections:
{access, c2s, [{deny, blocked},
{allow, all}]}.<\/p>\n

%% For C2S connections, all users except admins use the \u00abnormal\u00bb shaper
{access, c2s_shaper, [{none, admin},
{normal, all}]}.<\/p>\n

%% All S2S connections use the \u00abfast\u00bb shaper
{access, s2s_shaper, [{fast, all}]}.<\/p>\n

%% Only admins can send announcement messages:
{access, announce, [{allow, admin}]}.<\/p>\n

%% Only admins can use the configuration interface:
{access, configure, [{allow, admin}]}.<\/p>\n

%% Admins of this server are also admins of the MUC service:
{access, muc_admin, [{allow, admin}]}.<\/p>\n

%% Only accounts of the local ejabberd server can create rooms:
{access, muc_create, [{allow, local}]}.<\/p>\n

%% All users are allowed to use the MUC service:
{access, muc, [{allow, all}]}.<\/p>\n

%% Only accounts on the local ejabberd server can create Pubsub nodes:
{access, pubsub_createnode, [{allow, local}]}.<\/p>\n

%% In-band registration allows registration of any possible username.
%% To disable in-band registration, replace ‘allow’ with ‘deny’.
{access, register, [{allow, all}]}.<\/p>\n

%% By default the frequency of account registrations from the same IP
%% is limited to 1 account every 10 minutes. To disable, specify: infinity
%%{registration_timeout, 600}.<\/p>\n

%%
%% Define specific Access Rules in a virtual host.
%%
%%{host_config, \u00ablocalhost\u00bb,
%% [
%% {access, c2s, [{allow, admin}, {deny, all}]},
%% {access, register, [{deny, all}]}
%% ]
%%}.<\/p>\n

%%%. ================
%%%’ DEFAULT LANGUAGE<\/p>\n

%%
%% language: Default language used for server messages.
%%
{language, \u00abru\u00bb}.<\/p>\n

%%
%% Set a different default language in a virtual host.
%%
%%{host_config, \u00ablocalhost\u00bb,
%% [{language, \u00abru\u00bb}]
%%}.<\/p>\n

%%%. =======
%%%’ CAPTCHA<\/p>\n

%%
%% Full path to a script that generates the image.
%%
%%{captcha_cmd, "\/usr\/lib64\/ejabberd\/priv\/bin\/captcha.sh"}.<\/p>\n

%%
%% Host for the URL and port where ejabberd listens for CAPTCHA requests.
%%
%%{captcha_host, \u00abexample.org:5280\u00bb}.<\/p>\n

%%
%% Limit CAPTCHA calls per minute for JID\/IP to avoid DoS.
%%
%%{captcha_limit, 5}.<\/p>\n

%%%. =======
%%%’ MODULES<\/p>\n

%%
%% Modules enabled in all ejabberd virtual hosts.
%%
{modules,
[
{mod_adhoc, []},
{mod_announce, [{access, announce}]}, % recommends mod_adhoc
{mod_blocking,[]}, % requires mod_privacy
{mod_caps, []},
{mod_configure,[]}, % requires mod_adhoc
{mod_disco, []},
%%{mod_echo, [{host, \u00abecho.localhost\u00bb}]},
{mod_irc, []},
{mod_http_bind, []},
%%{mod_http_fileserver, [
%% {docroot, "\/var\/www"},
%% {accesslog, "\/var\/log\/ejabberd\/access.log"}
%% ]},
{mod_last, []},
{mod_muc, [
%%{host, \u00abconference.HOST<\/a>@\u00bb},
{access, muc},
{access_create, muc_create},
{access_persistent, muc_create},
{access_admin, muc_admin}
]},
%%{mod_muc_log,[]},
{mod_offline, [{access_max_user_messages, max_user_offline_messages}]},
{mod_ping, []},
%%{mod_pres_counter,[{count, 5}, {interval, 60}]},
{mod_privacy, []},
{mod_private, []},
%%{mod_proxy65,[]},
{mod_pubsub, [
{access_createnode, pubsub_createnode},
{ignore_pep_from_offline, true}, % reduces resource comsumption, but XEP incompliant
%%{ignore_pep_from_offline, false}, % XEP compliant, but increases resource comsumption
{last_item_cache, false},
{plugins, [\u00abflat\u00bb, \u00abhometree\u00bb, \u00abpep\u00bb]} % pep requires mod_caps
]},
{mod_register, [
%%
%% Protect In-Band account registrations with CAPTCHA.
%%
%%{captcha_protected, true},<\/p>\n

%%
%% Set the minimum informational entropy for passwords.
%%
%%{password_strength, 32},<\/p>\n

%%
%% After successful registration, the user receives
%% a message with this subject and body.
%%
{welcome_message, {\u00abWelcome!\u00bb,
\u00abHi.\\nWelcome to this XMPP server.\u00bb}},<\/p>\n

%%
%% When a user registers, send a notification to
%% these XMPP accounts.
%%
%%{registration_watchers, [\u00abadmin1@example.org\u00bb]},<\/p>\n

%%
%% Only clients in the server machine can register accounts
%%
{ip_access, [{allow, \u00ab127.0.0.0\/8\u00bb},
{deny, \u00ab0.0.0.0\/0\u00bb}]},<\/p>\n

%%
%% Local c2s or remote s2s users cannot register accounts
%%
%%{access_from, deny},<\/p>\n

{access, register}
]},
%%{mod_register_web, [
%%
%% When a user registers, send a notification to
%% these XMPP accounts.
%%
%%{registration_watchers, [\u00abadmin1@example.org\u00bb]}
%% ]},
{mod_roster, []},
%%{mod_service_log,[]},
%%{mod_shared_roster,[]},<\/p>\n

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%% \u0420\u043e\u0441\u0442\u0435\u0440 \u0438\u0437 AD 2008.
%% \u0424\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043f\u0438\u0441\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445
%% \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043a \u0433\u0440\u0443\u043f\u043f\u0435 \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0438\u0437 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e
%% \u0432 AD 2008, \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0430 \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f, \u043f\u043e\u043b\u0435 \u041e\u0442\u0434\u0435\u043b.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
{mod_shared_roster_ldap,
[{ldap_groupattr,\u00abdepartment\u00bb},
{ldap_groupdesc,\u00abdepartment\u00bb},
{ldap_rfilter, "(objectCategory=person)"},
{ldap_memberattr,\u00absAMAccountName\u00bb},
{ldap_userdesc,\u00abcn\u00bb}
]
},
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%<\/p>\n

{mod_stats, []},
{mod_time, []},
%%{mod_vcard, []},<\/p>\n

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%% \u0427\u0442\u0435\u043d\u0438\u0435 VCard \u043f\u043e\u043b\u0435\u0439 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437 AD 2008, \u0442.\u0435. \u043f\u043e\u043b\u0435\u0439 \u043a\u043e\u0442\u043e\u0440\u044b\u0435
%% \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0432 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0424\u0430\u043c\u0438\u043b\u0438, \u0438\u043c\u0435\u043d\u0430, \u0438 \u0442.\u0434.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%<\/p>\n

{mod_vcard_ldap,
[{ldap_vcard_map,
[{\u00abNICKNAME\u00bb, "%s", [\u00abdisplayname\u00bb]},
{\u00abGIVEN\u00bb, "%s", [\u00abgivenName\u00bb]},
{\u00abMIDDLE\u00bb, "%s", [\u00abinitials\u00bb]},
{\u00abFAMILY\u00bb, "%s", [\u00absn\u00bb]},
{\u00abFN\u00bb, "%s", [\u00abdisplayName\u00bb]},
{\u00abEMAIL\u00bb, "%s", [\u00abmail\u00bb]},
{\u00abORGNAME\u00bb, "%s", [\u00abcompany\u00bb]},
{\u00abORGUNIT\u00bb, "%s", [\u00abdepartment\u00bb]},
{\u00abCTRY\u00bb, "%s", [\u00abc\u00bb]},
{\u00abLOCALITY\u00bb, "%s", [\u00abl\u00bb]},
{\u00abSTREET\u00bb, "%s", [\u00abstreetAddress\u00bb]},
{\u00abREGION\u00bb, "%s", [\u00abst\u00bb]},
{\u00abPCODE\u00bb, "%s", [\u00abpostalCode\u00bb]},
{\u00abTITLE\u00bb, "%s", [\u00abtitle\u00bb]},
{\u00abURL\u00bb, "%s", [\u00abwWWHomePage\u00bb]},
{\u00abDESC\u00bb, "%s", [\u00abdescription\u00bb]},
{\u00abTEL\u00bb, "%s", [\u00abtelephoneNumber\u00bb]}]},
{ldap_search_fields,
[{\u00abUser\u00bb, "%u"},
{\u00abName\u00bb, \u00abgivenName\u00bb},
{\u00abFamily Name\u00bb, \u00absn\u00bb},
{\u00abEmail\u00bb, \u00abmail\u00bb},
{\u00abCompany\u00bb, \u00abcompany\u00bb},
{\u00abDepartment\u00bb, \u00abdepartment\u00bb},
{\u00abRole\u00bb, \u00abtitle\u00bb},
{\u00abDescription\u00bb, \u00abdescription\u00bb},
{\u00abPhone\u00bb, \u00abtelephoneNumber\u00bb}]},
{ldap_search_reported,
[{\u00abFull Name\u00bb, \u00abFN\u00bb},
{\u00abNickname\u00bb, \u00abNICKNAME\u00bb},
{\u00abEmail\u00bb, \u00abEMAIL\u00bb}]}
]
},
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%<\/p>\n

{mod_version, []}
]}.<\/p>\n

%%
%% Enable modules with custom options in a specific virtual host
%%
%%{host_config, \u00ablocalhost\u00bb,
%% [{{add, modules},
%% [
%% {mod_echo, [{host, \u00abmirror.localhost\u00bb}]}
%% ]
%% }
%% ]}.<\/p>\n

%%%.
%%%’<\/p>\n

%%% $Id$<\/p>\n

%%% Local Variables:
%%% mode: erlang
%%% End:
%%% vim: set filetype=erlang tabstop=8 foldmarker=%%%’,%%%. foldmethod=marker:
<\/b> \t<\/p>\n

<\/div>\n<\/p><\/div>\n

\u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 http:\/\/habrahabr.ru\/post\/194582\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\t\u0414\u0430\u0432\u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438 \u043d\u0430 \u043a\u043e\u043d\u0435\u0446 \u044d\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u043a\u0443 EJabberd <\/b>\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0438\u0437 Active Directory Win 2008<\/b>. \u0421 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u043e\u0441\u0442\u0435\u0440\u0430 \u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u0432 AD<\/b>. \u0422.\u043a. \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0442\u0430\u0432 \u043a\u0443\u0447\u0443 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0432\u0435\u0437\u0434\u0435 \u043a\u0443\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0435. <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-194582","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/194582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=194582"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/194582\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=194582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=194582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=194582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}