Re: some questions on jabberd

Hi Kristoff,

you have not told us with exact jabberd you are using. If you are 
talking about jabberd 1.4.x/jabberd14, here are my answers for this 
software:

Kristoff Bonne schrieb:
> 1/ Jabberd seams to be open for everybody to subscribe. Althou this is
> OK for a "public" server, this is not what I would want as this is a
> "private" service.
> 
> Is there any way to block people from subscribing?

For versions previous to 1.6.0:
	remove the <register/> element from you configuration

For newer versions:
	see the examples in the configuration file. Basically remove
	every child element from the <register/> element but
	<instructions/>. (Within this <instructions/> element you can
	provide a message to the user that is trying to register why his
  	request is denied.)

> One option (althou a bit of a hack) I see would be to set the
> priviledges of the spool-directory to "444" (rw-rw-rw-). This means that
> files that are already there can be overwriten, but no new files can be
> added to that directory.
> 
> Do somebody expect problems with this?

This won't work. jabberd14 is recreating spool files in that directory 
every time it has to update data in it. This is to make changes atomic: 
new data is created on tmp filename and then renamed to the original file.

> 2/
> I also tried setting up a ssl certificate. I created a certificate and
> let it be signed by cacert.org. Jabberd is now also running at port
> 5223, but I cannot connect to it via SSL.
> 
> When I run a tcpdump, I see a TCP-session being started up at port 5223,
> but it stops almost immediatly. There's nothing in the log-file, so I
> have no idea what exactly is going on.
> 
> Anybody any idea how to troubleshoot this?

Try either the SSL client of openssl or GnuTLS what they tell you about 
what is going on on the socket:

openssl s_client -connect yourhost.com:5223

or

gnutls-cli -p 5223 yourhost.com



Matthias

_______________________________________________
JAdmin mailing list
FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
Forum: http://www.jabberforum.org/forumdisplay.php?f=19
Info: http://mail.jabber.org/mailman/listinfo/jadmin
Unsubscribe: [email protected]
_______________________________________________