Pidgin Clients "Not Authorized"

Paul_Santabarbara · April 4, 2014, 2:44pm

Hello, I downloaded and set up Openfire 3.9.1 using the embedded database. I created users in Openfire then began testing with Pidgin.

I am using Pidgin 2.10.9. I set up Openfire on a Windows 7 Pro PC to test (ABC-EFG57.HIJ). “HIJ” being the domain.

Here are the settings in Pidgin:

Basic:

Username: Joe
Domain: HIJ
Resource: ABC-EFG57
Password: *****

Advanced:

Connection Security: Require encryption
Connect Port: 5222
Connect Server: ABC-EFG57.HIJ
File transfer proxies: proxy.eu.jabber.org (default)

Proxy:

Proxy type: Use Global Proxy Settings

I created two users, Joe and John. I can see them in the Openfire User/Groups page and the icon is “green” for Available.

Though when I add each as a Buddy on the other client they show as “Not Authorized” and no IM can be sent.

This is my first try with either application so I am asking if there are any ideas of what I may be over looking?

Thank you in advance for your help. Paul

mcdev1 · April 4, 2014, 4:34pm

You need to install the Client Control plugin.

The settings for it are found under Server -> Client Management -> Permitted Clients.

Paul_Santabarbara · April 4, 2014, 5:11pm

McDev, thanks for the info. I did add the Plug In. Are there any others you recommend?

The results are such.

Joe@HIJ/ABC-EFG57 disabled. (Not Authorized) Still

If I click on the “Re-enable” button it thinks for a few seconds then nothing.

Here is what the Debug Window shows:

(13:07:58) account: Connecting to account Paul@AMS1/DBS-FIN57.
(13:07:58) connection: Connecting. gc = 05A0E9E8
(13:07:58) dnsquery: Performing DNS lookup for DBS-FIN57.AMS1
(13:07:58) dnsquery: IP resolved for DBS-FIN57.AMS1
(13:07:58) proxy: Attempting connection to 192.168.3.46
(13:07:58) proxy: Connecting to DBS-FIN57.AMS1 :5222 with no proxy
(13:07:58) proxy: Connection in progress
(13:07:58) proxy: Connecting to DBS-FIN57.AMS1 :5222.
(13:07:58) proxy: Connected to DBS-FIN57.AMS1 :5222.
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57): <?xml version='1.0' ?>
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57): <stream:stream to=‘ams1’ xmlns=‘jabber:client’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’>
(13:07:58) jabber: Recv (186): <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream=“http://etherx.jabber.org/streams” xmlns=“jabber:client” from=“dbs-fin57.ams1” id=“34bfa1d” xml:lang=“en” version=“1.0”>
(13:07:58) jabber: Recv (486): stream:featuresDIGEST-MD5PLAINANONYMOUSCRAM-MD5</mech anism>zlib</stream:features>
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57):
(13:07:58) jabber: Recv (50):
(13:07:59) nss: subject=CN=dbs-fin57.ams1 issuer=CN=dbs-fin57.ams1
(13:07:59) certificate/x509/tls_cached: Starting verify for DBS-FIN57.AMS1
(13:07:59) certificate/x509/tls_cached: Checking for cached cert…
(13:07:59) certificate/x509/tls_cached: …Found cached cert
(13:07:59) nss/x509: Loading certificate from C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) certificate/x509/tls_cached: Peer cert matched cached
(13:07:59) nss/x509: Exporting certificate to C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) util: Writing file C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) certificate: Successfully verified certificate for DBS-FIN57.AMS1
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): <stream:stream to=‘ams1’ xmlns=‘jabber:client’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’>
(13:07:59) jabber: Recv (ssl)(611): <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream=“http://etherx.jabber.org/streams” xmlns=“jabber:client” from=“dbs-fin57.ams1” id=“34bfa1d” xml:lang=“en” version=“1.0”>stream:featuresDIGEST-MD5PLAINANONYMOUSCRAM-MD5</mech anism>zlib</stream:features>
(13:07:59) sasl: Mechs found: DIGEST-MD5 PLAIN ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57):
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(219): challenge xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>cmVhbG09ImRicy1maW41Ny5hbXMxIixub25jZT 0iQno2OXdYQTdPVVJpY09KTWxCNUQxN1RYYUpnZHg2Y3ZjN3MzeTc4ayIscW9wPSJhdXRoIixjaGFyc2 V0PXV0Zi04LGFsZ29yaXRobT1tZDUtc2Vzcw==
(13:07:59) sasl: DIGEST-MD5 client step 2
(13:07:59) sasl: DIGEST-MD5 parse_server_challenge()
(13:07:59) sasl: DIGEST-MD5 ask_user_info()
(13:07:59) sasl: DIGEST-MD5 make_client_response()
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): dXNlcm5hbWU9InBhdWwiLHJlYWxtPSJkYnMtZm luNTcuYW1zMSIsbm9uY2U9IkJ6Njl3WEE3T1VSaWNPSk1sQjVEMTdUWGFKZ2R4NmN2YzdzM3k3OGsiLG Nub25jZT0iQW5NclE5d3JCMlI3NCtmVURLSkdJZktucnk1YkE1M2pXTjhWK1BETXhmRT0iLG5jPTAwMD AwMDAxLHFvcD1hdXRoLGRpZ2VzdC11cmk9InhtcHAvZGJzLWZpbjU3LmFtczEgIixyZXNwb25zZT1jND RjYTc4ZTVlNmY3ZmVkMGFmZmU0MzdjOTIyMTg4OCxjaGFyc2V0PXV0Zi04
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: DIGEST-MD5 client mech dispose
(13:07:59) sasl: DIGEST-MD5 common mech dispose
(13:07:59) sasl: Mechs found: PLAIN ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): password removed
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: Mechs found: ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57):
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(131): challenge xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>PDc0NjM3Nzk4ODE1NjY3MjcyNDUuMTM5NjYzMT I3OTM5N0BkYnMtZmluNTcuYW1zMT4=
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): cGF1bCBkMTI1MTAwMzNjMDNiMDc0NzQ1ZjAyMj g3NGFmYTFmYg==
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: Mechs found: ANONYMOUS
(13:07:59) sasl: No worthy mechs found
(13:07:59) connection: Connection error on 05A0E9E8 (reason: 2 description: Not Authorized)
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(15): /stream:stream>
(13:07:59) account: Disconnecting account Paul@AMS1/DBS-FIN57 (05A09A48)
(13:07:59) connection: Disconnecting connection 05A0E9E8
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): </stream:stream>
(13:07:59) connection: Destroying connection 05A0E9E8
(13:08:01) util: Writing file prefs.xml to directory C:\Users\psant\AppData\Roaming.purple
(13:08:01) util: Writing file C:\Users\psant\AppData\Roaming.purple\prefs.xml
(13:08:04) util: Writing file accounts.xml to directory C:\Users\psant\AppData\Roaming.purple
(13:08:04) util: Writing file C:\Users\psant\AppData\Roaming.purple\accounts.xml
(13:08:17) network: found network ‘ams1’
(13:08:17) network: Received Network Change Notification. Current network count is 1, previous count was 1.

Paul_Santabarbara · April 4, 2014, 7:28pm

McDev, thanks for the info. I did add the Plug In. Are there any others you recommend?

The results are such.

Joe@HIJ/ABC-EFG57 disabled. (Not Authorized) Still

If I click on the “Re-enable” button it thinks for a few seconds then nothing.

Here is what the Debug Window shows:

(13:07:58) account: Connecting to account Paul@AMS1/DBS-FIN57.
(13:07:58) connection: Connecting. gc = 05A0E9E8
(13:07:58) dnsquery: Performing DNS lookup for DBS-FIN57.AMS1
(13:07:58) dnsquery: IP resolved for DBS-FIN57.AMS1
(13:07:58) proxy: Attempting connection to 192.168.3.46
(13:07:58) proxy: Connecting to DBS-FIN57.AMS1 :5222 with no proxy
(13:07:58) proxy: Connection in progress
(13:07:58) proxy: Connecting to DBS-FIN57.AMS1 :5222.
(13:07:58) proxy: Connected to DBS-FIN57.AMS1 :5222.
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57): <?xml version='1.0' ?>
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57): <stream:stream to=‘ams1’ xmlns=‘jabber:client’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’>
(13:07:58) jabber: Recv (186): <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream=“http://etherx.jabber.org/streams” xmlns=“jabber:client” from=“dbs-fin57.ams1” id=“34bfa1d” xml:lang=“en” version=“1.0”>
(13:07:58) jabber: Recv (486): stream:featuresDIGEST-MD5PLAINANONYMOUSCRAM-MD5</mec h anism>zlib</stream:features>
(13:07:58) jabber: Sending (Paul@AMS1/DBS-FIN57):
(13:07:58) jabber: Recv (50):
(13:07:59) nss: subject=CN=dbs-fin57.ams1 issuer=CN=dbs-fin57.ams1
(13:07:59) certificate/x509/tls_cached: Starting verify for DBS-FIN57.AMS1
(13:07:59) certificate/x509/tls_cached: Checking for cached cert…
(13:07:59) certificate/x509/tls_cached: …Found cached cert
(13:07:59) nss/x509: Loading certificate from C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) certificate/x509/tls_cached: Peer cert matched cached
(13:07:59) nss/x509: Exporting certificate to C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) util: Writing file C:\Users\psant\AppData\Roaming.purple\certificates\x509\tls_peers\DBS-FIN57.AM S1%20
(13:07:59) certificate: Successfully verified certificate for DBS-FIN57.AMS1
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): <stream:stream to=‘ams1’ xmlns=‘jabber:client’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’>
(13:07:59) jabber: Recv (ssl)(611): <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream=“http://etherx.jabber.org/streams” xmlns=“jabber:client” from=“dbs-fin57.ams1” id=“34bfa1d” xml:lang=“en” version=“1.0”>stream:featuresDIGEST-MD5PLAINANONYMOUSCRAM-MD5</mec h anism>zlib</stream:features>
(13:07:59) sasl: Mechs found: DIGEST-MD5 PLAIN ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57):
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(219): challenge xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>cmVhbG09ImRicy1maW41Ny5hbXMxIixub25jZT 0iQno2OXdYQTdPVVJpY09KTWxCNUQxN1RYYUpnZHg2Y3ZjN3MzeTc4ayIscW9wPSJhdXRoIixjaGFyc 2 V0PXV0Zi04LGFsZ29yaXRobT1tZDUtc2Vzcw==
(13:07:59) sasl: DIGEST-MD5 client step 2
(13:07:59) sasl: DIGEST-MD5 parse_server_challenge()
(13:07:59) sasl: DIGEST-MD5 ask_user_info()
(13:07:59) sasl: DIGEST-MD5 make_client_response()
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): dXNlcm5hbWU9InBhdWwiLHJlYWxtPSJkYnMtZm luNTcuYW1zMSIsbm9uY2U9IkJ6Njl3WEE3T1VSaWNPSk1sQjVEMTdUWGFKZ2R4NmN2YzdzM3k3OGsiL G Nub25jZT0iQW5NclE5d3JCMlI3NCtmVURLSkdJZktucnk1YkE1M2pXTjhWK1BETXhmRT0iLG5jPTAwM D AwMDAxLHFvcD1hdXRoLGRpZ2VzdC11cmk9InhtcHAvZGJzLWZpbjU3LmFtczEgIixyZXNwb25zZT1jN D RjYTc4ZTVlNmY3ZmVkMGFmZmU0MzdjOTIyMTg4OCxjaGFyc2V0PXV0Zi04
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: DIGEST-MD5 client mech dispose
(13:07:59) sasl: DIGEST-MD5 common mech dispose
(13:07:59) sasl: Mechs found: PLAIN ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): password removed
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: Mechs found: ANONYMOUS CRAM-MD5
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57):
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(131): challenge xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>PDc0NjM3Nzk4ODE1NjY3MjcyNDUuMTM5NjYzMT I3OTM5N0BkYnMtZmluNTcuYW1zMT4=
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): cGF1bCBkMTI1MTAwMzNjMDNiMDc0NzQ1ZjAyMj g3NGFmYTFmYg==
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(76): failure xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”>
(13:07:59) sasl: Mechs found: ANONYMOUS
(13:07:59) sasl: No worthy mechs found
(13:07:59) connection: Connection error on 05A0E9E8 (reason: 2 description: Not Authorized)
(13:07:59) jabber: Recv (ssl)(1): <
(13:07:59) jabber: Recv (ssl)(15): /stream:stream>
(13:07:59) account: Disconnecting account Paul@AMS1/DBS-FIN57 (05A09A48)
(13:07:59) connection: Disconnecting connection 05A0E9E8
(13:07:59) jabber: Sending (ssl) (Paul@AMS1/DBS-FIN57): </stream:stream>
(13:07:59) connection: Destroying connection 05A0E9E8
(13:08:01) util: Writing file prefs.xml to directory C:\Users\psant\AppData\Roaming.purple
(13:08:01) util: Writing file C:\Users\psant\AppData\Roaming.purple\prefs.xml
(13:08:04) util: Writing file accounts.xml to directory C:\Users\psant\AppData\Roaming.purple
(13:08:04) util: Writing file C:\Users\psant\AppData\Roaming.purple\accounts.xml
(13:08:17) network: found network ‘ams1’
(13:08:17) network: Received Network Change Notification. Current network count is 1, previous count was 1.

mcdev1 · April 4, 2014, 8:10pm

When you add users in Pidgin using Buddies -> Add Buddy make sure you chose the account of the user who is sending the request and specify the other user’s user name as a Jabber ID: e.g. john@domain.com

The other user should receive an authorization request. XMPP clients can have very different user interfaces for this kind of stuff, and most of them are confusing in my opinion. (The service for which I use Openfire uses a custom XMPP chat client.)

Paul_Santabarbara · April 4, 2014, 8:27pm

So would my Jabber ID be Paul@AMS1/DBS-FIN57 ? Taken from the log above.

I cannot even get to the point of adding Buddies now as it will not let me enable any user.

When I create the user “on the server” I fill in the info click add and a Registration Failed (409: Conflict) error appears.

I am stumped at this point.