LDAP Integration Problems

Are there any good tutorials for LDAP integration?

I’ve been following this but haven’t been successful.

http://booting-rpi.blogspot.com/2015/09/using-ldap-authentication-with-jitsi.html

This is my /etc/prosody/conf.d/ldap.cfg.lua configuration:

authentication = 'ldap2' 
ldap = {
    hostname      = 'ip:389', 
    bind_dn       = '[e-mail]',
    bind_password = 'password',
    user = {
      basedn        = 'dc=alpha,dc=bravo',
      filter        = '*',
      usernamefield = 'sAMAccountName',
      namefield     = 'cn',
    },
}

This is my configuration in /etc/prosody/conf.d/sample.com.cfg.lua

-- Plugins path gets uncommented during jitsi-meet-tokens package install - that's where token plugin is located
--plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

VirtualHost "sample.com"
        -- enabled = false -- Remove this line to enable this host
        --authentication = "anonymous"
        authentication = "ldap2"
        -- Properties below are modified by jitsi-meet-tokens package config
        -- and authentication above is switched to "token"
        --app_id="example_app_id"
        --app_secret="example_app_secret"
        -- Assign this host a certificate for TLS, otherwise it would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/sample.com.key";
                certificate = "/etc/prosody/certs/sample.com.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        c2s_require_encryption = false

Component "conference.sample.com" "muc"
    storage = "null"
    --modules_enabled = { "token_verification" }
admins = { "[e-mail]" }

Component "jitsi-videobridge.sample.com"
    component_secret = "uIeysbRx"

VirtualHost "auth.sample.com"
    ssl = {
        key = "/etc/prosody/certs/auth.sample.com.key";
        certificate = "/etc/prosody/certs/auth.sample.com.crt";
    }
    authentication = "internal_plain"

Component "focus.sample.com"
    component_secret = "LS6K@u1q"

And here’s my /etc/jitsi/meet/sample.com-config.js

/* eslint-disable no-unused-vars, no-var */

var config = {
    // Configuration
    //

    // Alternative location for the configuration.
    // configLocation: './config.json',

    // Custom function which given the URL path should return a room name.
    // getroomnode: function (path) { return 'someprefixpossiblybasedonpath'; },


    // Connection
    //

    hosts: {
        // XMPP domain.
        domain: 'sample.com',

        // XMPP MUC domain. FIXME: use XEP-0030 to discover it.
        muc: 'conference.sample.com',

        // When using authentication, domain for guest users.
        anonymousdomain: 'guest.sample.com'

        // Domain for authenticated users. Defaults to <domain>.
        // authdomain: 'sample.com',

        // Jirecon recording component domain.
        // jirecon: 'jirecon.sample.com',

        // Call control component (Jigasi).
        // call_control: 'callcontrol.sample.com',

        // Focus component domain. Defaults to focus.<domain>.
        // focus: 'focus.sample.com',
    },

With all this in place, I don’t get any log errors however once you try to create a room past the start point, you run into this error and nothing works. [JitsiMeetJS.js] <Object.getGlobalOnErrorHandler>: UnhandledError: null Script: null Line: null Column: null StackTrace: Error: Strophe: BOSH-Connection failed: host-unknown

A few questions:

Is this the proper way for LDAP integration? Are there any tutorials for LDAP integration?

[damencho]

You just need to add a virtual host to prosody and restart prosody like:

VirtualHost "guest.sample.com"
	authentication = "anonymous"

[Annihil8ted]

Yes and okay, I just wanted to check current status on the “feature”. If I have the time, I’ll be glad to see if I can contribute. Thanks for the help!