fresh ejabberd 1.1.3 / gentoo installtion: no s2s connections working

Hi,

I start guessing that the gentoo-package of ejabberd 1.13 is inside buggy - maybe anyone can confirm this or I am just to blind to make a good ejabberd.cfg?

It was impossible for me, to make that ejabberd make succesfull exchange over s2s conntections. Here is a typical log if I try to send a message from outside to a account inside ejabberd:

=INFO REPORT==== 2008-01-07 00:56:02 ===
I(<0.400.0>:ejabberd_s2s_out:106): started: {"myejabberd.de",
                                             "otherjabber.de",
                                             {new,"1885804287"}}

=INFO REPORT==== 2008-01-07 00:57:06 ===
I(<0.400.0>:ejabberd_s2s_out:662): terminated: normal

The message is always sent back to the sender... but the reciever didnt got the message.

On the other way - if a message is sent from inside ejabberd to an other jabber-server the log look likes:

=INFO REPORT==== 2008-01-07 01:03:26 ===
I(<0.215.0>:ejabberd_listener:90): (#Port<0.356>) Accepted connection {{otherJabberIPAdress},57285} -> {{myEjabberdInternIP},5269}

=INFO REPORT==== 2008-01-07 01:03:26 ===
I(<0.411.0>:ejabberd_s2s_in:105): started: {gen_tcp,#Port<0.356>}

=INFO REPORT==== 2008-01-07 01:03:26 ===
I(<0.411.0>:ejabberd_s2s_in:222): starttls

=INFO REPORT==== 2008-01-07 01:03:27 ===
I(<0.411.0>:ejabberd_s2s_in:317): GET KEY: {"myejabberd.de",
                                            "otherjabber.de",
                                            [],
                                            "62fbfb4031fad64a77dc09b5d864bdbc9a23d0e2"}

=INFO REPORT==== 2008-01-07 01:03:27 ===
I(<0.413.0>:ejabberd_s2s_out:106): started: {"myejabberd.de",
                                             "otherjabber.de",
                                             {verify,
                                              <0.411.0>,
                                              "62fbfb4031fad64a77dc09b5d864bdbc9a23d0e2",
                                              "1875589115"}}

=INFO REPORT==== 2008-01-07 01:04:23 ===
I(<0.413.0>:ejabberd_s2s_out:662): terminated: normal

The client of the inside sender gets this message:

Ihre Nachricht kann nicht zugestellt werden: "halloaaa", Grund: "Server connect timeout while sent out dialback request: myEjabberdExternIP: Connected"

My ejabberd.conf look nearly like the default-configuration:

{acl, admin, {user, "test"}}.
{acl, local, {user_regexp, ""}}.
{access, pubsub_createnode, [{allow, all}]}.
{access, configure, [{allow, admin}]}.
{welcome_message, none}.
{access, announce, [{allow, admin}]}.
{access, c2s, [{deny, blocked},
               {allow, all}]}.
{shaper, normal, {maxrate, 1000}}.
{shaper, fast, {maxrate, 50000}}.
{access, c2s_shaper, [{none, admin},
                      {normal, all}]}.
{access, s2s_shaper, [{fast, all}]}.
{access, muc_admin, [{allow, admin}]}.
{access, muc, [{allow, all}]}.
{access, local, [{allow, local}]}.
{auth_method, internal}.
{hosts, ["domainA.de", "domainB.de", "domainC.de"]}.
{max_user_sessions, 10}.
{language, "en"}.

{listen,
[{5222, ejabberd_c2s,     [{access, c2s}, {shaper, c2s_shaper},
                            {max_stanza_size, 65536},
                            starttls,{certfile, "/etc/jabber/ssl.pem"}]},
  {5223, ejabberd_c2s,     [{access, c2s},
                            {max_stanza_size, 65536},
                            tls, {certfile, "/etc/jabber/ssl.pem"}]},
  {5269, ejabberd_s2s_in,  [{shaper, s2s_shaper},
                            {max_stanza_size, 131072}
                           ]},
  {5280, ejabberd_http,    [http_poll, web_admin]},
  {8888, ejabberd_service, [{access, all},
                            {hosts, ["icq.localhost", "sms.localhost"],
                             [{password, "secret"}]}]}
]}.

{s2s_use_starttls, true}.
{s2s_certfile, "/etc/jabber/ssl.pem"}.
{outgoing_s2s_port, 5269}.

{modules,
[
  {mod_register,   [{access, register}]},
  {mod_roster,     []},
  {mod_privacy,    []},
  {mod_adhoc,      []},
  {mod_configure,  []}, % Depends on mod_adhoc
  {mod_configure2, []},
  {mod_disco,      []},
  {mod_stats,      []},
  {mod_vcard,      []},
  {mod_offline,    []},
  {mod_announce,   [{access, announce}]}, % Depends on mod_adhoc
  {mod_echo,       [{host, "echo.localhost"}]},
  {mod_private,    []},
  {mod_muc,        [{access, muc},
                    {access_create, muc},
                    {access_admin, muc_admin}]},
%  {mod_muc_log,    []},
%  {mod_shared_roster, []},
  {mod_pubsub,     [{access_createnode, pubsub_createnode}]},
  {mod_time,       []},
  {mod_last,       []},
  {mod_version,    []}
]}.

I would be happy for any help as I am dealing with this problem for months :-(...

in my gentoo box all work...

in my gentoo box all work...

..so i must be blind B-)

Can you post your ejabberd.cfg (of course with anonymized data) so that it can hopefully help me to find my mistake?

And how does your log-file looks when a message is successfully incomming and outgoing respectively?

Thanks in advanced, H.

{acl, admin, {user,

{acl, admin, {user, "admin"}}.
{acl, admin, {user, "evadim"}}.
{acl, local, {user_regexp, ""}}.
{access, pubsub_createnode, [{allow, all}]}.
{access, configure, [{allow, admin}]}.
{access, register, [{deny, all}]}.
{registration_watchers, ["evadim @ evadim.ru"]}.
{access, announce, [{allow, admin}]}.
{access, c2s, [{deny, blocked},
               {allow, all}]}.
{shaper, normal, {maxrate, 1000}}.
{shaper, fast, {maxrate, 50000}}.
{access, c2s_shaper, [{none, admin},
                      {normal, all}]}.
{access, s2s_shaper, [{fast, all}]}.
{access, muc_admin, [{allow, admin}]}.
{access, muc, [{allow, all}]}.
{auth_method, internal}.
{hosts, ["evadim.ru"]}.
{host_config, "evadim.ru", [{auth_method, anonymous},
                                     {allow_multiple_connections, true},
                                     {anonymous_protocol, sasl_anon}]}.
{host_config, "evadim.ru", [{auth_method, [internal, anonymous]}]}.
{language, "ru"}.
{listen,
[{5222, ejabberd_c2s,     [{access, c2s},
                            {shaper, c2s_shaper},
                            {max_stanza_size, 65536},
                            starttls,
                            zlib,
                             {certfile, "/etc/jabber/ejabberd.pem"}]},
  {5223, ejabberd_c2s,     [{access, c2s},
                            {max_stanza_size, 65536},
                            tls, {certfile, "/etc/jabber/ejabberd.pem"}]},
  {5269, ejabberd_s2s_in,  [{shaper, s2s_shaper},
                            {max_stanza_size, 131072}
                           ]},
  {5280, ejabberd_http,    [http_poll, http_bind]},
  {5281, ejabberd_http,    [web_admin,
                            ssl, {certfile, "/etc/jabber/ejabberd.pem"}
                            ]},
  {5347, ejabberd_service, [{host, "icq.evadim.ru",
                                [{password, "secret"}]}]},
  {5348, ejabberd_service, [{host, "jmc.evadim.ru",
                                [{password, "secret"}]}]},
  {5349, ejabberd_service, [{host, "rss.evadim.ru",
                                [{password, "secret"}]}]}
]}.
{s2s_use_starttls, true}.
{s2s_certfile, "/etc/jabber/ejabberd.pem"}.
{outgoing_s2s_port, 5269}.
{modules,
[
  {mod_register,   [{access, register}]},
  {mod_roster,     []},
  {mod_privacy,    []},
  {mod_adhoc,      []},
  {mod_configure,  []}, % Depends on mod_adhoc
  {mod_configure2, []},
  {mod_disco,      []},
  {mod_stats,      []},
  {mod_vcard,      []},
  {mod_offline,    []},
  {mod_announce,   [{access, announce}]}, % Depends on mod_adhoc
  {mod_echo,       [{host, "echo.evadim.ru"}]},
  {mod_private,    []},
  {mod_irc,        [{access, all}]},
  {mod_muc,        [{access, all},
                    {access_create, all},
                    {access_admin, muc_admin}]},
  {mod_shared_roster, []},
  {mod_ctlextra,   []},
  {mod_statsdx,    []},
  {mod_stats2file, [{interval, 60}, {type, html},
                    {basefilename, "/var/www/evadim.ru/htdocs/ejabberd/stats"},
                    {hosts, ["evadim.ru"]}
                    ]},
  {mod_pubsub,     [{access_createnode, pubsub_createnode}]},
  {mod_time,       []},
  {mod_last,       []},
  {mod_version,    []}
]}.

jabber domain name can be resolved from internet?

no real differences between both configs

I dont see any real differences between both config-files.

the DNS-resolving is working fine. At least, when I am doing pings to different hosts I got the correct ip-adresses. The portforwarding in the firewall (port 5269) is directed to the ejabberd-server (I've got the ipcop as firewall).

Do you have set the USE-flag sasl? I haven't... but could this make a difference regarding to my log above?

Is there any way to get some detailed error-messages from ejabberd?

Thanks, H.

Syndicate content