Openfire Console Administration

Preliminaries

When sipXecs is installed, the Openfire IM server gets configured with a default console administrator: admin/admin

When the Openfire IM server is configured to work with LDAP, the default admin/admin user cannot log into the administrative console.
This is because authentication is performed at LDAP level.
If LDAP authentication fails it does not fallback to database authentication. A login error message is displayed to the user instead.
LDAP users are not copied in openfire database and LDAP directory is read-only, meaning that Openfire cannot create users in the configured LDAP directory.

Given the above details, the only way to be able to connect to Openfire administrative console when LDAP is configured, is to mark an existing LDAP user as an authorized admin.

Functionality

In sipXecs, the existing user superadmin permission can be reused to offer Openfire Administrative Console administration support also.

  • When LDAP is configured, if you create in ldap a user called admin it will automatically be Openfire Administrative Console admin
  • When LDAP is not configured. The default Openfire administrator: admin/admin is functional. In addition, superadmin becomes Openfire Administrative Console admin if is set as IM ID.
  • No matter if LDAP is configured or not, any user that is made sipxecs admin becomes Openfire Administrative Console admin as well