Author Archives: tig

Openfire Active Directory Authentication

Posted on by

Oh the joy and the pain of this….

After a very long time I have now got this working how I want it but it was painful getting the right runes to make the two play nicely.

What I wanted:

  • To have a group in AD that could access and authenticate to Openfire
  • To have a groups in Openfire that were defined by an AD group.

AD Structure

  • All of our users are in a group called “Foo Users”
  • All of our groups are in “Foo Groups”
  • All of our Openfire users are in a group called “openfire” which  is inside “Foo Groups”
  • Our Openfire groups are in “Openfire Groups” which is in “Foo Groups” (I made “Openfire Groups” a universal group, this may or may not be needed).
  • I then made the “openfire” group a member of “Openfire Groups”
  • Our domain is called foo.com

The authentication

  • ldap.baseDN : dc=”foo”,dc=”com”
  • adminDN : cn=”administrator”,cn=”Users”,dc=”foo”,dc=”com”
  • Userfilter : (&(memberOf=CN=openfire,OU=Foo Groups,DC=foo,DC=com))
  • Groupfilter : (&(memberOf=CN=openfire,OU=Foo Groups,DC=foo,DC=com))

Hope this helps someone  🙂

CVSNT SSH Access: No Such Repository

Posted on by

CVSNT is a drop in replacement for CVS so they say 🙂

Well ish…   To cut a very long story short I had a problem very similar to this one. I had removed my old CVS install and installed CVSNT in its place.

I go to a dev machine,  use WinCVS and BANG no such repository!   I run to my desk and ssh into the server,  no all our code is there and still in the same place and no change to the CVSROOT on the dev machines either.

Fast forward a few hours of keyboard bashing and searching…

Even if you are only accessing CVS via SSH you will still need to configure /etc/cvsnt/PServer just copy the PServer.example file to PServer edit the Repository0 section to put the path to your repository,  save and you are done 🙂

This is a CVSNT security measure apparently and it could have been mentioned a bit more prominantly IMHO 🙂

Hope this saves someone else a lot of time and dry cleaning bill 🙂

Why lobby when you can lunch in Corfu

Posted on by

I will assume you have heard the news about Lord Mandy, Geffen and a quick paid for amendment to UK Gov policy…

On http://gl.u.gg a forum for nice people 🙂 Spinnie who has a flair for playing devil’s advocate said

Civil rights groups? It’s a civil right to steal stuff? I must have missed that memo.

It is a valid question and I offer the following:

It is a civil right not to have a form of communication cut off on the basis of unsubstantiated rumor by an arbitrary commercial trade interest group.

Does this seem any more rational:

“The Associated Amateur Dramatics Union paid observer in the pub heard that you went to see a play and then spoke to several friends and said it was not very good, this was damaging to our revenue stream. Our source said that you had done this before. Therefore we demand the right that you no longer have the right to have a telephone to prevent you causing any more damage to our business.”

There is nothing I fear more than Am-Dram societies getting organised.

OpenFire XMPP Server on Debian

Posted on by

I was asked today to set up an IM server for internal use,   originally they were specifying Windows messanger but I was able to suggest we try a proper standards based system instead 🙂

So I need a server,  a few clicks in the Proxmox interface ( a rather nice way of handling OpenVZ virtualisation) and I have a new blank Debian lenny box already to play with.

Added the non-free option to the apt repository (as we will need the Sun JRE) and off we go :)   Apt decided to moan about :

W: There is no public key available for the following key IDs:
9AA38DCD55BE302B
W: GPG error: http://security.debian.org lenny/updates Release:
The following signatures couldn't be verified because the public
key is not available: NO_PUBKEY 9AA38DCD55BE302B

Which was solved by this post here 🙂

A quick :

apt-get install debian-archive-keyring

and off we go again 🙂

Next stop is the Java monster,  mercifully simple to install nowadays:

apt-get install sun-java6-jre

Next we grab the latest openfire deb,   then install:

dpkg -i openfire_3.6.4_all.deb

Which seemed to be too painless…

Fire up the Wizard on port 9090 from a browser and you are done 🙂

LRL2009 PIMP IT!

Posted on by

Yes ladies, gentlemen and chinny racoons,  LRL 2009 is scheduled for :

Lugradio Live 2009, 24th October 2009, Newhampton Arts Centre Wolvehampton

To put this countdown on your site is simple,  just copy and paste the following code :

<a href="http://www.lugradio.org/live/2009/" target="_blank"><img style="border: 0pt none ;" 
src="http://da.mned.co.uk/stuff/lrl/lrl_countdown.png" 
alt="Lugradio Live 2009, 24th October 2009,  Newhampton Arts Centre Wolvehampton" width="237" height="251"></a>

There will be more styles and options and of course the code to run the counter yourself to follow 🙂