XMPP Service Operators - 2023-05-11

> msavoritias: what about NIS and PAM? That was the nightmare I tried yonks ago I have dealt once with PAM yeast ago. Still have night nightmares over it. Its way too complicated and the syntax is weird imo ↺

Yeah it is a beast

Some say it is over engineered, others think that is just shame to hide the poor engineering behind PAM.

My money is on "PAM solves a problem which looks simple from the outside and the complexity is justified for non-obvious reasons".

Like XMPP ;)

And gotta support sql? Add that. And ldap? Add that too... tokens? Oauth?...just like xmpp

I would really like a nice, clean interface for a simple user account self registration system that was backed by LDAP. There are a few half assed projects out there and some incredible over engineered ones, but nothing I've seen in the sweet spot for small to mid-sized services.

+1000

Just enough to let people sign up, set a recovery email, change passwords. That'd be really nice. 😁

I recall I did find a couple of things in this space, but I'd have to dig through my notes to remember what they were

But none seemed to be exactly what I wanted (what you described)

mike, AFAIK there is no standard schema shipped with openldap which would satisfy those requirements :)

(recovery email fails)

and writing LDAP schema is possible, but only by going into "DO NOT DO THAT" waters because you need an OID tree assigned to you and last time I tried that I got no response :<

Convoluted idea that I didn't test: use Keycloak as an intermediary? IIRC it can federate with AD/LDAP (and write back to it), while also provide sign-up pages.

I should go through my old email archives then because I have one from IANA, or did back in around 2002.

Guus, someone said simple

I think that excludes a java monolith.

;D

I only really care about something being simple for the end user, I'll deal with complexity happily to deliver that.

tbh i would prefer everything else to auth through xmpp. Reason is because when user log-in to xmpp they are instantly messagable.

Well, you can do that with keycloak and prosody trunk now 🙂

mike: What's your opinion on https://github.com/lldap/lldap ?

millesimus: first time I've seen it. I'll take a look when I'm not on my phone, Cheers. It's definitely been a year or two since I last went looking into this area.

Ah yes! That was one I was thinking of.

I have found the Private Enterprise Number IANA gave me 20 years ago so yes, I'm "legally" allowed to write any schema I want. 😁

I'd be interested to hear which solution you settle with. I am also contemplating whether a full OpenLDAP stack might be better (and how to migrate… urgs).

jonas’: You want to discuss complexity of Java monoliths? :) I ended up with Keycloak after trying to get WSO2's Identity Server to do ... anything useful. As an indication of the difference in complexity between the two (as perceived by me at least): there's a mailing list comment somewhere where I talk about singing birds and having visions of unicorns leaving multi-colored droppings...

> My money is on "PAM solves a problem which looks simple from the outside and the complexity is justified for non-obvious reasons". > > Like XMPP ;) I will deploy my PAM and NSS platform one day....

(note that PAM however solves a different problem than LDAP & co do)

Yes, but I can has LDAP and PAM too

indeed

Messages from strangers are rejected

who can solve

don't load the module which does that

I send messages to people Then appear Messages from strangers are rejected

ah

that's a recipient side issue

Someone can put me in touch with him ?

I know if there's a way around this?

Is there a way to text him directly?

add them as contact I guess

add him appear a quesion

In what year did World War II end?

i cant add him

Who has the technology to text him

depends on whom

I send messages to people Then appear Messages from strangers are rejected who can help me to solve this quesion

I send messages to people Then appear Messages from strangers are rejected who can help me to solve this quesion

> mike: What's your opinion on https://github.com/lldap/lldap ? That looks really really great until the "to talk to us join discord!" -.- ↺

vshine001: if it sent you a captcha try answering it

vshine001: did you try `1918`?

Licaon_Kter: wrong world war

Finally definitive proof Licaon_Kter is a bot not a human...

Read it as WWI

Was the right century at least