Не получается запустить авторизацию по ntlm в Pandion Client. Топик прочитал весь, рекомендации все применил, но авторизация не проходит, пишет неверный пароль или нет юзера на сервере.
Помогите, плз, всю голову сломал, не могу найти в чем трабла..
Сервер Wildwire 3.1.1 - win2003, не контроллер домена
конфиг
1: IP:Port, Security: 10.11.38.182:5269, NORMAL
Domain Name(s): avs.mydomain.ru
2: IP:Port, Security: 10.11.38.182:5222, NORMAL
Domain Name(s): avs.mydomain.ru
3: IP:Port, Security: 10.11.38.182:5223, TLS (SSL)
Domain Name(s): avs.mydomain.ru
java.security
security.provider.1=sun.security.provider.Sun
security.provider.2=sun.security.rsa.SunRsaSign
security.provider.3=com.sun.net.ssl.internal.ssl.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProvider
security.provider.6=com.sun.security.sasl.Provider
security.provider.7=net.za.darkskies.security.sasl.Provider
wildfire.xml
<?xml version="1.0" encoding="UTF-8"?>
<!--
This file stores bootstrap properties needed by Wildfire.
Property names must be in the format: "prop.name.is.blah=value"
That will be stored as:
<prop>
<name>
<is>
<blah>value</blah>
</is>
</name>
</prop>
Most properties are stored in the Wildfire database. A
property viewer and editor is included in the admin console.
-->
<!-- root element, all properties must be under this element -->
<jive>
<adminConsole>
<!-- Disable either port by setting the value to -1 -->
<port>9090</port>
<securePort>9091</securePort>
</adminConsole>
<admin>
<!-- Use this section to define users that will have admin privileges. Below,
you will find two ways to specify which users are admins. Admins will
have access to the admin console (only local users) and may have also access
to other functionalities like ad-hoc commands. -->
<!-- By default, only the user with the username "admin" can login
to the admin console. Alternatively, you can specify a comma-delimitted
list usernames that should be authorized to login to the admin console
by setting the <authorizedUsernames> field below. -->
<!-- <authorizedUsernames></authorizedUsernames> -->
<!-- Comma-delimitted list of bare JIDs. The JIDs may belong to local
or remote users. -->
<!-- <authorizedJIDs></authorizedJIDs> -->
<authorizedUsernames>wild</authorizedUsernames>
</admin>
<locale>en</locale>
<!-- Network settings. By default, Wildfire will bind to all network interfaces.
Alternatively, you can specify a specific network interfaces that the server
will listen on. For example, 127.0.0.1. This setting is generally only useful
on multi-homed servers. -->
<!--
<network>
<interface></interface>
</network>
-->
<!-- Example LDAP settings -->
<!-- Note, for Active Directory, try usernameField=sAMAccountName, nameField=displayName,
emailField=mail -->
<!--
<ldap>
<host></host>
<port>389</port>
<usernameField>uid</usernameField>
<nameField>cn</nameField>
<emailField>mail</emailField>
<baseDN></baseDN>
<adminDN></adminDN>
<adminPassword></adminPassword>
</ldap>
<provider>
<user>
<className>org.jivesoftware.wildfire.ldap.LdapUserProvider</className>
</user>
<auth>
<className>org.jivesoftware.wildfire.ldap.LdapAuthProvider</className>
</auth>
</provider>
-->
<!-- End example LDAP settings -->
<connectionProvider>
<className>org.jivesoftware.database.DefaultConnectionProvider</className>
</connectionProvider>
<database>
<defaultProvider>
<driver>com.mysql.jdbc.Driver</driver>
<serverURL>jdbc:mysql://localhost:3306/wild</serverURL>
<username>wild</username>
<password>pass</password>
<minConnections>5</minConnections>
<maxConnections>15</maxConnections>
<connectionTimeout>1.0</connectionTimeout>
</defaultProvider>
</database>
<ldap>
<host>dc3</host>
<port>389</port>
<baseDN>dc=mydomain,dc=ru</baseDN>
<adminDN>wild@mydomain.ru</adminDN>
<adminPassword>pass</adminPassword>
<connectionPoolEnabled>true</connectionPoolEnabled>
<sslEnabled>false</sslEnabled>
<ldapDebugEnabled>false</ldapDebugEnabled>
<autoFollowReferrals>false</autoFollowReferrals>
<usernameField>sAMAccountName</usernameField>
<searchFilter>(&(objectCategory=Person)(memberOf=cn=wildfire, cn=Users,dc=mydomain,dc=ru)(sAMAccountName={0}))</searchFilter>
<vcard-mapping><![CDATA[
<vCard xmlns="vcard-temp">
<N>
<GIVEN>{cn}</GIVEN>
</N>
<EMAIL>
<INTERNET/>
<USERID>{mail}</USERID>
</EMAIL>
<FN>{displayName}</FN>
<NICKNAME>{cn}</NICKNAME>
<ADR>
<HOME/>
<STREET>{homePostalAddress}</STREET>
<PCODE>{homeZip}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<ADR>
<WORK/>
<STREET>{streetAddress}</STREET>
<LOCALITY>{l}</LOCALITY>
<REGION>{st}</REGION>
<PCODE>{postalCode}</PCODE>
<CTRY>{co}</CTRY>
</ADR>
<TEL>
<HOME/>
<VOICE/>
<NUMBER>{homePhone}</NUMBER>
</TEL>
<TEL>
<HOME/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<VOICE/>
<NUMBER>{telephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<CELL/>
<NUMBER>{mobile}</NUMBER>
</TEL>
<TEL>
<WORK/>
<FAX/>
<NUMBER>{facsimileTelephoneNumber}</NUMBER>
</TEL>
<TEL>
<WORK/>
<PAGER/>
<NUMBER>{pager}</NUMBER>
</TEL>
<TITLE>{title}</TITLE>
<ORG>
<ORGUNIT>{department}</ORGUNIT>
</ORG>
</vCard>]]></vcard-mapping>
<nameField>cn</nameField>
<emailField>mail</emailField>
<groupNameField>cn</groupNameField>
<groupMemberField>member</groupMemberField>
<groupDescriptionField>description</groupDescriptionField>
<posixMode>false</posixMode>
<groupSearchFilter>(objectClass=group)</groupSearchFilter>
</ldap>
<sasl>
<mechs>ANONYMOUS,PLAIN,DIGEST-MD5,CRAM-MD5,NTLM</mechs>
<realm>MYDOMAIN</realm>
</sasl>
<provider>
<vcard>
<className>org.jivesoftware.wildfire.ldap.LdapVCardProvider</className>
</vcard>
<user>
<className>org.jivesoftware.wildfire.ldap.LdapUserProvider</className>
</user>
<auth>
<className>org.jivesoftware.wildfire.ldap.LdapAuthProvider</className>
</auth>
<group>
<className>org.jivesoftware.wildfire.ldap.LdapGroupProvider</className>
</group>
<authorization>
<classList>org.jivesoftware.wildfire.sasl.StrictAuthorizationPolicy org.jivesoftware.wildfire.sasl.DefaultAuthorizationPolicy</classList>
</authorization>
</provider>
<setup>true</setup>
</jive>
Добавлено: в debug.log пишет следующее:
2007.01.31 10:46:26 Connect Socket[addr=/10.11.38.104,port=2635,localport=5222]
2007.01.31 10:46:28 AuthorizationManager: Loaded org.jivesoftware.wildfire.sasl.StrictAuthorizationPolicy
2007.01.31 10:46:28 AuthorizationManager: Loaded org.jivesoftware.wildfire.sasl.DefaultAuthorizationPolicy
2007.01.31 10:46:28 Администратор@AVS not authorized to Администратор
2007.01.31 10:46:28 SaslException
javax.security.sasl.SaslException: SSPI: Администратор@AVS is not authorized to act as Администратор
at net.za.darkskies.security.sasl.SSPIImpl.completeAuthorization(SSPIImpl.java:180)
at net.za.darkskies.security.sasl.SSPIImpl.evaluateResponse(Native Method)
at org.jivesoftware.wildfire.net.SASLAuthentication.handle(SASLAuthentication.java:251)
at org.jivesoftware.wildfire.net.SocketReadingMode.authenticateClient(SocketReadingMode.java:117)
at org.jivesoftware.wildfire.net.BlockingReadingMode.readStream(BlockingReadingMode.java:136)
at org.jivesoftware.wildfire.net.BlockingReadingMode.run(BlockingReadingMode.java:62)
at org.jivesoftware.wildfire.net.SocketReader.run(SocketReader.java:123)
at java.lang.Thread.run(Unknown Source)
2007.01.31 10:46:28 Logging off avs.mydomain.ru/7af433ce on org.jivesoftware.wildfire.net.SocketConnection@6ac615 socket: Socket[addr=/10.11.38.104,port=2635,localport=5222] session: org.jivesoftware.wildfire.ClientSession@10872ce status: 1 address: avs.mydomain.ru/7af433ce id: 7af433ce presence:
<presence type="unavailable"/>
Добавлено: Pandion при авторизации подсовывает Администратор@AVS , в то время как я залогинен под другой, причем доменной учеткой..
прошу прощения