From 0084a770660e07727a811dd3ec84cfedbb939b7c Mon Sep 17 00:00:00 2001 From: Badlop Date: Thu, 18 Jul 2024 17:28:28 +0200 Subject: [PATCH] Last minute updates for 24.07 documentation --- content/admin/configuration/listen.md | 4 +--- content/admin/upgrade/index.md | 1 + content/archive/24.07/listen.md | 2 +- content/archive/24.07/upgrade.md | 20 ++++++++++++++++++++ content/roadmap/index.md | 3 +++ mkdocs.yml | 9 +++++++++ 6 files changed, 35 insertions(+), 4 deletions(-) create mode 100644 content/archive/24.07/upgrade.md diff --git a/content/admin/configuration/listen.md b/content/admin/configuration/listen.md index 0a422e74..a30a6393 100644 --- a/content/admin/configuration/listen.md +++ b/content/admin/configuration/listen.md @@ -536,9 +536,7 @@ It's possible to use OAuth for authentication instead of plain password, see [OAuth Support](../../developer/ejabberd-api/oauth.md). In ejabberd [20.03](../../archive/20.03/index.md) and older, -it was possible to configure `ejabberd_xmlrpc` as a -listener, see the old document for reference and example configuration: -[Listening Module](../../archive/old.md#listening_module). +it was possible to configure `ejabberd_xmlrpc` as a listener. Just for reference, there's also the old [`ejabberd_xmlrpc documentation`](https://ejabberd.im/ejabberd_xmlrpc) diff --git a/content/admin/upgrade/index.md b/content/admin/upgrade/index.md index 4629dd2c..20280ca7 100644 --- a/content/admin/upgrade/index.md +++ b/content/admin/upgrade/index.md @@ -92,6 +92,7 @@ of the new ejabberd version if you need to update those tables yourself manually The corresponsing ugprade notes are available in the release notes of each release, and also available in the [Archive](../../archive/index.md) section: +- [Upgrading from ejabberd 24.06 to 24.07](../../archive/24.07/upgrade.md) - [Upgrading from ejabberd 24.02 to 24.06](../../archive/24.06/upgrade.md) - [Upgrading from ejabberd 23.10 to 24.02](../../archive/24.02/upgrade.md) - [Upgrading from ejabberd 23.04 to 23.10](../../archive/23.10/upgrade.md) diff --git a/content/archive/24.07/listen.md b/content/archive/24.07/listen.md index b3206970..1d351ffb 100644 --- a/content/archive/24.07/listen.md +++ b/content/archive/24.07/listen.md @@ -543,7 +543,7 @@ It's possible to use OAuth for authentication instead of plain password, see In ejabberd [20.03](../../archive/20.03/index.md) and older, it was possible to configure `ejabberd_xmlrpc` as a listener, see the old document for reference and example configuration: -[Listening Module](../../archive/../../admin/configuration/old.md#listening_module). +[Listening Module](../../archive/old.md#listening_module). Just for reference, there's also the old [`ejabberd_xmlrpc documentation`](https://ejabberd.im/ejabberd_xmlrpc) diff --git a/content/archive/24.07/upgrade.md b/content/archive/24.07/upgrade.md new file mode 100644 index 00000000..4ed857ea --- /dev/null +++ b/content/archive/24.07/upgrade.md @@ -0,0 +1,20 @@ +# Upgrade to ejabberd 24.07 + +If you upgrade ejabberd from a previous release to [24.07](../../archive/24.07/index.md), +please update the ejabberd configuration file: + +## WebAdmin API permissions configuration + +The ejabberd 24.06 release notes announced the [Improved WebAdmin with commands usage](https://www.process-one.net/blog/ejabberd-24-06/#webadmin-commands), and mentioned some [`api_permissions` configuration details](https://www.process-one.net/blog/ejabberd-24-06/#webadmin-config), but it was not explicit enough about this fact: with the default ejabberd configuration, an admin was allowed to login in WebAdmin from any machine, but only was allowed to execute commands from the loopback IP address! The WebAdmin showed the page sections, but all them were empty. Additionally, there was a bug that showed similar symptoms when entering the WebAdmin using a host and then logging in as an account in another host. Both problems and their solutions are described in [#4249](https://github.com/processone/ejabberd/issues/4249). + +Please update your configuration accordingly, adding permission from web admin to execute all commands to accounts logged in with admin privilege: + +```yaml +api_permissions: + "webadmin commands": + from: ejabberd_web_admin + who: admin + what: "*" +``` + +Of course you can customize that access as much as you want: only from specific IP addresses, only to certain accounts, only for specific commands... diff --git a/content/roadmap/index.md b/content/roadmap/index.md index cc96dcee..fa866151 100644 --- a/content/roadmap/index.md +++ b/content/roadmap/index.md @@ -18,6 +18,9 @@ hide: ### 2024 +- [24.07](https://www.process-one.net/blog/ejabberd-24-07/) + - Bugfixes and minor improvements + - [24.06](https://www.process-one.net/blog/ejabberd-24-06/) - Reworked the [ejabberd Docs](https://docs.ejabberd.im/) and moved to MkDocs+Material - [Automatic SQL schema](https://www.process-one.net/blog/automatic-schema-update-in-ejabberd/) is now enabled by default diff --git a/mkdocs.yml b/mkdocs.yml index ad68d4d2..94e9de52 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -264,6 +264,15 @@ nav: - Versioning: developer/ejabberd-api/api_versioning.md - Archive: - archive/index.md + - "24.07": + - archive/24.07/index.md + - archive/24.07/admin-api.md + - archive/24.07/admin-tags.md + - archive/24.07/listen.md + - archive/24.07/listen-options.md + - archive/24.07/modules.md + - archive/24.07/toplevel.md + - archive/24.07/upgrade.md - "24.06": - archive/24.06/index.md - archive/24.06/admin-api.md