forum.cz6.ru

Код: Выделить всё

arhiv# cd /usr/ports/net-im/ejabberd
arhiv# make install clean

Код: Выделить всё

                      ┌────────────────────────────────────────────────────────────────────┐
                      │                   Options for ejabberd 2.0.5_2                     │  
                      │ ┌────────────────────────────────────────────────────────────────┐ │  
                      │ │                 [X] ODBC  Enable ODBC support                  │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      ├─└────────────────────────────────────────────────────────────────┘─┤  
                      │                       [  OK  ]       Cancel                        │  
                      └────────────────────────────────────────────────────────────────────┘  
                                                                                              
                      ┌────────────────────────────────────────────────────────────────────┐
                      │               Options for diablo-jdk 1.6.0.07.02_7                 │  
                      │ ┌────────────────────────────────────────────────────────────────┐ │  
                      │ │   [ ] POLICY    Install the Unlimited Strength Policy Files    │ │  
                      │ │   [ ] TZUPDATE  Update the time zone data                      │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      │ │                                                                │ │  
                      ├─└────────────────────────────────────────────────────────────────┘─┤  
                      │                       [  OK  ]       Cancel                        │  
                      └────────────────────────────────────────────────────────────────────┘  
                                                                                             

Код: Выделить всё

===>  Vulnerability check disabled, database not found
===>  Found saved configuration for diablo-jdk-1.6.0.07.02_7

 Because of licensing restrictions, you must fetch the distribution
 manually.

 Please access

     http://www.FreeBSDFoundation.org/cgi-bin/download?download=diablo-caffe-freebsd7-amd64-1.6.0_07-b02.tar.bz2

 with a web browser and "Accept" the End User License Agreement for
 "Caffe Diablo 1.6.0".

 Please place the downloaded file(s) in /usr/ports/distfiles.

*** Error code 1

Stop in /usr/ports/java/diablo-jdk16.
*** Error code 1

Код: Выделить всё

cd /usr/local/etc/ejabberd
cp ejabberd.cfg.example ejabberd.cfg
cp inetrc.example inetrc

Код: Выделить всё

openssl req -newkey rsa:1024 -keyout server.pem -nodes -x509 -days 3650 -out server.cer
cat server.cer >> server.pem
rm server.cer

Код: Выделить всё

{watchdog_admins, ["roma@apk.stniva.ru"]}
{hosts, ["apk.stniva.ru"]}
{certfile, "/usr/local/etc/ejabberd/server.pem"}, starttls,
%%{auth_method, internal} %% - это я закоментировал

{auth_method, ldap}
{ldap_servers, ["localhost"]}
{ldap_base, "ou=users,dc=apk,dc=stniva,dc=ru"}
{ldap_rootdn, "cn=admin,dc=apk,dc=stniva,dc=ru"}
{ldap_password, "000000"}

{acl, admin, {user, "roma", "apk.stniva.ru"}}
{access, register, [{deny, all}]}.
{language, "ru"}

Код: Выделить всё

  %%{mod_vcard,    []},
  {mod_vcard_ldap,
    [
    {ldap_rootdn, "cn=admin,dc=apk,dc=stniva,dc=ru"},
    {ldap_password, "000000"},
    {ldap_base, "ou=users,dc=apk,dc=stniva,dc=ru"},
    {ldap_vcard_map,
    [{"NICKNAME", "%u", []},
    {"GIVEN", "%s", ["givenName"]},
    {"FAMILY", "%s", ["sn"]},
    {"FN", "%s %s", ["givenName", "sn"]}]},
    {ldap_search_fields,
    [{"User", "%u"},
    {"Name", "givenName"},
    {"Family Name", "sn"}]},
    {ldap_search_reported,
    [{"Full Name", "FN"},
    {"Nickname", "NICKNAME"}]}
    ]},

Код: Выделить всё

    {watchdog_admins, ["roma@apk.stniva.ru"]}
    {hosts, ["apk.stniva.ru"]}
    {certfile, "/usr/local/etc/ejabberd/server.pem"}, starttls,
    %%{auth_method, internal} %% - это я закоментировал

    {auth_method, ldap}
    {ldap_servers, ["localhost"]}
    {ldap_base, "ou=users,dc=apk,dc=stniva,dc=ru"}
    {ldap_rootdn, "cn=admin,dc=apk,dc=stniva,dc=ru"}
    {ldap_password, "000000"}

    {acl, admin, {user, "roma", "apk.stniva.ru"}}
    {access, register, [{deny, all}]}.
    {language, "ru"}

Код: Выделить всё

{mod_shared_roster_ldap,[
  {ldap_base,"dc=pechersky,dc=ru"},
  {ldap_rfilter,"(objectClass=posixGroup)"},
  {ldap_filter,""},
  {ldap_ufilter,"(uid=%u)"},
  {ldap_groupattr,"cn"},
  {ldap_groupdesc,"description"},
  {ldap_memberattr,"memberUid"},
  {ldap_memberattr_format,"%u"},
  {ldap_useruid,"uid"},
  {ldap_userdesc,"displayName"}
  ]},

Код: Выделить всё

# путь к хомякам юзеров
    logon home = \\%L\%U
    logon drive = X:
    logon script = logon.bat

Код: Выделить всё

REM *********** JABBER *********************************************
SET jVersion=0.0.0.0
SET jPath=C:\Documents and Settings\%username%\Application Data

IF EXIST "%jPath%\Pandion\%jVersion%.txt" GOTO end

:install.
RMDIR /S /Q C:\"Program Files"\Pandion
RMDIR /S /Q C:\"Documents and Settings"\%username%\"Local Settings"\"Application Data"\Pandion
DEL /q "C:\Documents and Settings\All Users\Рабочий стол\Pandion.lnk"
RMDIR /S /Q "%jPath%\Pandion"
XCOPY \\192.168.0.11\netlogon\Win\Pandion "%jPath%\Pandion" /Y /E /I
COPY "\\192.168.0.11\netlogon\Win\Pandion\Служба Сообщений.lnk" "C:\Documents and Settings\%username%\Рабочий стол" /Y
echo ^<^?xml version="1.0" encoding="UTF-8"?^>^<^settings^>^<^aot^>^false^<^/aot^>^<^authentication^>^normal^<^/authentication^>^<^autologin^>^true^<^/autologin^>^<^encryption^>^optional^<^/encryption^>^<^installupdates^>^yes^<^/installupdates^>^<^language^>^ru^<^/language^>^<^last_address^>^%username%@apk.stniva.ru^<^/last_address^>^<^last_autoupdate^>^0^<^/last_autoupdate^>^<^last_password^>^<^/last_password^>^<^last_password_remember^>^true^<^/last_password_remember^>^<^lastheight^>^560^<^/lastheight^>^<^lastposx^>^400^<^/lastposx^>^<^lastposy^>^20^<^/lastposy^>^<^lastwidth^>^330^<^/lastwidth^>^<^serveraddress^>^<^/serveraddress^>^<^serverport^>^<^/serverport^>^<^softwaretrack^>^stable^<^/softwaretrack^>^<^welcomescreen^>^yes^<^/welcomescreen^>^<^welcomesettings^>^true^<^/welcomesettings^>^<^/settings^>^ > "%jPath%\Pandion\global.xml"

GOTO version

:version
cd /D "%jPath%\Pandion\"
echo pwouet > %jVersion%.txt

:end

:START
START /b C:\"Documents and Settings"\%username%\"Application Data"\Pandion\pandion.exe

Код: Выделить всё

SET jVersion=0.0.0.0

Код: Выделить всё

{auth_method, external}.
{extauth_program, "/usr/local/etc/ejabberd/check_pass_ldap_perl.pl"}.

Код: Выделить всё

unix# cat check_pass_ldap_perl.pl
#!/usr/bin/perl

use Net::LDAP;
use Crypt::SmbHash qw(nthash);
use Digest::SHA;
use Encode;

my $ldapBind="cn=root,dc=zavod,dc=ru";  # под кем соединяемся с ldap
my $ldapPass="------------"; # Указываем здесь пароль для root
my $ldapBase="ou=users,dc=zavod,dc=ru";        
my $fieldUser="uid";   # где будем смотреть пользователя
my $fieldPass="sambaNTPassword";   # и поле для сравнения пароля

use Unix::Syslog qw(:macros :subs);


sub ldap_connect {
        do { sleep 2; $ldap = new Net::LDAP ( 'ldap://127.0.0.1', version=>3, verify=>'none') } while not $ldap;
        $ldap->bind ("$ldapBind", password => $ldapPass);
}

sub ldap_disconnect {
        $ldap->unbind;
        $ldap->disconnect;
}

ldap_connect;

while(1){
    my $buf = "";
    syslog LOG_INFO,"waiting for packet";
    my $nread = sysread STDIN,$buf,2;
    do { syslog LOG_INFO,"port closed"; exit; } unless $nread == 2;
    my $len = unpack "n",$buf;
    my $nread = sysread STDIN,$buf,$len;


    ($op,$user,$domain,$pass) = split (/:/,$buf,4);

    # Filter dangerous characters
    $user =~ s/[\n\r]//g;
    $pass =~ s/[\n\r]//g;
    $domain =~ s/[\n\r]//g;
    my $password = nthash($pass);

    my $jid = "$user\@$domain";
    my $result;
    my $res;

    syslog(LOG_INFO,"request (%s)", $op);
    if (length $user > 128 or length $user > 128 or length $domain > 128){
       my $out = pack "nn",2,0;
       syswrite STDOUT,$out;
       next;
    }
    SWITCH:
    {
      $op eq 'auth' and do
      {
         $res = $ldap->search (
           base => "$ldapBase",
           scope => "sub",
           filter => "(&($fieldUser=$user)($fieldPass=$password))"
         );
         $code=$res->code();

         if($code != 0){
              ldap_disconnect;
              ldap_connect;
              $res = $ldap->search (
              base => "$ldapBase",
                filter => "(&($fieldUser=$user)($fieldPass=$password))"
              );
         }
         $result = $res->count();

      },last SWITCH;

      $op eq 'setpass' and do
      {
         $result = 0;
      },last SWITCH;
      $op eq 'isuser' and do
      {
         # password is null. Return 1 if the user $user\@$domain exitst.
         $result = 0;
         $res = $ldap->search (
           base => "$ldapBase",
           filter => "($fieldUser=$user)"
         );
         $code=$res->code();
         if($code != 0){
           ldap_disconnect;
           ldap_connect;
           $res = $ldap->search (
             base => "$ldapBase",
             filter => "($fieldUser=$user)"
           );
         }
         $result = $res->count();
         #syslog(LOG_INFO,"ejabberd_mysql_ext_auth: Executing is_user: %s",$orden);
      },last SWITCH;
    };
    $result = 0 if $domain ne "smhlebopek.ru";

    my $out = pack "nn",2,$result ? 1 : 0;
    syswrite STDOUT,$out;

}

ldap_disconnect;

closelog;