Faka iseva ye-XMPP (Jabber) nge-Prosody [Kubuyekeziwe]

Amaphakeji we-Prosody asendaweni yokugcina izinto zeDebian, kepha abathuthukisi bale software balungiselele ikhosombe le-Debian kanye ne-derivatives equkethe amaphakheji wakamuva namamojula angeziwe, esingawasebenzisa ngokulandelayo:

echo "deb http://packages.prosody.im/debian main main" | i-sudo tee -a /etc/apt/source.list wget http://prosody.im/files/prosody-debian-packages.key -O- | engeza ukhiye we-sudo apt - ukuvuselelwa kwesudo aptitude

Lapho okugciniwe sekufakiwe, singaqhubeka nokufaka i-prosody (ngokwengeza ama-module wokusebenzisa sasl njengendlela yokufakazela ubuqiniso uma kunesidingo, evumela ukuhlanganisa i-prosody ne pam, I-LDAP, njll).

i-sudo aptitude ukufaka i-sasl2-bin libsasl2-modules-ldap prosody liblua5.1- {sec0, cyrussasl0, umcimbi-prosody0}

Bese siqhubeka nokukhiqiza izitifiketi ezizisayinele esizindeni sethu:

cd / njll / prosody / certs Sudo openssl req -new -x509 -days 1095 -nodes -out "mydomain.cu.cert" -keyout "mydomain.cu.key"

Isilekeleli sizosibuza uchungechunge lwemininingwane, okubaluleke kakhulu kuyo ukuthi “Igama Elijwayelekile (isb. Iseva I-FQDN noma igama LAKHO) ”lapho kufanele sibeke khona isizinda sethu, njengoba sizosisebenzisa esigabeni I-VirtualHost ifayela lokumisa.

Ngokwengeziwe, uma kuseva lapho sifaka khona i-prosody esiyilungisile iptables ngezinqubomgomo zokuphika okuzenzakalelayo, sidinga ukuvula amachweba adingekayo wenethiwekhi yethu, ngokwesibonelo:

ama-sudo iptables -I-INPUT -i lo -j ACCEPT sudo iptables -A INPUT -i eth1 -s 192.168.0.0/24 -p tcp -m tcp -m state --state ESTABLISHED, RELATED -j ACCEPT sudo iptables -A INPUT - ngingu-eth1 -s 192.168.0.0/24 -p tcp -m tcp -m multiport --dports 5222,5223,5269 -m state --state NEW -j ACCEPT

Okulandelayo, siqhubeka nokushintsha eminye imigqa yefayela lokumisa, okufanele sililungiselele /etc/prosody/prosody.cfg.lua ngakho-ke kubukeka kanjena:

amachweba = {5222, 5269} ssl_ports = {5223} admins = {"juan@mydomain.cu", "pedro@mydomain.cu"} use_libevent = true; - inketho ezenzakalelayo isuselwa ekusebenzeni kwe- select (), esikhundleni salokho libevent isebenzisa i- epoll (), esebenza kahle futhi esabekayo. modules_enabled = {"uhlelo"; "saslauth"; "tls"; "ukubuyisela emuva"; "idiski"; "okuyimfihlo"; "i-vcard"; "ubumfihlo"; "ukuminyanisa"; "i-legacyauth"; "inguqulo"; "isikhathi esengeziwe"; "isikhathi"; "ping"; "pep"; "ukubhalisa"; - ungayikhubazi le module, ayivumeli ukubhalisa kuphela kepha futhi nokushintsha amaphasiwedi we- "adhoc"; "admin_adhoc"; "posix"; "bosh"; - engeza lo mugqa uma ufuna ukunika amandla i-jabber ngaphezulu kwe-http}; vumela_ukubhalisa = amanga; - kukhutshazwe ukuphepha - shintshela kuqiniso uma ufuna ukunika amandla ukwenziwa kwama-akhawunti kusuka kuklayenti uqobo ssl = {key = "/etc/prosody/certs/localhost.key"; isitifiketi = "/etc/prosody/certs/localhost.cert"; } isitoreji = "ngaphakathi"; - isitoreji esizenzakalelayo yifayela le-xml - ngokuzithandela singasebenzisa indlela yokugcina engu- "sql" - lokhu kuvumela ukusebenzisa i-SQLite, i-MySQL noma i-PostgreSQL njenge-backend (yize kufanele kufakwe ezinye izinhlaka) authentication = "internal_hashed"; - singasebenzisa i- "internal_plain" uma iklayenti lingasekeli i-SCRAM-SHA-1 - uma sifuna ukusebenzisa indlela ye-sasl ukusebenzisa i-LDAP kamuva, kufanele sisebenzise i- "cyrus" log = {error = "/ var / log / prosody / prosody. iphutha "; imininingwane = "/var/log/prosody/prosody.log"; } i-pidfile = "/var/run/prosody/prosody.pid"; I-VirtualHost "i-localhost" VirtualHost "mydomain.cu" ssl = {key = "/etc/prosody/certs/mydomain.cu.key"; isitifiketi = "/etc/prosody/certs/mydomain.cu.crt"; }

Lapho ifayili lokumisa selishintshiwe, siqala kabusha insiza:

ukukhishwa kwensizakalo yesudo

Sudo prosodyctl adduser juan@mydomain.cu sudo prosodyctl adduser pedro@mydomain.cu

Isimo se-prosodyctl

I-Prosody isebenza nge-PID 1310

Ukucushwa kweklayenti

Amanothi