[jitsi-users] Issue with token mode


#1

Hi all,
I have this issue, when I've activated token mode.
When a user with token tries to connect to jitsi meet

May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>

I don't know why ...

I already a jitsi meet instance, and it works fine with token mode. I've
copied all configurations, but my new instance doesn't work (just deb
versions are different, I used last nighlty build) :frowning:

Do you have an idea please ?

thanks in advance

ii jicofo 1.0-351-1
amd64 JItsi Meet COnference FOcus
ii jigasi 1.0-138
amd64 Jitsi Gateway for SIP
ii jitsi-archive-keyring 1.0.1
all The public key for the Jitsi packages repository
ii jitsi-meet 1.0.2066-1
all WebRTC JavaScript video conferences
ii jitsi-meet-prosody 1.0.1941-1
all Prosody configuration for Jitsi Meet
ii jitsi-meet-tokens 1.0.1941-1
all Prosody token authentication plugin for Jitsi Meet
ii jitsi-meet-web 1.0.1941-1
all WebRTC JavaScript video conferences
ii jitsi-meet-web-config 1.0.1941-1
all Configuration for web serving of Jitsi Meet
ii jitsi-videobridge 949-1
amd64 WebRTC compatible Selective Forwarding Unit (SFU)
ii jitsi-meet-prosody 1.0.1941-1
all Prosody configuration for Jitsi Meet
ic prosody 0.9.7-2+deb8u3
amd64 Lightweight Jabber/XMPP server
ii prosody-trunk 1nightly780-1~jessie
amd64 Lightweight Jabber/XMPP server


#2

Hi,

When opening the app in the browser, do you provide a valid token by
adding params in the url: "?jwt=....." ?
If you think your token is valid you can enable prosody debug and
check why that token is not working. There were recent changes to
those modules.

Regards
damencho

···

On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> wrote:

Hi all,
I have this issue, when I've activated token mode.
When a user with token tries to connect to jitsi meet

May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>

I don't know why ...

I already a jitsi meet instance, and it works fine with token mode. I've
copied all configurations, but my new instance doesn't work (just deb
versions are different, I used last nighlty build) :frowning:

Do you have an idea please ?

thanks in advance

ii jicofo 1.0-351-1
amd64 JItsi Meet COnference FOcus
ii jigasi 1.0-138
amd64 Jitsi Gateway for SIP
ii jitsi-archive-keyring 1.0.1 all
The public key for the Jitsi packages repository
ii jitsi-meet 1.0.2066-1 all
WebRTC JavaScript video conferences
ii jitsi-meet-prosody 1.0.1941-1 all
Prosody configuration for Jitsi Meet
ii jitsi-meet-tokens 1.0.1941-1 all
Prosody token authentication plugin for Jitsi Meet
ii jitsi-meet-web 1.0.1941-1 all
WebRTC JavaScript video conferences
ii jitsi-meet-web-config 1.0.1941-1 all
Configuration for web serving of Jitsi Meet
ii jitsi-videobridge 949-1
amd64 WebRTC compatible Selective Forwarding Unit (SFU)
ii jitsi-meet-prosody 1.0.1941-1 all
Prosody configuration for Jitsi Meet
ic prosody 0.9.7-2+deb8u3
amd64 Lightweight Jabber/XMPP server
ii prosody-trunk 1nightly780-1~jessie
amd64 Lightweight Jabber/XMPP server

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#3

thanks Damian,

When I go to my room, I use this url

https://meet.winlux.fr/room1#config.token="****************"

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

normaly, this token is correct, because I already use it with my other
jitsi instance, and it's the same configuration (same app_id, secret, etc
...)
I supposed, prosody can't detect token in url, and considerate this connect
as anonymous (guest user)

···

++

*you can find my log below:*May 12 15:58:36 socket debug server.lua:
accepted new client connection from 127.0.0.1:46490 to 5280
May 12 15:58:36 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:36 mod_bosh debug Handling new request table: 0x29df390:
<body rid='1387409576' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
----------
May 12 15:58:36 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:36 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:36 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:37 socket debug server.lua: accepted new client
connection from 127.0.0.1:46491 to 5280
May 12 15:58:37 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:37 mod_bosh debug Handling new request table: 0x2481cc0:
<body rid='1387409577' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq type='get' to='
guest.meet.winlux.fr' xmlns='jabber:client'
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping
xmlns='urn:xmpp:ping'/></iq></body>
----------
May 12 15:58:37 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get' to='
guest.meet.winlux.fr'>

May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'
type='get' to='guest.meet.winlux.fr'>
May 12 15:58:37 mod_bosh debug We have an open request, so sending on
that
May 12 15:58:37 mod_bosh debug Request destroyed: table: 0x29144f0
May 12 15:58:37 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:37 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:37 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
May 12 15:58:39 socket debug server.lua: accepted new client
connection from 127.0.0.1:46492 to 5280
May 12 15:58:39 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:39 mod_bosh debug Handling new request table: 0x2449b30:
<body rid='1387409578' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f' type='terminate'><presence
xmlns='jabber:client' type='unavailable'/></body>
----------
May 12 15:58:39 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
type='unavailable'>

May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <presence type='unavailable'>
May 12 15:58:39 mod_bosh debug We have an open request, so sending on
that
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x2481e60
May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:39 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:39 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Closing session with 1 requests open
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info BOSH
client disconnected
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x24e13f0
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug BOSH
session marked as inactive (for 60s)
May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Destroying session for
acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
(acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
May 12 15:58:39 sessionmanager debug All resources of
acfef037-367b-4d1e-9665-a9d059065623 are now offline
May 12 15:58:43 jcp200b000 debug Received[component]: <iq
id='HGpzr-2155' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:53 jcp200b000 debug Received[component]: <iq
id='HGpzr-2156' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9444'
type='get' to='meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9445'
type='get' to='callcontrol.meet.winlux.fr'>
May 12 15:59:01 jcp2490810 debug Received[component]: <iq id='yruU0-9445' type='result' to=' focus@auth.meet.winlux.fr/focus65507379310062' from=' callcontrol.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9446'
type='get' to='auth.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9447'
type='get' to='focus.meet.winlux.fr'>
May 12 15:59:01 jcp2432e60 debug Received[component]: <iq id='yruU0-9447' type='result' to=' focus@auth.meet.winlux.fr/focus65507379310062' from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9448'
type='get' to='guest.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9449'
type='get' to='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 jcp200b000 debug Received[component]: <iq
id='yruU0-9449' type='result' to='
focus@auth.meet.winlux.fr/focus65507379310062' from='
jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9450'
type='get' to='conference.meet.winlux.fr'>
May 12 15:59:03 jcp200b000 debug Received[component]: <iq
id='HGpzr-2157' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46493 to 5280
May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x23fc470:
<body rid='2724491812' xmlns='http://jabber.org/protocol/httpbind' to='
meet.winlux.fr' xml:lang='en' wait='60' hold='1' content='text/xml;
charset=utf-8' ver='1.6' xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session created for request from *********
May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
May 12 15:59:11 mod_bosh debug We have an open request, so sending on
that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x29255d0
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46494 to 5280
May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x22680f0:
<body rid='2724491813' xmlns='http://jabber.org/protocol/httpbind'
sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid:
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

*May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>May 12 15:59:11
meet.winlux.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>*
May 12 15:59:11 mod_bosh debug We have an open request, so sending on
that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x1f99b20
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:59:13 jcp200b000 debug Received[component]: <iq
id='HGpzr-2158' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

When opening the app in the browser, do you provide a valid token by
adding params in the url: "?jwt=....." ?
If you think your token is valid you can enable prosody debug and
check why that token is not working. There were recent changes to
those modules.

Regards
damencho

On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> wrote:
> Hi all,
> I have this issue, when I've activated token mode.
> When a user with token tries to connect to jitsi meet
>
> May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
<failure
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> required</text></failure>
>
>
> I don't know why ...
>
> I already a jitsi meet instance, and it works fine with token mode. I've
> copied all configurations, but my new instance doesn't work (just deb
> versions are different, I used last nighlty build) :frowning:
>
>
> Do you have an idea please ?
>
>
> thanks in advance
>
>
> ii jicofo 1.0-351-1
> amd64 JItsi Meet COnference FOcus
> ii jigasi 1.0-138
> amd64 Jitsi Gateway for SIP
> ii jitsi-archive-keyring 1.0.1
all
> The public key for the Jitsi packages repository
> ii jitsi-meet 1.0.2066-1
all
> WebRTC JavaScript video conferences
> ii jitsi-meet-prosody 1.0.1941-1
all
> Prosody configuration for Jitsi Meet
> ii jitsi-meet-tokens 1.0.1941-1
all
> Prosody token authentication plugin for Jitsi Meet
> ii jitsi-meet-web 1.0.1941-1
all
> WebRTC JavaScript video conferences
> ii jitsi-meet-web-config 1.0.1941-1
all
> Configuration for web serving of Jitsi Meet
> ii jitsi-videobridge 949-1
> amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> ii jitsi-meet-prosody 1.0.1941-1
all
> Prosody configuration for Jitsi Meet
> ic prosody 0.9.7-2+deb8u3
> amd64 Lightweight Jabber/XMPP server
> ii prosody-trunk 1nightly780-1~jessie
> amd64 Lightweight Jabber/XMPP server
>
>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#4

Hum, config.token was recently removed.
Can you try using ?jwt= and see how it goes.

···

On Fri, May 12, 2017 at 9:06 AM, Mickael Hubert <mickael@winlux.fr> wrote:

thanks Damian,

When I go to my room, I use this url

https://meet.winlux.fr/room1#config.token="****************"

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

normaly, this token is correct, because I already use it with my other jitsi
instance, and it's the same configuration (same app_id, secret, etc ...)
I supposed, prosody can't detect token in url, and considerate this connect
as anonymous (guest user)

++

you can find my log below:

May 12 15:58:36 socket debug server.lua: accepted new client
connection from 127.0.0.1:46490 to 5280
May 12 15:58:36 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:36 mod_bosh debug Handling new request table: 0x29df390:
<body rid='1387409576' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
----------
May 12 15:58:36 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:36 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:36 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving request
unanswered for now
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:37 socket debug server.lua: accepted new client
connection from 127.0.0.1:46491 to 5280
May 12 15:58:37 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:37 mod_bosh debug Handling new request table: 0x2481cc0:
<body rid='1387409577' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq type='get'
to='guest.meet.winlux.fr' xmlns='jabber:client'
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping
xmlns='urn:xmpp:ping'/></iq></body>
----------
May 12 15:58:37 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get'
to='guest.meet.winlux.fr'>

May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'
type='get' to='guest.meet.winlux.fr'>
May 12 15:58:37 mod_bosh debug We have an open request, so sending on
that
May 12 15:58:37 mod_bosh debug Request destroyed: table: 0x29144f0
May 12 15:58:37 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:37 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:37 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving request
unanswered for now
May 12 15:58:39 socket debug server.lua: accepted new client
connection from 127.0.0.1:46492 to 5280
May 12 15:58:39 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:58:39 mod_bosh debug Handling new request table: 0x2449b30:
<body rid='1387409578' xmlns='http://jabber.org/protocol/httpbind'
sid='40d66b5b-9277-4709-93bf-d559cf38b65f' type='terminate'><presence
xmlns='jabber:client' type='unavailable'/></body>
----------
May 12 15:58:39 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
type='unavailable'>

May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <presence type='unavailable'>
May 12 15:58:39 mod_bosh debug We have an open request, so sending on
that
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x2481e60
May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:39 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:39 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving request
unanswered for now
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug Closing
session with 1 requests open
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info BOSH
client disconnected
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x24e13f0
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug BOSH
session marked as inactive (for 60s)
May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Destroying session for
acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
(acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
May 12 15:58:39 sessionmanager debug All resources of
acfef037-367b-4d1e-9665-a9d059065623 are now offline
May 12 15:58:43 jcp200b000 debug Received[component]: <iq
id='HGpzr-2155' type='get' to='meet.winlux.fr'
from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:53 jcp200b000 debug Received[component]: <iq
id='HGpzr-2156' type='get' to='meet.winlux.fr'
from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9444'
type='get' to='meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9445'
type='get' to='callcontrol.meet.winlux.fr'>
May 12 15:59:01 jcp2490810 debug Received[component]: <iq
id='yruU0-9445' type='result'
to='focus@auth.meet.winlux.fr/focus65507379310062'
from='callcontrol.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9446'
type='get' to='auth.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9447'
type='get' to='focus.meet.winlux.fr'>
May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
id='yruU0-9447' type='result'
to='focus@auth.meet.winlux.fr/focus65507379310062'
from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9448'
type='get' to='guest.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9449'
type='get' to='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 jcp200b000 debug Received[component]: <iq
id='yruU0-9449' type='result'
to='focus@auth.meet.winlux.fr/focus65507379310062'
from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9450'
type='get' to='conference.meet.winlux.fr'>
May 12 15:59:03 jcp200b000 debug Received[component]: <iq
id='HGpzr-2157' type='get' to='meet.winlux.fr'
from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46493 to 5280
May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x23fc470:
<body rid='2724491812' xmlns='http://jabber.org/protocol/httpbind'
to='meet.winlux.fr' xml:lang='en' wait='60' hold='1' content='text/xml;
charset=utf-8' ver='1.6' xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session created for request from *********
May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
May 12 15:59:11 mod_bosh debug We have an open request, so sending on
that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x29255d0
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46494 to 5280
May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x22680f0:
<body rid='2724491813' xmlns='http://jabber.org/protocol/httpbind'
sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid:
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>
May 12 15:59:11 mod_bosh debug We have an open request, so sending on
that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x1f99b20
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH
session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 15:59:13 jcp200b000 debug Received[component]: <iq
id='HGpzr-2158' type='get' to='meet.winlux.fr'
from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

When opening the app in the browser, do you provide a valid token by
adding params in the url: "?jwt=....." ?
If you think your token is valid you can enable prosody debug and
check why that token is not working. There were recent changes to
those modules.

Regards
damencho

On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> wrote:
> Hi all,
> I have this issue, when I've activated token mode.
> When a user with token tries to connect to jitsi meet
>
> May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
> <failure
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> required</text></failure>
>
>
> I don't know why ...
>
> I already a jitsi meet instance, and it works fine with token mode. I've
> copied all configurations, but my new instance doesn't work (just deb
> versions are different, I used last nighlty build) :frowning:
>
>
> Do you have an idea please ?
>
>
> thanks in advance
>
>
> ii jicofo 1.0-351-1
> amd64 JItsi Meet COnference FOcus
> ii jigasi 1.0-138
> amd64 Jitsi Gateway for SIP
> ii jitsi-archive-keyring 1.0.1
> all
> The public key for the Jitsi packages repository
> ii jitsi-meet 1.0.2066-1
> all
> WebRTC JavaScript video conferences
> ii jitsi-meet-prosody 1.0.1941-1
> all
> Prosody configuration for Jitsi Meet
> ii jitsi-meet-tokens 1.0.1941-1
> all
> Prosody token authentication plugin for Jitsi Meet
> ii jitsi-meet-web 1.0.1941-1
> all
> WebRTC JavaScript video conferences
> ii jitsi-meet-web-config 1.0.1941-1
> all
> Configuration for web serving of Jitsi Meet
> ii jitsi-videobridge 949-1
> amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> ii jitsi-meet-prosody 1.0.1941-1
> all
> Prosody configuration for Jitsi Meet
> ic prosody 0.9.7-2+deb8u3
> amd64 Lightweight Jabber/XMPP server
> ii prosody-trunk 1nightly780-1~jessie
> amd64 Lightweight Jabber/XMPP server
>
>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#5

thanks Damian,

When I go to my room, I use this url

https://meet.winlux.fr/room1#config.token="****************”

If you are running a recent deployment that way of specifying the token is gone. I thought nobody actually used it since it was pretty obscure :-S

Pass is like Damian suggested and it should work.

Cheers,

···

On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> wrote:

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

normaly, this token is correct, because I already use it with my other jitsi instance, and it's the same configuration (same app_id, secret, etc ...)
I supposed, prosody can't detect token in url, and considerate this connect as anonymous (guest user)

++

you can find my log below:

May 12 15:58:36 socket debug server.lua: accepted new client connection from 127.0.0.1:46490 to 5280
May 12 15:58:36 http.server debug Firing event: POST meet.winlux.fr/http-bind
May 12 15:58:36 mod_bosh debug Handling new request table: 0x29df390: <body rid='1387409576' xmlns='http://jabber.org/protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
----------
May 12 15:58:36 mod_bosh debug BOSH body open (sid: 40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:36 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:36 mod_bosh debug and there are 0 things in the send_buffer:
May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving request unanswered for now
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:36 jcp2432e60 debug Received[component]: <iq id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:37 socket debug server.lua: accepted new client connection from 127.0.0.1:46491 to 5280
May 12 15:58:37 http.server debug Firing event: POST meet.winlux.fr/http-bind
May 12 15:58:37 mod_bosh debug Handling new request table: 0x2481cc0: <body rid='1387409577' xmlns='http://jabber.org/protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq type='get' to='guest.meet.winlux.fr' xmlns='jabber:client' id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping xmlns='urn:xmpp:ping'/></iq></body>
----------
May 12 15:58:37 mod_bosh debug BOSH body open (sid: 40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get' to='guest.meet.winlux.fr'>

May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get' to='guest.meet.winlux.fr'>
May 12 15:58:37 mod_bosh debug We have an open request, so sending on that
May 12 15:58:37 mod_bosh debug Request destroyed: table: 0x29144f0
May 12 15:58:37 socket debug server.lua: closed client handler and removed socket from list
May 12 15:58:37 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:37 mod_bosh debug and there are 0 things in the send_buffer:
May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving request unanswered for now
May 12 15:58:39 socket debug server.lua: accepted new client connection from 127.0.0.1:46492 to 5280
May 12 15:58:39 http.server debug Firing event: POST meet.winlux.fr/http-bind
May 12 15:58:39 mod_bosh debug Handling new request table: 0x2449b30: <body rid='1387409578' xmlns='http://jabber.org/protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f' type='terminate'><presence xmlns='jabber:client' type='unavailable'/></body>
----------
May 12 15:58:39 mod_bosh debug BOSH body open (sid: 40d66b5b-9277-4709-93bf-d559cf38b65f)
May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence type='unavailable'>

May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug Received[c2s]: <presence type='unavailable'>
May 12 15:58:39 mod_bosh debug We have an open request, so sending on that
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x2481e60
May 12 15:58:39 socket debug server.lua: closed client handler and removed socket from list
May 12 15:58:39 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
May 12 15:58:39 mod_bosh debug and there are 0 things in the send_buffer:
May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving request unanswered for now
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug Closing session with 1 requests open
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info BOSH client disconnected
May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x24e13f0
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug BOSH session marked as inactive (for 60s)
May 12 15:58:39 socket debug server.lua: closed client handler and removed socket from list
May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug Destroying session for acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3 (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
May 12 15:58:39 sessionmanager debug All resources of acfef037-367b-4d1e-9665-a9d059065623 are now offline
May 12 15:58:43 jcp200b000 debug Received[component]: <iq id='HGpzr-2155' type='get' to='meet.winlux.fr' from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:46 jcp2432e60 debug Received[component]: <iq id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:53 jcp200b000 debug Received[component]: <iq id='HGpzr-2156' type='get' to='meet.winlux.fr' from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:58:56 jcp2432e60 debug Received[component]: <iq id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9444' type='get' to='meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9445' type='get' to='callcontrol.meet.winlux.fr'>
May 12 15:59:01 jcp2490810 debug Received[component]: <iq id='yruU0-9445' type='result' to='focus@auth.meet.winlux.fr/focus65507379310062' from='callcontrol.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9446' type='get' to='auth.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9447' type='get' to='focus.meet.winlux.fr'>
May 12 15:59:01 jcp2432e60 debug Received[component]: <iq id='yruU0-9447' type='result' to='focus@auth.meet.winlux.fr/focus65507379310062' from='focus.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9448' type='get' to='guest.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9449' type='get' to='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 jcp200b000 debug Received[component]: <iq id='yruU0-9449' type='result' to='focus@auth.meet.winlux.fr/focus65507379310062' from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq id='yruU0-9450' type='get' to='conference.meet.winlux.fr'>
May 12 15:59:03 jcp200b000 debug Received[component]: <iq id='HGpzr-2157' type='get' to='meet.winlux.fr' from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:06 jcp2432e60 debug Received[component]: <iq id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

May 12 15:59:11 socket debug server.lua: accepted new client connection from 127.0.0.1:46493 to 5280
May 12 15:59:11 http.server debug Firing event: POST meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x23fc470: <body rid='2724491812' xmlns='http://jabber.org/protocol/httpbind' to='meet.winlux.fr' xml:lang='en' wait='60' hold='1' content='text/xml; charset=utf-8' ver='1.6' xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH session created for request from *********
May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid 'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
May 12 15:59:11 mod_bosh debug We have an open request, so sending on that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x29255d0
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and removed socket from list
May 12 15:59:11 mod_bosh debug Session c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the send_buffer:
May 12 15:59:11 socket debug server.lua: accepted new client connection from 127.0.0.1:46494 to 5280
May 12 15:59:11 http.server debug Firing event: POST meet.winlux.fr/http-bind
May 12 15:59:11 mod_bosh debug Handling new request table: 0x22680f0: <body rid='2724491813' xmlns='http://jabber.org/protocol/httpbind' sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 15:59:11 mod_bosh debug BOSH body open (sid: c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug Received[c2s_unauthed]: <auth mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply: <failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token required</text></failure>
May 12 15:59:11 mod_bosh debug We have an open request, so sending on that
May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x1f99b20
May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug BOSH session marked as inactive (for 60s)
May 12 15:59:11 socket debug server.lua: closed client handler and removed socket from list
May 12 15:59:11 mod_bosh debug Session c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
May 12 15:59:11 mod_bosh debug and there are 0 things in the send_buffer:
May 12 15:59:13 jcp200b000 debug Received[component]: <iq id='HGpzr-2158' type='get' to='meet.winlux.fr' from='jitsi-videobridge.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 15:59:16 jcp2432e60 debug Received[component]: <iq id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>

2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
Hi,

When opening the app in the browser, do you provide a valid token by
adding params in the url: "?jwt=....." ?
If you think your token is valid you can enable prosody debug and
check why that token is not working. There were recent changes to
those modules.

Regards
damencho

On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> wrote:
> Hi all,
> I have this issue, when I've activated token mode.
> When a user with token tries to connect to jitsi meet
>
> May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply: <failure
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> required</text></failure>
>
>
> I don't know why ...
>
> I already a jitsi meet instance, and it works fine with token mode. I've
> copied all configurations, but my new instance doesn't work (just deb
> versions are different, I used last nighlty build) :frowning:
>
>
> Do you have an idea please ?
>
>
> thanks in advance
>
>
> ii jicofo 1.0-351-1
> amd64 JItsi Meet COnference FOcus
> ii jigasi 1.0-138
> amd64 Jitsi Gateway for SIP
> ii jitsi-archive-keyring 1.0.1 all
> The public key for the Jitsi packages repository
> ii jitsi-meet 1.0.2066-1 all
> WebRTC JavaScript video conferences
> ii jitsi-meet-prosody 1.0.1941-1 all
> Prosody configuration for Jitsi Meet
> ii jitsi-meet-tokens 1.0.1941-1 all
> Prosody token authentication plugin for Jitsi Meet
> ii jitsi-meet-web 1.0.1941-1 all
> WebRTC JavaScript video conferences
> ii jitsi-meet-web-config 1.0.1941-1 all
> Configuration for web serving of Jitsi Meet
> ii jitsi-videobridge 949-1
> amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> ii jitsi-meet-prosody 1.0.1941-1 all
> Prosody configuration for Jitsi Meet
> ic prosody 0.9.7-2+deb8u3
> amd64 Lightweight Jabber/XMPP server
> ii prosody-trunk 1nightly780-1~jessie
> amd64 Lightweight Jabber/XMPP server
>
>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

--
Saúl


#6

Hi,
It's very obscure, yes :wink: but i'm not afraid !

I use this url:
https://meet.winlux.fr/room1?jwt=
<https://meet.winlux.fr/room1#config.token=>"****************” or without
"" it's better. But jitsi thinks, i'm guest, not moderator.

*i have a message:*
WAiting for the host... The conference room1 has not yet started [....]

i can't find in debug log, where token lua script is called;

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

has jwt format changed ?

*my logs:*
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11234' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11235' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46810 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table: 0x2cb2210:
<body rid='4040191893' xmlns='http://jabber.org/protocol/httpbind' to='
guest.meet.winlux.fr' xml:lang='en' wait='60' hold='1' content='text/xml;
charset=utf-8' ver='1.6' xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>

···

----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session created for request from *********
May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
'83dbf398-b3fd-4411-95c8-88eb3b1dc970'
May 12 17:07:49 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cb2840
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46811 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table: 0x2cc0010:
<body rid='4040191894' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
Authenticated as 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>
May 12 17:07:49 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cc0600
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46812 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2ccc120:
<body rid='4040191895' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970' to='guest.meet.winlux.fr'
xml:lang='en' xmpp:restart='true' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ccc750
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46813 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2cd8110:
<body rid='4040191896' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq type='set' id='_bind_auth_2'
xmlns='jabber:client'><bind
xmlns='urn:ietf:params:xml:ns:xmpp-bind'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_bind_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unbound]: <iq id='_bind_auth_2' type='set'>
May 12 17:07:50 rostermanager debug load_roster: asked for:
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 rostermanager debug load_roster: loading for new
user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Resource bound:
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cd8720
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46814 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2ce4b20:
<body rid='4040191897' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq type='set'
id='_session_auth_2' xmlns='jabber:client'><session
xmlns='urn:ietf:params:xml:ns:xmpp-session'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_session_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46815 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2cef320:
<body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq from=’
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query xmlns=’
http://jabber.org/protocol/disco#info’/></iq><iq to=‘focus.meet.winlux.fr
type=‘set’ xmlns=‘jabber:client’
id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference xmlns=’
http://jitsi.org/protocol/focus’ room=‘room1@conference.meet.winlux.fr’
machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’ value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’ value=’-1’/><property name=‘disableRtx’
value=‘false’/><property name=‘enableLipSync’ value=‘true’/><property
name=‘openSctp’ value=‘true’/></conference></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’ to=’
guest.meet.winlux.fr’ from=’
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ'
type='get' to='guest.meet.winlux.fr' from='
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
'>
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='set' to='
focus.meet.winlux.fr'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ'
type='set' to='focus.meet.winlux.fr'>
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cf0800
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 jcp2432e60 debug Received[component]: <iq id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='error' to=' 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92' from='focus.meet.winlux.fr'>
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46816 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2d05380:
<body rid='4040191899' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2d05920
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46817 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2d0f600:
<body rid='4040191900' xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
request unanswered for now

2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <scorretge@atlassian.com>:

> On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> wrote:
>
> thanks Damian,
>
> When I go to my room, I use this url
>
> https://meet.winlux.fr/room1#config.token="****************”
>

If you are running a recent deployment that way of specifying the token is
gone. I thought nobody actually used it since it was pretty obscure :-S

Pass is like Damian suggested and it should work.

Cheers,

> jwt has been constructed with:
> alg: HS256
> typ: JWT
> iss: app_id
> room: room1
>
> and my secret
>
> normaly, this token is correct, because I already use it with my other
jitsi instance, and it's the same configuration (same app_id, secret, etc
...)
> I supposed, prosody can't detect token in url, and considerate this
connect as anonymous (guest user)
>
> ++
>
> you can find my log below:
>
> May 12 15:58:36 socket debug server.lua: accepted new client
connection from 127.0.0.1:46490 to 5280
> May 12 15:58:36 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:36 mod_bosh debug Handling new request table:
0x29df390: <body rid='1387409576' xmlns='http://jabber.org/
protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
> ----------
> May 12 15:58:36 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:36 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f
has 1 out of 1 requests open
> May 12 15:58:36 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:37 socket debug server.lua: accepted new client
connection from 127.0.0.1:46491 to 5280
> May 12 15:58:37 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:37 mod_bosh debug Handling new request table:
0x2481cc0: <body rid='1387409577' xmlns='http://jabber.org/
protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq
type='get' to='guest.meet.winlux.fr' xmlns='jabber:client'
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping
xmlns='urn:xmpp:ping'/></iq></body>
> ----------
> May 12 15:58:37 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get' to='
guest.meet.winlux.fr'>
>
> May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'
type='get' to='guest.meet.winlux.fr'>
> May 12 15:58:37 mod_bosh debug We have an open request, so sending
on that
> May 12 15:58:37 mod_bosh debug Request destroyed: table: 0x29144f0
> May 12 15:58:37 socket debug server.lua: closed client handler and
removed socket from list
> May 12 15:58:37 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f
has 1 out of 1 requests open
> May 12 15:58:37 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:39 socket debug server.lua: accepted new client
connection from 127.0.0.1:46492 to 5280
> May 12 15:58:39 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:39 mod_bosh debug Handling new request table:
0x2449b30: <body rid='1387409578' xmlns='http://jabber.org/
protocol/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'
type='terminate'><presence xmlns='jabber:client' type='unavailable'/></body>
> ----------
> May 12 15:58:39 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
type='unavailable'>
>
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <presence type='unavailable'>
> May 12 15:58:39 mod_bosh debug We have an open request, so sending
on that
> May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x2481e60
> May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
> May 12 15:58:39 mod_bosh debug Session 40d66b5b-9277-4709-93bf-d559cf38b65f
has 1 out of 1 requests open
> May 12 15:58:39 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Closing session with 1 requests open
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
BOSH client disconnected
> May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x24e13f0
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
BOSH session marked as inactive (for 60s)
> May 12 15:58:39 socket debug server.lua: closed client handler and
removed socket from list
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Destroying session for acfef037-367b-4d1e-9665-a9d059065623@guest.meet.
winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3 (acfef037-367b-4d1e-9665-
a9d059065623@guest.meet.winlux.fr)
> May 12 15:58:39 sessionmanager debug All resources of
acfef037-367b-4d1e-9665-a9d059065623 are now offline
> May 12 15:58:43 jcp200b000 debug Received[component]: <iq
id='HGpzr-2155' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:53 jcp200b000 debug Received[component]: <iq
id='HGpzr-2156' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9444' type='get' to='meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9445' type='get' to='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 jcp2490810 debug Received[component]: <iq
id='yruU0-9445' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9446' type='get' to='auth.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9447' type='get' to='focus.meet.winlux.fr'>
> May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
id='yruU0-9447' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='focus.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9448' type='get' to='guest.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9449' type='get' to='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 jcp200b000 debug Received[component]: <iq
id='yruU0-9449' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9450' type='get' to='conference.meet.winlux.fr'>
> May 12 15:59:03 jcp200b000 debug Received[component]: <iq
id='HGpzr-2157' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
>
>
>
>
> May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46493 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
0x23fc470: <body rid='2724491812' xmlns='http://jabber.org/
protocol/httpbind' to='meet.winlux.fr' xml:lang='en' wait='60' hold='1'
content='text/xml; charset=utf-8' ver='1.6' xmpp:version='1.0'
xmlns:xmpp='urn:xmpp:xbosh'/>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session created for request from *********
> May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
> May 12 15:59:11 mod_bosh debug We have an open request, so sending
on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x29255d0
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
> May 12 15:59:11 mod_bosh debug Session c3b8d016-a0a3-4cc6-a92e-8cf9a229b666
has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46494 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
0x22680f0: <body rid='2724491813' xmlns='http://jabber.org/
protocol/httpbind' sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid:
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
> May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
>
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
> May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>
> May 12 15:59:11 mod_bosh debug We have an open request, so sending
on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x1f99b20
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler and
removed socket from list
> May 12 15:59:11 mod_bosh debug Session c3b8d016-a0a3-4cc6-a92e-8cf9a229b666
has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:59:13 jcp200b000 debug Received[component]: <iq
id='HGpzr-2158' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
>
>
>
>
> 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
> Hi,
>
> When opening the app in the browser, do you provide a valid token by
> adding params in the url: "?jwt=....." ?
> If you think your token is valid you can enable prosody debug and
> check why that token is not working. There were recent changes to
> those modules.
>
> Regards
> damencho
>
>
> On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> > wrote:
> > Hi all,
> > I have this issue, when I've activated token mode.
> > When a user with token tries to connect to jitsi meet
> >
> > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
<failure
> > xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> > required</text></failure>
> >
> >
> > I don't know why ...
> >
> > I already a jitsi meet instance, and it works fine with token mode.
I've
> > copied all configurations, but my new instance doesn't work (just deb
> > versions are different, I used last nighlty build) :frowning:
> >
> >
> > Do you have an idea please ?
> >
> >
> > thanks in advance
> >
> >
> > ii jicofo 1.0-351-1
> > amd64 JItsi Meet COnference FOcus
> > ii jigasi 1.0-138
> > amd64 Jitsi Gateway for SIP
> > ii jitsi-archive-keyring 1.0.1
  all
> > The public key for the Jitsi packages repository
> > ii jitsi-meet 1.0.2066-1
all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-prosody 1.0.1941-1
all
> > Prosody configuration for Jitsi Meet
> > ii jitsi-meet-tokens 1.0.1941-1
all
> > Prosody token authentication plugin for Jitsi Meet
> > ii jitsi-meet-web 1.0.1941-1
all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-web-config 1.0.1941-1
all
> > Configuration for web serving of Jitsi Meet
> > ii jitsi-videobridge 949-1
> > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> > ii jitsi-meet-prosody 1.0.1941-1
all
> > Prosody configuration for Jitsi Meet
> > ic prosody 0.9.7-2+deb8u3
> > amd64 Lightweight Jabber/XMPP server
> > ii prosody-trunk 1nightly780-1~jessie
> > amd64 Lightweight Jabber/XMPP server
> >
> >
> >
> >
> > _______________________________________________
> > users mailing list
> > users@jitsi.org
> > Unsubscribe instructions and other list options:
> > http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

--
Saúl

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#7

there is a difference between worked instance and the other:

*worked:*
May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:18:24 mod_bosh debug We have an open request, so sending on
that
May 12 17:18:24 mod_bosh debug Request destroyed: table: 0x29fdc10
May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug BOSH
session marked as inactive (for 60s)
May 12 17:18:24 mod_bosh debug Session
c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
May 12 17:18:24 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:18:24 http.server debug Firing event: POST
meet.winlux.fr/http-bind/
May 12 17:18:24 mod_bosh debug Handling new request table: 0x25c5370:
<body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq from=’
3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a472cf1d-4436-491a-89d1-2ca825efbcf8’
to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query xmlns=’
http://jabber.org/protocol/disco#info’/></iq><iq to=‘focus.meet.winlux.fr
type=‘set’ xmlns=‘jabber:client’
id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference xmlns=’
http://jitsi.org/protocol/focus’ room=‘room1@conference.meet.winlux.fr’
machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’ value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’ value=’-1’/><property name=‘disableRtx’
value=‘false’/><property name=‘enableLipSync’ value=‘true’/><property
name=‘openSctp’ value=‘true’/></conference></iq></body>

···

----------
May 12 17:18:24 mod_bosh debug BOSH body open (sid:
c83b6b48-37fc-491d-9888-e13d0ea79fc3)
*May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
id='e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ' type='get'
to='meet.winlux.fr <http://meet.winlux.fr>'
from='3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a472cf1d-4436-491a-89d1-2ca825efbcf8
<http://3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a472cf1d-4436-491a-89d1-2ca825efbcf8>'>*

*not worked (“meet2” it’s a fake domain, it’s just for the mailing list):*
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46815 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet2.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2cef320:
<body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq from=’
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query xmlns=’
http://jabber.org/protocol/disco#info’/></iq><iq to=‘focus.meet2.winlux.fr
type=‘set’ xmlns=‘jabber:client’
id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference xmlns=’
http://jitsi.org/protocol/focus’ room=‘room1@conference.meet2.winlux.fr’
machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’ value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’ value=’-1’/><property name=‘disableRtx’
value=‘false’/><property name=‘enableLipSync’ value=‘true’/><property
name=‘openSctp’ value=‘true’/></conference></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
*May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
to=‘guest.meet2.winlux.fr <http://guest.meet2.winlux.fr>’
from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
<http://065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92>’>*

2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:

Hi,
It's very obscure, yes :wink: but i'm not afraid !

I use this url:
https://meet.winlux.fr/room1?jwt=
<https://meet.winlux.fr/room1#config.token=>"****************” or without
"" it's better. But jitsi thinks, i'm guest, not moderator.

*i have a message:*
WAiting for the host... The conference room1 has not yet started [....]

i can't find in debug log, where token lua script is called;

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

has jwt format changed ?

*my logs:*
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11234' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11235' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46810 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table:
0x2cb2210: <body rid='4040191893' xmlns='http://jabber.org/
protocol/httpbind' to='guest.meet.winlux.fr' xml:lang='en' wait='60'
hold='1' content='text/xml; charset=utf-8' ver='1.6' xmpp:version='1.0'
xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session created for request from *********
May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
'83dbf398-b3fd-4411-95c8-88eb3b1dc970'
May 12 17:07:49 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cb2840
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46811 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table:
0x2cc0010: <body rid='4040191894' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
Authenticated as 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>
May 12 17:07:49 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cc0600
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46812 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2ccc120: <body rid='4040191895' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970' to='
guest.meet.winlux.fr' xml:lang='en' xmpp:restart='true'
xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ccc750
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46813 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cd8110: <body rid='4040191896' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq
type='set' id='_bind_auth_2' xmlns='jabber:client'><bind
xmlns='urn:ietf:params:xml:ns:xmpp-bind'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_bind_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unbound]: <iq id='_bind_auth_2' type='set'>
May 12 17:07:50 rostermanager debug load_roster: asked for:
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 rostermanager debug load_roster: loading for new
user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Resource bound: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cd8720
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46814 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2ce4b20: <body rid='4040191897' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq
type='set' id='_session_auth_2' xmlns='jabber:client'><session
xmlns='urn:ietf:params:xml:ns:xmpp-session'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_session_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46815 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320: <body rid=‘4040191898’ xmlns=‘http://jabber.org/
protocol/httpbind’ sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq from=’
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’ to=‘guest.meet.winlux.fr
type=‘get’ xmlns=‘jabber:client’ id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq to=’
focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference xmlns=’
http://jitsi.org/protocol/focus’ room=‘room1@conference.meet.winlux.fr’
machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’ value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’ value=’-1’/><property name=‘disableRtx’
value=‘false’/><property name=‘enableLipSync’ value=‘true’/><property
name=‘openSctp’ value=‘true’/></conference></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’ to=’
guest.meet.winlux.fr’ from=‘065824c6-1689-4092-9c70-
e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ'
type='get' to='guest.meet.winlux.fr' from='065824c6-1689-4092-9c70-
e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92'>
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='set' to='
focus.meet.winlux.fr'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ'
type='set' to='focus.meet.winlux.fr'>
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cf0800
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='error' to='
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92' from='focus.meet.winlux.fr
'>
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46816 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2d05380: <body rid='4040191899' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2d05920
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46817 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2d0f600: <body rid='4040191900' xmlns='http://jabber.org/
protocol/httpbind' sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug Session 83dbf398-b3fd-4411-95c8-88eb3b1dc970
has 1 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
request unanswered for now

2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <scorretge@atlassian.com>:

> On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> wrote:
>
> thanks Damian,
>
> When I go to my room, I use this url
>
> https://meet.winlux.fr/room1#config.token="****************”
>

If you are running a recent deployment that way of specifying the token
is gone. I thought nobody actually used it since it was pretty obscure :-S

Pass is like Damian suggested and it should work.

Cheers,

> jwt has been constructed with:
> alg: HS256
> typ: JWT
> iss: app_id
> room: room1
>
> and my secret
>
> normaly, this token is correct, because I already use it with my other
jitsi instance, and it's the same configuration (same app_id, secret, etc
...)
> I supposed, prosody can't detect token in url, and considerate this
connect as anonymous (guest user)
>
> ++
>
> you can find my log below:
>
> May 12 15:58:36 socket debug server.lua: accepted new client
connection from 127.0.0.1:46490 to 5280
> May 12 15:58:36 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:36 mod_bosh debug Handling new request table:
0x29df390: <body rid='1387409576' xmlns='http://jabber.org/proto
col/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
> ----------
> May 12 15:58:36 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:36 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:36 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:37 socket debug server.lua: accepted new client
connection from 127.0.0.1:46491 to 5280
> May 12 15:58:37 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:37 mod_bosh debug Handling new request table:
0x2481cc0: <body rid='1387409577' xmlns='http://jabber.org/proto
col/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq type='get'
to='guest.meet.winlux.fr' xmlns='jabber:client'
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping
xmlns='urn:xmpp:ping'/></iq></body>
> ----------
> May 12 15:58:37 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get' to='
guest.meet.winlux.fr'>
>
> May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'
type='get' to='guest.meet.winlux.fr'>
> May 12 15:58:37 mod_bosh debug We have an open request, so
sending on that
> May 12 15:58:37 mod_bosh debug Request destroyed: table: 0x29144f0
> May 12 15:58:37 socket debug server.lua: closed client handler
and removed socket from list
> May 12 15:58:37 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:37 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:39 socket debug server.lua: accepted new client
connection from 127.0.0.1:46492 to 5280
> May 12 15:58:39 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:58:39 mod_bosh debug Handling new request table:
0x2449b30: <body rid='1387409578' xmlns='http://jabber.org/proto
col/httpbind' sid='40d66b5b-9277-4709-93bf-d559cf38b65f'
type='terminate'><presence xmlns='jabber:client' type='unavailable'/></body>
> ----------
> May 12 15:58:39 mod_bosh debug BOSH body open (sid:
40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
type='unavailable'>
>
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Received[c2s]: <presence type='unavailable'>
> May 12 15:58:39 mod_bosh debug We have an open request, so
sending on that
> May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x2481e60
> May 12 15:58:39 socket debug server.lua: closed client handler
and removed socket from list
> May 12 15:58:39 mod_bosh debug Session
40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:39 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
request unanswered for now
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Closing session with 1 requests open
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
BOSH client disconnected
> May 12 15:58:39 mod_bosh debug Request destroyed: table: 0x24e13f0
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
BOSH session marked as inactive (for 60s)
> May 12 15:58:39 socket debug server.lua: closed client handler
and removed socket from list
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
Destroying session for acfef037-367b-4d1e-9665-a9d059
065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3 (
acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
> May 12 15:58:39 sessionmanager debug All resources of
acfef037-367b-4d1e-9665-a9d059065623 are now offline
> May 12 15:58:43 jcp200b000 debug Received[component]: <iq
id='HGpzr-2155' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:53 jcp200b000 debug Received[component]: <iq
id='HGpzr-2156' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9444' type='get' to='meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9445' type='get' to='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 jcp2490810 debug Received[component]: <iq
id='yruU0-9445' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9446' type='get' to='auth.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9447' type='get' to='focus.meet.winlux.fr'>
> May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
id='yruU0-9447' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='focus.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9448' type='get' to='guest.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9449' type='get' to='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 jcp200b000 debug Received[component]: <iq
id='yruU0-9449' type='result' to='focus@auth.meet.winlux.fr/
focus65507379310062' from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
id='yruU0-9450' type='get' to='conference.meet.winlux.fr'>
> May 12 15:59:03 jcp200b000 debug Received[component]: <iq
id='HGpzr-2157' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
>
>
>
>
> May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46493 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
0x23fc470: <body rid='2724491812' xmlns='http://jabber.org/proto
col/httpbind' to='meet.winlux.fr' xml:lang='en' wait='60' hold='1'
content='text/xml; charset=utf-8' ver='1.6' xmpp:version='1.0'
xmlns:xmpp='urn:xmpp:xbosh'/>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session created for request from *********
> May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
> May 12 15:59:11 mod_bosh debug We have an open request, so
sending on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x29255d0
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler
and removed socket from list
> May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:59:11 socket debug server.lua: accepted new client
connection from 127.0.0.1:46494 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
0x22680f0: <body rid='2724491813' xmlns='http://jabber.org/proto
col/httpbind' sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid:
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
> May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
>
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
> May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
required</text></failure>
> May 12 15:59:11 mod_bosh debug We have an open request, so
sending on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table: 0x1f99b20
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler
and removed socket from list
> May 12 15:59:11 mod_bosh debug Session
c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
send_buffer:
> May 12 15:59:13 jcp200b000 debug Received[component]: <iq
id='HGpzr-2158' type='get' to='meet.winlux.fr' from='
jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr
'>
>
>
>
>
> 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
> Hi,
>
> When opening the app in the browser, do you provide a valid token by
> adding params in the url: "?jwt=....." ?
> If you think your token is valid you can enable prosody debug and
> check why that token is not working. There were recent changes to
> those modules.
>
> Regards
> damencho
>
>
> On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> >> wrote:
> > Hi all,
> > I have this issue, when I've activated token mode.
> > When a user with token tries to connect to jitsi meet
> >
> > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
<failure
> > xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> > required</text></failure>
> >
> >
> > I don't know why ...
> >
> > I already a jitsi meet instance, and it works fine with token mode.
I've
> > copied all configurations, but my new instance doesn't work (just deb
> > versions are different, I used last nighlty build) :frowning:
> >
> >
> > Do you have an idea please ?
> >
> >
> > thanks in advance
> >
> >
> > ii jicofo 1.0-351-1
> > amd64 JItsi Meet COnference FOcus
> > ii jigasi 1.0-138
> > amd64 Jitsi Gateway for SIP
> > ii jitsi-archive-keyring 1.0.1
  all
> > The public key for the Jitsi packages repository
> > ii jitsi-meet 1.0.2066-1
   all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-prosody 1.0.1941-1
   all
> > Prosody configuration for Jitsi Meet
> > ii jitsi-meet-tokens 1.0.1941-1
   all
> > Prosody token authentication plugin for Jitsi Meet
> > ii jitsi-meet-web 1.0.1941-1
   all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-web-config 1.0.1941-1
   all
> > Configuration for web serving of Jitsi Meet
> > ii jitsi-videobridge 949-1
> > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> > ii jitsi-meet-prosody 1.0.1941-1
   all
> > Prosody configuration for Jitsi Meet
> > ic prosody 0.9.7-2+deb8u3
> > amd64 Lightweight Jabber/XMPP server
> > ii prosody-trunk 1nightly780-1~jessie
> > amd64 Lightweight Jabber/XMPP server
> >
> >
> >
> >
> > _______________________________________________
> > users mailing list
> > users@jitsi.org
> > Unsubscribe instructions and other list options:
> > http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

--
Saúl

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#8

Hey again,

When prosody is restarted do you see any logs from the toke auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

···

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> wrote:

there is a difference between worked instance and the other:

worked:
May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:18:24 mod_bosh debug We have an open request, so sending on
that
May 12 17:18:24 mod_bosh debug Request destroyed: table: 0x29fdc10
May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug BOSH
session marked as inactive (for 60s)
May 12 17:18:24 mod_bosh debug Session
c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
May 12 17:18:24 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:18:24 http.server debug Firing event: POST
meet.winlux.fr/http-bind/
May 12 17:18:24 mod_bosh debug Handling new request table: 0x25c5370:
<body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a472cf1d-4436-491a-89d1-2ca825efbcf8’
to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
xmlns=‘http://jitsi.org/protocol/focus
room=‘room1@conference.meet.winlux.fr’
machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property name=‘call_control’
value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
value=‘true’/></conference></iq></body>
----------
May 12 17:18:24 mod_bosh debug BOSH body open (sid:
c83b6b48-37fc-491d-9888-e13d0ea79fc3)
May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
to=‘meet.winlux.fr
from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a472cf1d-4436-491a-89d1-2ca825efbcf8’>

not worked (“meet2” it’s a fake domain, it’s just for the mailing list):
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:07:50 mod_bosh debug We have an open request, so sending on
that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46815 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet2.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table: 0x2cef320:
<body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
xmlns=‘http://jitsi.org/protocol/focus
room=‘room1@conference.meet2.winlux.fr’
machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property name=‘call_control’
value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
value=‘true’/></conference></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
to=‘guest.meet2.winlux.fr
from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>

2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:

Hi,
It's very obscure, yes :wink: but i'm not afraid !

I use this url:
https://meet.winlux.fr/room1?jwt="****************” or without “” it’s
better. But jitsi thinks, i’m guest, not moderator.

i have a message:
WAiting for the host... The conference room1 has not yet started [....]

i can't find in debug log, where token lua script is called;

jwt has been constructed with:
alg: HS256
typ: JWT
iss: app_id
room: room1

and my secret

has jwt format changed ?

my logs:
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11234' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
id='yruU0-11235' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46810 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table:
0x2cb2210: <body rid='4040191893'
xmlns='http://jabber.org/protocol/httpbind' to='guest.meet.winlux.fr'
xml:lang='en' wait='60' hold='1' content='text/xml; charset=utf-8' ver='1.6'
xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session created for request from *********
May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
'83dbf398-b3fd-4411-95c8-88eb3b1dc970'
May 12 17:07:49 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cb2840
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:49 socket debug server.lua: accepted new client
connection from 127.0.0.1:46811 to 5280
May 12 17:07:49 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:49 mod_bosh debug Handling new request table:
0x2cc0010: <body rid='4040191894'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><auth
xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
----------
May 12 17:07:49 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>

May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
Authenticated as 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'/>
May 12 17:07:49 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cc0600
May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:49 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:49 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:49 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46812 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2ccc120: <body rid='4040191895'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970' to='guest.meet.winlux.fr'
xml:lang='en' xmpp:restart='true' xmlns:xmpp='urn:xmpp:xbosh'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ccc750
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46813 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cd8110: <body rid='4040191896'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq type='set' id='_bind_auth_2'
xmlns='jabber:client'><bind
xmlns='urn:ietf:params:xml:ns:xmpp-bind'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_bind_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s_unbound]: <iq id='_bind_auth_2' type='set'>
May 12 17:07:50 rostermanager debug load_roster: asked for:
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 rostermanager debug load_roster: loading for new
user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Resource bound:
065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cd8720
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46814 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2ce4b20: <body rid='4040191897'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'><iq type='set'
id='_session_auth_2' xmlns='jabber:client'><session
xmlns='urn:ietf:params:xml:ns:xmpp-session'/></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='_session_auth_2' type='set'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46815 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320: <body rid=‘4040191898’
xmlns=‘http://jabber.org/protocol/httpbind
sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
xmlns=‘http://jitsi.org/protocol/focus
room=‘room1@conference.meet.winlux.fr’
machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property name=‘call_control’
value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
value=‘true’/></conference></iq></body>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
to=‘guest.meet.winlux.fr
from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ'
type='get' to='guest.meet.winlux.fr'
from='065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92'>
May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='set'
to='focus.meet.winlux.fr'>

May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
Received[c2s]: <iq id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ'
type='set' to='focus.meet.winlux.fr'>
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cf0800
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
id='834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ' type='error'
to='065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92'
from='focus.meet.winlux.fr'>
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46816 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2d05380: <body rid='4040191899'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug We have an open request, so sending
on that
May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2d05920
May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug BOSH
session marked as inactive (for 60s)
May 12 17:07:50 socket debug server.lua: closed client handler and
removed socket from list
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 socket debug server.lua: accepted new client
connection from 127.0.0.1:46817 to 5280
May 12 17:07:50 http.server debug Firing event: POST
meet.winlux.fr/http-bind
May 12 17:07:50 mod_bosh debug Handling new request table:
0x2d0f600: <body rid='4040191900'
xmlns='http://jabber.org/protocol/httpbind'
sid='83dbf398-b3fd-4411-95c8-88eb3b1dc970'/>
----------
May 12 17:07:50 mod_bosh debug BOSH body open (sid:
83dbf398-b3fd-4411-95c8-88eb3b1dc970)
May 12 17:07:50 mod_bosh debug Session
83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
May 12 17:07:50 mod_bosh debug and there are 0 things in the
send_buffer:
May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
request unanswered for now

2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <scorretge@atlassian.com>:

> On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> wrote:
>
> thanks Damian,
>
> When I go to my room, I use this url
>
> https://meet.winlux.fr/room1#config.token="****************”
>

If you are running a recent deployment that way of specifying the token
is gone. I thought nobody actually used it since it was pretty obscure :-S

Pass is like Damian suggested and it should work.

Cheers,

> jwt has been constructed with:
> alg: HS256
> typ: JWT
> iss: app_id
> room: room1
>
> and my secret
>
> normaly, this token is correct, because I already use it with my other
> jitsi instance, and it's the same configuration (same app_id, secret, etc
> ...)
> I supposed, prosody can't detect token in url, and considerate this
> connect as anonymous (guest user)
>
> ++
>
> you can find my log below:
>
> May 12 15:58:36 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46490 to 5280
> May 12 15:58:36 http.server debug Firing event: POST
> meet.winlux.fr/http-bind
> May 12 15:58:36 mod_bosh debug Handling new request table:
> 0x29df390: <body rid='1387409576'
> xmlns='http://jabber.org/protocol/httpbind'
> sid='40d66b5b-9277-4709-93bf-d559cf38b65f'/>
> ----------
> May 12 15:58:36 mod_bosh debug BOSH body open (sid:
> 40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:36 mod_bosh debug Session
> 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:36 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
> request unanswered for now
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9438' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9439' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:58:37 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46491 to 5280
> May 12 15:58:37 http.server debug Firing event: POST
> meet.winlux.fr/http-bind
> May 12 15:58:37 mod_bosh debug Handling new request table:
> 0x2481cc0: <body rid='1387409577'
> xmlns='http://jabber.org/protocol/httpbind'
> sid='40d66b5b-9277-4709-93bf-d559cf38b65f'><iq type='get'
> to='guest.meet.winlux.fr' xmlns='jabber:client'
> id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'><ping
> xmlns='urn:xmpp:ping'/></iq></body>
> ----------
> May 12 15:58:37 mod_bosh debug BOSH body open (sid:
> 40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
> id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ' type='get'
> to='guest.meet.winlux.fr'>
>
> May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
> Received[c2s]: <iq id='bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ'
> type='get' to='guest.meet.winlux.fr'>
> May 12 15:58:37 mod_bosh debug We have an open request, so
> sending on that
> May 12 15:58:37 mod_bosh debug Request destroyed: table:
> 0x29144f0
> May 12 15:58:37 socket debug server.lua: closed client handler
> and removed socket from list
> May 12 15:58:37 mod_bosh debug Session
> 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:37 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
> request unanswered for now
> May 12 15:58:39 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46492 to 5280
> May 12 15:58:39 http.server debug Firing event: POST
> meet.winlux.fr/http-bind
> May 12 15:58:39 mod_bosh debug Handling new request table:
> 0x2449b30: <body rid='1387409578'
> xmlns='http://jabber.org/protocol/httpbind'
> sid='40d66b5b-9277-4709-93bf-d559cf38b65f' type='terminate'><presence
> xmlns='jabber:client' type='unavailable'/></body>
> ----------
> May 12 15:58:39 mod_bosh debug BOSH body open (sid:
> 40d66b5b-9277-4709-93bf-d559cf38b65f)
> May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
> type='unavailable'>
>
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
> Received[c2s]: <presence type='unavailable'>
> May 12 15:58:39 mod_bosh debug We have an open request, so
> sending on that
> May 12 15:58:39 mod_bosh debug Request destroyed: table:
> 0x2481e60
> May 12 15:58:39 socket debug server.lua: closed client handler
> and removed socket from list
> May 12 15:58:39 mod_bosh debug Session
> 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
> May 12 15:58:39 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
> request unanswered for now
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
> Closing session with 1 requests open
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
> BOSH client disconnected
> May 12 15:58:39 mod_bosh debug Request destroyed: table:
> 0x24e13f0
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
> BOSH session marked as inactive (for 60s)
> May 12 15:58:39 socket debug server.lua: closed client handler
> and removed socket from list
> May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
> Destroying session for
> acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
> (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
> May 12 15:58:39 sessionmanager debug All resources of
> acfef037-367b-4d1e-9665-a9d059065623 are now offline
> May 12 15:58:43 jcp200b000 debug Received[component]: <iq
> id='HGpzr-2155' type='get' to='meet.winlux.fr'
> from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9440' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9441' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:58:53 jcp200b000 debug Received[component]: <iq
> id='HGpzr-2156' type='get' to='meet.winlux.fr'
> from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9442' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9443' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9444' type='get' to='meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9445' type='get' to='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 jcp2490810 debug Received[component]: <iq
> id='yruU0-9445' type='result'
> to='focus@auth.meet.winlux.fr/focus65507379310062'
> from='callcontrol.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9446' type='get' to='auth.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9447' type='get' to='focus.meet.winlux.fr'>
> May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9447' type='result'
> to='focus@auth.meet.winlux.fr/focus65507379310062'
> from='focus.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9448' type='get' to='guest.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9449' type='get' to='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 jcp200b000 debug Received[component]: <iq
> id='yruU0-9449' type='result'
> to='focus@auth.meet.winlux.fr/focus65507379310062'
> from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
> id='yruU0-9450' type='get' to='conference.meet.winlux.fr'>
> May 12 15:59:03 jcp200b000 debug Received[component]: <iq
> id='HGpzr-2157' type='get' to='meet.winlux.fr'
> from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9451' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9452' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
>
>
>
>
> May 12 15:59:11 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46493 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
> meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
> 0x23fc470: <body rid='2724491812'
> xmlns='http://jabber.org/protocol/httpbind' to='meet.winlux.fr'
> xml:lang='en' wait='60' hold='1' content='text/xml; charset=utf-8' ver='1.6'
> xmpp:version='1.0' xmlns:xmpp='urn:xmpp:xbosh'/>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
> BOSH session created for request from *********
> May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
> 'c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'
> May 12 15:59:11 mod_bosh debug We have an open request, so
> sending on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table:
> 0x29255d0
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
> BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler
> and removed socket from list
> May 12 15:59:11 mod_bosh debug Session
> c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 15:59:11 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46494 to 5280
> May 12 15:59:11 http.server debug Firing event: POST
> meet.winlux.fr/http-bind
> May 12 15:59:11 mod_bosh debug Handling new request table:
> 0x22680f0: <body rid='2724491813'
> xmlns='http://jabber.org/protocol/httpbind'
> sid='c3b8d016-a0a3-4cc6-a92e-8cf9a229b666'><auth
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='ANONYMOUS'/></body>
> ----------
> May 12 15:59:11 mod_bosh debug BOSH body open (sid:
> c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
> May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
> mechanism='ANONYMOUS' xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
>
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
> Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
> May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
> <failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> required</text></failure>
> May 12 15:59:11 mod_bosh debug We have an open request, so
> sending on that
> May 12 15:59:11 mod_bosh debug Request destroyed: table:
> 0x1f99b20
> May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
> BOSH session marked as inactive (for 60s)
> May 12 15:59:11 socket debug server.lua: closed client handler
> and removed socket from list
> May 12 15:59:11 mod_bosh debug Session
> c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
> May 12 15:59:11 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 15:59:13 jcp200b000 debug Received[component]: <iq
> id='HGpzr-2158' type='get' to='meet.winlux.fr'
> from='jitsi-videobridge.meet.winlux.fr'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9453' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
> May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
> id='yruU0-9454' type='get' to='meet.winlux.fr' from='focus.meet.winlux.fr'>
>
>
>
>
> 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
> Hi,
>
> When opening the app in the browser, do you provide a valid token by
> adding params in the url: "?jwt=....." ?
> If you think your token is valid you can enable prosody debug and
> check why that token is not working. There were recent changes to
> those modules.
>
> Regards
> damencho
>
>
> On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> >>> > wrote:
> > Hi all,
> > I have this issue, when I've activated token mode.
> > When a user with token tries to connect to jitsi meet
> >
> > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
> > <failure
> > xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>token
> > required</text></failure>
> >
> >
> > I don't know why ...
> >
> > I already a jitsi meet instance, and it works fine with token mode.
> > I've
> > copied all configurations, but my new instance doesn't work (just deb
> > versions are different, I used last nighlty build) :frowning:
> >
> >
> > Do you have an idea please ?
> >
> >
> > thanks in advance
> >
> >
> > ii jicofo 1.0-351-1
> > amd64 JItsi Meet COnference FOcus
> > ii jigasi 1.0-138
> > amd64 Jitsi Gateway for SIP
> > ii jitsi-archive-keyring 1.0.1
> > all
> > The public key for the Jitsi packages repository
> > ii jitsi-meet 1.0.2066-1
> > all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-prosody 1.0.1941-1
> > all
> > Prosody configuration for Jitsi Meet
> > ii jitsi-meet-tokens 1.0.1941-1
> > all
> > Prosody token authentication plugin for Jitsi Meet
> > ii jitsi-meet-web 1.0.1941-1
> > all
> > WebRTC JavaScript video conferences
> > ii jitsi-meet-web-config 1.0.1941-1
> > all
> > Configuration for web serving of Jitsi Meet
> > ii jitsi-videobridge 949-1
> > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
> > ii jitsi-meet-prosody 1.0.1941-1
> > all
> > Prosody configuration for Jitsi Meet
> > ic prosody 0.9.7-2+deb8u3
> > amd64 Lightweight Jabber/XMPP server
> > ii prosody-trunk 1nightly780-1~jessie
> > amd64 Lightweight Jabber/XMPP server
> >
> >
> >
> >
> > _______________________________________________
> > users mailing list
> > users@jitsi.org
> > Unsubscribe instructions and other list options:
> > http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

--
Saúl

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#9

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token" in
the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would use
the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

···

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> > wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so sending
on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table: 0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/
a472cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/
a472cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so sending
on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’ mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table: 0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.
winlux.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the token
>>> is gone. I thought nobody actually used it since it was pretty obscure
:-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with my
other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.
winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><
>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug and
>>> > check why that token is not working. There were recent changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> > >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work (just
deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#10

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are working
fine.

By the way, disable_room_name_constraints is obsolete now, in order to do
that you just need to remove token_verification from your muc component
definition.

Can you explain the experience you have with that config, what you see and
what is the problem?

Regards
damencho

···

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token" in
the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would use
the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table: 0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table: 0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/
c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.
fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the
token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with my
other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received: <presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/
3a8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned it
sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug and
>>> > check why that token is not working. There were recent changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr> >> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token
mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work (just
deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#11

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are working
fine.

By the way, disable_room_name_constraints is obsolete now, in order to do
that you just need to remove token_verification from your muc component
definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you see and
what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in your
log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth token
doesn't work no ?

I'll send you all config directly in your email.

···

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token" in
the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would use
the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client handler
and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “”
it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the
token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with my
other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned it
sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid token
by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug and
>>> > check why that token is not working. There were recent changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert <mickael@winlux.fr >>> > >>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token
mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#12

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are working
fine.

By the way, disable_room_name_constraints is obsolete now, in order to
do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you see
and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in your
log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth token
doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection is
received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.
- in case of token_verification, when a bosh connection tries to join a
room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

All the magic happens in the prosody auth provider which is enabled with
authentication = "token"

Regards
damencho

···

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token"
in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would
use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client handler
and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “”
it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=‘guest.meet.winlux.fr

>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=‘guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for
new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client handler
and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the
token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with my
other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate
this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned it
sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666 debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid token
by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug and
>>> > check why that token is not working. There were recent changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>> mickael@winlux.fr> >>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token
mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#13

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti waiting
the moderator.
Only user with token is moderator. When user connect with token, the visio
can started.

with the new instance, with or without token it's the same behavior (jitsi
wait the moderator)

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in order to
do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you see
and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in your
log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth token
doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection is
received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join a
room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

···

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> > wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

All the magic happens in the prosody auth provider which is enabled with
authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token"
in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would
use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>>>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
  BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client handler
and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “”
it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it
sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=‘guest.meet.winlux.fr

>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for
new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the
token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with my
other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate
this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr
‘>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid: <none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned
it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug and
>>> > check why that token is not working. There were recent changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>> mickael@winlux.fr> >>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token
mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#14

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm currently
trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

···

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti waiting
the moderator.
Only user with token is moderator. When user connect with token, the visio
can started.

with the new instance, with or without token it's the same behavior (jitsi
wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in order to
do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you see
and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in your
log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth token
doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection is
received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join a
room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled with
authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like "auth_token"
in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would
use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>>>>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
  BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
  BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without “”
it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml; charset=utf-8’
ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it
sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading for
new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying the
token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with
my other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate
this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.winlux.fr
‘>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned
it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug
and
>>> > check why that token is not working. There were recent changes
to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>> mickael@winlux.fr> >>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with token
mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#15

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

···

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm currently
trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> > wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >>> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in order
to do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you see
and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in
your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth token
doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection is
received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join a
room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled with
authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens package
config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it would
use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>>>>>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without
“” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned it
sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading
for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>>>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying
the token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with
my other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and considerate
this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=‘meet.winlux.fr

>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session, assigned
it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received:
<auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things in
the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug
and
>>> > check why that token is not working. There were recent changes
to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>> mickael@winlux.fr> >>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug sasl
reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’><not-allowed/><text
>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit
(SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#16

Hi Damian,

Sounds good, thanks for that !
We'll give it a try tomorrow, and will come back to you if something
remains wrong :wink:

Regards,
Kevin

···

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 23:48 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm currently
trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> >> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >>>> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING - empty
tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in order
to do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you
see and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in
your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth
token doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection is
received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join a
room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled
with authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens
package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it
would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image:
Hexanet] <https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert <mickael@winlux.fr> >>>>>>>> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests open
> May 12 17:18:24 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the mailing
list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests open
> May 12 17:07:50 mod_bosh debug and there are 0 things in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/protocol/httpbind

> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without
“” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet started
[....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid: <none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned
it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970 info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading
for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request, so
sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>>>>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying
the token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it with
my other
>>> > jitsi instance, and it’s the same configuration (same app_id,
secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and
considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed: table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1 requests
open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed: table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]:
<iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]:
<iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=’
meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session,
assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received:
<auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open request,
so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed: table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1 requests
open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org
>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody debug
and
>>> > check why that token is not working. There were recent
changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>>> mickael@winlux.fr> >>>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug
sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t work
(just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit
(SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#17

Hi,
open sources means very quickly resolve !
thanks, we'll try it tomorrow.

···

2017-05-14 20:58 GMT+02:00 Kevin Mathy <k.mathy@hexanet.fr>:

Hi Damian,

Sounds good, thanks for that !
We'll give it a try tomorrow, and will come back to you if something
remains wrong :wink:

Regards,
Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 23:48 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> >> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm
currently trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> >>> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >>>>> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING -
empty tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in order
to do that you just need to remove token_verification from your
muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you
see and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in
your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth
token doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection
is received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join
a room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled
with authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>>>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens
package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it
would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image:
Hexanet] <https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert < >>>>>>>>> mickael@winlux.fr> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests
open
> May 12 17:18:24 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request table:
0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/protocol/httpbind

> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the
mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request, so
sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new
client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request table:
0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="” or without
“” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet
started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
<none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned
it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received: <auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug sasl
reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked
for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading
for new
>> user: 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert <mickael@winlux.fr> >>>>>>>>> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token="

>>> >
>>>
>>> If you are running a recent deployment that way of specifying
the token
>>> is gone. I thought nobody actually used it since it was pretty
obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it
with my other
>>> > jitsi instance, and it’s the same configuration (same
app_id, secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and
considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received:
<iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed:
table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say, so
leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr/3a
8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]:
<iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]:
<iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=’
meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session,
assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received:
<auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed client
handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <damencho@jitsi.org
>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody
debug and
>>> > check why that token is not working. There were recent
changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>>>> mickael@winlux.fr> >>>>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug
sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t
work (just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit
(SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#18

Hi Damian,
I retried, it's a different error logs now and it not works

*When I try with “” or ‘’:*
https://visio.winlux.fr/room1?jwt="******"

ay 15 09:59:18 boshc9355b6d-4669-4850-b43c-06aa55fbb9d8 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 09:59:18 visio.hexavoip.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>Invalid
json</text></failure>

*When I try without "":*
https://visio.winlux.fr/room1?jwt=******

May 15 10:01:01 boshf88075cd-98a1-4acc-a1bf-5c5e87dc37fb debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 10:01:01 visio.hexavoip.fr:saslauth debug sasl reply: <failure
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>&apos;aud&apos;
claim is missing</text></failure>

*lastet versions:*
ii jitsi-archive-keyring 1.0.1
all The public key for the Jitsi packages repository
ii jitsi-meet 1.0.2071-1
all WebRTC JavaScript video conferences
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ii jitsi-meet-tokens 1.0.1941-1
all Prosody token authentication plugin for Jitsi Meet
ii jitsi-meet-web 1.0.1944-1
all WebRTC JavaScript video conferences
ii jitsi-meet-web-config 1.0.1944-1
all Configuration for web serving of Jitsi Meet
ii jitsi-videobridge 950-1
amd64 WebRTC compatible Selective Forwarding Unit (SFU)
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ic prosody 0.9.7-2+deb8u3
amd64 Lightweight Jabber/XMPP server
ii prosody-trunk 1nightly780-1~jessie
amd64 Lightweight Jabber/XMPP server

*screenshot of error message:*

thanks in advance for your help.

···

2017-05-14 21:42 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:

Hi,
open sources means very quickly resolve !
thanks, we'll try it tomorrow.

2017-05-14 20:58 GMT+02:00 Kevin Mathy <k.mathy@hexanet.fr>:

Hi Damian,

Sounds good, thanks for that !
We'll give it a try tomorrow, and will come back to you if something
remains wrong :wink:

Regards,
Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 23:48 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> >>> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm
currently trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> >>>> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >>>>>> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING -
empty tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in
order to do that you just need to remove token_verification from
your muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you
see and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in
your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth
token doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection
is received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to join
a room we check in its session the room name that was extracted and whether
it matches the name of the room that conneciton is trying to join, if it
doesn't match access is denied. Basically if you were using the old code
with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled
with authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>>>>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens
package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it
would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image:
Hexanet] <https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert < >>>>>>>>>> mickael@winlux.fr> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests
open
> May 12 17:18:24 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request
table: 0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the
mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new
client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request
table: 0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’ value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="****************” or
without “” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet
started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]: <iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
<none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session, assigned
it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received:
<auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug
sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed: table:
0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked
for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster: loading
for new
>> user: 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert < >>>>>>>>>> mickael@winlux.fr> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token=
"****************”
>>> >
>>>
>>> If you are running a recent deployment that way of specifying
the token
>>> is gone. I thought nobody actually used it since it was
pretty obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it
with my other
>>> > jitsi instance, and it’s the same configuration (same
app_id, secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and
considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received:
<iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’ type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed:
table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059
065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2490810 debug Received[component]:
<iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug Received[component]:
<iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=’
meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session,
assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted new
client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received:
<auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0 things
in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug Received[component]:
<iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug Received[component]:
<iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <
damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a valid
token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody
debug and
>>> > check why that token is not working. There were recent
changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>>>>> mickael@winlux.fr> >>>>>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug
sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t
work (just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit
(SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#19

Try adding 'aud' field to your jwt.

···

On Mon, May 15, 2017 at 3:15 AM, Mickael Hubert <mickael@winlux.fr> wrote:

Hi Damian,
I retried, it's a different error logs now and it not works

*When I try with “” or ‘’:*
https://visio.winlux.fr/room1?jwt="******"

ay 15 09:59:18 boshc9355b6d-4669-4850-b43c-06aa55fbb9d8 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 09:59:18 visio.hexavoip.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>Invalid
json</text></failure>

*When I try without "":*
https://visio.winlux.fr/room1?jwt=******

May 15 10:01:01 boshf88075cd-98a1-4acc-a1bf-5c5e87dc37fb debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 10:01:01 visio.hexavoip.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>&apos;aud&apos;
claim is missing</text></failure>

*lastet versions:*
ii jitsi-archive-keyring 1.0.1
all The public key for the Jitsi packages repository
ii jitsi-meet 1.0.2071-1
all WebRTC JavaScript video conferences
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ii jitsi-meet-tokens 1.0.1941-1
all Prosody token authentication plugin for Jitsi Meet
ii jitsi-meet-web 1.0.1944-1
all WebRTC JavaScript video conferences
ii jitsi-meet-web-config 1.0.1944-1
all Configuration for web serving of Jitsi Meet
ii jitsi-videobridge 950-1
amd64 WebRTC compatible Selective Forwarding Unit (SFU)
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ic prosody 0.9.7-2+deb8u3
amd64 Lightweight Jabber/XMPP server
ii prosody-trunk 1nightly780-1~jessie
amd64 Lightweight Jabber/XMPP server

*screenshot of error message:*

thanks in advance for your help.

2017-05-14 21:42 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:

Hi,
open sources means very quickly resolve !
thanks, we'll try it tomorrow.

2017-05-14 20:58 GMT+02:00 Kevin Mathy <k.mathy@hexanet.fr>:

Hi Damian,

Sounds good, thanks for that !
We'll give it a try tomorrow, and will come back to you if something
remains wrong :wink:

Regards,
Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image: +HexanetFr]
<http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 23:48 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> >>>> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm
currently trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> >>>>> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr> >>>>>>> wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING -
empty tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in
order to do that you just need to remove token_verification from
your muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what you
see and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed" in
your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth
token doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh connection
is received the token is extracted and saved in internal session for that
connection, we also extract the room name from the token. If there is
no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to
join a room we check in its session the room name that was extracted and
whether it matches the name of the room that conneciton is trying to join,
if it doesn't match access is denied. Basically if you were using the old
code with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled
with authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr> >>>>>>>>> wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens
package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it
would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports one
certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain
.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image:
Hexanet] <https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke auth
module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert < >>>>>>>>>>> mickael@winlux.fr> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed: table:
0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests
open
> May 12 17:18:24 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request
table: 0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the
mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed: table:
0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
> May 12 17:07:50 mod_bosh debug and there are 0 things in
the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new
client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request
table: 0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="****************” or
without “” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet
started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]:
<iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]:
<iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
<none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session,
assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed:
table: 0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received:
<auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug
sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed:
table: 0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:49 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’
xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked
for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster:
loading for new
>> user: 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]:
<iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open request,
so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1 requests
open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert < >>>>>>>>>>> mickael@winlux.fr> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token=
"****************”
>>> >
>>>
>>> If you are running a recent deployment that way of
specifying the token
>>> is gone. I thought nobody actually used it since it was
pretty obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it
with my other
>>> > jitsi instance, and it’s the same configuration (same
app_id, secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and
considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza received:
<iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’
type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed:
table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza received:
<presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059
065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c507c3
>>> > (acfef037-367b-4d1e-9665-a9d059065623@guest.meet.winlux.fr
)
>>> > May 12 15:58:39 sessionmanager debug All resources of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr
‘>
>>> > May 12 15:59:01 jcp2490810 debug
Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug
Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr’>
>>> > May 12 15:59:03 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=’
meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session,
assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza received:
<auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <
damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a
valid token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody
debug and
>>> > check why that token is not working. There were recent
changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>>>>>> mickael@winlux.fr> >>>>>>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug
sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t
work (just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding Unit
(SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk 1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#20

Hi Damian,

I just tried what you provided, but unfortunately it doesn't work much more
:-/
We still get the same "Invalid json" error message.

For reference, here is the JSON that's returned when reversing the JWT :
{
  "iss": "visiowinlux",
  "room": "room4",
  "exp": "1557927507",
  "aud": "visio.winlux.fr"
}

And in case you’re wondering, I’m trying to connect to this URL =>
https://visio.winlux.fr/room4?jwt=“JWT_TOKEN_HERE” :slight_smile:

Also, I tried to generate some other JWT tokens, replacing the "aud" value
with : "winlux.fr", or "conference.visio.winlux.fr", or even "muc", but
neither was better :-/

Here is the muc component config, in case you need it for debug purposes :

Component "conference.visio.winlux.fr" "muc"
    modules_enabled = { "token_verification" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Feel free to tell if you have another idea, we'll give it a try !

Many thanks for your help,
Kevin

···

--
*Kevin MATHY*

2017-05-15 15:06 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Try adding 'aud' field to your jwt.

On Mon, May 15, 2017 at 3:15 AM, Mickael Hubert <mickael@winlux.fr> wrote:

Hi Damian,
I retried, it's a different error logs now and it not works

*When I try with “” or ‘’:*
https://visio.winlux.fr/room1?jwt="******"

ay 15 09:59:18 boshc9355b6d-4669-4850-b43c-06aa55fbb9d8 debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 09:59:18 visio.hexavoip.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>Invalid
json</text></failure>

*When I try without "":*
https://visio.winlux.fr/room1?jwt=******

May 15 10:01:01 boshf88075cd-98a1-4acc-a1bf-5c5e87dc37fb debug
Received[c2s_unauthed]: <auth mechanism='ANONYMOUS'
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>
May 15 10:01:01 visio.hexavoip.fr:saslauth debug sasl reply:
<failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-allowed/><text>&apos;aud&apos;
claim is missing</text></failure>

*lastet versions:*
ii jitsi-archive-keyring 1.0.1
all The public key for the Jitsi packages repository
ii jitsi-meet 1.0.2071-1
all WebRTC JavaScript video conferences
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ii jitsi-meet-tokens 1.0.1941-1
all Prosody token authentication plugin for Jitsi Meet
ii jitsi-meet-web 1.0.1944-1
all WebRTC JavaScript video conferences
ii jitsi-meet-web-config 1.0.1944-1
all Configuration for web serving of Jitsi Meet
ii jitsi-videobridge 950-1
amd64 WebRTC compatible Selective Forwarding Unit (SFU)
ii jitsi-meet-prosody 1.0.1944-1
all Prosody configuration for Jitsi Meet
ic prosody 0.9.7-2+deb8u3
amd64 Lightweight Jabber/XMPP server
ii prosody-trunk 1nightly780-1~jessie
amd64 Lightweight Jabber/XMPP server

*screenshot of error message:*

thanks in advance for your help.

2017-05-14 21:42 GMT+02:00 Mickael Hubert <mickael@winlux.fr>:

Hi,
open sources means very quickly resolve !
thanks, we'll try it tomorrow.

2017-05-14 20:58 GMT+02:00 Kevin Mathy <k.mathy@hexanet.fr>:

Hi Damian,

Sounds good, thanks for that !
We'll give it a try tomorrow, and will come back to you if something
remains wrong :wink:

Regards,
Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image: HexanetFrance]
<http://www.facebook.com/HexanetFrance> [image: Hexanet]
<https://fr.linkedin.com/company/hexanet> [image: Hexanet]
<https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 23:48 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hi,

You can update jitsi-meet. Latest one contains a fix for that problem.
Thanks for reporting it and helping to identify it.

Regards
damencho

On Fri, May 12, 2017 at 1:18 PM, Damian Minkov <damencho@jitsi.org> >>>>> wrote:

Hi,

I think there is a bug in latest jitsi-meet/lib-jitsi-meet, I'm
currently trying to figure out the problem and maybe send a fix.
So stay tuned, sorry for the inconvenience.

Regards
damencho

On Fri, May 12, 2017 at 12:06 PM, Mickael Hubert <mickael@winlux.fr> >>>>>> wrote:

2017-05-12 18:54 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Can you explain the behavior you are experiencing, and what you are
expecting to happen, please?

sure, with the worked instance, when I connect without token, jiti
waiting the moderator.
Only user with token is moderator. When user connect with token, the
visio can started.

with the new instance, with or without token it's the same behavior
(jitsi wait the moderator)

On Fri, May 12, 2017 at 11:43 AM, Mickael Hubert <mickael@winlux.fr >>>>>>>> > wrote:

2017-05-12 18:07 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey,

Do you have this in your prosody config:
plugin_paths = { "/usr/share/jitsi-meet/prosody-plugins/" }

yes we have this line

Running with your configuration here I see at least:
May 12 15:57:01 damencho.domaint:auth_token warn WARNING -
empty tokens allowed
And this is without enabling any debug, just info. And tokens are
working fine.

By the way, disable_room_name_constraints is obsolete now, in
order to do that you just need to remove token_verification from
your muc component definition.

-- disable_room_name_constraints = true *##commented now*

Component "conference.visio.winlux.fr" "muc"
    -- modules_enabled = { "token_verification" } *##commented
now*
    -- admins = { "focus@auth.visio.winlux.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.v
isio.winlux.fr.crt";
        key = "/var/lib/prosody/conference.visio.winlux.fr.key";
    }

Can you explain the experience you have with that config, what
you see and what is the problem?

with this lines commented, it's the same issue.
I don't understand why you have "WARNING - empty tokens allowed"
in your log, I don't this in my log.
If I comment modules_enabled = { "token_verification" }, the auth
token doesn't work no ?

No, the thing is that maybe to name of the module is missleading.

So what happens:
- you have enabled authentication = "token";, when a bosh
connection is received the token is extracted and saved in internal session
for that connection, we also extract the room name from the token. If there
is no allow_empty_token and there was no token or invalid one the access is
denied, if allow_empty_token is true then connection is allowed even
without a token.

Ok, I want allow_empty_token = false

- in case of token_verification, when a bosh connection tries to
join a room we check in its session the room name that was extracted and
whether it matches the name of the room that conneciton is trying to join,
if it doesn't match access is denied. Basically if you were using the old
code with disable_room_name_constraints = true, this module was not doing
anything.

I expect this behavior

I'm sorry to waste your time , prosody auth is obscure for me :wink:

All the magic happens in the prosody auth provider which is enabled
with authentication = "token"

Regards
damencho

I'll send you all config directly in your email.

Regards
damencho

On Fri, May 12, 2017 at 10:48 AM, Kevin Mathy <k.mathy@hexanet.fr >>>>>>>>>> > wrote:

Hey Damian,

Thanks for your reply !
Actually, when prosody is restarted, there's nothing like
"auth_token" in the logs :-/

As you requested, here are the configurations :

*VirtualHost "guest.domain*
VirtualHost "guest.visio.mydomain.fr"
    authentication = "anonymous"
    ssl = {
        certificate = "/var/lib/prosody/guest.visio.mydomain
.fr.crt";
        key = "/var/lib/prosody/guest.visio.mydomain.fr.key";
    }

*VirtualHost "domain*
VirtualHost "visio.mydomain.fr"
        -- enabled = false -- Remove this line to enable this
host
        authentication = "token";
        -- Properties below are modified by jitsi-meet-tokens
package config
        -- and authentication above is switched to "token"
        app_id="visiomydomain";
        app_secret="APP_SECRET_MYDOMAIN";
        allow_empty_token=false
        -- Assign this host a certificate for TLS, otherwise it
would use the one
        -- set in the global section (if any).
        -- Note that old-style SSL on port 5223 only supports
one certificate, and will always
        -- use the global one.
        ssl = {
                key = "/etc/prosody/certs/visio.mydomain
.fr.key";
                certificate = "/etc/prosody/certs/visio.mydomain
.fr.crt";
        }
        -- we need bosh
        modules_enabled = {
            "bosh";
            "pubsub";
            "ping"; -- Enable mod_ping
        }

        disable_room_name_constraints = true

*Component "conference.domain" "muc"*
Component "conference.visio.mydomain.fr" "muc"
    modules_enabled = { "token_verification" }
    -- admins = { "focus@auth.visio.mydomain.fr" }
    restrict_room_creation = true
    storage = "null"
    ssl = {
        certificate = "/var/lib/prosody/conference.visio.
mydomain.fr.crt";
        key = "/var/lib/prosody/conference.visio.mydomain
.fr.key";
    }

Hope this can help you !
In case you need anything else, feel free to ask :wink:

Kevin

--
*Kevin MATHY*
Ingénieur VoIP / k.mathy@hexanet.fr <web@hexanet.fr>

[image: www.hexanet.fr] <http://www.hexanet.fr/>

[image: @Hexanet] <http://www.twitter.com/Hexanet> [image:
+HexanetFr] <http://www.google.com/+HexanetFr> [image:
HexanetFrance] <http://www.facebook.com/HexanetFrance> [image:
Hexanet] <https://fr.linkedin.com/company/hexanet> [image:
Hexanet] <https://fr.pinterest.com/hexanet/>

3, allée Albert Caquot - CS 90001
51686 REIMS CEDEX

*Tél. :* +33 (0)3 51 08 41 82
*Fax :* +33 (0)3 26 79 30 06
www.hexanet.fr

<http://pub.hexanet.fr/>

2017-05-12 17:38 GMT+02:00 Damian Minkov <damencho@jitsi.org>:

Hey again,

When prosody is restarted do you see any logs from the toke
auth module.
You should see messages like some_domain:auth_token .....

Can you show your prosody config for:
VirtualHost "guest.domain
VirtualHost "domain
Component "conference.domain" "muc"
Replace any private data you may have there.

Thanks
damencho

On Fri, May 12, 2017 at 10:28 AM, Mickael Hubert < >>>>>>>>>>>> mickael@winlux.fr> wrote:
> there is a difference between worked instance and the other:
>
> worked:
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:18:24 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:18:24 mod_bosh debug Request destroyed:
table: 0x29fdc10
> May 12 17:18:24 boshc83b6b48-37fc-491d-9888-e13d0ea79fc3
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:18:24 mod_bosh debug Session
> c83b6b48-37fc-491d-9888-e13d0ea79fc3 has 0 out of 1 requests
open
> May 12 17:18:24 mod_bosh debug and there are 0 things
in the
> send_buffer:
> May 12 17:18:24 http.server debug Firing event: POST
> meet.winlux.fr/http-bind/
> May 12 17:18:24 mod_bosh debug Handling new request
table: 0x25c5370:
> <body rid=‘365345119’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘c83b6b48-37fc-491d-9888-e13d0ea79fc3’><iq
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’
> to=‘meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘6f1d61d8-3b92-4791-a434-569e0e9fd40c:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet.winlux.fr’
> machine-uid=‘8faafd2616fe0a48f5aeedaebaa92a95’><property
name=‘call_control’
> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:18:24 mod_bosh debug BOSH body open (sid:
> c83b6b48-37fc-491d-9888-e13d0ea79fc3)
> May 12 17:18:24 mod_bosh debug BOSH stanza received: <iq
> id=‘e2b86015-1ac9-4b72-8275-88a9d876a233:sendIQ’ type=‘get’
> to=‘meet.winlux.fr
> from=‘3b879966-753d-4141-9f76-941b82bdbf4e@meet.winlux.fr/a4
72cf1d-4436-491a-89d1-2ca825efbcf8’>
>
>
> not worked (“meet2” it’s a fake domain, it’s just for the
mailing list):
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
> May 12 17:07:50 mod_bosh debug We have an open request,
so sending on
> that
> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2ce5160
> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
> session marked as inactive (for 60s)
> May 12 17:07:50 socket debug server.lua: closed client
handler and
> removed socket from list
> May 12 17:07:50 mod_bosh debug Session
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1 requests
open
> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
> send_buffer:
> May 12 17:07:50 socket debug server.lua: accepted new
client
> connection from 127.0.0.1:46815 to 5280
> May 12 17:07:50 http.server debug Firing event: POST
> meet2.winlux.fr/http-bind
> May 12 17:07:50 mod_bosh debug Handling new request
table: 0x2cef320:
> <body rid=‘4040191898’ xmlns=‘http://jabber.org/proto
col/httpbind’
> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92
> to=‘guest.meet2.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
> to=‘focus.meet2.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
> xmlns=‘http://jitsi.org/protocol/focus
> room=‘room1@conference.meet2.winlux.fr’
> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
> value=‘callcontrol.meet2.winlux.fr’/><property
name=‘channelLastN’
> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
> value=‘true’/></conference></iq></body>
> ----------
> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
> May 12 17:07:50 mod_bosh debug BOSH stanza received: <iq
> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
> to=‘guest.meet2.winlux.fr
> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet2.winlu
x.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>
>
> 2017-05-12 17:15 GMT+02:00 Mickael Hubert <mickael@winlux.fr
>:
>>
>> Hi,
>> It’s very obscure, yes :wink: but i’m not afraid !
>>
>> I use this url:
>> https://meet.winlux.fr/room1?jwt="****************” or
without “” it’s
>> better. But jitsi thinks, i’m guest, not moderator.
>>
>> i have a message:
>> WAiting for the host... The conference room1 has not yet
started [....]
>>
>> i can’t find in debug log, where token lua script is called;
>>
>> jwt has been constructed with:
>> alg: HS256
>> typ: JWT
>> iss: app_id
>> room: room1
>>
>> and my secret
>>
>> has jwt format changed ?
>>
>> my logs:
>> May 12 17:07:46 jcp2432e60 debug Received[component]:
<iq
>> id=‘yruU0-11234’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:46 jcp2432e60 debug Received[component]:
<iq
>> id=‘yruU0-11235’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46810 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cb2210: <body rid=‘4040191893’
>> xmlns=‘http://jabber.org/protocol/httpbind’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>> xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
<none>)
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session created for request from *********
>> May 12 17:07:49 mod_bosh info New BOSH session,
assigned it sid
>> ‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’
>> May 12 17:07:49 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed:
table: 0x2cb2840
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:49 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46811 to 5280
>> May 12 17:07:49 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:49 mod_bosh debug Handling new request
table:
>> 0x2cc0010: <body rid=‘4040191894’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><auth
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>> ----------
>> May 12 17:07:49 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:49 mod_bosh debug BOSH stanza received:
<auth
>> mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
info
>> Authenticated as 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:49 guest.meet.winlux.fr:saslauth debug
sasl reply:
>> <success xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’/>
>> May 12 17:07:49 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:49 mod_bosh debug Request destroyed:
table: 0x2cc0600
>> May 12 17:07:49 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:49 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:49 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:49 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46812 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ccc120: <body rid=‘4040191895’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’ to=’
guest.meet.winlux.fr
>> xml:lang=‘en’ xmpp:restart=‘true’
xmlns:xmpp=‘urn:xmpp:xbosh’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2ccc750
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46813 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cd8110: <body rid=‘4040191896’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
id=’_bind_auth_2’
>> xmlns=‘jabber:client’><bind
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-bind’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received:
<iq
>> id=’_bind_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s_unbound]: <iq id=’_bind_auth_2’ type=‘set’>
>> May 12 17:07:50 rostermanager debug load_roster: asked
for:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 rostermanager debug load_roster:
loading for new
>> user: 065824c6-1689-4092-9c70-e191fb
75bd08@guest.meet.winlux.fr
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Resource bound:
>> 065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.fr/c9
e65c0e-ee4d-4daa-ac6e-8550f67dfc92
>> May 12 17:07:50 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2cd8720
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46814 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2ce4b20: <body rid=‘4040191897’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq type=‘set’
>> id=’_session_auth_2’ xmlns=‘jabber:client’><session
>> xmlns=‘urn:ietf:params:xml:ns:xmpp-session’/></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received:
<iq
>> id=’_session_auth_2’ type=‘set’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=’_session_auth_2’ type=‘set’>
>> May 12 17:07:50 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2ce5160
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46815 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2cef320: <body rid=‘4040191898’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’><iq
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> to=‘guest.meet.winlux.fr’ type=‘get’ xmlns=‘jabber:client’
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’><query
>> xmlns=‘http://jabber.org/protocol/disco#info’/></iq><iq
>> to=‘focus.meet.winlux.fr’ type=‘set’ xmlns=‘jabber:client’
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’><conference
>> xmlns=‘http://jitsi.org/protocol/focus
>> room=‘room1@conference.meet.winlux.fr’
>> machine-uid=‘8da4aa9e5c6981023e169bfd63608b37’><property
name=‘call_control’
>> value=‘callcontrol.meet.winlux.fr’/><property
name=‘channelLastN’
>> value=’-1’/><property name=‘disableRtx’
value=‘false’/><property
>> name=‘enableLipSync’ value=‘true’/><property name=‘openSctp’
>> value=‘true’/></conference></iq></body>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug BOSH stanza received:
<iq
>> id=‘e11c0f94-e9de-469f-84fe-55f311425a6b:sendIQ’ type=‘get’
>> to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘e11c0f94-e9de-469f-84fe-55
f311425a6b:sendIQ’
>> type=‘get’ to=‘guest.meet.winlux.fr
>> from=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux
.fr/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’>
>> May 12 17:07:50 mod_bosh debug BOSH stanza received:
<iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’ type=‘set’
>> to=‘focus.meet.winlux.fr’>
>>
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug
>> Received[c2s]: <iq id=‘834f378d-3b0a-482d-9015-bc
238cf60dc7:sendIQ’
>> type=‘set’ to=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2cf0800
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 jcp2432e60 debug Received[component]:
<iq
>> id=‘834f378d-3b0a-482d-9015-bc238cf60dc7:sendIQ’
type=‘error’
>> to=‘065824c6-1689-4092-9c70-e191fb75bd08@guest.meet.winlux.f
r/c9e65c0e-ee4d-4daa-ac6e-8550f67dfc92’
>> from=‘focus.meet.winlux.fr’>
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46816 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d05380: <body rid=‘4040191899’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug We have an open
request, so sending
>> on that
>> May 12 17:07:50 mod_bosh debug Request destroyed:
table: 0x2d05920
>> May 12 17:07:50 bosh83dbf398-b3fd-4411-95c8-88eb3b1dc970
debug BOSH
>> session marked as inactive (for 60s)
>> May 12 17:07:50 socket debug server.lua: closed client
handler and
>> removed socket from list
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 0 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 socket debug server.lua: accepted new
client
>> connection from 127.0.0.1:46817 to 5280
>> May 12 17:07:50 http.server debug Firing event: POST
>> meet.winlux.fr/http-bind
>> May 12 17:07:50 mod_bosh debug Handling new request
table:
>> 0x2d0f600: <body rid=‘4040191900’
>> xmlns=‘http://jabber.org/protocol/httpbind
>> sid=‘83dbf398-b3fd-4411-95c8-88eb3b1dc970’/>
>> ----------
>> May 12 17:07:50 mod_bosh debug BOSH body open (sid:
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970)
>> May 12 17:07:50 mod_bosh debug Session
>> 83dbf398-b3fd-4411-95c8-88eb3b1dc970 has 1 out of 1
requests open
>> May 12 17:07:50 mod_bosh debug and there are 0 things
in the
>> send_buffer:
>> May 12 17:07:50 mod_bosh debug Have nothing to say, so
leaving
>> request unanswered for now
>>
>>
>> 2017-05-12 16:55 GMT+02:00 Saúl Ibarra Corretgé <
scorretge@atlassian.com>:
>>>
>>>
>>> > On May 12, 2017, at 16:06, Mickael Hubert < >>>>>>>>>>>> mickael@winlux.fr> wrote:
>>> >
>>> > thanks Damian,
>>> >
>>> > When I go to my room, I use this url
>>> >
>>> > https://meet.winlux.fr/room1#config.token=
"****************”
>>> >
>>>
>>> If you are running a recent deployment that way of
specifying the token
>>> is gone. I thought nobody actually used it since it was
pretty obscure :-S
>>>
>>> Pass is like Damian suggested and it should work.
>>>
>>>
>>> Cheers,
>>>
>>> > jwt has been constructed with:
>>> > alg: HS256
>>> > typ: JWT
>>> > iss: app_id
>>> > room: room1
>>> >
>>> > and my secret
>>> >
>>> > normaly, this token is correct, because I already use it
with my other
>>> > jitsi instance, and it’s the same configuration (same
app_id, secret, etc
>>> > ...)
>>> > I supposed, prosody can’t detect token in url, and
considerate this
>>> > connect as anonymous (guest user)
>>> >
>>> > ++
>>> >
>>> > you can find my log below:
>>> >
>>> > May 12 15:58:36 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46490 to 5280
>>> > May 12 15:58:36 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:36 mod_bosh debug Handling new request
table:
>>> > 0x29df390: <body rid=‘1387409576’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’/>
>>> > ----------
>>> > May 12 15:58:36 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:36 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:36 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:36 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:36 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9438’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:36 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9439’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:37 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46491 to 5280
>>> > May 12 15:58:37 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:37 mod_bosh debug Handling new request
table:
>>> > 0x2481cc0: <body rid=‘1387409577’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’><iq type=‘get’
>>> > to=‘guest.meet.winlux.fr’ xmlns=‘jabber:client’
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’><ping
>>> > xmlns=‘urn:xmpp:ping’/></iq></body>
>>> > ----------
>>> > May 12 15:58:37 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:37 mod_bosh debug BOSH stanza
received: <iq
>>> > id=‘bdd7b212-8b86-4f68-a9d3-b42946163be5:sendIQ’
type=‘get’
>>> > to=‘guest.meet.winlux.fr’>
>>> >
>>> > May 12 15:58:37 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <iq id=‘bdd7b212-8b86-4f68-a9d3-b4
2946163be5:sendIQ’
>>> > type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:58:37 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:37 mod_bosh debug Request destroyed:
table:
>>> > 0x29144f0
>>> > May 12 15:58:37 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:37 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:37 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:37 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46492 to 5280
>>> > May 12 15:58:39 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:58:39 mod_bosh debug Handling new request
table:
>>> > 0x2449b30: <body rid=‘1387409578’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘40d66b5b-9277-4709-93bf-d559cf38b65f’
type=‘terminate’><presence
>>> > xmlns=‘jabber:client’ type=‘unavailable’/></body>
>>> > ----------
>>> > May 12 15:58:39 mod_bosh debug BOSH body open (sid:
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f)
>>> > May 12 15:58:39 mod_bosh debug BOSH stanza
received: <presence
>>> > type=‘unavailable’>
>>> >
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Received[c2s]: <presence type=‘unavailable’>
>>> > May 12 15:58:39 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x2481e60
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 mod_bosh debug Session
>>> > 40d66b5b-9277-4709-93bf-d559cf38b65f has 1 out of 1
requests open
>>> > May 12 15:58:39 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:58:39 mod_bosh debug Have nothing to say,
so leaving
>>> > request unanswered for now
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Closing session with 1 requests open
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  info
>>> > BOSH client disconnected
>>> > May 12 15:58:39 mod_bosh debug Request destroyed:
table:
>>> > 0x24e13f0
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:58:39 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:58:39 bosh40d66b5b-9277-4709-93bf-d559cf38b65f
  debug
>>> > Destroying session for
>>> > acfef037-367b-4d1e-9665-a9d059
065623@guest.meet.winlux.fr/3a8ae036-a336-4c15-9823-c3fcd2c5
07c3
>>> > (acfef037-367b-4d1e-9665-a9d05
9065623@guest.meet.winlux.fr)
>>> > May 12 15:58:39 sessionmanager debug All resources
of
>>> > acfef037-367b-4d1e-9665-a9d059065623 are now offline
>>> > May 12 15:58:43 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2155’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9440’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:46 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9441’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:53 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2156’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9442’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:58:56 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9443’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9444’ type=‘get’ to=‘meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9445’ type=‘get’ to=‘callcontrol.meet.winlux.fr
‘>
>>> > May 12 15:59:01 jcp2490810 debug
Received[component]: <iq
>>> > id=‘yruU0-9445’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘callcontrol.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9446’ type=‘get’ to=‘auth.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9447’ type=‘get’ to=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9447’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘focus.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9448’ type=‘get’ to=‘guest.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9449’ type=‘get’ to=‘jitsi-videobridge.meet.win
lux.fr’>
>>> > May 12 15:59:01 jcp200b000 debug
Received[component]: <iq
>>> > id=‘yruU0-9449’ type=‘result’
>>> > to=‘focus@auth.meet.winlux.fr/focus65507379310062’
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:01 c2s243e740 debug Received[c2s]: <iq
>>> > id=‘yruU0-9450’ type=‘get’ to=‘conference.meet.winlux.fr
>
>>> > May 12 15:59:03 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2157’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9451’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:06 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9452’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > May 12 15:59:11 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46493 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x23fc470: <body rid=‘2724491812’
>>> > xmlns=‘http://jabber.org/protocol/httpbind’ to=’
meet.winlux.fr
>>> > xml:lang=‘en’ wait=‘60’ hold=‘1’ content=‘text/xml;
charset=utf-8’ ver=‘1.6’
>>> > xmpp:version=‘1.0’ xmlns:xmpp=‘urn:xmpp:xbosh’/>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
<none>)
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session created for request from *********
>>> > May 12 15:59:11 mod_bosh info New BOSH session,
assigned it sid
>>> > ‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x29255d0
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:59:11 socket debug server.lua: accepted
new client
>>> > connection from 127.0.0.1:46494 to 5280
>>> > May 12 15:59:11 http.server debug Firing event: POST
>>> > meet.winlux.fr/http-bind
>>> > May 12 15:59:11 mod_bosh debug Handling new request
table:
>>> > 0x22680f0: <body rid=‘2724491813’
>>> > xmlns=‘http://jabber.org/protocol/httpbind
>>> > sid=‘c3b8d016-a0a3-4cc6-a92e-8cf9a229b666’><auth
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’
mechanism=‘ANONYMOUS’/></body>
>>> > ----------
>>> > May 12 15:59:11 mod_bosh debug BOSH body open (sid:
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666)
>>> > May 12 15:59:11 mod_bosh debug BOSH stanza
received: <auth
>>> > mechanism=‘ANONYMOUS’ xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’>
>>> >
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > Received[c2s_unauthed]: <auth mechanism=‘ANONYMOUS’
>>> > xmlns=‘urn:ietf:params:xml:ns:xmpp-sasl’>
>>> > May 12 15:59:11 meet.winlux.fr:saslauth debug sasl
reply:
>>> > <failure xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > required</text></failure>
>>> > May 12 15:59:11 mod_bosh debug We have an open
request, so
>>> > sending on that
>>> > May 12 15:59:11 mod_bosh debug Request destroyed:
table:
>>> > 0x1f99b20
>>> > May 12 15:59:11 boshc3b8d016-a0a3-4cc6-a92e-8cf9a229b666
  debug
>>> > BOSH session marked as inactive (for 60s)
>>> > May 12 15:59:11 socket debug server.lua: closed
client handler
>>> > and removed socket from list
>>> > May 12 15:59:11 mod_bosh debug Session
>>> > c3b8d016-a0a3-4cc6-a92e-8cf9a229b666 has 0 out of 1
requests open
>>> > May 12 15:59:11 mod_bosh debug and there are 0
things in the
>>> > send_buffer:
>>> > May 12 15:59:13 jcp200b000 debug
Received[component]: <iq
>>> > id=‘HGpzr-2158’ type=‘get’ to=‘meet.winlux.fr
>>> > from=‘jitsi-videobridge.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9453’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> > May 12 15:59:16 jcp2432e60 debug
Received[component]: <iq
>>> > id=‘yruU0-9454’ type=‘get’ to=‘meet.winlux.fr’ from=’
focus.meet.winlux.fr’>
>>> >
>>> >
>>> >
>>> >
>>> > 2017-05-12 15:50 GMT+02:00 Damian Minkov <
damencho@jitsi.org>:
>>> > Hi,
>>> >
>>> > When opening the app in the browser, do you provide a
valid token by
>>> > adding params in the url: “?jwt=.....” ?
>>> > If you think your token is valid you can enable prosody
debug and
>>> > check why that token is not working. There were recent
changes to
>>> > those modules.
>>> >
>>> > Regards
>>> > damencho
>>> >
>>> >
>>> > On Fri, May 12, 2017 at 8:02 AM, Mickael Hubert < >>>>>>>>>>>> mickael@winlux.fr> >>>>>>>>>>>> >>> > wrote:
>>> > > Hi all,
>>> > > I have this issue, when I’ve activated token mode.
>>> > > When a user with token tries to connect to jitsi meet
>>> > >
>>> > > May 12 13:31:51 visio.hexavoip.fr:saslauth debug
sasl reply:
>>> > > <failure
>>> > > xmlns=‘urn:ietf:params:xml:ns:
xmpp-sasl’><not-allowed/><text>token
>>> > > required</text></failure>
>>> > >
>>> > >
>>> > > I don’t know why ...
>>> > >
>>> > > I already a jitsi meet instance, and it works fine with
token mode.
>>> > > I’ve
>>> > > copied all configurations, but my new instance doesn’t
work (just deb
>>> > > versions are different, I used last nighlty build) :frowning:
>>> > >
>>> > >
>>> > > Do you have an idea please ?
>>> > >
>>> > >
>>> > > thanks in advance
>>> > >
>>> > >
>>> > > ii jicofo 1.0-351-1
>>> > > amd64 JItsi Meet COnference FOcus
>>> > > ii jigasi 1.0-138
>>> > > amd64 Jitsi Gateway for SIP
>>> > > ii jitsi-archive-keyring 1.0.1
>>> > > all
>>> > > The public key for the Jitsi packages repository
>>> > > ii jitsi-meet 1.0.2066-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ii jitsi-meet-tokens 1.0.1941-1
>>> > > all
>>> > > Prosody token authentication plugin for Jitsi Meet
>>> > > ii jitsi-meet-web 1.0.1941-1
>>> > > all
>>> > > WebRTC JavaScript video conferences
>>> > > ii jitsi-meet-web-config 1.0.1941-1
>>> > > all
>>> > > Configuration for web serving of Jitsi Meet
>>> > > ii jitsi-videobridge 949-1
>>> > > amd64 WebRTC compatible Selective Forwarding
Unit (SFU)
>>> > > ii jitsi-meet-prosody 1.0.1941-1
>>> > > all
>>> > > Prosody configuration for Jitsi Meet
>>> > > ic prosody 0.9.7-2+deb8u3
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > > ii prosody-trunk
1nightly780-1~jessie
>>> > > amd64 Lightweight Jabber/XMPP server
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > _______________________________________________
>>> > > users mailing list
>>> > > users@jitsi.org
>>> > > Unsubscribe instructions and other list options:
>>> > > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>> >
>>> > _______________________________________________
>>> > users mailing list
>>> > users@jitsi.org
>>> > Unsubscribe instructions and other list options:
>>> > http://lists.jitsi.org/mailman/listinfo/users
>>>
>>> --
>>> Saúl
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users@jitsi.org
>>> Unsubscribe instructions and other list options:
>>> http://lists.jitsi.org/mailman/listinfo/users
>>
>>
>
>
> _______________________________________________
> users mailing list
> users@jitsi.org
> Unsubscribe instructions and other list options:
> http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users