| Property |
Description |
Default |
| admin.authorizedUsernames |
A comma seperated list of usernames allowed to log into the admin console. |
admin |
| admin.authorizedJIDs |
A comma seperated list of full JID's allowed to log into the admin console. The JIDs may belong to remote users. |
|
| adminConsole.port |
The port number the admon console listens on (not encrpyted). Disable by using -1. |
9090 |
| adminConsole.securePort |
The port number the admin console listens on (encrypted). Disable by using -1. |
9091 |
| connectionProvider.className |
The class name of the database connection provider |
|
| database.defaultProvider.checkOpenConnection |
TODO |
|
| database.defaultProvider.connectionTimeout |
TODO |
|
| database.defaultProvider.driver |
TODO |
|
| database.defaultProvider.maxConnections |
TODO |
|
| database.defaultProvider.minConnections |
TODO |
|
| database.defaultProvider.openConnectionTimeLimit |
TODO |
|
| database.defaultProvider.password |
TODO |
|
| database.defaultProvider.serverURL |
TODO |
|
| database.defaultProvider.username |
TODO |
|
| database.mysql.useUnicode |
TODO |
|
| database.JDNIProvider.name |
TODO |
|
| ldap.adminDN |
a directory administrator's DN. All directory operations will be performed with this account. The admin must be able to perform searches and load user records. The user does not need to be able to make changes to the directory, as Openfire treats the directory as read-only. If this property is not set, an anonymous login to the server will be attempted. If you do not allow anonymous searches to your LDAP server, you must set this. |
|
| ldap.adminPassword |
the password for the directory administrator. |
|
| ldap.alternateBaseDN |
a second DN in the directory can optionally be set. If set, the alternate base DN will be used for authentication and loading single users, but will not be used to display a list of users (due to technical limitations). |
|
| ldap.authCache.enabled |
Enable LDAP authentication cache, if using the LdapAuth provider
|
true |
| ldap.authCache.maxLifetime |
TODO |
|
| ldap.authCache.size |
Cache size (in bytes) for LDAP authentication cache
|
524288 |
| ldap.autoFollowReferrals |
a value of "true" indicates that LDAP referrals should be automatically followed. If this property is not set or is set to "false", the referral policy used is left up to to the provider. A referral is an entity that is used to redirect a client's request to another server. A referral contains the names and locations of other objects. It is sent by the server to indicate that the information that the client has requested can be found at another location (or locations), possibly at another server or several servers. |
|
| ldap.baseDN |
the starting DN that searches for users will performed with. The entire subtree under the base DN will be searched for user accounts. This is required for all LDAP setups. |
|
| ldap.clientSideSorting |
If Openfire should sort the LDAP results itself set to true. If the ldap server can do it, set to false. |
False |
| ldap.connectionPoolEnabled |
a value of "false" disables LDAP connection pooling. |
true |
| ldap.debugEnabled |
a value of "true" if debugging should be turned on. When on, trace information about buffers sent and received by the LDAP provider is written to System.out |
|
| ldap.emailField |
the field name that holds the user's email address. If this property is not set, the default value is mail. Active Directory users should use the the default value mail. |
|
| ldap.groupDescriptionField |
the field name that holds the description a group. If this property is not set, the default value is description. |
|
| ldap.groupMemberField |
the field name that holds the members in a group. If this property is not set, the default value is member. |
|
| ldap.groupNameField |
the field name that the groupname lookups will be performed on. If this property is not set, the default value is cn.This is required if you wish to use groups from LDAP. |
|
| ldap.groupSearchFilter |
the search filter that should be used when loading groups. |
ldap.groupNameField"=
Unknown macro: {0}
|
| ldap.host |
LDAP server host; e.g. localhost or machine.example.com, etc. It is possible to use many LDAP servers but all of them should share the same configuration (e.g. SSL, baseDN, admin account, etc). To specify many LDAP servers use the comma or the white space character as delimiter. Obviously, this is required for LDAP setups. |
|
| ldap.initialContextFactory |
the name of the class that should be used as an initial context factory. if this value is not specified, "com.sun.jndi.ldap.LdapCtxFactory" will be used instead. Most users will not need to set this value. |
|
| ldap.nameField |
the field name that holds the user's name. If this property is not set, the default value is cn. Active Directory users should use the default value displayName. |
cn |
| ldap.port |
LDAP server port number. |
389 |
| ldap.posixMode |
a value of "true" means that users are stored within the group by their user name alone. A value of "false" means that users are stored by their entire DN within the group. If this property is not set, the default value is false. Note: the posix mode must be set correctly for your server in order for group integration to work. This is required if you wish to use groups from LDAP. |
|
| ldap.sslEnabled |
a value of "true" to enable SSL connections to your LDAP server. If you enable SSL connections, the LDAP server port number most likely should be changed to 636. |
|
| ldap.searchFields |
the LDAP fields that will be used for user searches. If this property is not set, the username, name, and email fields will be searched. An example value for this field is "Username/uid,Name/cname". That searches the uid and cname fields in the directory and labels them as "Username" and "Name" in the search UI. You can add as many fields as you'd like using comma-delimited "DisplayName/Field" pairs. You should ensure that any fields used for searching are properly indexed so that searches return quickly. |
|
| ldap.searchFilter |
the search filter that should be used when loading users. |
The default search will be for users that have the attribute specified by ldap.usernameField. |
| ldap.usernameField |
the field name that the username lookups will be performed on. If this property is not set, the default value is uid. Active Directory users should try the default value sAMAccountName. |
|
| ldap.vcard-mapping |
The literal mapping between ldap fields and the XML to go in the vcard |
|
| log.debug.enabled |
Turn on debug logging |
|
| log.debug.format |
The format used for debug logging |
|
| log.debug.size |
The maximum size of the debug log |
|
| log.directory |
The directory all log files will go into |
|
| log.error.format |
The format used for the error log |
|
| log.error.size |
The maximum size of the error log |
|
| log.info.format |
The format used for the info log |
|
| log.info.size |
The maximum size of the info log |
|
| log.warn.format |
The format used for the warn log |
|
| log.warn.size |
The maximum size of the warn log |
|
| locale |
The locale (language settings) |
|
| nativeAuth.domain |
TODO |
|
| network.interface |
An ip address to bind to. Generally only useful on multi-homed systems. |
|
| pop3.authCache.enabled |
TODO |
|
| pop3.authCache.maxLifetime |
TODO |
|
| pop3.authCache.size |
TODO |
512*1024 |
| pop3.authRequiresDomain |
TODO |
|
| pop3.debug |
TODO |
|
| pop3.domain |
TODO |
|
| pop3.host |
TODO |
|
| pop3.port |
TODO |
|
| pop3.ssl |
TODO |
|
| provider.auth.className |
The class name of the AuthProvider (Authentication) |
|
| provider.user.className |
The class name of the UserProvider |
|
| provider.group.className |
The class name of the GroupProvider |
|
| provider.vcard.className |
The class name of the VcardProvider |
|
| sasl.mechs |
Configure which authorization mechanisms Openfire allows (DIGEST-MD5 PLAIN CRAM-MD5). Java's CRAM-MD5 implementation and Cryus SASL's implementation differ slightly. To remove CRAM-MD5 add <sasl><mechs>DIGEST-MD5 PLAIN</mechs><sasl> to openfire.xml |
|
| setup |
True if Openfire has been configured. False only after an initial install before configuring. |
|
