STUN/TURN authentication broken #402

New Issue

raucao · 2022-05-05T12:30:10Z

raucao commented

2022-05-05 12:30:10 +00:00

Since moving to VMs, the turn_ip needs to be set differently in the cookbook now
~~STUN auth doesn't work with ejabberd's LDAP auth. We need to use external auth with a script now. There's one available here: https://www.ejabberd.im/files/contributions/check_pass_ldap_perl.pl.txt~~ STUN/TURN needs to be configured for short-term credentials. Module docs: https://docs.ejabberd.im/admin/configuration/modules/#mod-stun-disco

1. Since moving to VMs, the `turn_ip` needs to be set differently in the cookbook now 2. <del>STUN auth doesn't work with ejabberd's LDAP auth. We need to use [external auth](https://docs.ejabberd.im/admin/configuration/authentication/#external-script) with a script now. There's one available here: https://www.ejabberd.im/files/contributions/check_pass_ldap_perl.pl.txt</del> STUN/TURN needs to be configured for short-term credentials. Module docs: https://docs.ejabberd.im/admin/configuration/modules/#mod-stun-disco

raucao added the

service

xmpp

label 2022-05-05 12:30:10 +00:00

raucao added this to the Current operational issues project 2022-05-05 12:30:19 +00:00

raucao self-assigned this 2022-05-05 13:43:14 +00:00

raucao commented

2022-05-06 10:33:43 +00:00

Just FYI: I have fixed this in production already. PR incoming.

raucao referenced a pull request that will close this issue

2022-05-11 13:28:47 +00:00

Configure STUN/TURN for ejabberd and nginx proxy #407