Openfire 4.1.4 "Login failed: make sure your username and password are correct and that you're an admin or moderator."

July 5, 2017, 6:04 am

≫ Next: OpenFire Audit logging and other observations

≪ Previous: can't connect to openfire server

Hello guys,

I have a problem when logging with admin. I hope someone can help me!!!

I have a database with 300 users (not embbeded) plus my old admin account!

I was using an older version of openfire.

We are migrating servers, and now I have to install a new version of openfire.

The install goes fine. I launch admin and it brings me to the configration page...

Everything's fine until I reach the admin config. Openfire recognize my database, and recognize the admin account (the email adress already filled is a hint).

Here'e the problem, I try with my old password to reset a new password. But... it does not allow me saying it's a wrong password.

I skip this step and it still doesnt work. I've read and tried every possible solutions on the internet, none of them work!

I've tried restart etc.

I've tried the plain password thing etc.

I've tried also to create a new admin, and then in the config file (openfire.xml) change the database to point to the one I wanna use. Here only can I log in!!! But then I have issues with pidgin, the users cannot connect, seems like it's not the same password encryption now and back then when they started it...

Oh, forgot to mention that I have also tried to add <admin><authorizedUser>admin<\...> etc.

All of that have not worked for me...

Please, I need your help... someone?

↧

OpenFire Audit logging and other observations

July 5, 2017, 9:28 am

≫ Next: Openfire Error using embedded db

≪ Previous: Openfire 4.1.4 "Login failed: make sure your username and password are correct and that you're an admin or moderator."

Just reviewing 4.1.4 (I know it was installed and ready on my test box) from an audit/logging perspective, to understand what it currently does/doesn't do.

We may or may not be able to contribute to some of these ideas depending on project work here but I thought I'd put some of the observations here, in case I've missed something, or there are other ways to achieve things not immediately apparent to me.

Security Audit log doesn't include client IP address, it can usually be found from other logs, but usually IP address is one of the key pieces of information. Is there a particular philosophy on what is being logged here?

Security Audit log doesn't log adding a plugin (disabling plugins is recorded), seems inconsistent.

Failed attempts to login to the web console generate log file entries that suggest is has triggered LoginLimitManager, but I couldn't see org.jivesoftware.admin.LoginLimitManager configuration exposed anywhere?! Noted also the action is not logged in Security Audit log, nor do the IPAddress or UserAccount lock events stop people logging in from that IP or username (which is probably fine as a default).

Also noted these areas where there didn't seem to be a plugin or tool currently suited to:

Automatically Disabling inactive accounts.

Alerting on, or restricting, activity outside of specified business hours.

XMPP authentication failures are logged by default as "debug" events, meaning they aren't even recorded in the default configuration. I assume for big XMPP deployments these would be horribly noisy to record. I didn't find anything discussing monitoring or acting on same. Was considering something like AppSensor to bring a little bit more self awareness to the server, but I'm sure someone will already have done some work here.

↧

Openfire Error using embedded db

July 6, 2017, 6:53 am

≫ Next: Problemas Con Openfire 4.1.5

≪ Previous: OpenFire Audit logging and other observations

I came in this morning to see the following error:

errors.txt – Keybase.pub

This is thrown when a user tries to connect to the server. Any ideas what is happening here?

↧

Problemas Con Openfire 4.1.5

July 6, 2017, 7:16 am

≫ Next: Skip web config

≪ Previous: Openfire Error using embedded db

Version del servidor openfire 4.1.5

versión de Java:

1.8.0_131 Oracle Corporation -- Java HotSpot(TM) Client VM

Servidor de Aplicaciones:

jetty/9.2.z-SNAPSHOT

Nombre del Host:

SO / Hardware:

Windows 8.1 / x86

Idioma / Huso Horario:

OS Process Owner:

Memoria de Java

63,37 MB of 247,50 MB (25,6%) used

Buenos dias, les comento el escenario.
>Actualmente habia una versión de openfire 4.0.3 la cual no tenia mantenimiento de ningun tipo, con un promedio de 80 o 90 usuarios funcionaba bien, pero al aumentar a 100, 130 usuarios, surgieron problemas como dejar sin acceso a varios clientes.
> No existia un backup de la base

>Se hizo un backup de la base de datos actual y se actualizo la version de openfire a la version 4.1.5

al iniciar el servicio tengo los siguientes errores, me podrian ayudar a resolver estos inconvenientes?. Soy un poco inexperto en el tema.

2017.07.06 10:53:54 org.jivesoftware.openfire.reporting.stats.StatsEngine - Error sampling for statistic muc_outgoing

org.jrobin.core.RrdException: Bad sample timestamp 1499349180. Last update time was 1499349180, at least one second step is required

at org.jrobin.core.RrdDb.store(Unknown Source)

at org.jrobin.core.Sample.update(Unknown Source)

at org.jivesoftware.openfire.reporting.stats.StatsEngine$SampleTask.run(StatsEngin e.java:395)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

2017.07.06 10:53:54 org.jivesoftware.openfire.reporting.stats.StatsEngine - Error sampling for statistic packet_count

org.jrobin.core.RrdException: Bad sample timestamp 1499349180. Last update time was 1499349180, at least one second step is required

at org.jrobin.core.RrdDb.store(Unknown Source)

at org.jrobin.core.Sample.update(Unknown Source)

at org.jivesoftware.openfire.reporting.stats.StatsEngine$SampleTask.run(StatsEngin e.java:395)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

2017.07.06 10:53:54 org.jivesoftware.openfire.reporting.stats.StatsEngine - Error sampling for statistic muc_rooms

org.jrobin.core.RrdException: Bad sample timestamp 1499349180. Last update time was 1499349180, at least one second step is required

at org.jrobin.core.RrdDb.store(Unknown Source)

at org.jrobin.core.Sample.update(Unknown Source)

at org.jivesoftware.openfire.reporting.stats.StatsEngine$SampleTask.run(StatsEngin e.java:395)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

2017.07.06 10:53:54 org.jivesoftware.openfire.reporting.stats.StatsEngine - Error sampling for statistic server_sessions

org.jrobin.core.RrdException: Bad sample timestamp 1499349180. Last update time was 1499349180, at least one second step is required

at org.jrobin.core.RrdDb.store(Unknown Source)

at org.jrobin.core.Sample.update(Unknown Source)

at org.jivesoftware.openfire.reporting.stats.StatsEngine$SampleTask.run(StatsEngin e.java:395)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

2017.07.06 10:53:54 org.jivesoftware.openfire.reporting.stats.StatsEngine - Error sampling for statistic muc_users

org.jrobin.core.RrdException: Bad sample timestamp 1499349180. Last update time was 1499349180, at least one second step is required

at org.jrobin.core.RrdDb.store(Unknown Source)

at org.jrobin.core.Sample.update(Unknown Source)

at org.jivesoftware.openfire.reporting.stats.StatsEngine$SampleTask.run(StatsEngin e.java:395)

at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

↧

Skip web config

July 6, 2017, 8:32 am

≫ Next: Need help to correctly set LDAP groups

≪ Previous: Problemas Con Openfire 4.1.5

Hello,

is it possible to skip the web setup, and modify instead the config files that I assume are modified by the web setup ? If so, what are the modified files ?

I'm trying to automate this process.

Thanks

↧

Need help to correctly set LDAP groups

June 24, 2014, 1:46 am

≫ Next: Openfire via IPSEC - Connection issues

≪ Previous: Skip web config

Hello,

I just updated Openfire from 3.7.1 to 3.9.3 and it seems I cannot make it read any group from AD or at least to display all users in Spark.

I have the following AD structure

DC=<domain component>,DC=<domain component>

OU=Accounts

OU=1200 OU (company departments)

CN=John Doe user

CN=OPENFIRE user (openfire administrator)

etc

OU=1400

CN=Jane Doe

etc

OU=Administration

CN=John Doe_administration

OU=7000

CN=John Doe_7000

OU=7100

CN=John Doe_7100

etc.

OU=<Organizational Unit> (some OU's not needed for Openfire)

CN=<Common Name> (some CN's not needed for Openfire)

OU=Groups

CN=1 GNR group (empty groups, not used anymore)

CN=All Users group (distribution group - universal, users with email and also some users without email)

I have set the following:

Base DN: OU=accounts,DC=<domain component>,DC=<domain component>

Admin DN: CN=OPENFIRE,OU=1200,OU=accounts,DC=<domain component>,DC=<domain component>

User mapping set as default.

Group Mapping set as default (tried several settings but no success)

I have tested "1. Connection Settings" - OK

I have tested "2. User Mapping" - OK - rahdom users profile OK

I have tested "3. Group Mapping" - Error, no groups shows

Need help to add users in Spark clients eighter by their groups or at least to show all users grouped by online/ofline status

In Openfire 3.7.1 I had all users grouped by online/offline status

I don't really need groups.

Thank you

↧

Openfire via IPSEC - Connection issues

July 6, 2017, 11:46 pm

≫ Next: Openfire 4.1.5 vCard problem

≪ Previous: Need help to correctly set LDAP groups

hey folks,

my OF Server is running in an internal network. People connecting with Spark through an IPSEC Tunnel. Both Firewalls, which establishes the tunnel are running pretty clean until too many users are online and the tunnel is crashing. A network admin told me, the tunnel is crashing since there were to many open SA connections (in this case about 700). I am not a real network, nor a IPSEC professional to understand what is the meaning of that SA issue. Maybe someone here is able to give me a hint or explaination! I already googled but all the stuff I am finding is much to technical for my little brain..... :-)

↧

Openfire 4.1.5 vCard problem

July 6, 2017, 10:25 pm

≫ Next: OpenFire Service fails

≪ Previous: Openfire via IPSEC - Connection issues

Hello,

I have an Openfire installation on live server and I cannot see vCards for any member/user. This installation is from an update of previous version but even before update I could not see vCards.

I have installed on a development server the same version of Openfire and the vCards are there with all details (name, job, phones and even employee photo).

I have reinstalled over it the same version as an update, the vCards are still present.

Now my question is, since I checked all settings/properties and all are the same, why I cannot see the vCards on live server?

Thank you in advance

↧

OpenFire Service fails

July 7, 2017, 5:37 pm

≫ Next: Linux distro choice for OFire

≪ Previous: Openfire 4.1.5 vCard problem

I installed OpenFire a few months ago. Extremely problem free. On and otherwise unused Windows 10 box. Great.

Tried to install and run the service using the command line. Service started, but didn't work. I Gave up. Now with the new version starting the service by default I tried again. It failed the same way. Is there something tricky about using the service? Is there something I should be trying? I'm eager to disconnect the monitor once I have an automatic service running.

↧

Linux distro choice for OFire

July 7, 2017, 5:40 pm

≫ Next: Error on Setup

≪ Previous: OpenFire Service fails

I am thinking of moving my windows OF on to a Linux box. What is the easiest Linux distro to install and update OpenFire assuming that's all that I ill put on the box? I'm familiar with Ubuntu and Debian, but I'm not averse to something else if it is easier to aautomatically run and update.

↧

Error on Setup

July 8, 2017, 10:32 am

≫ Next: Openfire Error

≪ Previous: Linux distro choice for OFire

Afternoon,

New windows server 2012 setup going on.

I am going through the set up and I have it recognizing my LDAP settings just fine. I have attached a screenshot, when I click save.. I get the error below:

---------------------------------

HTTP ERROR 500

Problem accessing /setup/setup-admin-settings.jsp. Reason:

    Server Error

Caused by:

java.lang.NullPointerException at org.jivesoftware.openfire.admin.setup.setup_002dadmin_002dsettings_jsp._jspService(setup_002dadmin_002dsettings_jsp.java:114) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:812) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1669) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:118) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:52) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.jivesoftware.util.LocaleFilter.doFilter(LocaleFilter.java:76) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.jivesoftware.util.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:53) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.jivesoftware.admin.PluginFilter.doFilter(PluginFilter.java:226) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.jivesoftware.admin.AuthCheckFilter.doFilter(AuthCheckFilter.java:165) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97) at org.eclipse.jetty.server.Server.handle(Server.java:499) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257) at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555) at java.lang.Thread.run(Unknown Source)

-------------------------

↧

Openfire Error

July 10, 2017, 5:52 am

≫ Next: Openfire 4.1.3 not broadcasting presence updates to roster members

≪ Previous: Error on Setup

Openfire is making some mistakes. See the log below:

2017.07.10 09:42:02 org.jivesoftware.openfire.vcard.DefaultVCardProvider - Error loading vCard of username: juliano

org.dom4j.DocumentException: Error on line 1 of document : São esperadas aspas de abertura para o atributo "xmlns" associado a um tipo de elemento "vCard". Nested exception: São esperadas aspas de abertura para o atributo "xmlns" associado a um tipo de elemento "vCard".

at org.dom4j.io.SAXReader.read(SAXReader.java:482)

at org.dom4j.io.SAXReader.read(SAXReader.java:365)

at org.jivesoftware.openfire.vcard.DefaultVCardProvider.loadVCard(DefaultVCardProv ider.java:92)

at org.igniterealtime.openfire.plugin.avatarresizer.DelegateVCardProvider.loadVCar d(DelegateVCardProvider.java:44)

at org.jivesoftware.openfire.vcard.VCardManager.getOrLoadVCard(VCardManager.java:2 43)

at org.jivesoftware.openfire.vcard.VCardManager.getVCard(VCardManager.java:236)

at org.jivesoftware.openfire.handler.IQvCardHandler.handleIQ(IQvCardHandler.java:1 19)

at org.jivesoftware.openfire.handler.IQHandler.process(IQHandler.java:66)

at org.jivesoftware.openfire.IQRouter.handle(IQRouter.java:372)

at org.jivesoftware.openfire.IQRouter.route(IQRouter.java:115)

at org.jivesoftware.openfire.spi.PacketRouterImpl.route(PacketRouterImpl.java:78)

at org.jivesoftware.openfire.net.StanzaHandler.processIQ(StanzaHandler.java:341)

at org.jivesoftware.openfire.net.ClientStanzaHandler.processIQ(ClientStanzaHandler .java:99)

at org.jivesoftware.openfire.net.StanzaHandler.process(StanzaHandler.java:306)

at org.jivesoftware.openfire.net.StanzaHandler.process(StanzaHandler.java:198)

at org.jivesoftware.openfire.nio.ConnectionHandler.messageReceived(ConnectionHandl er.java:181)

at org.apache.mina.core.filterchain.DefaultIoFilterChain$TailFilter.messageReceive d(DefaultIoFilterChain.java:690)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(D efaultIoFilterChain.java:417)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilt erChain.java:47)

at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceiv ed(DefaultIoFilterChain.java:765)

at org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapte r.java:109)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(D efaultIoFilterChain.java:417)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilt erChain.java:47)

at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceiv ed(DefaultIoFilterChain.java:765)

at org.apache.mina.filter.codec.ProtocolCodecFilter$ProtocolDecoderOutputImpl.flus h(ProtocolCodecFilter.java:407)

at org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCodecF ilter.java:236)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(D efaultIoFilterChain.java:417)

at org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1200(DefaultIoFilt erChain.java:47)

at org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceiv ed(DefaultIoFilterChain.java:765)

at org.apache.mina.core.filterchain.IoFilterEvent.fire(IoFilterEvent.java:74)

at org.apache.mina.core.session.IoEvent.run(IoEvent.java:63)

at org.apache.mina.filter.executor.OrderedThreadPoolExecutor$Worker.runTask(Ordere dThreadPoolExecutor.java:769)

at org.apache.mina.filter.executor.OrderedThreadPoolExecutor$Worker.runTasks(Order edThreadPoolExecutor.java:761)

at org.apache.mina.filter.executor.OrderedThreadPoolExecutor$Worker.run(OrderedThr eadPoolExecutor.java:703)

at java.lang.Thread.run(Thread.java:745)

Nested exception:

org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 14; São esperadas aspas de abertura para o atributo "xmlns" associado a um tipo de elemento "vCard".

at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseExcep tion(ErrorHandlerWrapper.java:198)

at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHan dlerWrapper.java:177)

at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorRe porter.java:400)

at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorRe porter.java:327)

at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(XMLScanner. java:1465)

at com.sun.org.apache.xerces.internal.impl.XMLScanner.scanAttributeValue(XMLScanne r.java:853)

at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.scanAttribute( XMLNSDocumentScannerImpl.java:453)

at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.scanStartEleme nt(XMLNSDocumentScannerImpl.java:256)

at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl$NSContentDrive r.scanRootElementHook(XMLNSDocumentScannerImpl.java:619)

at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$Fragment ContentDriver.next(XMLDocumentFragmentScannerImpl.java:3129)

at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl$PrologDriver.nex t(XMLDocumentScannerImpl.java:880)

at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocument ScannerImpl.java:606)

at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocu mentScannerImpl.java:118)

at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocu ment(XMLDocumentFragmentScannerImpl.java:504)

at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Config uration.java:848)

at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Config uration.java:777)

at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)

at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXP arser.java:1213)

at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXPa rserImpl.java:642)

at org.dom4j.io.SAXReader.read(SAXReader.java:465)