LDAP capable IM solution: OpenFire 3.4.6

OpenFire 3.4.6

http://www.igniterealtime.org/projects/openfire/index.jsp

My need for IM:

Recently, I have discovered the need to notify my users of system outages (um…email?). The Windows Messenger service is out of the question as it is hard to selectively broadcast messages, and you cannot keep a central log of your messages easily – or at least, not without some third-party solution keeping track for you. Not only that, but you can’t configure file transfer, perform voice chat or other more advanced functions.

Enter OpenFire, a Jabber/XMPP compatible IM server, and Spark, the chat client provided by Jive software (makers of OpenFire). I was completely flabbergasted by the capabilities that this free software could provide!

So, a quick list of features out of the box (and mind you, this is supposed to be a quick overview, so I may skip over some other features you might find handy):

• SQL, MySQL, PostGreSQL, Oracle, IBM DB2, HSQLDB and embedded database compatible
• LDAP compatible authentication
• Assortments of plugins available
• Supports other Jabber clients (besides ‘Spark’, the one that you can download from OpenFire’s website)
• Extensive administration options
• Broadcast capability
• User groups
• Import/Export user data
• Configurable chat rooms

A quick look at the server information page

What caught my attention was the ability to authenticate my users via LDAP. This means that my users can log in with their Windows domain credentials and not be concerned with creating and/or remembering a new or different password. Nice!

Setup complexity: Low

If you are a sysadmin who is worth his or her salt, you should have absolutely no trouble setting this up within 5 minutes. If you aren’t terribly familiar with LDAP (and want to get this to work) or have some port magic you have to work, it could take you a little while longer to set up…but, out of the box, it only takes a few minutes to get going.

To set up OpenFire in my environment, I opted for the SQL server backend, for scalability and performance. I only needed to know the SQL administrative password for setup, then OpenFire did the rest.

Also, when I configured LDAP, I needed to know the DN for my administrative account (which would be authenticating my logons) and CN for where to pull my user accounts from. I used SysInternals’ AD Explorer to get this information quickly.

These users were imported into OpenFire from AD automatically.

The Spark client

• For me, the awesomeness does not stop at the OpenFire server (and how ridiculously easy it is to set up), but I really like the Spark client as well.
• The download is a bit hefty at 27Mb, but I assure you, it is a full-featured and robust client that has some great capabilities:
• Easy file-transfer
• Send screenshots quickly with the built-in screenshot snip tool
• Voice chat
• Avatar support
• Invite-to conference

Now, some of these features can be disabled at the server level (like the file-transfer and avatar support), but for a support staff, you can see the benefits of having a screenshot snip tool!

What would be really nice is the ability to lock down the main Spark interface so that you could remove the ‘Accounts’ and ‘Advanced’ buttons…don’t want my users messing around, right?

Plugins

Some of the plugins available for the OpenFire server:

Asterisk-IM Openfire Plugin

Integration for Asterisk and Openfire.

Broadcast

Broadcasts messages to users.

Client Control

Controls clients allowed to connect and available features

Content Filter

Scans message packets for defined patterns

Email Listener

Listens for emails and sends alerts to specific users.

Fastpath Service

Support for managed queued chat requests, such as a support team might use.

Fastpath Webchat

Web based chat client for Fastpath.

IM Gateway

Provides gateway connectivity to the other public instant messaging networks

Monitoring Service

Monitors conversations and statistics of the server.

MotD (Message of the Day)

Allows admins to have a message sent to users each time they log in.

Packet Filter

Rules to enforce ethical communication

Presence Service

Exposes presence information through HTTP.

Registration

Performs various actions whenever a new user account is created.

Search

Provides support for Jabber Search (XEP-0055)

SIP Phone Plugin

Provides support for SIP account management

Subscription

Automatically accepts or rejects subsription requests

User Import Export

Enables import and export of user data

User Service

Allows administration of users via HTTP requests.

Oh, OpenFire, how do I love thee?

What next for me?

Next, I need to:

• Develop an acceptable use policy
• Figure out how to lock Spark/OpenFire down a bit more to prevent abuse
• Discover proper deployment technique and pre-configure the client upon installation
• Test out the ‘Support chat room’ plugin (IT support, anyone?)

Have you used OpenFire? Do you use a different IM solution at your job? What were your issues that you had to overcome in order to successfully deploy it in your organization?

If you aren’t an IT admin like myself – what do you think of the IM in your company? Is it useful? What don’t you like?