[Git][noosfero/noosfero][stable-1.7] Merge branch 'chat-anonymous' into 'master'

[Rodrigo Souto]

Rodrigo Souto pushed to branch stable-1.7 at Noosfero / noosfero


Commits:
2525d8ff by Rodrigo Souto at 2017-02-08T19:14:01+00:00
Merge branch 'chat-anonymous' into 'master'

chat: anonymous authentication

See merge request !1101
- - - - -


1 changed file:

- util/chat/ejabberd.yml


Changes:

=====================================
util/chat/ejabberd.yml
=====================================
--- a/util/chat/ejabberd.yml
+++ b/util/chat/ejabberd.yml
@@ -256,7 +256,7 @@ s2s_protocol_options:
 ## Authentication using SQL
 ## Remember to setup a database in the next section.
 ##
-auth_method: sql
+#auth_method: sql
 
 ##
 ## Authentication using PAM
@@ -299,9 +299,15 @@ auth_method: sql
 
 ##
 ## Anonymous login support:
-##   auth_method: anonymous
-##   anonymous_protocol: sasl_anon | login_anon | both
-##   allow_multiple_connections: true | false
+
+# FIXME Ejabberd 16.09 has issues with sasl authentication therefore we are
+# bypassing authentication using anonymous login. This is not a real security
+# issue since ejabberd is only accessed through Noosfero which handles the
+# authentication before but we might want to fix this eventually.
+auth_method: anonymous
+anonymous_protocol: both
+allow_multiple_connections: true
+
 ##
 ## host_config:
 ##   "public.example.org":



View it on GitLab: https://gitlab.com/noosfero/noosfero/commit/2525d8ff7226ffdcc6a97e46b6480e89d1538388
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listas.softwarelivre.org/pipermail/noosfero-dev/attachments/20170208/b7f50de4/attachment-0001.html>