openfire-stats-poller

A poorly-named administrative tool for XMPP servers.

Darian Anthony Patrick

Senior Programmer Analyst, Application Security
University of Pennsylvania, ISC Networking & Telecommunications
darianp@isc.upenn.edu

What is openfire-stats-poller

A tool I wrote to gather stats from Openfire.

$ openfire-stats-poller.sh -c upenn.edu -u darianp -K

 Username   | Resource        | Client          | Version                  
==============================================================================
 user1      | spark           | Spark IM Client | 2.5.8                    
 user2      | cylon           | Adium           | 1.3b9 (libpurple 2.5.0de 
 user3      | Pidgin          | Pidgin          | 2.2.2 (libpurple 2.2.2)  
 user4      | Pandion         | Pandion         | 2.5                      
 user5      | foo             | Adium           | 1.3b9 (libpurple 2.5.0de 
 ...

 * Column contents have been truncated to fit 80 column width.

    Client Name | Total
===========================
          Adium | 18
         Exodus | 5
           Gaim | 5
       JiveTalk | 0
         Kopete | 1
        Miranda | 0
        Pandion | 9
         Pidgin | 48
            Psi | 1
          Spark | 3
       Trillian | 1
        Unknown | 0
          iChat | 11

What's it written in, where does it run?

It's written in Java, which is a nice platform, get off it's back. I'm not an apologist, I'm just saying.

• Supports GSSAPI authentication
• Requires Java 6 because of it's ability to use native GSSAPI-Kerberos libraries*:
  

  # Awesome.
  -Dsun.security.jgss.native=true \
  -Dsun.security.jgss.lib=/usr/lib/libgssapi_krb5.so.2.2

• Also uses

  System.console().readPassword() // FTW 

  from Java 6.
• Runs on Linux and Solaris. Should run on Mac OS X with Java 6.**

* I couldn't get it work with Sun's GSSAPI-Kerberos so this saved/helped my ass.

** If you are running a Microsoft OS, either you can figure out how to make it work for youself, or you can switch to one of the supported platforms.

What does it do?

It's meant to do anything that can be done using Ad-hoc administrative commands.

• Display commands supported on server
• Display # of active users
• Display jids of active users
• Display clients in use
• Display # of online users
• Display # of connected sessions
• Administer user accounts (*)
• Administer groups (*)

* Not yet implemented.

What I'd like it do?

Any thing I can do in the web console, and some stuff I can't.

• Display IP of connected users to gauge IPv6 adoption
• Display authentication method (PLAIN, CRAM-MD5, GSSAPI/Kerberos, Kerberos password)
• Display additional authentication (as dictated by PIC.edu)
• Administer user rosters
• Administer PubSub records*
• Send administrative messages
• Send regular messages

* I don't know what this means exactly.

Thank you

Project will be available soon on Google Code or somesuch. E-mail me if you need it sooner, or grab me at the summit if you want to hack on it now.

(Corrected) Slides available at
http://darianpatrick.com