[Git][noosfero/noosfero][master] 2 commits: chat: anonymous authentication

[Rodrigo Souto]

Rodrigo Souto pushed to branch master at Noosfero / noosfero


Commits:
d089dd45 by Rodrigo Souto at 2017-01-26T15:36:42-03:00
chat: anonymous authentication

- - - - -
09d1f480 by Rodrigo Souto at 2017-02-08T19:13:45+00:00
Merge branch 'chat-anonymous' into 'master'

chat: anonymous authentication

See merge request !1101
- - - - -


1 changed file:

- util/chat/ejabberd.yml


Changes:

=====================================
util/chat/ejabberd.yml
=====================================
--- a/util/chat/ejabberd.yml
+++ b/util/chat/ejabberd.yml
@@ -256,7 +256,7 @@ s2s_protocol_options:
 ## Authentication using SQL
 ## Remember to setup a database in the next section.
 ##
-auth_method: sql
+#auth_method: sql
 
 ##
 ## Authentication using PAM
@@ -299,9 +299,15 @@ auth_method: sql
 
 ##
 ## Anonymous login support:
-##   auth_method: anonymous
-##   anonymous_protocol: sasl_anon | login_anon | both
-##   allow_multiple_connections: true | false
+
+# FIXME Ejabberd 16.09 has issues with sasl authentication therefore we are
+# bypassing authentication using anonymous login. This is not a real security
+# issue since ejabberd is only accessed through Noosfero which handles the
+# authentication before but we might want to fix this eventually.
+auth_method: anonymous
+anonymous_protocol: both
+allow_multiple_connections: true
+
 ##
 ## host_config:
 ##   "public.example.org":



View it on GitLab: https://gitlab.com/noosfero/noosfero/compare/c70f172d1305a49d042498fbcc59640763ed4b01...09d1f480bf4fbbe7f5f5f5cda7325e152f7dc0af
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listas.softwarelivre.org/pipermail/noosfero-dev/attachments/20170208/f508d77b/attachment-0001.html>