Ku rakib server XMPP (Jabber) leh Prosody [La cusbooneysiiyay]

Xirmooyinka Prosody waxay ku jiraan keydka Debian, laakiin soosaarayaasha barnaamijkan waxay diyaariyeen bakhaar loogu talagalay Debian iyo noocyada kala duwan ee ay ku jiraan xirmooyinkii ugu dambeeyay iyo modullo dheeri ah, oo aan u adeegsan karno sida soo socota:

echo "deb http://packages.prosody.im/debian deggan ugu weyn" | sudo tee -a /etc/apt/sources.list wget http://prosody.im/files/prosody-debian-packages.key -O- | sudo apt-key add - cusboonaysiinta sudo aptitude

Marka bakhaarka lagu daro, waxaan sii wadi karnaa inaan ku rakibno 'proody' (oo lagu daro modules si loo isticmaalo sasl sida farsamooyinka xaqiijinta haddii loo baahdo, taas oo u oggolaanaysa in lagu daro prosody leh pam, LDAP, iwm.).

sudo kartida ku rakib sasl2-bin libsasl2-modules-ldap prosody liblua5.1- {sec0, cyrussasl0, event-prosody0}

Ka dib waxaan u gudubnaa inaanu soo saarno shahaadooyin is-saxeexan oo loogu talagalay boggayaga:

cd / etc / prosody / certs sudo openssl req -new -x509 -days 1095 -nodes -out "mydomain.cu.cert" -keyout "mydomain.cu.key"

Sixiroolaha ayaa na weydiin doona xog taxane ah, oo tan dhabta ah tan muhiimka ah ay tahay “Magaca guud (tusaale ahaan server-ka FQDN ama magacaaga) ”halka ay tahay inaan dhigno cinwaankeena, maadaama aan ugu adeegsan doonno qaybta VirtualHost faylka qaabeynta.

Intaa waxaa sii dheer, haddii on server meesha aan ku rakibno proody waxaan u qaabeeyey iptables Iyada oo siyaasadaha diidmada ee caadiga ah, waxaan u baahanahay inaan furno dekedaha loo baahan yahay ee shabakadeena, tusaale ahaan:

sudo iptables -A INPUT -i lo -j ACCEPT sudo iptables -A INPUT -i eth1 -s 192.168.0.0/24 -p tcp -m tcp -m state –state ESTABLISHED, RELATED -j ACCEPT sudo iptables -A INPUT - i eth1 -s 192.168.0.0/24 -p tcp -m tcp -m multiport -dports 5222,5223,5269 -m state -state NEW -j ACCEPT

Marka xigta, waxaan u gudubnaa inaan wax ka beddelno khadadka qaar ee feylka qaabeynta, oo ay tahay inaan wax ka beddelno /etc/prosody/prosody.cfg.lua markaa waxay u egtahay sidan:

port = {5222, 5269} ssl_ports = {5223} admins = {"juan@mydomain.cu", "pedro@mydomain.cu"} use_libevent = run; - ikhtiyaarka caadiga ah wuxuu ku saleysan yahay xulashada () shaqada, bedelkeedna xayeysiintu waxay isticmaashaa epoll (), taas oo ka waxtar badan oo la qiyaasi karo. modules_enabled = {"liiska"; "saslauth"; "tls"; "dialback"; "disk"; "gaar ah"; "vcard"; "asturnaanta"; "riixo"; "legacyauth"; "nooca"; "Waqtiga shaqada"; "waqti"; "ping"; "pep"; "isdiiwaangeli"; - ha joojin barnaamijkaani, wuxuu kuu oggol yahay oo keliya diiwaangelinta laakiin sidoo kale in la beddelo furayaasha "adhoc"; "admin_adhoc"; "posix"; "bosh"; - kudar xariiqan hadaad rabto inaad jabber ka awood siiso http}; allow_registration = been; - naafo u ah amniga - u beddel run haddii aad rabto inaad awood u yeelato sameynta koontooyin macmiilka laftiisa ssl = {key = "/etc/prosody/certs/localhost.key"; shahaadada = "/etc/prosody/certs/localhost.cert"; } kaydinta = "gudaha"; - keydka ugu dambeeya waa feyl xml - ikhtiyaar ahaan waxaan u isticmaali karnaa habka "sql" kaydinta - tani waxay u oggolaaneysaa adeegsiga SQLite, MySQL ama PostgreSQL gadaal (in kasta oo xuduudaha qaarkood ay tahay in lagu daro) sugitaan = "ውስጣዊ_hashed"; - waxaan isticmaali karnaa "intern_plain" haddii macmiilku uusan taageerin SCRAM-SHA-1 - haddii aan rabno inaan u adeegsanno habka sasl si aan hadhow u adeegsanno LDAP, waa inaan isticmaalnaa "cyrus" log = {error = "/ var / log / prosody / dambiil. khaldan "; info = "/var/log/prosody/prosody.log"; } pidfile = "/var/run/prosody/prosody.pid"; VirtualHost "localhost" VirtualHost "mydomain.cu" ssl = {key = "/etc/prosody/certs/mydomain.cu.key"; shahaadada = "/etc/prosody/certs/mydomain.cu.crt"; }

Marka feylka qaabeynta la beddelay, waxaan dib u bilaabi doonnaa adeegga:

sudo service proody kala jaraya

sudo prosodyctl adduser juan@mydomain.cu sudo prosodyctl adduser pedro@mydomain.cu

sudo prosodyctl status

Prosody wuxuu la socdaa PID 1310

Qaabeynta macmiilka

Notas