diff --git a/usage.org b/usage.org index 49605aa0..9c0b2d2c 100644 --- a/usage.org +++ b/usage.org @@ -357,3 +357,79 @@ Enter *#freedombone* as the channel name. Click *close* and then *connect*. ** XMPP/Jabber +*** Managing users + +To add a user: + +#+BEGIN_SRC bash +ssh username@domainname -p 2222 +su +prosodyctl adduser newusername@newdomainname +exit +exit +#+END_SRC + +To change a user password: + +#+BEGIN_SRC bash +ssh username@domainname -p 2222 +su +prosodyctl passwd username@domainname +exit +exit +#+END_SRC + +To remove a user: + +#+BEGIN_SRC bash +ssh username@domainname -p 2222 +su +prosodyctl deluser username@domainname.com +exit +exit +#+END_SRC + +Report the status of the XMPP server: + +#+BEGIN_SRC bash +ssh username@domainname -p 2222 +su +prosodyctl status +exit +exit +#+END_SRC + +*** Using with Jitsi +Jitsi is the recommended communications client for desktop or laptop systems, since it includes the /off the record/ (OTR) feature which provides some additional security beyond the usual SSL certificates. + +Jitsi can be downloaded from https://jitsi.org + +On your desktop/laptop open Jitsi and select *Options* from the *Tools* menu. + +Click *Add* to add a new user, then enter the Jabber ID which you previously specified with /prosodyctl/ when setting up the XMPP server. Close and then you should notice that your status is "Online" (or if not then you should be able to set it to online). + +From the *File* menu you can add contacts, then select the chat icon to begin a chat. Click on the lock icon on the right hand side and this will initiate an authentication procedure in which you can specify a question and answer to verify the identity of the person you're communicating with. Once authentication is complete then you'll be chating using OTR, which provides an additional layer of security. + +When opening Jitsi initially you will get a certificate warning for your domain name (assuming that you're using a self-signed certificate). If this happens then select *View Certificate* and enable the checkbox to trust the certificate, then select *Continue Anyway*. Once you've done this then the certificate warning will not appear again unless you reinstall Jitsi or use a different computer. + +You can also [[https://www.youtube.com/watch?v=vgx7VSrDGjk][see this video]] as an example of using OTR. +*** Using with Ubuntu +The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the /off the record/ feature, but since it's the default it's what many users will have easy access to. + +Open *System Settings* and select *Online Accounts*, *Add account* and then *Jabber*. + +Enter your username (username@domainname) and password. + +Click on *Advanced* and make sure that *Encryption required* and *Ignore SSL certificate errors* are checked. Ignoring the certificate errors will allow you to use the self-signed certificate created earlier. Then click *Done* and set your Jabber account and Empathy to *On*. +*** Using with Android +Install [[https://f-droid.org/][F-Droid]] + +Search for and install Xabber. + +Add an account and enter your Jabber/XMPP ID and password. + +From the menu select *Settings* then *Security* then *OTR mode*. Set the mode to *Required*. + +Make sure that *Check server certificate* is not checked. + +Go back to the initial screen and then using the menu you can add contacts and begin chatting. Both parties will need to go through the off-the-record question and answer verification before the chat can begin, but that only needs to be done once for each person you're chatting with. diff --git a/website/usage.html b/website/usage.html index 8c806510..e1d4148c 100644 --- a/website/usage.html +++ b/website/usage.html @@ -4,7 +4,7 @@
+To add a user: +
+ +ssh username@domainname -p 2222 +su +prosodyctl adduser newusername@newdomainname +exit +exit ++
+To change a user password: +
+ +ssh username@domainname -p 2222 +su +prosodyctl passwd username@domainname +exit +exit ++
+To remove a user: +
+ +ssh username@domainname -p 2222 +su +prosodyctl deluser username@domainname.com +exit +exit ++
+Report the status of the XMPP server: +
+ +ssh username@domainname -p 2222 +su +prosodyctl status +exit +exit ++
+Jitsi is the recommended communications client for desktop or laptop systems, since it includes the off the record (OTR) feature which provides some additional security beyond the usual SSL certificates. +
+ ++Jitsi can be downloaded from https://jitsi.org/ +
+ ++On your desktop/laptop open Jitsi and select Options from the Tools menu. +
+ ++Click Add to add a new user, then enter the Jabber ID which you previously specified with prosodyctl when setting up the XMPP server. Close and then you should notice that your status is "Online" (or if not then you should be able to set it to online). +
+ ++From the File menu you can add contacts, then select the chat icon to begin a chat. Click on the lock icon on the right hand side and this will initiate an authentication procedure in which you can specify a question and answer to verify the identity of the person you're communicating with. Once authentication is complete then you'll be chating using OTR, which provides an additional layer of security. +
+ ++When opening Jitsi initially you will get a certificate warning for your domain name (assuming that you're using a self-signed certificate). If this happens then select View Certificate and enable the checkbox to trust the certificate, then select Continue Anyway. Once you've done this then the certificate warning will not appear again unless you reinstall Jitsi or use a different computer. +
+ ++You can also see this video as an example of using OTR. +
++The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the off the record feature, but since it's the default it's what many users will have easy access to. +
+ ++Open System Settings and select Online Accounts, Add account and then Jabber. +
+ ++Enter your username (username@domainname) and password. +
+ ++Click on Advanced and make sure that Encryption required and Ignore SSL certificate errors are checked. Ignoring the certificate errors will allow you to use the self-signed certificate created earlier. Then click Done and set your Jabber account and Empathy to On. +
++Install F-Droid +
+ ++Search for and install Xabber. +
+ ++Add an account and enter your Jabber/XMPP ID and password. +
+ ++From the menu select Settings then Security then OTR mode. Set the mode to Required. +
+ ++Make sure that Check server certificate is not checked. +
+ ++Go back to the initial screen and then using the menu you can add contacts and begin chatting. Both parties will need to go through the off-the-record question and answer verification before the chat can begin, but that only needs to be done once for each person you're chatting with. +
+