Openfire (ARCHIVED)

Note: due to has SASL authentication works, the hybrid auth provider will only work with plain authentication. This is because digest auth resorts to external flow of control with a getPassword() call, which would prevent the three step approach from working.

Some of this work is complete, but is currently low priority so delaying until a later release.

Need this plus Chinese Wall (JM-349) feature to support non-employee users that can't be added to
the corporate LDAP directory.

Note: this feature could be used to support multiple LDAP servers. If auth or loading a user fails on first, try loading from second.

Any news?
Here's an update to the provider:
http://pastebin.com/f4bb2c051

Looks like we have a Hybrid Auth Provider. I'm assuming it works. =) Your patch appears to create a HybridUserProvider? That's cool. I'll try to squeeze this into the next release, time permitting!

Get this in consideration for next release

Could anyone provide a howto on using this? I am trying to create some local users in addition to the ldap users... Is that possible by using this feature?

Same question than Sindre. I'd like to use this feature... But I don't know how.

Hi,

You folks may wish to contact the provider's author for implementation details.

http://www.igniterealtime.org/community/people/rb2k

daryl

HOW TO:

In your mySQL database in the ofproperty table update the name-value pairs to the following:

provider.user.className = org.jivesoft.openfire.user.HybridUserProvider
provider.auth.className = org.jivesoft.openfire.user.HybridAuthProvider

Add the following name-value pairs in the table:

hybridAuthProvider.primaryProvider.className = org.jivesoft.openfire.ldap.LdapAuthProvider
hybridAuthProvider.secondaryProvider.className = org.jivesoft.openfire.auth.DefaultAuthProvider

In the openfile.xml add the following xml snippet:

<hybridUserProvider><primaryProvider><className>org.jivesoft.openfire.ldap.LdapUserProvider</className></primaryProvider></hybridUserProvider>

<hybridUserProvider><secondaryProvider><className>org.jivesoft.openfire.user.DefaultUserProvider</className></secondaryProvider></hybridUserProvider>

I am not sure if the HybridUserProvider class was updated in the 3.6.0a version to look for the properties in the database yet. If it has been then add the following rows in the ofproperty table:

hybridUserProvider.primaryProvider.className = org.jivesoft.openfire.ldap.LdapUserProvider
hybridUserProvider.secondaryProvider.className = org.jivesoft.openfire.auth.DefaultUserProvider

Hope this helps!

Can anyone help explain how to implement this?

I don't see where to put the HybridUser...java file.

Also, what DB settings do I need?

For instance, I currently use LDAP, which works. When I set the DB settings above, I can no longer login to the admin console or connect as a client.

What my ultimate goal is, is to read users from LDAP, and then also be able to read users from teh Openfire DB so I can add non-LDAP users.

Thanks...

John