support existing installs without external auth script for ejabberd

[bhgraham]

I run a server with LDAP for the backend and all users currently synced between my existing elgg and ejabberd services. I would like to use this as the chat client but when installed and enabled I get "Failed" everytime i try to login.

[cash]

You can use the ldap external authentication module for ejabberd.

[bhgraham]

I am already authenticating to ldap, so i dont need another plugin, but the beechat is not working when with my setup, which is why i posted.

[cash]

I'm saying you could use an ejabberd module to do the authentication from ldap. With an Elgg ldap plugin, the user's passwords are not stored in the Elgg database. It is either the ejabberd ldap plugin or an external authentication module that uses Elgg's ldap plugin (or use a separate password just for ejabberd authentication).

[bhgraham]

I have the authentication working now, for both elgg and xmpp to my ldap server, what I do not have working is the beechat client authenticating and logging the user into xmpp from withing elgg. I still don't see how the elgg ldap module will help with this and besides last I checked it didnt actually work with current versions of elgg.

[cash]

In a standard elgg install, beechat's javascript retrieves a user's hashed password from the server. It then passes it to the ejabberd server as the password. The current external authentication script uses that hashed password for the authentication.

The standard ldap plugin (which does work) does not store passwords. I don't know how your ldap plugin works. As such, when beechat retrieves the password, it is not getting the ldap password of the user. Depending on how much security you need, you could store the ldap passwords in the database.

Another possibility is to assign a random xmpp password to the user (as metadata) and use an external authentication ejabberd script to authenticate that special password. It would require assigning the passwords, changing the retrieve details action, and writing a new external authentication script.