[JDEV] Pam support for Jabber 1.4.2

[Ian Reinhart Geiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 27 November 2002 05:01 am, Chris Pile wrote:
> I did update the PAM patch from the contrib area to work with
> jabber-1.4.2 and I seem to remember emailing it to Peter Saint-Andre so
> he could include it at: http://download.jabber.org/contrib/.  Guess it
> never made it.  I still have it available on my site though:
>
>  http://www.snoogans.co.uk/jabber/files/jabber-1.4.2-pam.README
>  http://www.snoogans.co.uk/jabber/files/jabber-1.4.2-pam.tar.gz
>
Ah, I see, yeah i just made a new mod_auth file and used that api to make a 
module. I  also added a few more tests to make pam configureable but 
functionaly they are probibly about the same.

> Although I then went on to provide a better authentication mechanism for
> Jabber using the official XDB "check" Authentication method as described
> at: http://jabberd.jabberstudio.org/1.4/142changelog.html
>
> You can download the code at:
>  http://www.snoogans.co.uk/jabber/index.htm#xdb_auth_cpile
>
> It also supports IMAP, LDAP, MYSQL, PAM, POP3, RADIUS and SMB
> authentication.
>
> I did hear a rumour that xdb_auth_cpile was going to be mentioned in the
> jabber docs, but not sure.

This might be interesting, I see why they want this out of process to reduce 
linkage, but is the API documented enough to implement something like this in 
C or python?  I have to admit I avoid perl when at all possible so a C/C++ 
based solution would be ideal.  I am still learning the jabber API to get 
familiar enough with it, so if I am missing anything obvious to the initiated 
please let me know.  Also is the method for adding modules to jsm.so 
depricated? 

I guess Ill stick with my current implementation because I am not sure my 
clients are willing to live with buggy perl modules supporting the show.  I 
am going to have to research this xdb_auth_ setup some more because really it 
seems like a more simplistic approach than dlopening modules.

Thanks for the information, Jabber is truly one impressive peice of technology
- -ian reinhart geiser
>
>
> Thanks,
> Chris Pile.
>
> Ian Reinhart Geiser wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Greetings
> >         After poking around on various servers I found that there seemed
> > to be no easy way to use pam to authenticate a jabber user.  So I went
> > ahead and cleaned up some existing work to make a mod_auth_pam.c that
> > fits right into the existing build and source tree.  Currently it
> > consists of a small patch and the mod_auth_pam.c file.
> >
> >         I am willing to clean this up and maintain this code, but I am
> > unsure of how this is to get included into jabber source, or even if its
> > allowed for that matter.  If someone would be kind enough to point me in
> > the direction of protocol for this I would be very pleased.
> >
> >         I have tested this patch so far on linux (suse and debian) and
> > solaris 8.  It seems to work just fine, and am using it quite effectively
> > with a 800 user NT network where the linux box running the jabber server
> > is using smb_auth in pam.  This was key because this instalation is a
> > school and they wanted a place for students to chat, but did not want to
> > install and maintain a whole new server.  Using jabber and these patches
> > they had a dropin solution.
> >
> >         Cheers
> >         -ian reinhart geiser
> > - --
> > ========================================
> > When in doubt, use brute force.
> >                 -- Ken Thompson
> > ========================================
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.0.7 (GNU/Linux)
> >
> > iD8DBQE94507Py62TRm8dvgRAnl0AJsGt5Wo30lTJa44Qm0zWWrOy7baEQCgvxvu
> > umDIl4k+yWZBwTMbUGh32AQ=
> > =gcMs
> > -----END PGP SIGNATURE-----
> >
> > _______________________________________________
> > jdev mailing list
> > jdev at jabber.org
> > http://mailman.jabber.org/listinfo/jdev
>
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev

- -- 
========================================
"Biology is the only science in which multiplication means the same
thing as division."
========================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE95RHOPy62TRm8dvgRAibNAJ9eiGscWYSdMPLrPtxhbSg7d5yrHgCbB1pt
zPwSKHbIupXgYHVvFoyOuT0=
=QSj3
-----END PGP SIGNATURE-----