Intro
Provisioning is the feature that allows network and provider administrators to remotely configure Jitsi instances that they are responsible for.
Jitsis provisioning module uses http. This means that, based on a few parameters like an IP or a mac layer address, or a user name and a password, a simple script on a web server or an advanced provisioning system like JitsiProvS can feed to a freshly installed Jitsi all the details that it needs in order to start making calls, downloading updates or configure codec preferences.
Of course, in order for this to work, Jitsi would first need to find out where the provisioning web server is. This can happen either automatically, using discovery protocols like DHCP or mDNS (a.k.a. Bonjour), or by manually entering a provisioning URI in Jitsis configuration form.
The easiest way to have Jitsi connect to a provisioning server is to configure the provisioning URL in its configuration form. Jitsi also supports automatic provisioning discovery via DHCP and Bonjour both of which are discussed later in this document. To do so, go to options => advanced => provisioning and check Enable provisioning (if not already checked), then select Manually specify provisioning URI and enter a URI.
A provisioning URI is an HTTP or HTTPS URL optionally followed by several parameters. The URI would most often point to a provisioning server-side script (e.g. PHP, CGI, servlet, ). Please note that we strongly recommend you only use HTTPS unless you have very good reasons not to. Provisioning POST requests generally contain sensitive information like passwords and you definitely dont want that being sent in clear text.
Here is an example of a provisioning URI:
Note that in the above URI the names of the parameters to the left of an equal (=) sign only depend on you and the web script that you are using in your provisioning environment. Those to the right however are parameters supported by Jitsi and they always come surrounded by accolades and prefixed with a dollar sign (e.g. ${param_value} )
Currently, Jitsi supports the following parameters:
See Configure Jitsi With Provisioning for a list of parameters that allow for hiding various menu entries from the UI.
A provisioning script is something that you write and run on your web server. It handles incoming provisioning requests and it serves configuration properties to Jitsi according to the parameters that these requests contain.
A provisioning script MUST always return content formatted as a valid properties file. Thats pretty much the only limitation and other than that, you can have almost anything in it. You can certainly use the output to configure absolutely any aspect of Jitsi.
Quite often, a provisioning script would use the parameters from the provisioning URI to determine the exact properties that it is going to return. A common example is the provisioning of a SIP account that often depends on either the hardware address or the user name and password entered by the user.
In order to retrieve its configuration properties from the provisioning script, Jitsi would use an HTTP POST request. All the parameters that are present in the provisioning URL (e.g. username, password, osname, ) would then be encoded as parameters of that POST request. This is important to note and may be a bit confusing since the request makes it look as if we would be doing a GET.
JitsiProvS is one example of a Jitsi provisioning server written in python. You can use it as is or extend it to fit your needs. You are of course also free to create your own versions.
Following is a simple PHP provisioning file:
You can use the special property value ${null} when youd like to remove (unset) all properties beginning with the specified prefix. Note that properties are processed in the order that the provisioning script returns them. It is therefore possible to use ${null} in the beginning of a provisioning file, have it remove a group of properties like a SIP account for example, and then feed a new SIP account in the same provisioning file.
The property provisioning.ALLOW_PREFIX tells Jitsi that through the rest of the provisioning file, it should ignore any properties that do not match the specified prefixes. The value of the property would hence contain a number of strings separated by the | (pipe) character.
The provisioning.ENFORCE_PREFIX is somewhat similar to ALLOW_PREFIX. Jitsi would use this property to make sure that your Jitsis configuration file only contains properties matching the specified prefixes and it would remove all those that dont, regardless of whether they were provisioned through a provisioning script or were set by the user.
Important note: Your provisioning script should indicate authentication problems (e.g. wrong password) using a 401 HTTP error response. After receiving such a response, Jitsi would prompt the user to enter the credentials again.
DHCP is one way for Jitsi to discover a provisioning URI without user interaction. To make Jitsi use DHCP provisioning, go to options => advanced => provisioning, check Enable provisioning and then select the DHCP radio button.
In order to get the provisioning URL via DHCP, somewhere on the network a DHCP server has to be running on port 6767. This means that if you already have a DHCP server in your network, you would probably need to install a second one (although this one would be extremely simple to configure so dont worry 🙂 ).
We expect to find our provisioning URI in option 224 so thats where your server needs to serve it.
Following is a sample dhcpd.conf file that you can use almost as is in your own network. Youd probably only need to adjust the subnet and the URI itself:
Note: the provisioning DHCP server does not need to provide IP addresses to machines. All it does is return the provisioning URI to whoever asks.
To configure provisioning via Bonjour, go to options => advanced => provisioning, check Enable provisioning, and then select Bonjour.
In order to get the provisioning URI via Bonjour, you would need to make sure that an mDNS server is running somewhere on your network and that it is configured to advertise the provisioning URI.
Avahi is one of the most popular mDNS servers. Heres what you need to do in order to make it provision Jitsi
On Unix/Linux:
Note that name MUST not be changed since Jitsi will look for the service name Provisioning URL. The host-name is not a FQDN and has to be suffixed by .local, next step will tell avahi about the IP address of this host name. The URL parameters is added in this way
match the one in
would become something like
More:
- Jitsi - Business VoIP Phone Service | OnSIP - April 26th, 2014 [April 26th, 2014]
- Softonic - Jitsi - Download - April 26th, 2014 [April 26th, 2014]
- The Architecture of Open Source Applications: Jitsi - April 26th, 2014 [April 26th, 2014]
- Jitsi - Wikipedia, the free encyclopedia - April 26th, 2014 [April 26th, 2014]
- FLOSS Weekly 293: Jitsi Meet - Video - May 9th, 2014 [May 9th, 2014]
- Jitsi Overview: FLOSS Weekly 293 - Video - May 9th, 2014 [May 9th, 2014]
- NetSecDemo Secure FTP over Jitsi - Video - May 9th, 2014 [May 9th, 2014]
- Eliyah Moore, Barum Jiu Jitsi Vs Cahel Gonzalez, 5 Star Martial Arts - Video - May 16th, 2014 [May 16th, 2014]
- Jitsi (Mac) - Download - Softonic - August 31st, 2014 [August 31st, 2014]
- Using XMPP chat with Jitsi - Video - September 12th, 2014 [September 12th, 2014]
- Jitsi - SIP Softphone - Video - September 12th, 2014 [September 12th, 2014]
- The Luminosity of Free Software Episode 20 - Video - September 13th, 2014 [September 13th, 2014]
- FOSDEM 2014 - Jitsi Videobridge And Webrtc - Video - September 16th, 2014 [September 16th, 2014]
- Just Linux touch screen and Jitsi - Video - September 16th, 2014 [September 16th, 2014]
- Bitcoin and dark wallet could be used by terrorists. So what? - September 24th, 2014 [September 24th, 2014]
- Top messaging apps flat-out flunk EFF's security review - November 5th, 2014 [November 5th, 2014]
- When I say join me in a jitsi meet... - Video - November 7th, 2014 [November 7th, 2014]
- Jitsi Flasms Dogfooding: Using your own imperfect solutions helps improve them, - Video - November 10th, 2014 [November 10th, 2014]
- IETF91 chairs meeting Honolulu Jitsi Meet presentation - Video - November 17th, 2014 [November 17th, 2014]
- IETF91 chairs meeting Honolulu Jitsi Meet questions - Video - November 17th, 2014 [November 17th, 2014]
- jitsi videollamada - Video - December 26th, 2014 [December 26th, 2014]
- Your first OTR text chat with Jitsi - Video - December 31st, 2014 [December 31st, 2014]
- Skype Encrypted Alt. SIP Jitsi Combo - February 7th, 2015 [February 7th, 2015]
- Jitsi Wikipdia - February 7th, 2015 [February 7th, 2015]
- Jitsi for Mac | MacUpdate - Apple Mac OS X Software & Apps ... - February 11th, 2015 [February 11th, 2015]
- Nexi Unified Communication Jitsi Presentazione full - Video - February 19th, 2015 [February 19th, 2015]
- JITSI - Video - April 8th, 2015 [April 8th, 2015]
- Jitsi Configuration and Review - November 21st, 2015 [November 21st, 2015]
- Jitsi: A Multi-Protocol, Cross Platform Compatible Chat, Call ... - November 21st, 2015 [November 21st, 2015]
- Jitsi (Build 3132) - Business VoIP Phone Service | OnSIP - November 21st, 2015 [November 21st, 2015]
- Jitsi | Tiki Suite - March 26th, 2016 [March 26th, 2016]
- Jitsi - - January 28th, 2017 [January 28th, 2017]
- Jitsi for Mac - Download - jitsi.en.softonic.com - February 5th, 2017 [February 5th, 2017]
- Jitsi | Prometheism.net - February 8th, 2017 [February 8th, 2017]
- GitHub - jitsi/jitsi-meet: Jitsi Meet - Secure, Simple and ... - February 12th, 2017 [February 12th, 2017]
- Edward Snowden's New Job: Protecting Reporters From Spies - WIRED - February 14th, 2017 [February 14th, 2017]
- Snowden helping develop tools to protect journalists and whistleblowers - 'to make the game a little more fair' - Press Gazette - February 16th, 2017 [February 16th, 2017]
- Jitsi - Download - February 18th, 2017 [February 18th, 2017]
- Jitsi Meet - Android Apps on Google Play - March 11th, 2017 [March 11th, 2017]
- Jitsi for Mac OS X Secure instant messaging and VoIP - March 12th, 2017 [March 12th, 2017]
- How to Configure and Set-Up Jitsi - Liberty Under Attack - June 6th, 2017 [June 6th, 2017]
- Jitsi PediaView.com | Prometheism.net - June 17th, 2017 [June 17th, 2017]
- Provisioning | Jitsi | Prometheism.net - June 26th, 2017 [June 26th, 2017]
- FAQ | Jitsi | Prometheism.net - June 26th, 2017 [June 26th, 2017]
- Tsirang vegetable vendors commit to selling local chillies - Kuensel, Buhutan's National Newspaper - June 27th, 2017 [June 27th, 2017]
- FAQ | Jitsi | Prometheism.net euvolution.com - July 3rd, 2017 [July 3rd, 2017]
- FAQ | Jitsi | Futurist Transhuman News Blog | Prometheism.net - July 4th, 2017 [July 4th, 2017]
- Jitsi Meet (advanced) Projects | Prometheism.net - July 6th, 2017 [July 6th, 2017]
- FAQ | Jitsi | Prometheism.net euvolution.com | Futurist - July 6th, 2017 [July 6th, 2017]
- Jitsi | Futurist Transhuman News Blog - prometheism.net - July 14th, 2017 [July 14th, 2017]
- Gladstone gold does club proud | Gladstone Observer - Gladstone Observer - July 18th, 2017 [July 18th, 2017]
- Jitsi softphone for Windows OnSIP Support - July 26th, 2017 [July 26th, 2017]
- Jitsi for Mac : Free Download : MacUpdate - August 1st, 2017 [August 1st, 2017]
- OpenFire Jitsi as Skype(desktop sharing) and Temviewer ... - February 9th, 2018 [February 9th, 2018]
- Jitsi Download - softpedia.com - March 29th, 2018 [March 29th, 2018]
- Jitsi Meet (advanced) Projects - June 14th, 2018 [June 14th, 2018]
- Jitsi (Build 3132) - OnSIP - November 9th, 2018 [November 9th, 2018]
- Download Jitsi 2.10.5550 - softpedia.com - November 9th, 2018 [November 9th, 2018]
- Jitsi Community Forum - November 9th, 2018 [November 9th, 2018]
- FAQ | Jitsi - November 23rd, 2018 [November 23rd, 2018]
- Jitsi for Windows - Secure Instant Messaging and VoIP - February 12th, 2019 [February 12th, 2019]
- How to Create Your Own Video Conference Server using Jitsi ... - March 6th, 2019 [March 6th, 2019]
- What is Jitsi? - open source video conferencing API's ... - April 9th, 2019 [April 9th, 2019]
- 8x8 Acquires Jitsi Video Communications Technology From ... - April 15th, 2019 [April 15th, 2019]
- Latest users topics - Jitsi Community Forum - developers & users - April 15th, 2019 [April 15th, 2019]
- Jitsi - Should I Remove It? - April 20th, 2019 [April 20th, 2019]
- Appear.in Vs. Jitsi: Subscription WebRTC Faces Off Against Open-Source VC - VC - VC Daily - November 18th, 2019 [November 18th, 2019]
- Philippines eyes fitting end to best SEA Games performance ever - Sports Interactive Network Philippines - December 12th, 2019 [December 12th, 2019]
- Fox Sports 1 Dials Up VCC for The Herd With Colin Cowherd - TV Technology - December 21st, 2019 [December 21st, 2019]
- Fox Sports 1 Utilized Video Call Center to Extend Reach of Shows Like The Herd with Colin Cowherd - Sports Video Group - December 21st, 2019 [December 21st, 2019]
- GoodFirms Discloses the Most Recommended Software of 2020 to Streamline the Business Work Processes - Yahoo Finance - February 23rd, 2020 [February 23rd, 2020]
- How The Coronavirus Is Forcing Italy To Become A Digital Country, At Last - Forbes - March 16th, 2020 [March 16th, 2020]
- Here's how Zoom is fixing all of those security issues - The Union Journal - April 12th, 2020 [April 12th, 2020]
- Five Zoom alternatives to combat social isolation with video chat - The Star Online - April 12th, 2020 [April 12th, 2020]
- Zoom Has Privacy Issues, Here Are Some Alternatives - CoinDesk - April 12th, 2020 [April 12th, 2020]
- This is Jitsi Meet, the open source video calling application that the Government uses to prepare for press conferences - Explica - April 12th, 2020 [April 12th, 2020]
- Zoom security: I've researched problems with video conferencing for years here's what you need to know - The Conversation UK - May 3rd, 2020 [May 3rd, 2020]
- Group video calls of up to 100 participants, with encryption and noise cancellation - Explica - May 3rd, 2020 [May 3rd, 2020]
- The best Skype alternatives for video calls on your smartphone - AndroidPIT - May 3rd, 2020 [May 3rd, 2020]
- Jesse Kline on COVID-19: Keeping government secure and saving taxpayer money with open source - National Post - May 3rd, 2020 [May 3rd, 2020]