sm.xml.dist.in

<!-- Session manager configuration -->
<sm>
  <!-- Our ID on the network (default: sm) -->
  <id>sm</id>

  <!-- The process ID file. Comment this out if you don't need to know
       the process ID from outside the process (eg for control scripts) -->
  <pidfile>@localstatedir@/@package@/pid/${id}.pid</pidfile>

  <!-- Router connection configuration -->
  <router>
    <!-- IP/port the router is waiting for connections on -->
    <ip>127.0.0.1</ip>            <!-- default: 127.0.0.1 -->
    <port>5347</port>             <!-- default: 5347 -->

    <!-- Username/password to authenticate as -->
    <user>jabberd</user>          <!-- default: jabberd -->
    <pass>secret</pass>           <!-- default: secret -->

    <!-- File containing an SSL certificate and private key to use when
         setting up an encrypted channel with the router. From
         SSL_CTX_use_certificate_chain_file(3): "The certificates must be
         in PEM format and must be sorted starting with the subject's
         certificate (actual client or server certificate), followed
         by intermediate CA certificates if applicable, and ending
         at the highest level (root) CA" (the latter one being optional).
         If this is commented out, or the file can't be read, no attempt
         will be made to establish an encrypted channel with the router. -->
    <!--
    <pemfile>@sysconfdir@/server.pem</pemfile>
    -->

    <!-- Router connection retry -->
    <retry>
      <!-- If the connection to the router can't be established at
           startup, we should try again this many times before exiting.
           Use -1 to retry indefinitely. [default: 3] -->
      <init>3</init>

      <!-- If we lost the connection to the router during normal
           operation (ie we've successfully connected to the router in
           the past), we should try to reconnect this many times before
           exiting. Use -1 to retry indefinitely. [default: 3] -->
      <lost>3</lost>

      <!-- Sleep for this many seconds before trying attempting a
           reconnect. [default: 2] -->
      <sleep>2</sleep>
    </retry>
  </router>

  <!-- Log configuration - type is "syslog", "file" or "stdout" -->
  <log type='syslog'>
    <!-- If logging to syslog, this is the log ident -->
    <ident>jabberd/sm</ident>

    <!-- If logging to syslog, this is the log facility
         (local0 - local7)                        [default: local3] -->
    <facility>local3</facility>

    <!-- If logging to file, this is the filename of the logfile -->
    <!--
    <file>@localstatedir@/@package@/log/sm.log</file>
    -->

    <!-- Filename of the debug logfile -->
    <!--
    <debug>@localstatedir@/@package@/log/debug-${id}.log</debug>
    -->
  </log>

  <!-- Local network configuration -->
  <local>
    <!-- Who we identify ourselves as.
         Users will have this as the domain part of their JID.
         If you want your server to be accessible from other
         Jabber servers, this IDs must be FQDN resolvable by DNSes.
         If not set, the SM id is used. -->
    <id>localhost.localdomain</id>
    <!--
    <id>vhost1.localdomain</id>
    <id>vhost2.localdomain</id>
    -->

  </local>

  <!-- Storage database configuration -->
  <storage>
    <!-- Dynamic storage modules path -->
    <path>@pkglibdir@</path>

    <!-- By default, we use the SQLite driver for all storage -->
    <driver>sqlite</driver>

    <!-- Its also possible to explicitly list alternate drivers for
         specific data types. -->

    <!-- Store vcards in a ldapvcard database instead -->
    <!--
    <driver type='vcard'>ldapvcard</driver>
    -->

    <!-- Only ldapvcard driver implements published-roster: -->
    <!--
    <driver type='published-roster'>ldapvcard</driver>
    -->

    <!-- Use ldapvcard driver for published-roster-groups.
         See description in section sm/user/template/mapped-groups.
         Used by mod_published_roster.
         See ldapvcard section for options.
         When resolving group id to group name, it searches for
         groupsobjectclass objects at groupsdn base using group id
         (in groupsidattr) as key and returns the first value of 
         groupattr of first found entry.
         E.g.. in general case, if group id is "some-dep", and groupsdn
         is o=org, and class is jabberGroup, it searches for
         (&(objectClass=jabberGroup)(cn=some-dep)) and returns value of
         jabberPublishedItem attribute, which may contain textual description.
         -->
    <!--
    <driver type='published-roster-groups'>ldapvcard</driver>
    -->

    <!-- Rate limiting -->
    <limits>
      <!-- Maximum queries per second - if more than X queries are sent in Y
           seconds, connection is throttled for Z seconds. The format
           is:

             <queries seconds='Y' throttle='Z'>X</bytes>

           Default Y is 5, default Z is 60. set X to 0 to disable. -->
      <!--
      <queries>3</queries>
      -->
    </limits>

    <!-- SQLite driver configuration -->
    <sqlite>
      <!-- Database name -->
      <dbname>@localstatedir@/@package@/db/sqlite.db</dbname>
     <!-- Use this to pass any SQL statements to the database immediately
          after opening it. This is typically used to set pragmas for
          performance tuning. -->
     <sql>
	<!-- This will cause the database to sync less often but it will
             still sync at the most critical moments.
             Default is FULL. -->
	   PRAGMA synchronous = NORMAL;

	<!-- This command gathers statistics about tables and indices and
             stores these information in internal tables.
             This could be used to optimize the query. -->
	   -- ANALYZE;
      </sql>

      <!-- SQLite busy-timeout in milliseconds. -->
      <busy-timeout>2000</busy-timeout>
    </sqlite>

    <!-- MySQL driver configuration -->
    <mysql>
      <!-- Database server host and port -->
      <host>localhost</host>
      <port>3306</port>

      <!-- Database name -->
      <dbname>jabberd2</dbname>

      <!-- Database username and password -->
      <user>jabberd2</user>
      <pass>secret</pass>

      <!-- Transaction support. If this is commented out, transactions
           will be disabled. This might make database accesses faster,
           but data may be lost if jabberd crashes.

           This will need to be disabled if you are using a MySQL
           earlier than v3.23.xx, as transaction support did not appear
           until this version. -->
      <transactions/>
    </mysql>

    <!-- PostgreSQL driver configuration -->
    <pgsql>
      <!-- PostgreSQL connection info.
           For the rest of the options see
           http://www.postgresql.org/docs/8.0/interactive/libpq.html -->
      <conninfo>dbname=jabberd2 user=jabberd2 password=secret</conninfo>

      <!-- Alternatively you may set connection settings separately.
           These are used only in absence of 'conninfo' -->

      <!-- Database server host and port -->
      <host>localhost</host>
      <port>5432</port>

      <!-- Database name -->
      <dbname>jabberd2</dbname>

      <!-- Database schema -->
      <schema>public</schema>

      <!-- Database username and password -->
      <user>jabberd2</user>
      <pass>secret</pass>

      <!-- Transaction support. If this is commented out, transactions
           will be disabled. This might make database accesses faster,
           but data may be lost if jabberd crashes. -->
      <transactions/>
    </pgsql>

    <!-- Berkeley DB driver configuration.  This does not support roster
         maxitems or offline userquota (because the mod_roster
         implementation does not implement the 'count' callback). -->
    <db>
      <!-- Directory to store database files under -->
      <path>@localstatedir@/@package@/db</path>

      <!-- Synchronize the database to disk after each write. If you
           disable this, database accesses may be faster, but data may
           be lost if jabberd crashes. -->
      <sync/>
    </db>

    <!-- Oracle driver configuration -->
    <oracle>
      <!-- Database server host and port. -->
      <host>localhost</host>
      <port>1521</port>

      <!-- Database name -->
      <dbname>jabberd2</dbname>

      <!-- Database username and password -->
      <user>jabberd2</user>
      <pass>secret</pass>
    </oracle>

    <!-- Filesystem driver configuration -->
    <fs>
      <!-- Directory to store database files under. -->
      <path>@localstatedir@/lib/jabberd2/fs</path>
    </fs>

    <!-- LDAPVCARD driver configuration -->
    <ldapvcard>
      <!-- LDAP server host and port (default: 389) -->
      <uri>ldap://localhost/ ldaps://ldap.example.com/</uri>
      
      <!-- DN to bind as for searches. If unspecified, the searches
           will be done anonymously. -->
      <!--
      <binddn>cn=Directory Manager</binddn>
      <bindpw>secret</bindpw>
      -->

      <!-- see authreg.ldapfull in c2s.xml for description. -->
      <!--
      <type>ad</type>
      -->

      <!-- LDAP attribute that holds the user ID (default: uid) -->
      <uidattr>uid</uidattr>
      <objectclass>posixAccount</objectclass>
      <pwattr>userPassword</pwattr>
      <!-- if you use included jabberd.schema use this:
      <uidattr>jid</uidattr>
      <objectclass>jabberUser</objectclass>
      <pwattr>jabberPassword</pwattr>
      -->

      <!-- Realm to append to uidattr. -->
      <!--
      <realm>example.org</realm>
      -->

      <!-- see authreg.ldapfull in c2s.xml for description. -->
      <!--
      <validattr>valid</validattr>
      -->

      <!-- base DN of the tree. You should specify a DN for each
           authentication realm declared in the <local/> section above,
           by using the realm attribute. -->
      <basedn>o=Example Corp.</basedn>

      <!-- attribute that holds published group name or id,
           jabberPublishedGroup if not set -->
      <!--
      <groupattr>jabberPublishedGroup</groupattr>
      -->

      <!-- this option is helpful if your schema does not have designated
	       attribute that holds jabber group name
		   you can use any attribute in <groupattr> i.e. 'distinguishedName'
		   and then extract a part of it using Regular Expression;
           first matching () group will be used -->
      <!--
      <groupattr_regex>OU=([^,]*),</groupattr_regex>
      -->

      <!-- boolean attribute that tells whether or not to publish this user
           jabberPublishedItem by default -->
      <!--
      <publishedattr>jabberPublishedItem</publishedattr>
      -->

      <!-- If value specified, then keep cache of "published-roster"
           database, which is used for all users. Cache is renewed when kept more seconds than value
           specified. Setting this value increases perfomance of publishing
           roster. If not specified, then we don't keep cache. -->
      <publishedcachettl>60</publishedcachettl>

      <mapped-groups>
        <!-- If turned on, then mapping of group ids to names with
             LDAP will works. -->
        <!--
        <map-groups/>
        -->

        <!-- base for searches for group id to group name mappings -->
        <basedn>ou=jabbergroups, o=Example Corp.</basedn>

        <!-- what objectclass to search, jabberGroup by default -->
        <!--
        <objectclass>jabberGroup</objectclass>
        -->

        <!-- what attribute to search, cn by default -->
        <!--
        <idattr>cn</idattr>
        -->

        <!-- attribute with text group name, description by default -->
        <!--
        <nameattr>description</nameattr>
        -->
      </mapped-groups>
    </ldapvcard>
  </storage>

  <!-- Access control information -->
  <aci>
    <!-- The JIDs listed here will get access to all restricted
         functions, regardless of restrictions further down -->
    <acl type='all'>
      <jid>admin@localhost.localdomain</jid>
    </acl>

    <!-- These JIDs can send broadcast messages (announce, motd) -->
    <!--
    <acl type='broadcast'>
      <jid>nocstaff1@localhost.localdomain</jid>
      <jid>nocstaff2@localhost.localdomain</jid>
    </acl>
    -->

    <!-- These JIDs will receive messages addressed to the sm itself
         (help requestes and such) -->
    <!--
    <acl type='messages'>
      <jid>support@localhost.localdomain</jid>
    </acl>
    -->

    <!-- These JIDs can discover active user/session information -->
    <!--
    <acl type='disco'>
      <jid>webstatus@localhost.localdomain</jid>
    </acl>
    -->
  </aci>

  <!-- Module chain configuration

       Modules listed in a chain are called in the order specified at
       the appropriate time for that chain (assuming that the module
       knows how to work with that chain; otherwise it simply ignores
       it).

       Removing a module from these lists will stop the module being
       called, even if it's compiled into the server.

       Serveral modules have a presence in more than one chain. It is
       possible to remove a module from one chain but not others, but
       this may cause strange behaviour. Make sure you know what you're
       doing.

       When configuring sm for ANONYMOUS access, remove all instances
       of the following modules:
         active announce amp offline privacy
         roster template-roster roster-publish pep vacation status
         iq-last iq-private iq-vcard
       and do not enable auto-create option. -->
  <modules>
    <!-- Dynamic sm modules path -->
    <path>@pkglibdir@</path>

    <!-- sess-start. The modules in this chain are called when a session
         is first started (usually on request by c2s as part of the
         authentication process). This is normally used to load
         per-session data. -->
    <chain id='sess-start'>
      <module>status</module>           <!-- record status information -->
    </chain>

    <!-- sess-end. The modules in this chain are called just before a
         session is destroyed (after the client has disconnected). -->
    <chain id='sess-end'>
      <module>status</module>           <!-- update status information -->
      <module>iq-last</module>          <!-- update logout time -->
    </chain>

    <!-- in-sess. The modules in this chain are called when a packet
         arrives from an active user session. Note that this chain is
         also responsible for delivering packets to their destinations -
         this is usually handled by the "deliver" module. -->
    <chain id='in-sess'>
      <module>validate</module>         <!-- validate packet type -->
      <module>status</module>           <!-- update status information -->
      <module>privacy</module>          <!-- manage privacy lists -->
      <module>roster</module>           <!-- handle roster get/sets and s10ns -->
      <module>vacation</module>         <!-- manage vacation settings -->
      <!-- <module>pep</module>         <!- - personal eventing -->
      <module>iq-vcard</module>         <!-- store and retrieve the user's vcard -->
      <module>iq-ping</module>          <!-- return the server ping -->
      <module>iq-private</module>       <!-- manage the user's private data store -->
      <module>disco</module>            <!-- respond to agents requests from sessions -->
      <module>amp</module>              <!-- advanced message processing -->
      <module>offline</module>          <!-- if we're coming online for the first time, deliver queued messages -->
      <module>announce</module>         <!-- deliver motd -->
      <!-- <module>verify</module>      <!- - verify user by e-mail -->
      <module>presence</module>         <!-- process and distribute presence updates -->
      <module>deliver</module>          <!-- deliver packets with full jids directly -->
    </chain>

    <!-- out-sess. The modules in this chain are called just before a
         packet is delivered to an active user session. -->
    <chain id='out-sess'>
      <!-- <module>pep</module>         <!- - personal eventing -->
    </chain>

    <!-- in-router. The modules in this chain are called when a packet
         arrives from the router (ie another component or s2s), but
         before any processing is done. This is a good place to filter
         incoming packets. -->
    <chain id='in-router'>
      <module>session</module>          <!-- perform session actions as required by c2s -->
      <module>validate</module>         <!-- validate packet type -->
      <module>presence</module>         <!-- drop incoming presence if user not online -->
      <module>privacy</module>          <!-- filter incoming packets based on privacy rules -->
    </chain>

    <!-- out-router. The modules in this chain are called just before a
         packet is delivered to the router (destined for another
         component or s2s). This is a good place to filter outgoing
         packets. -->
    <chain id='out-router'>
      <module>privacy</module>          <!-- filter outgoing packets based on privacy rules -->
    </chain>

    <!-- pkt-sm. The modules in this chain are called when a packet
         arrives that is addressed to the session manager itself (ie the
         to JID has no node part). This is normally used to provide
         session-manager-wide services (like service discovery). -->
    <chain id='pkt-sm'>
      <module>iq-last</module>          <!-- return the server uptime -->
      <module>iq-ping</module>          <!-- return the server ping -->
      <module>iq-time</module>          <!-- return the current server time -->
      <module>iq-version</module>       <!-- return the server name and version -->
      <module>amp</module>              <!-- advanced message processing -->
      <module>disco</module>            <!-- build the disco list; respond to disco queries -->
      <module>announce</module>         <!-- send broadcast messages (announce, motd, etc) -->
      <module>help</module>             <!-- resend sm messages to administrators -->
      <module>echo</module>             <!-- echo messages sent to /echo -->
      <module>status</module>           <!-- track status information -->
      <module>presence</module>         <!-- proces server presence subscriptions -->
    </chain>

    <!-- pkt-user. The modules in this chain are called when a packet
         arrives that is address to a specific user. Note that this
         chain is also responsible for delivering packets to user
         sessions as appropriate - this is usually handled by the
         "deliver" module. -->
    <chain id='pkt-user'>
      <module>roster</module>           <!-- handle s10n responses -->
      <module>presence</module>         <!-- process and distribute incoming presence from external entities -->
      <module>disco</module>            <!-- respond to disco queries -->
      <module>iq-vcard</module>         <!-- grab user vcards -->
      <module>amp</module>              <!-- advanced message processing -->
      <module>deliver</module>          <!-- deliver the packet to an active session if we can -->
      <module>vacation</module>         <!-- send vacation messages -->
      <module>offline</module>          <!-- save messages and s10ns for later -->
      <module>iq-last</module>          <!-- return time since last logout -->
    </chain>

    <!-- pkt-router. The modules in this chain are called when a
         special-purpose packet arrives from the router (eg domain
         advertisements). -->
    <chain id='pkt-router'>
      <module>session</module>          <!-- take sessions offline if their c2s disappears -->
      <module>disco</module>            <!-- query new components for service information -->
    </chain>

    <!-- user-load. The modules in this chain are called to load
         per-user data. This will happen before a user can be used (ie
         before a session is created). -->
    <chain id='user-load'>
      <module>active</module>           <!-- get active status -->
      <module>roster</module>           <!-- load the roster and trust list -->
      <module>roster-publish</module>   <!-- load the published roster -->
      <module>privacy</module>          <!-- load privacy lists -->
      <module>vacation</module>         <!-- load vacation settings -->
      <!-- <module>verify</module>      <!- - verify user by e-mail -->
    </chain>

    <!-- user-unload. The modules in this chain are called right
         after last per-user session is destroyed. -->
    <chain id='user-unload'>
    </chain>

    <!-- user-create. The modules in this chain are called when a user
         creation request is received (usually from c2s as part of a
         registration request). This initialises any per-user data. -->
    <chain id='user-create'>
      <module>active</module>           <!-- activate new users -->
      <module>template-roster</module>  <!-- populate roster from template -->
    </chain>

    <!-- user-delete. The modules in this chain are called when a user
         deletion request is received (usually from c2s as part of a
         registration removal request). This deletes all data that may
         have been previously created for the user during normal
         operation. -->
    <chain id='user-delete'>
      <module>active</module>           <!-- deactivate users -->
      <module>announce</module>         <!-- delete motd data -->
      <module>offline</module>          <!-- bounce queued messages -->
      <module>privacy</module>          <!-- delete privacy lists -->
      <module>roster</module>           <!-- delete roster -->
      <module>vacation</module>         <!-- delete vacation settings -->
      <module>status</module>           <!-- delete status information -->
      <module>iq-last</module>          <!-- delete last logout time -->
      <module>iq-private</module>       <!-- delete private data -->
      <module>iq-vcard</module>         <!-- delete vcard -->
      <!-- <module>verify</module>      <!- - verify user by e-mail -->
    </chain>

    <!-- disco-extend. The modules in this chain are called when a disco
         info request is send to session manager. It implements XEP-0128
     Service Discovery Extensions mechanizm to add additional
     information to disco#info reply. -->
    <chain id='disco-extend'>
      <module>iq-version</module>       <!-- add XEP-xxxx Software Information -->
      <module>help</module>             <!-- add XEP-0157 Contact Addresses -->
    </chain>

  </modules>

  <!-- Service discovery configuration -->
  <discovery>

    <!-- Service identity. these specify the category, type and name of
         this service that will be included in discovery information
         responses. -->
    <identity>
      <category>server</category>       <!-- default: server -->
      <type>im</type>                   <!-- default: im -->
      <name>Jabber IM server</name>     <!-- default: Jabber IM server -->
    </identity>

    <!-- The discovery module can respond to jabber:iq:agents queries
         for compatibility with older clients. Comment this out to
         disable this. -->
    <agents/>

    <!-- Static service list.

         The discover module can discover disco-capable services
         automatically as they come online. Most XEP-0114 components,
         however, will not support discovery. In order to get them to
         appear in disco/agents lists returned to the client, they
         should be listed here.

         Note that if a disco-capable service with the same name as one
         listed below comes online, the information it provides will
         override the information listed below.

         The "category" and "type" attributes, and the list of supported
         namespaces are only used for agents compatibility. If you have
         disabled this above, you may omit them. -->
    <items>

      <!-- example entry for a user directory -->
      <!--
      <item category='service' type='jud' jid='users.jabber.org' name='Jabber User Directory'/>
      -->

      <!-- example entry for a groupchat (conference) service -->
      <!--
      <item category='conference' type='public' jid='conference.jabber.org' name='Text conferencing'/>
      -->

    </items>

    <!-- Server information added to server discovery information
         in http://jabber.org/network/serverinfo jabber:x:data form. (XEP-0157)

         May contain many values per item -->
    <!--
    <serverinfo>
      <admin-addresses>
        <value>mailto:xmpp@localhost.localdomain</value>
        <value>xmpp:admins@localhost.localdomain</value>
      </admin-addresses>
      <abuse-addresses>
        <value>mailto:abuse@localhost.localdomain</value>
        <value>xmpp:abuse@localhost.localdomain</value>
      </abuse-addresses>
      <feedback-addresses>
        <value>http://example.org/feedback.php</value>
      </feedback-addresses>
      <sales-addresses/>
      <security-addresses/>
      <support-addresses/>
    </serverinfo>
    -->

  </discovery>

  <!-- User options -->
  <user>
    <!-- By default, users must explicitly created before they can start
         a session. The creation process is usually triggered by a c2s
         component in response to a client registering a new user.

         Enabling this option will make it so that user creation will be
         triggered the first time a non-existant user attempts to start
         a session. This is useful if you already have users in an
         external authentication database (eg LDAP) and you don't want
         them to have to register. -->
    <!--
    <auto-create/>
    -->

    <!-- Define maximum size in bytes of fields of vcards.
         There is a recommendation that the avatar picture SHOULD NOT
         be larger than 16 KiB. --> 
    <!--
    <vcard>
        <max-field-size>
            <default>16384</default>
            <avatar>16384</avatar>
        </max-field-size>
    </vcard>
    -->

    <!-- Templates. If defined, the contents of these files will be
         stored in the users data store when they are created. -->
    <template>
      <!-- Uncomment <publish> if you wish to forcibly publish
           roster template from ldap on each user login -->
      <!--
      <publish>
      -->
        <!-- Key used for fetching published roster items.
             Only one might be set at a time.
             If not set, all items are fetched. -->
        <!--
        <fetch-key>
          <domain/>
          <user/>
          <fixed>grouping-key</fixed>
        </fetch-key>
        -->
        <!-- If <check-remove-domain> given, then published contact is checked
             against sm user database and if user is unknown to sm, contact
             will be deleted from user's roster (if it is in roster).
			 If no domain set (tag empty) all contacts are checked. -->
        <!--
        <check-remove-domain>jabber.example.com</check-remove-domain>
        -->
        <!-- Alternatively if <force-create-contacts/> is not commented,
		     published contact is added to sm user database
			 and user set known to sm, so it won't auto-unsubscribe
			 on connection established -->
        <!--
        <force-create-contacts/>
        -->
        <!-- Keep cache of "active" database specified number of seconds.
             This will significantly speed up publishing of roster.
             If unspecified or 0, no cache is used. -->
        <active-cache-ttl>60</active-cache-ttl>
        <!-- If <fix-subscriptions/> is not commented, set "to" and "from" subscriptions of
             user's contacts to subscriptions of corresponding published
             contacts. -->
        <!--
        <fix-subscriptions/>
        -->
        <!-- If <override-names/> is uncommented, then displayed names of
             contacts in user's roster will be updated accordingly to
             published roster (if they differ). If commented, then user can
             rename contacts in roster -->
        <!--
        <override-names/>
        -->
        <!-- when mapped-groups is on (<map-groups/> is uncommented), the actual
             group names for published contacts are read from
             published-roster-groups storage type, which may be set
             to ldapvcard driver. The key for searching is published user's
             group, and returned value is used as group name. So you can assign
             textual group IDs to users rather then group names.
             group-cache-ttl keeps cache of mapping from group id to name for
             specified number of seconds. If unspecified or 0, no cache is used.
             -->
        <!--
        <mapped-groups>
          <map-groups/>
          <group-cache-ttl>120</group-cache-ttl>
        </mapped-groups>
        -->
        <!-- If <force-groups> is commented out, published roster's contact
             added to user's roster only when user does not have this contact.

             If <force-groups> is uncommented, then these checks are performed
             against each roster item already in user's roster:
	       If roster item already present in user's roster in
	       group of same name, no changes are made with this group (note
               that contact may be in more than one group).
	       If <prefix> or <suffix> are given, then contact removed
	       from any matching groups.
               After that, contact is added to group from published roster.

             In other words, all groups of updated contact, that match prefix
             or suffix, are replaced with group of published contact.
             This is done because there is no way to determine that group was
             published or greated by user. -->
        <!--
        <force-groups>
          <prefix>MyOrg.</prefix>
          <suffix>(MyOrg)</suffix>
        </force-groups>
        -->
      <!--
      </publish>
      -->

      <!-- If defined, the contents of these files will be
           stored in the users data store when they are created. -->
      <!-- If you defined publish, you should comment-out <roster> -->
      <!--
      <roster>@sysconfdir@/templates/roster.xml</roster>
      -->
    </template>
  </user>

  <!-- Advanced Message Processing module configuration -->
  <amp>
    <!-- You can disable some actions -->
    <!--
    <disableactions>
      <drop/>
      <error/>
      <alert/>
      <notify/>
    </disableactions>
    -->

    <!-- You can disable some conditions -->
    <!--
    <disableconditions>
      <expireat/>
      <matchresource/>
      <deliver/>
    </disableconditions>
    -->

    <!-- You need to enable this if your server has offline storage disabled -->
    <!--
    <offlinestoragedisabled/>
    -->
  </amp>

  <!-- Offline module configuration -->
  <offline>
    <!-- Do not store messages in offline store -->
    <!--
    <dropmessages/>
    -->

    <!-- Store headline messages in offline store -->
    <!--
    <storeheadlines/>
    -->

    <!-- Do not store subscription requests in offline store -->
    <!--
    <dropsubscriptions/>
    -->

    <!-- Offline storage message quota.
         Specifies how many messages will be stored in user offline store -->
    <!--
    <userquota>500</userquota>
    -->
  </offline>

  <!-- roster module configuration -->
  <roster>
    <!-- maximum items per user roster -->
    <!--
    <maxitems>100</maxitems>
    -->
  </roster>

  <!-- status module configuration -->
  <status>
    <!-- presence service resource
         disabled when commented out -->
    <!--
    <resource>webstatus</resource>
    -->
  </status>

</sm>
<!--
  vim: syntax=xml
-->