You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Configuration (only if needed): grep -Ev '^$|^\s*#' ejabberd.yml
###### ejabberd configuration file###### The parameters used in this configuration file are explained at###### https://docs.ejabberd.im/admin/configuration###### The configuration file is written in YAML.### *******************************************************### ******* !!! WARNING !!! *******### ******* YAML IS INDENTATION SENSITIVE *******### ******* MAKE SURE YOU INDENT SECTIONS CORRECTLY *******### *******************************************************### Refer to http://en.wikipedia.org/wiki/YAML for the brief description.### However, ejabberd treats different literals as different types:###### - unquoted or single-quoted strings. They are called "atoms".### Example: dog, 'Jupiter', '3.14159', YELLOW###### - numeric literals. Example: 3, -45.0, .0###### - quoted or folded strings.### Examples of quoted string: "Lizzard", "orange".### Example of folded string:### > Art thou not Romeo,### and a Montague?###hosts:
- "localhost"loglevel: 5log_rotate_size: 10485760log_rotate_date: ""log_rotate_count: 1log_rate_limit: 100certfiles:
- "/etc/ssl/ejabberd/key.pem"
- "/etc/ssl/ejabberd/certificate.pem"auth_method: httpauth_opts:
host: "http://host.docker.internal:3000"connection_pool_size: 10connection_opts: []basic_auth: ""path_prefix: "/ejabberd/"auth_use_cache: falseauth_password_format: plaindefine_macro:
# TLS options for client not being able to use modern ciphers (Windows XP+, Android 3.0+)CIPHERS_INTERMEDIATE: "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS"PROTOCOL_OPTIONS_INTERMEDIATE:
- "no_sslv2"
- "no_sslv3"# TLS options for client able to use modern ciphers (Windows 7+, Android 5.0+)CIPHERS_MODERN: "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"PROTOCOL_OPTIONS_MODERN:
- "no_sslv2"
- "no_sslv3"
- "no_tlsv1"
- "no_tlsv1_1"c2s_ciphers: CIPHERS_INTERMEDIATEc2s_protocol_options: PROTOCOL_OPTIONS_INTERMEDIATElisten:
-
port: 5222ip: "::"module: ejabberd_c2smax_stanza_size: 262144shaper: c2s_shaperaccess: c2sstarttls_required: true
-
port: 5269ip: "::"module: ejabberd_s2s_inmax_stanza_size: 524288
-
port: 5443ip: "::"module: ejabberd_httprequest_handlers:
"/api": mod_http_api"/bosh": mod_bosh"/upload": mod_http_upload"/ws": ejabberd_http_wsweb_admin: truecaptcha: trueciphers: CIPHERS_INTERMEDIATEprotocol_options: PROTOCOL_OPTIONS_INTERMEDIATEtls: true
-
port: 5280ip: "::"module: ejabberd_httprequest_handlers:
"/api": mod_http_api"/bosh": mod_bosh"/upload": mod_http_upload"/ws": ejabberd_http_wsweb_admin: truecaptcha: trues2s_use_starttls: optionalacl:
admin:
user:
- "ejabberdadmin@localhost"local:
user_regexp: ""loopback:
ip:
- "127.0.0.0/8"
- "::1/128"access_rules:
local:
- allow: localc2s:
- deny: blocked
- allowannounce:
- allow: adminconfigure:
- allow: adminmuc_create:
- allow: localpubsub_createnode:
- allow: localregister:
- allowtrusted_network:
- allow: loopbackapi_permissions:
"console commands":
from:
- ejabberd_ctlwho: allwhat: "*""admin access":
who:
- access:
- allow:
- acl: loopback
- acl: admin
- oauth:
- scope: "ejabberd:admin"
- access:
- allow:
- acl: loopback
- acl: adminwhat:
- "*"
- "!stop"
- "!start""public commands":
who:
- ip: "127.0.0.1/8"what:
- "status"
- "connected_users_number"shaper:
normal: 1000fast: 50000shaper_rules:
max_user_sessions: 10max_user_offline_messages:
- 5000: admin
- 100c2s_shaper:
- none: admin
- normals2s_shaper: fastmodules:
mod_adhoc: {}mod_admin_extra: {}mod_announce:
access: announcemod_avatar: {}mod_blocking: {}mod_bosh: {}mod_caps: {}mod_carboncopy: {}mod_client_state: {}mod_configure: {}mod_disco: {}mod_fail2ban: {}mod_http_api: {}mod_http_upload:
put_url: "https://@HOST@:5443/upload"mod_last: {}mod_mam:
## Mnesia is limited to 2GB, better to use an SQL backend## For small servers SQLite is a good fit and is very easy## to configure. Uncomment this when you have SQL configured:## db_type: sqlassume_mam_usage: truedefault: alwaysmod_muc:
access:
- allowaccess_admin:
- allow: adminaccess_create: muc_createaccess_persistent: muc_createdefault_room_options:
mam: truemod_muc_admin: {}mod_offline:
access_max_user_messages: max_user_offline_messagesmod_ping: {}mod_privacy: {}mod_private: {}mod_proxy65:
access: localmax_connections: 5mod_pubsub:
access_createnode: pubsub_createnodeplugins:
- "flat"
- "pep"force_node_config:
## Change from "whitelist" to "open" to enable OMEMO support## See https://github.com/processone/ejabberd/issues/2425"eu.siacs.conversations.axolotl.*":
access_model: whitelist## Avoid buggy clients to make their bookmarks public"storage:bookmarks":
access_model: whitelistmod_push: {}mod_push_keepalive: {}mod_register:
## Only accept registration requests from the "trusted"## network (see access_rules section above).## Think twice before enabling registration from any## address. See the Jabber SPAM Manifesto for details:## https://github.com/ge0rg/jabber-spam-fighting-manifestoip_access: trusted_networkmod_roster:
versioning: truemod_s2s_dialback: {}mod_shared_roster: {}mod_stream_mgmt:
resend_on_timeout: if_offlinemod_vcard: {}mod_vcard_xupdate: {}mod_version:
show_os: false### Local Variables:### mode: yaml### End:### vim: set filetype=yaml tabstop=8
Errors from error.log/crash.log
No errors
Bug description
When sending a message from a connected user (tom-234) to an unconnected user (m-groß-gerau) the message is not archived - instead a service unavailable error is returned to the connected user:
It is obvious that the http auth module cannot find the user when m-gross-gerau is sent to the auth module insteadof m-groß-gerau. This can also be reproduced if German umlauts like ä,ö or ü are part of the JID address.
When the connected user tom-234 sends a message to the unconnected user carina-darmstadt then the message gets archived as expected. In this scenario the correct user name is sent to the auth module. The 'to' user is also logged correctly instead of the byte character string (109,45,103,114,111,195,159,45,103,101,114,97,117) as it is logged for m-groß-gerau. The logs are as follows:
Environment
Configuration (only if needed): grep -Ev '^$|^\s*#' ejabberd.yml
Errors from error.log/crash.log
No errors
Bug description
When sending a message from a connected user (tom-234) to an unconnected user (m-groß-gerau) the message is not archived - instead a service unavailable error is returned to the connected user:
The logs show the following:
It is obvious that the http auth module cannot find the user when m-gross-gerau is sent to the auth module insteadof m-groß-gerau. This can also be reproduced if German umlauts like ä,ö or ü are part of the JID address.
When the connected user tom-234 sends a message to the unconnected user carina-darmstadt then the message gets archived as expected. In this scenario the correct user name is sent to the auth module. The 'to' user is also logged correctly instead of the byte character string (109,45,103,114,111,195,159,45,103,101,114,97,117) as it is logged for m-groß-gerau. The logs are as follows:
Can you pls tell me what is wrong with my setup? I hope that my explantion is understandable. If you need more information pls let me know. Thanks
The text was updated successfully, but these errors were encountered: