ALL in 1 Guide
Installation
Prepare to download a bit from jauto page on SourceForge
Server side
I’ll assume that you already have XMPP server and Apache HTTP server installed.
Any popular XMPP server should be okay, as long as it supports the widely accepted transport protocol.
You’ll probably need Apache not older than 2.1. Tests were made on 2.2 version, but new authentication features required by jauto were introduced in 2.1 series.
jautod
Download latest jautod source package and extract it. Next, go inside the extracted directory and create your config file from the given example: cd jautod and edit it using your favorite editor:
cp jautod.xml.example jautod.xmlvim jautod.xml You’ll probably have to change your XMPP server’s config to allow connections from jautod (this depends on your server type - search for connecting transports or external components).
After configuring jautod and your XMPP server, run jautod:./jautod.pyEnd of the long text that appears should be something like this:*** State changed: authenticated <JID: u'auth.example.org'> ***
Setting up Disco handlers…
Removing old requests
mod_authn_jauto
Download latest mod_authn_jauto source package (or precompiled version for Windows).
I highly recommend using apxs tool to compile and install this module: apxs -i -a -c mod_authn_jauto.cAlternatively, you can:
- compile the source (or get precompiled version from somewhere)
- put compiled module into modules directory (search for existing mod_something files)
- add
LoadModule authn_jauto_module modules/mod_authn_jauto.soto apache config file - restart apache
Now, go to directory which you want to secure and edit .htaccess file to look somehow like this:
AuthType Basic
AuthName “xmpp”
AuthBasicProvider jauto
AuthJautoDaemon localhost:14786
AuthJautoTimeout 30
Require valid-user
Note that you must set relm name to “xmpp”.
Client side
You’ll need Firefox 1.5.x.
firefox-jauto-extension
Download latest jauto XPI extension and install it as any other Firefox extension (that was easy, wasn’t it? ;))
jabberzilla-jauto
Download latest jabberzilla-jauto XPI extension for your platform and install. Next, setup your XMPP account.
Test ride
Server side
- make sure jautod is running
Client side
- connect to your XMPP server using jabberzilla-jauto
- navigate to your jauto-secured site
- when prompted, provide your JID as username and leave password box empty
- :-)
If the JID you provided as your username points to jabberzilla connection, then jabberzilla will be asked to confirm your HTTP request and will be able to do this automatically, because jauto-extension saves information about every request sent by Firefox which needs confirmation via XMPP.
If no XMPP client confirms the request in configured time, HTTP server will return not-authorized error.