mod_shared_roster_ldap Active Directory

Hi,
i try to setup a ejabberd server for my company. I get the ldap authentication and mod_vcard_ldap work with the Active Directory and now it would be nice if i can use mod_shared_roster. With the ldap authentication the server shows me all contact and with the default shared_roster i can import all contact in every roster. But there are 230 Users and for the users it would be much easier to have all contacts sorted in there departments and optionally in there location. But here is the problem i think.

the Active Directory structure looks like dc-master -> companyname -> location -> departments -> users

Is it possible to auto create roster for this structure and maybe with the location?

To make it work simply i limit the authentication to one location:
{ldap_base, "ou=location,ou=companyname,dc=domain,dc=tld"}.

And then i try this config

{mod_shared_roster_ldap,
[
{ldap_servers, ["dc.domain.tld"]},
{ldap_base, "ou=location,ou=companyname,dc=domain,dc=tld"},
{ldap_rootdn, "cn=username,cn=Users,dc=domain,dc=tld"},
{ldap_password, "SuperSecret"},
{ldap_groupattr, "department"},
{ldap_groupdesc, "department"},
{ldap_memberattr, "sAMAccountName"},
%%{ldap_memberattr_format, "uid=%u*"},
{ldap_filter, "(sAMAccountName=*)"}
]}

I also try different things i found in this forum and on the web.

What is with mod_shared_roster? Should it be enabled or disabled?

Can i load mod_shared_roster_ldap more than one time and configure it for each location?

any help would be nice

kind regards
Lunx

lunx wrote: there are 230

lunx wrote:

there are 230 Users and for the users it would be much easier to have all contacts sorted in there departments and optionally in there location.

You could use mod_shared_roster, and manually create a group for each department, adding the members of it. But ejabberd doesn't implement an automated way of dofing this.

lunx wrote:

Is it possible to auto create roster for this structure and maybe with the location?

Note that mod_shared_roster* modules do not create roster items, they are a hack that add virtual roster items.

So your question is probably if it's possible to create shared roster groups automatically.
The answer is: that feature is not implemented in mod_shared_roster. I don't know if maybe it is in mod_shared_roster_ldap.

lunx wrote:

What is with mod_shared_roster? Should it be enabled or disabled?

If you already have mod_shared_roster_ldap enabled, then I think it's a bad idea to have mod_shared_roster enabled too.

lunx wrote:

Can i load mod_shared_roster_ldap more than one time and configure it for each location?

No, each module can only be started once. If you have several virtual hosts in ejabberd, you can start the module in each host with different options, but I guess this is not your case: I guess you have only one virtual host ('company.com' or whatever).

But what does the

But what does the mod_shared_roster_ldap do?

kind regards
Lunx

Syndicate content