Not logged in. · Lost password · Register
Forum: agsXMPP RSS
Avatar
sandhya #1
User title: Developer
Member since Apr 2008 · 13 posts · Location: Hyderabad
Group memberships: Members
Show profile · Link to this post
Subject: Miniclient not connecting through external IP(public IP)
I am trying to connect to miniclient through public IP but it is giving me a authentication error saying that username or pwd is invalid.
Can you please give me a solution.?
Avatar
Alex #2
Member since Feb 2003 · 4449 posts · Location: Germany
Group memberships: Administrators, Members
Show profile · Link to this post
please use the forums search. This questions comes up each week again.

Alex
Avatar
sandhya #3
User title: Developer
Member since Apr 2008 · 13 posts · Location: Hyderabad
Group memberships: Members
Show profile · Link to this post
can you send me the links to forums where exactly the solution for this lies...?
Avatar
Jabberer #4
Member since Feb 2006 · 249 posts
Group memberships: Members
Show profile · Link to this post
eg. here from yesterday:
http://forum.ag-software.de/forum.php?req=thread&id=589

or with the search query "ip address":
http://forum.ag-software.de/forum.php?req=search&Query…
Software Developer
AG-Software
Avatar
sandhya #5
User title: Developer
Member since Apr 2008 · 13 posts · Location: Hyderabad
Group memberships: Members
Show profile · Link to this post
we have setup  openfire on REDHat linux ent version for our LAN users and also wanted our external users to connect to the same server.
For our chatting requirements, used miniclient with some enhancements/enforced restrictions.

Planned setup for internal and external users :
1. opensource.semanticindia.com [ for our internal users] / the Name of the Linux server
Through NAT created IP and DNS im.semanticspace.com and directed all external users using the same.

We have issue for users connecting externally. 

Pasting the response we got

SEND: <stream:stream to='im.semanticspace.com' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0' xml:lang='en'>
RECV: <stream:stream xmlns:stream="http://etherx.jabber.org/streams" from="opensource.semanticindia.com" version="1.0" xml:lang="en" id="de5cec65" >
RECV: <stream:features xmlns:stream="http://etherx.jabber.org/streams"><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" /><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism><mechanism>CRAM-MD5</mechanism></mechanisms><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression><auth xmlns="http://jabber.org/features/iq-auth" /></stream:features>
SEND: <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
RECV: <proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
SEND: <stream:stream to='im.semanticspace.com' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0' xml:lang='en'>
RECV: <stream:stream xmlns:stream="http://etherx.jabber.org/streams" from="opensource.semanticindia.com" version="1.0" xml:lang="en" id="de5cec65" >
RECV: <stream:features xmlns:stream="http://etherx.jabber.org/streams"><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism><mechanism>CRAM-MD5</mechanism></mechanisms><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression><auth xmlns="http://jabber.org/features/iq-auth" /></stream:features>
SEND: <auth xmlns="urn:ietf:params:xml:ns:xmpp-sasl" mechanism="DIGEST-MD5" />
RECV: <challenge xmlns="urn:ietf:params:xml:ns:xmpp-sasl">cmVhbG09Im9wZW5zb3VyY2Uuc2VtYW50aWNpbmRpYS5jb20iLG5vbmNlPSJ5VHAzRy9IMVdWTFZxdXVlcEZieVFGWU1sMmh6YVFjV2FwdVdUY29XIixxb3A9ImF1dGgiLGNoYXJzZXQ9dXRmLTgsYWxnb3JpdGhtPW1kNS1zZXNz</challenge>
SEND: <response xmlns="urn:ietf:params:xml:ns:xmpp-sasl">dXNlcm5hbWU9InNyaW5pdmFzX21hZGljaGV0dGkiLHJlYWxtPSJvcGVuc291cmNlLnNlbWFudGljaW5kaWEuY29tIixub25jZT0ieVRwM0cvSDFXVkxWcXV1ZXBGYnlRRllNbDJoemFRY1dhcHVXVGNvVyIsY25vbmNlPSJhYWNhZmM1NWY2ZDQ2YTg5YTFiYTQ4YjhhMGI4MDZhOGI0ZGEzMTVlMDYwMjNkZDBmNjE0YWE4MTc1MTI4M2M4IixuYz0wMDAwMDAwMSxxb3A9YXV0aCxkaWdlc3QtdXJpPSJ4bXBwL2ltLnNlbWFudGljc3BhY2UuY29tIixjaGFyc2V0PXV0Zi04LHJlc3BvbnNlPThjYmI4ZGNjMjgxNmRkY2VlY2FhZmUwNjc1MTA1YWU4</response>
RECV: <failure xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><not-authorized /></failure>
Avatar
Alex #6
Member since Feb 2003 · 4449 posts · Location: Germany
Group memberships: Administrators, Members
Show profile · Link to this post
your domains are the problem. You cannot use different domains for internal and for external users. The domain must be the same.
XMPP is domain based similar to email. You also don't have 2 different email domains for internal and external usage.

You have to make the server accessible internal and external with the same domain. The domain must be the domain listed under xmpp domain in your server configuration. Otherwise authentication will always fail.

Why does it fail?
Because the domain is part of the authentication. username, password and the domain are part of the authentication. When one of these is wrong then it fails.

Alex
Avatar
sandhya #7
User title: Developer
Member since Apr 2008 · 13 posts · Location: Hyderabad
Group memberships: Members
Show profile · Link to this post
We were able to connect using Spark client to connect to opensource.semanticindia.com inside LAN and from external  IP using im.semanticspace. We thought that it might be domain issue.Please suggest us how can we do the same using Miniclient.
Avatar
Alex #8
Member since Feb 2003 · 4449 posts · Location: Germany
Group memberships: Administrators, Members
Show profile · Link to this post
It will not work with every client which is using the secure DIGEST-MD5 auth. No idea what Spark is using.

try:

  1. xmppCon.Username = "someuser";
  2. xmppCon.Server = "opensource.semanticindia.com";
  3. xmppCon.Password = "secret";
  4. xmppCon.AutoResolveConnectServer= false;
  5. xmppCon.ConnectServer= "im.semanticspace.com";

or setup the correct SRV-records.

Alex
Avatar
sandhya #9
User title: Developer
Member since Apr 2008 · 13 posts · Location: Hyderabad
Group memberships: Members
Show profile · Link to this post
we are able to connect now with your suggestion.Thanks a ton.....
Close Smaller – Larger + Reply to this post:
Verification code: VeriCode Please enter the word from the image into the text field below. (Type the letters only, lower case is okay.)
Smileys: :-) ;-) :-D :-p :blush: :cool: :rolleyes: :huh: :-/ <_< :-( :'( :#: :scared: 8-( :nuts: :-O
Special characters:
Forum: agsXMPP RSS