[Operators] Recent Google XMPP Federation problems

[David Horwitz]

Aha - that sounds better - will ask around if anyone has been playing 
round with this (there's a reasonable chance as our XMPP server is "semi 
official") So some one with that level of access could have activated it 
to check ....

D

Arnaud Abélard wrote:
> David Horwitz wrote:
>>
>>
>>
>>> Actually, i just noticed something bad, bad, bad from google. When 
>>> activating Google Apps For Teams Edition, it actives gtalk 
>>> automatically for the domain, so i guess the rerouting behavior was 
>>> understandable in my case. I just disabled it, and hope we'll see 
>>> some change in a few hours/days.
>>>
>>
>> What does it take to activate this? Do you need to supply come kind 
>> on domain ownership? Otherwise this is very bad (any one of our 26K+ 
>> staff or students could kill our XMPP federation)
>>
>
>
> Yeah, of course. They ask you to prove you own or manage the domain by 
> either setting a cname redirecting to google.com or uploading a 
> special html page to your domain. But in my case, someone tried to 
> activate apps for our domain, so i had to prove I was the owner but 
> for some reason never got access to the administration area until I 
> requested it today. That's when i noticed that gtalk was activated by 
> default, even before anyone had access to the administration pages, 
> which is bad!
>
> Arnaud
>
>
>>
>>
>> David
>>
>>
>>> On another note, it would be indeed usefull to have a modus operandi 
>>> for XMPP Federation related problem reporting with google.
>>>
>>>
>>> Arnaud
>>>
>>>
>>>>
>>>> David
>>>>
>>>> Arnaud Abélard wrote:
>>>>> Justin Uberti wrote:
>>>>>> All,
>>>>>>
>>>>>> The fix went into production today. XMPP Federation should be 
>>>>>> working normally for all domains.
>>>>>
>>>>> Thank you very much for this update Justin. Is it normal that I 
>>>>> can not see anything change in the situation yet? Google still 
>>>>> seem not to be able to reach our domain.
>>>>>
>>>>> The explanation you gave made me think about the fact we activated 
>>>>> google apps team edition on our domain to give it a try but we 
>>>>> never meant to enable gtalk for it. Our domain already has its 
>>>>> XMPP service running properly with the right SRV entries and all. 
>>>>> I didn't think that all our XMPP trafic would be rerouted back to 
>>>>> google or is that actually the problem the fix was supposed to, 
>>>>> well...fix?
>>>>>
>>>>> Am I the only one not noticing any improvement yet?
>>>>>
>>>>> AA.
>>>>>
>>>>>>
>>>>>> --justin
>>>>>>
>>>>>> On Fri, Feb 22, 2008 at 5:47 AM, Keith Burgoyne 
>>>>>> <keith at silverorange.com <mailto:keith at silverorange.com>> wrote:
>>>>>>
>>>>>>     Thanks for getting back to us Justin. We appreciate your 
>>>>>> efforts!!
>>>>>>
>>>>>>     Justin Uberti wrote:
>>>>>>      > Hi,
>>>>>>      >
>>>>>>      > There's been some discussion on this list about recent 
>>>>>> changes
>>>>>>      > regarding XMPP Federation at Google, and wanted to provide 
>>>>>> some
>>>>>>      > information on this issue.
>>>>>>      >
>>>>>>      > The recent launch of Google Apps Team Edition caused a 
>>>>>> problem that
>>>>>>      > broke XMPP Federation for some domains. In a nutshell, the 
>>>>>> issue was
>>>>>>      > that certain domains were being treated as if they were 
>>>>>> hosted at
>>>>>>      > Google, as opposed to being federated with Google. This 
>>>>>> prevented
>>>>>>     XMPP
>>>>>>      > packets from being routed properly.
>>>>>>      >
>>>>>>      > A fix has been identified and existing federated domains 
>>>>>> should start
>>>>>>      > working again soon. The fix also prevents the problem from 
>>>>>> happening
>>>>>>      > in the future with new federated domains. I'll send 
>>>>>> another update
>>>>>>      > when the fix is live in production.
>>>>>>      >
>>>>>>      > Thanks,
>>>>>>      > Justin Uberti
>>>>>>      > Tech Lead
>>>>>>      > Google
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>
>>>
>
>