OpenLDAP (FreeBSD) + openfire3.4.4

Openfire Openfire Support
1

All users in: ou=users,dc=artpaint,dc=spb,dc=ru

All groups in: ou=groups,dc=artpaint,dc=spb,dc=ru

Main DN: dc=artpaint,dc=spb,dc=ru

users properties:

(&(objectClass=posixAccount)(uid=)) everything is ok. here is screenshot: http://forum.lissyara.su/download/file.php?id=563&mode=view groups properties group filter: (&(objectClass=posixGroup)(memberUid=))

everything is ok. here is screenshot: http://forum.lissyara.su/download/file.php?id=564&mode=view

here is result. we can see 16 groups, but its not displayed. here is screenshot: http://forum.lissyara.su/download/file.php?id=555&mode=view

here is user properties… also we can’t see grou. here is screenshot: http://forum.lissyara.su/download/file.php?id=557&mode=view

gere is config:

/usr/local/etc/openfire/> cat openfire.xml

<?xml version=“1.0” encoding=“UTF-8”?>

<!–

This file stores bootstrap properties needed by Openfire.

Property names must be in the format: “prop.name.is.blah=value”

That will be stored as:

<prop>

<name>

<is>

<blah>value</blah>

</is>

</name>

</prop>

Most properties are stored in the Openfire database. A

property viewer and editor is included in the admin console.

–>

<!-- root element, all properties must be under this element -->

<jive>

<adminConsole>

<!-- Disable either port by setting the value to -1 -->

<port>9090</port>

<securePort>9091</securePort>

</adminConsole>

<admin>

<!-- Use this section to define users that will have admin privileges. Below,

you will find two ways to specify which users are admins. Admins will

have access to the admin console (only local users) and may have also access

to other functionalities like ad-hoc commands. -->

<!-- By default, only the user with the username “admin” can login

to the admin console. Alternatively, you can specify a comma-delimitted

list usernames that should be authorized to login to the admin console

by setting the <authorizedUsernames> field below. -->

<!-- <authorizedUsernames></authorizedUsernames> -->

<!-- Comma-delimitted list of bare JIDs. The JIDs may belong to local

or remote users. -->

<!-- <authorizedJIDs></authorizedJIDs> -->

<authorizedUsernames>admin</authorizedUsernames>

</admin>

<locale>en</locale>

<!-- Network settings. By default, Openfire will bind to all network interfaces.

Alternatively, you can specify a specific network interfaces that the server

will listen on. For example, 127.0.0.1. This setting is generally only useful

on multi-homed servers. -->

<!–

<network>

<interface></interface>

</network>

–>

<connectionProvider>

<className>org.jivesoftware.database.DefaultConnectionProvider</classN ame>

</connectionProvider>

<database>

<defaultProvider>

<driver>com.mysql.jdbc.Driver</driver>

<serverURL>jdbc:mysql://127.0.0.1:3306/JABBER</serverURL>

<username>jabber</username>

<password>jabber</password>

<minConnections>5</minConnections>

<maxConnections>15</maxConnections>

<connectionTimeout>1.0</connectionTimeout>

</defaultProvider>

</database>

<ldap>

<host>127.0.0.1</host>

<port>389</port>

<baseDN>dc=artpaint,dc=spb,dc=ru</baseDN>

<adminDN>cn=root,dc=artpaint,dc=spb,dc=ru</adminDN>

<adminPassword>password</adminPassword>

<connectionPoolEnabled>true</connectionPoolEnabled>

<sslEnabled>false</sslEnabled>

<ldapDebugEnabled>false</ldapDebugEnabled>

<autoFollowReferrals>true</autoFollowReferrals>

<usernameField>uid</usernameField>

<vcard-mapping><![CDATA[

<vCard xmlns=“vcard-temp”>

<N>

<GIVEN></GIVEN> </N> <EMAIL> <INTERNET/> <USERID></USERID> </EMAIL> <FN></FN>

<NICKNAME></NICKNAME>

<ADR>

<HOME/>

<STREET></STREET>

</ADR>

<ADR>

<WORK/>

<STREET></STREET>

<LOCALITY></LOCALITY>

<REGION></REGION>

<PCODE></PCODE>

</ADR>

<TEL>

<HOME/>

<VOICE/>

<NUMBER></NUMBER>

</TEL>

<TEL>

<WORK/>

<VOICE/>

<NUMBER></NUMBER>

</TEL>

<TEL>

<WORK/>

<CELL/>

<NUMBER></NUMBER>

</TEL>

<TEL>

<WORK/>

<PAGER/>

<NUMBER></NUMBER>

</TEL>

<TITLE></TITLE>

<ORG>

<ORGUNIT></ORGUNIT>

</ORG>

</vCard>]]></vcard-mapping>

<nameField>displayName</nameField>

<emailField>mail</emailField>

<groupNameField>cn</groupNameField>

<groupMemberField>memberUid</groupMemberField>

<groupDescriptionField>description</groupDescriptionField>

<posixMode>true</posixMode>

<groupSearchFilter>(&(objectClass=posixGroup)(memberUid=))</groupSearchFilter> <searchFields>(&(objectClass=posixAccount)(uid=))</searchFields>

</ldap>

<provider>

<vcard>

<className>org.jivesoftware.openfire.ldap.LdapVCardProvider</className >

</vcard>

<user>

<className>org.jivesoftware.openfire.ldap.LdapUserProvider</className& gt;

</user>

<auth>

<className>org.jivesoftware.openfire.ldap.LdapAuthProvider</className& gt;

</auth>

<group>

<className>org.jivesoftware.openfire.ldap.LdapGroupProvider</className >

</group>

</provider>

<setup>true</setup>

</jive>