Jitsi-meet with LDAP authentication does not work if user name is a full email address

I spent two days trying to figure this out. Jitsi-meet worked fine for anonymous users. testsaslauthd worked successfully in the prosody docker container. There were no any errors in the docker-compose logs. The only thing I found by the end of my investigation is an error in the browser console - “Strophe: Server did not offer a supported authentication mechanism” and then “Unauthorized to start the conference” with textContent “not authorized user domain”.

It happens that my LDAP server identifies users by their email addresses. But such IDs are silently rejected along the way to prosody.

For now, my instance of Jitsi-meet authenticates users with LDAP_FILTER=(mail=[e-mail]1) configuration and users omit @my.domain1 part at login. However, not clear what I should do now with users in my.domain2, etc.

[joker-x]

A workaround:

You can change the function toJid https://github.com/jitsi/jitsi-meet/blob/7684b2bf98a9b7f9fe719f8ffe86e968370ec523/react/features/base/connection/functions.js#L132 from:

export function toJid(id: string, { authdomain, domain }: Object): string {
    return id.indexOf('@') >= 0 ? id : `${id}@${authdomain || domain}`;
}

to:

export function toJid(id: string, { authdomain, domain }: Object): string {
    return `${id.split('@').join('.at.')}@${authdomain || domain}`;
}

Later, in /usr/lib/prosody/modules/mod_auth_ldap2/mod_auth_ldap2.lua change from:

function provider.test_password(username, password)
    return ldap.bind(username, password);
end

to:

function provider.test_password(username, password)
    local username = string.gsub(username, '.at.', '@');
    return ldap.bind(username, password);
end

And restart prosody.

Now in website can be login with email in LDAP and with the official mobile clients have to replace @ for .at.

[sooslaca]

@joker-x By any chance would you know what you needs to be patched for fix prosody auth for saslauthd?