Feed aggregator

Sat, 18 Jun 2016 10:06:14 +0430 jacob jabber <ejabberd.jacob< at >gmail.com> wrote: When authentication fails what else info do you have except IP?

Hi. how to prevent brute-force attacks on ejabberd server when authentication failures are detected? I want to ban users not IPs. mod_fail2ban banned IPs. Is another way to prevent brute force attacks? _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

rm -rf / On Tue, Jun 14, 2016 at 6:53 PM, samad khadivar <skhadivar< at >gmail.com> wrote:

* samad khadivar <skhadivar< at >gmail.com> [2016-06-14 18:13]: This patch should fix it: https://github.com/processone/ejabberd/commit/26bce5de.patch Thanks for the report. Holger

hi. I have a ejabberd cluster includes 5 nodes and when get online users this returns *nil* priority for some users. users that have this value are not online unless user also has zero priority value . /opt/ejabberd-16.02/bin/ejabberdctl connected_users_info [<<"user1">>,64,<<"domain.com">>,47,<<6120c16d9abd2">>] c2s_compressed_tls 192.168.1.35 9243 nil ejabberd< at >192-168-11-13 72253 [<<"user1">>,64,<<"domain.com">>,47,<<"12be3db9a97f585">>] c2s_compressed_tls 192.168.1.34 56023 nil ejabberd< at >192-168-11-9 82538 [<<"user3">>,64,<<"domain.com">>,47,<<"f31fac426badc58">>] c2s_compressed_tls 192.168.1.36 11287 nil ejabberd< at >192-168-10-9 160897 [<<"user3">>,64,<<"domain.com">>,47,<<"a451ba79aa1e2b">>] c2s_compressed_tls 192.168.114.38 4637 nil ejabberd< at >192-168-14-17 179037 [<<"user5">>,64,<<"domain.com">>,47,<<"de7081c7d0b029">>] c2s_compressed_tls 192.168.114.35 49083 nil ejabberd< at >192-168-13-13 25779 [<<"user3">>,64,<<"domain.com">>,47,<<"833f23a58e4063">>] c2s_compressed_tls 192.168.114.38 18691 nil ejabberd< at >192-168-14-17 67830 [<<"user1">>,64,<<"domain.com">>,47,<<"8a9d66076fa5243">>] c2s_compressed_tls 192.168.114.38 26421 nil ejabberd< at >192-168-14-17 90711 [<<"user1">>,64,<<"domain.com">>,47,<<"155fee41b0847e0">>] c2s_compressed_tls 192.168.114.38 34717 nil ejabberd< at >192-168-114-17 152550 [<<"user3">>,64,<<"domain.com">>,47,<<"6120c16d7abd2">>] c2s_compressed_tls 192.168.114.35 9243 nil ejabberd< at >192-168-13-11 72431 [<<"user3">>,64,<<"domain.com">>,47,<<"12be3db9a97f585">>] c2s_compressed_tls 192.168.114.34 56023 nil ejabberd< at >192-168-13-14 82716 [<<"user1">>,64,<<"domain.com">>,47,<<"80f8b492e4ccb9f">>] c2s_compressed_tls 192.168.114.37 14420 0 ejabberd< at >192-168-14-13 262 [<<"user3">>,64,<<"domain.com">>,47,<<"_5473c37286ee607">>] c2s_compressed_tls 192.168.114.39 28717 0 ejabberd< at >192-168-14-65 295 [<<"user5">>,64,<<"domain.com">>,47,<<"adddec2f856c5d6">>] c2s_compressed_tls 192.168.114.35 14852 0 ejabberd< at >192-168-13-13 431 result of /opt/ejabberd-16.02/bin/ejabberdctl connected_users_number is no real. what is the meaning of nil value? why? _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

hi, in ejabberd 16.02 when I using *assume_mam_usage: if_enabled* for mam config it returns this error mod_mam: assume_mam_usage: if_enabled default: always cache_size: 100000 cache_life_time: 3600 2016-06-12 11:58:51.539 [error] <0.20724.1>< at >ejabberd_hooks:run_fold1:368 {{case_clause,{archive_prefs,{<<"user1">>,<<"domain.com ">>},always,[],[]}},[{mod_mam,message_is_archived,5,[{file,"src/mod_mam.erl"},{line,354}]},{ejabberd_hooks,safe_apply,3,[{file,"src/ejabberd_hooks.erl"},{line,382}]},{ejabberd_hooks,run_fold1,4,[{file,"src/ejabberd_hooks.erl"},{line,365}]},{ejabberd_c2s,'-handle_unacked_stanzas/1-fun-6-',8,[{file,"src/ejabberd_c2s.erl"},{line,2918}]},{lists,foreach,2,[{file,"lists.erl"},{line,1336}]},{ejabberd_c2s,terminate,3,[{file,"src/ejabberd_c2s.erl"},{line,1803}]},{p1_fsm,terminate,8,[{file,"src/p1_fsm.erl"},{line,740}]},{proc_lib,init_p_do_apply,3,[{file,"proc_lib.erl"},{line,237}]}]} running hook: {message_is_archived,[{state,{socket_state,ezlib,{zlibsock,fast_tls,{tlssock,#Port<0.47476>,#Port<0.47495>},#Port<0.47539>},<0.20723.1>},ejabberd_socket,#Ref<0.0.4.219723>,false,<<"17644652947291914606">>,undefined,c2s,c2s_shaper,true,true,false,true,[verify_none,compression_none,{protocol_options,<<"no_sslv3">>},{certfile,<<"/opt/ejabberd-16.02/conf/server.pem">>}],true,{jid,<<"user">>,<<" domain.com">>,<<"Android_bc7104214a409f89">>,<<"user">>,<<"domain.com ">>,<<"Android_bc7104214a409f89">>},<<"user">>,<<"domain.com ">>,<<"Android_bc7104214a409f89">>,{{1465,715862,453492},<0.20724.1>},{23,{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user1">>,<<" domain.com">>,<<>>},nil,nil},nil},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil}},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user2">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},nil,nil},nil}}},{{<<"user3">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},nil,nil},nil},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user4">>,<<"domain.com ">>,<<>>},nil,nil},nil}},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user5">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil}}}}},{41,{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user6">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},nil,nil},nil},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user7">>,<<"domain.com ">>,<<>>},nil,nil},nil}},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user8">>,<<"domain.com ">>,<<>>},nil,nil}}},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user9">>,<<" domain.com">>,<<>>},nil,nil},nil},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil}},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user10">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil}}}},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user11">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user12">>,<<"domain.com ">>,<<>>},nil,nil},nil}},{{<<"user">>,<<"domain.com ">>,<<>>},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<"domain.com ">>,<<>>},nil,nil},nil},{{<<"user13">>,<<"domain.com ">>,<<>>},nil,nil}}},{{<<"user">>,<<"domain.com">>,<<>>},{{<<"user">>,<<" domain.com">>,<<>>},{{<<"user...">>,...},...},...},...}}}},...},...]} _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

* Gaurav Jain <monkeyfdude< at >gmail.com> [2016-06-11 14:20]: According to your log snippets, you're running into the scenario I described, so the behavior is expected: If there's still anything unclear after reading <https://www.ejabberd.im/faq/tcp>, just ask. Holger

Thank you for the response. It helps. I investigated in detail and I have a reproducible as described below. * ejabberd_c2s block is configured with resume_timeout: 2 * Stream Management is enabled but stream resumption is disabled from client side. ** Two users - Sender and Receiver.* **Receiver* loses connection and does not close the stream/tcp connection properly. * *Sender* sends a message to *Receiver* but gets 503/Service-Unavailable * *Sender* retries sending failed message after 5 secs and sends successfully. ++++++++++++++++++++++++++++++++++++++ Clients sent following request to server: SEND: <enable xmlns="urn:xmpp:sm:3"/> Clients received following acks from server. RECV: <enabled xmlns="urn:xmpp:sm:3"/> RECV: <enabled xmlns="urn:xmpp:sm:3"/> ++++++++++++++++++++++++++++++++++++++ *Relevant Server logs:* -------------------------------------------------------------------------------- 1) *ejabberd* tries to send message to *Receiver* who lost connection: <<"<message from='*Sender*' to='*Receiver*' type='chat' id=''><body>I have to go back</body><thread></thread><active xmlns=' http://jabber.org/protocol/chatstates'/></message>">> -------------------------------------------------------------------------------- *Then some pubSub/multicast related packets* 016-06-11 20:03:53.698 [debug] <0.489.0>< at >shaper:update:120 State: {maxrate,100000,129.30556943548794,1465675433614549}, Size=26 M=0.1300841029950614, I=83.597 2016-06-11 20:03:53.698 [debug] <0.490.0>< at >ejabberd_c2s:send_text:1823 Send XML on stream = <<"<a xmlns='urn:xmpp:sm:3' h='26'/>">> *2016-06-11 20:03:58.587 [info] <0.606.0>< at >ejabberd_c2s:terminate:1773 ({socket_state,fast_tls,{tlssock,#Port<0.13962>,#Port<0.13963>},<0.605.0>}) Close session for Receiver* 2016-06-11 20:03:58.587 [debug] <0.606.0>< at >mod_pubsub:node_action:4186 node_action <<"pubsub.com">> <<"flat">> get_entity_affiliations [<<"pubsub. * Receiver*">>,{*Receiver*}] 2016-06-11 20:03:58.587 [debug] <0.606.0>< at >mod_pubsub:node_call:4167 node_call <<"flat">> get_entity_affiliations [<<"pubsub.com>>,{*Receiver*}] 2016-06-11 20:03:58.587 [debug] <0.606.0>< at >mod_pubsub:node_action:4186 node_action <<"pubsub.com">> <<"hometree">> get_entity_affiliations [<<" pubsub.com">>,{*Receiver*}] 2016-06-11 20:03:58.587 [debug] <0.606.0>< at >mod_pubsub:node_call:4167 node_call <<"hometree">> get_entity_affiliations [<<"pubsub.com">>,{ *Receiver*}] 2016-06-11 20:03:58.587 [debug] <0.606.0>< at >mod_pubsub:node_action:4186 node_action <<"pubsub.com">> <<"pep">> get_entity_affiliations [<<" pubsub.com">>,{*Receiver*}] 2016-06-11 20:03:58.588 [debug] <0.606.0>< at >mod_pubsub:node_call:4167 node_call <<"pep">> get_entity_affiliations [<<"pubsub.com">>,{*Receiver*}] -------------------------------------------------------------------------------- *Presence related packets* 2016-06-11 20:03:58.588 [debug] <0.606.0>< at >mod_carboncopy:disable:249 disabling for *Receiver* 2016-06-11 20:03:58.588 [debug] <0.606.0>< at >mod_shared_roster:unset_presence:1099 unset_presence for *Receiver* -> <<>> (0 resources) 2016-06-11 20:03:58.588 [debug] <0.606.0>< at >ejabberd_router_multicast:do_route:211 route_multicast from *Receiver* domain dev.com destinations [*Receiver*,*Sender*,User4,User3] packet {xmlel,<<"presence">>,[{<<"type">>,<<"unavailable">>}],[]} -------------------------------------------------------------------------------- *2016-06-11 20:03:58.588 [info] <0.606.0>< at >ejabberd_c2s:handle_unacked_stanzas:2849 1 stanzas were not acknowledged by **Receiver* 2016-06-11 20:03:58.588 [debug] <0.407.0>< at >ejabberd_router:do_route:351 route from {*Receiver*} to {*Receiver*} packet {xmlel,<<"presence">>,[{<<"type">>,<<"unavailable">>}],[]} -------------------------------------------------------------------------------- *Finally the error message 503/service-unavailable* 2016-06-11 20:03:58.589 [debug] <0.606.0>< at >ejabberd_router:do_route:351 route from {*Receiver*} to {*Sender*} packet {xmlel,<<"message">>,[{<<"type">>,<<"error">>},{"to">>, * Sender*},{<<"from">>,* Receiver*},{<<"id">>,<<"">>}],[{xmlel,<<"body">>,[],[{xmlcdata,<<"I have to go back">>}]},{xmlel,<<"thread">>,[],[{xmlcdata,<<"">>}]},{xmlel,<<"active">>,[{<<"xmlns">>,<<" http://jabber.org/protocol/chatstates ">>}],[]},{xmlel,<<"error">>,[{<<"code">>,<<"503">>},{<<"type">>,<<"cancel">>}],[{xmlel,<<"service-unavailable">>,[{<<"xmlns">>,<<"urn:ietf:params:xml:ns:xmpp-stanzas">>}],[]}]}]} On Sat, Jun 11, 2016 at 7:50 AM, Holger Weiß <holger< at >zedat.fu-berlin.de> wrote: _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

* Gaurav Jain <monkeyfdude< at >gmail.com> [2016-06-11 01:23]: Are you using stream management? Maybe the previous connection was lost and then user2 created a new session (instead of resuming the old one)? If so, this behavior is explained here: https://www.ejabberd.im/faq/tcp Holger

During testing various network connection use cases, I encounter a problem I do not fully understand. * Its a 1 x 1 message (not MUC message) * user1 sends a message to user2 * user2 is in the process of connecting to server (not fully connected yet) * user1 gets an error message back (503/service-unavailable) My understanding was: * if user2 is not connected, the message from user1 will become offline. * when user2 is connected, the offline message will be delivered * It does work like that 99% of time except 1-2 times. * Can you please tell under which circumstances 503 is returned for user2?* * ----------------------------------------------* *SEND: <message type="chat" to="user2< at >developer.com <user2< at >developer.com>" id="**someID**"><body>Testing Testing</body><thread>123</thread><active xmlns="http://jabber.org/protocol/chatstates <http://jabber.org/protocol/chatstates>"/></message>* *RECV: <message xmlns="jabber:client" from="user2< at >developer.com <user2< at >developer.com>" to="user1< at >developer.com <user1< at >developer.com>" type="error" id="someID"><body>**Testing Testing**</body><thread>123</thread><active xmlns="http://jabber.org/protocol/chatstates <http://jabber.org/protocol/chatstates>"/><error code="503" type="cancel"><service-unavailable xmlns="urn:ietf:params:xml:ns:xmpp-stanzas"/></error></message>* * ----------------------------------------------* _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

Hello, The problem is that you have process ID retained in your cluster that come from a node that has been stopped and restarted. I am not sure how you got there, as a properly configured system does not keep process id between restart. You may have a misconfiguration on your session table or MUC service. Anyway, a restart of your cluster should fix the issue. Best regards,

* Ricky Gutierrez <xserverlinux< at >gmail.com> [2016-05-07 20:33]: There's two XMPP extensions to implement multi-device synchronization currently in use: - XEP-0280 (Message Carbons) copies all incoming and outgoing messages to all clients that are currently online. - XEP-0313 (Message Archive Management) lets clients retrieve any messages they missed (because they were offline) from server-side archives. Recent ejabberd versions support both extensions if mod_carboncopy and mod_mam are enabled, Jitsi supports only XEP-0280 (Message Carbons). You can configure mod_mam to use Mnesia or SQL storage.¹ SQL storage is indeed recommended, and you could use that for mod_mam while sticking to Mnesia for everything else. But enabling mod_mam won't help unless the client supports it. Holger ¹ See <https://docs.ejabberd.im/admin/guide/configuration/#modmam>.

Hi, it is possible that this question was asked many times, but here's a question I have and I want to solve, now I have a ejabberd 15.x server with 400 users, the client default use is Jitsi in its latest version, the problem is that some users to my server ejabberd from their homes and on their personal computers and there do not load the message history of the office are connected, they ask me if we can find a solution, looking for a solution some mention using MySQL odbc, but not a solution for me, if mysql use with ejabberd xmpp integration lose my asterisk server, I work very well with the native bd ejabberd and asterisk, restart the server now if history is lost. any advice?

This new ejabberd release includes bugfixes, and also two major source code refactorings: one for ejabberd commands, and other for database specific code in many modules. This version is doing lot of under the scene changes to prepare further improvements and refactoring. For consistency, modules configured to use an SQL RDBMS are named sql instead of the more confusing odbc. You are not required to modify your configuration file, old style 'odbc' keyword works, but you may want to update it and replace 'odbc' with 'sql'. Erlang/OTP 18.3 is now used in all official installers and packages available in the download area. ## Changes ### API Commands - Add API versionning - Changed error handling, based on exception - ejabberd Command bugfixes - Accept commands: add_commands syntax (along commands: - add_commands) - Fix mod_muc_admin:get_room_options and set_room_affiliation - mod_http_api: support 'open' ejabberd commands ### Databases - Split modules DB specific code into separate modules - Rename "odbc" to "sql" everywhere - Rename "internal" auth to "mnesia" - Improve detection of databases supported by modules - Switch to varchar(64) in mysql user.server/salt as text can't have default values - 'serverkey' and 'salt' should have empty string as default ### XMPP - Drop headline messages sent to offline resources - Don't omit bounces for messages of type "result" - Match namespace when checking for chat states - Fix check for standalone chat state notifications - Disable TLS compression for s2s by default - Make sure that ejabberd_sm sid are unique - Send stream trailer at the very end of the processing - Generate shorter jid for anonymous connections - Fix anonymous SASL auth ### ejabberdctl - Add option to migration script to delete data from a table after they have been successfully moved to SQL database: `ejabberdctl delete_mnesia example.org` - Remove useless variable and quote EPMD and SPOOL_DIR - Fix node ping command - Use UUID for ctl node name - Remove --auth in ejabberd_ctl.erl as it's useless, still useful for mod_rest - Force ERL_PATH for Elixir console ### Pubsub - Fix use of pubsub node plugin when configured with default_node_config - Set default value for pubsub#itemreply option - Add subscribe/unsubscribe hooks ### Internal - Add mod_mam header file - Replace ?ERR_* macros with ?ERRT_* - change mod_ping Timers using maps instead of dict ### Dependencies - Update p1_utils to 1.0.4: Adds p1_time_compat:unique_timestamp() - Uptate fast_tls to 1.0.3: Prevent buffer overflows and allocation failures - Uptate stringprep to 1.0.3: Fix compilation on Windows and error message - Uptate stun to 1.0.3: Use fast_tls 1.0.3 - Uptate esip to 1.0.4: Use fast_tls 1.0.3 ## Feedback As usual, the release is tagged in the Git source code repository on Github: https://github.com/processone/ejabberd.git The source package and binary installers are available at https://www.process-one.net/ejabberd/downloads/ If you suspect that you've found a bug, please search or fill a bug report on Github: https://github.com/processone/ejabberd/issues

Hello, Thank you for letting us know about the project :) On Thu, Apr 21, 2016 at 12:57 PM Marcelo Terres <mhterres< at >gmail.com> wrote: _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

Hi. I'm here to invite you all to test another PoC that I developed and that uses Asterisk and XMPP, called XyBot. XyBot is a XMPP bot written in python and its main goal is to enable users to interact with asterisk directly from their XMPP client. Xybot was built to provide a expandable structure of plugins and monitoring agents that allows system administrators to develop their own features. You can find more informations (including source code for download) in my blog at https://www.mundoopensource.com.br/xybot-xmpp-bot-that-allows-users-to-interact-with-asterisk/. Any doubts or suggestions are welcomed. Regards, Marcelo H. Terres <mhterres< at >gmail.com> IM: mhterres< at >jabber.mundoopensource.com.br https://www.mundoopensource.com.br https://twitter.com/mhterres https://linkedin.com/in/marceloterres

Hey! Open message <http://cn.rinhoo.com/walk.php?enn> gerbra< at >gotadsl.co.uk _______________________________________________ ejabberd mailing list ejabberd< at >jabber.ru http://lists.jabber.ru/mailman/listinfo/ejabberd

and the hostname was the problem. thanks for catching it. randy

that was the result of the conversion from erlang where it was %% Hostname {hosts, ["localhost", "xmpp", "xmpp.rg.net"]}.

* Randy Bush <randy< at >psg.com> [2016-04-18 12:06]: Did you just change this to "localhost" to hide the real host name on the mailing list, or are you actually using that name? Holger