Danial,
www_authorize fail to authorize without password
0(3283) lookup(): '85234230599(a)218.20.229.53' Not found in usrloc
0(3283) parse_headers: flags=4096
0(3283) pre_auth(): Credentials with given realm not found
0(3283) build_auth_hf(): 'WWW-Authenticate: Digest realm="xxx.org",
nonce="40644192d74bf39b0ebb5d141cb2073a6c09daf8"
'
Regards
Raymond
-----Original Message-----
From: Daniel-Constantin Mierla [mailto:daniel@iptel.org]
Sent: Friday, March 26, 2004 8:04 PM
To: Raymond Chen
Subject: Re: [Serusers] RE: [Serdev] check_from
Try something like this:
if (method=="INVITE")
{
if (!www_authorize("xxx.org", "subscriber")) {
www_challenge("xxx.org", "0");
break;
};
if (!check_from()) {
sl_send_reply("403", "Only registered users are allowed");
break;
};
};
.Daniel
On 03/26/04 12:48, Raymond Chen wrote:
>Now we understand what the what the message means after reading the message
>a few times. We are trying to do PSTN(as5300) ---> ser -----> pstn
>(AS5300), and to authorize the calling number (callerid) in the INVITE
>message against URI table. But check_from command needs to call
>proxy_authorize, which it requires username and password. we setup the
>configuration like this
>
>if (method=="INVITE" & proxy_authorize("xxx.org", "subscriber")
> if (!check_from()) {
> sl_send_reply("403", "Only registered users are allowed");
> break;
> }
>}
>
>Because cisco does not have sip password setting, so we have
>
>0(3173) check_username(): No authorized credentials found (error in
scripts)
> 0(3173) check_username(): Call {www,proxy}_authorize before calling
check_*
>function !
>
>Does anyone has a solution?
>
>Regards
>
>
>-----Original Message-----
>From: Daniel-Constantin Mierla [mailto:daniel@iptel.org]
>Sent: Friday, March 26, 2004 6:18 PM
>To: Raymond Chen
>Cc: serdev(a)lists.iptel.org
>Subject: Re: [Serdev] check_from
>
>Hello,
>the last error message is self explanatory. You need to call either
>www_authorize() or proxy_authorize() before calling check_from() because
>this method compares the data from From header with what is in
>credentials (response to a authentication challenge).
>
>.Daniel
>
>On 03/26/04 04:35, Raymond Chen wrote:
>
>
>
>>Dear all,
>>
>>We have configured Ser to check from username field to authorize user
>>“unknown”
>>
>>if (!check_from()) {
>>
>>sl_send_reply("403", "Only registered users are allowed");
>>
>>break;
>>
>>};
>>
>>We have error message
>>
>>0(2568) check_username(): No authorized credentials found (error in
>>scripts)
>>
>>0(2568) check_username(): Call {www,proxy}_authorize before calling
>>check_* function !
>>
>>We have “unknown” username entry in uri table.
>>
>>Regards
>>
>>------------------------------------------------------------------------
>>
>>_______________________________________________
>>Serdev mailing list
>>serdev(a)lists.iptel.org
>>http://lists.iptel.org/mailman/listinfo/serdev
>>
>>
>>
>>
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>
>
>
Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
> Hi Klaus,
>
> Thanks for your instaruction, after I do all those steps, the Ser with the
> Digest creditial works fine now.
>
> My Questions is, after I complile and installed the ser, is the Ser database
> installed?
No, the ser database is not installed by "make install". You have to use
the ser_mysql.sh script to create the database.
> Need I to use the serctl create to create the database ser
> database again(from my practice, the Ser DB has been setup after all those
> steps), need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you
are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards,
klaus
>
> Thanks for you advice again.
>
> John
>
>
>
> ----- Original Message -----
> From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
> To: "John LI" <john(a)signalc.com>
> Cc: <serusers(a)lists.iptel.org>
> Sent: Thursday, March 25, 2004 3:07 AM
> Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>>compile ser by calling make:
>># make
>>
>>compile ser modules by calling:
>># make modules
>>
>>compile mysql ser modules by calling:
>># make modules modules=modules/mysql
>>
>>install ser:
>># make install
>>
>>install mysql module:
>># cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
>>
>>
>>regards,
>>klaus
>>
>>John LI wrote:
>>
>>>Dear Sir,
>>>
>>>I am installing the Ser on Redhat 9.0 platform.
>>>
>>>I download ser-0.8.12_src.tar.gz, and compile the souce code, and
>>>install it.
>>>The Ser working fine with out the MySQL enabled.
>>>
>>>I download the MySQL packges from www.mysql.com <http://www.mysql.com>
>>>
>>> MySQL-client-4.0.18-0.i386.rpm
>>> MySQL-server-4.0.18-0.i386.rpm
>>> MySQL-shared-4.0.18-0.i386.rpm
>>>
>>>and install them, and Mysql can start up.
>>>
>>>After this, I download the ser-0.8.12_src.tar.gz
>>>
>>>and try to install it, and it give me out the error messge
>>>error: Failed dependencies:
>>> ser = 0.8.12 is needed by ser-mysql-0.8.12-0
>>>
>>>I don't know what this means.
>>>
>>>BTW, when i enable the MySQL in ser.cfg, it give out the following error
>>>messages:
>>> 0(25007) ERROR: load_module: could not open module
>>></usr/local/lib/ser/modules/mysql.so>:
>>>/usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No
>>>such file or directory
>>>I wonder how can I get the mysql.so module.
>>>
>>>I am the fresh man in using Ser, please give me some instructions.
>>>
>>>John
>>>
>>>
>>>------------------------------------------------------------------------
>>>
>>>_______________________________________________
>>>Serusers mailing list
>>>serusers(a)lists.iptel.org
>>>http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
>
>
Now we understand what the what the message means after reading the message
a few times. We are trying to do PSTN(as5300) ---> ser -----> pstn
(AS5300), and to authorize the calling number (callerid) in the INVITE
message against URI table. But check_from command needs to call
proxy_authorize, which it requires username and password. we setup the
configuration like this
if (method=="INVITE" & proxy_authorize("xxx.org", "subscriber")
if (!check_from()) {
sl_send_reply("403", "Only registered users are allowed");
break;
}
}
Because cisco does not have sip password setting, so we have
0(3173) check_username(): No authorized credentials found (error in scripts)
0(3173) check_username(): Call {www,proxy}_authorize before calling check_*
function !
Does anyone has a solution?
Regards
-----Original Message-----
From: Daniel-Constantin Mierla [mailto:daniel@iptel.org]
Sent: Friday, March 26, 2004 6:18 PM
To: Raymond Chen
Cc: serdev(a)lists.iptel.org
Subject: Re: [Serdev] check_from
Hello,
the last error message is self explanatory. You need to call either
www_authorize() or proxy_authorize() before calling check_from() because
this method compares the data from From header with what is in
credentials (response to a authentication challenge).
.Daniel
On 03/26/04 04:35, Raymond Chen wrote:
> Dear all,
>
> We have configured Ser to check from username field to authorize user
> “unknown”
>
> if (!check_from()) {
>
> sl_send_reply("403", "Only registered users are allowed");
>
> break;
>
> };
>
> We have error message
>
> 0(2568) check_username(): No authorized credentials found (error in
> scripts)
>
> 0(2568) check_username(): Call {www,proxy}_authorize before calling
> check_* function !
>
> We have “unknown” username entry in uri table.
>
> Regards
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Serdev mailing list
>serdev(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serdev
>
>
Hello friends,
I have just recompiled ser modules to include radius.
now, when I launch it every module fails with this error
</usr/lib/ser/modules/sl.so>: /usr/lib/ser/modules/sl.so: undefined symbol: log_facility
this for every module except for mysql.so and sl.so
do I need some more modules in my cfg ?
loadmodule "/usr/lib/ser/modules/mysql.so"
loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"
loadmodule "/usr/lib/ser/modules/group.so"
loadmodule "/usr/lib/ser/modules/acc.so"
loadmodule "/usr/lib/ser/modules/auth.so"
loadmodule "/usr/lib/ser/modules/auth_db.so"
tnx for any help !
--
Best regards,
Alessio mailto:afoc@interconnessioni.it
Ok.
Thanks Jiri.
but it's not clipping. it just plays the wav file RELLY quick, tho, that
could infact be clipping if it cuts of stuff from the file.
*I'll make a wavefile that\s about the double length and see if it
play's it normal*
Do you know know when, or when it could be fixed?
- Atle
* Jiri Kuthan <jiri(a)iptel.org> [040324 13:41]:
> I think Jan has already alerted on that -- SEMS sends media on receipt
> of INVITE whereas some devices don't play them before receipt of 200.
> That would be an obvious explanation to the clipping you mention. We
> may delay sending media till ACK arrives to SEMS.
>
> -jiri
>
> At 01:29 PM 3/24/2004, Atle Samuelsen wrote:
> >Hey guys. Anybody had a problem with that sems is reading a wavefile to
> >quick when you use the announcement module?
> >
> >It's not chopping anything, it just echo\s the sound REALLY quick out to
> >the caller who hit the announcement
> >
> >- Atle
> >
> >_______________________________________________
> >Serusers mailing list
> >serusers(a)lists.iptel.org
> >http://lists.iptel.org/mailman/listinfo/serusers
>
> --
> Jiri Kuthan http://iptel.org/~jiri/
>
>
Dear Sir,
I am installing the Ser on Redhat 9.0 platform.
I download ser-0.8.12_src.tar.gz, and compile the souce code, and install it.
The Ser working fine with out the MySQL enabled.
I download the MySQL packges from www.mysql.com
MySQL-client-4.0.18-0.i386.rpm
MySQL-server-4.0.18-0.i386.rpm
MySQL-shared-4.0.18-0.i386.rpm
and install them, and Mysql can start up.
After this, I download the ser-0.8.12_src.tar.gz
and try to install it, and it give me out the error messge
error: Failed dependencies:
ser = 0.8.12 is needed by ser-mysql-0.8.12-0
I don't know what this means.
BTW, when i enable the MySQL in ser.cfg, it give out the following error messages:
0(25007) ERROR: load_module: could not open module </usr/local/lib/ser/modules/mysql.so>: /usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No such file or directory
I wonder how can I get the mysql.so module.
I am the fresh man in using Ser, please give me some instructions.
John
In this case you either uninstall radiusclient and get the 3.x version
if you want to stick to ser v0.8.12 or move to unstable branch of ser
(you have to take it from cvs server -- see iptel.org/ser/cvs).
Try google to locate an old version of radiusclient library.
.Daniel
On 03/25/04 21:46, Morris, Scott wrote:
>The one referenced in the HowTo no longer exists. So I downloaded the one
>discussed in the listserv back in December - 4.x. So I downloaded and
>installed it.
>
>Scott Morris
>Enterprise Network Engineer
>DOE - ORAU / ORISE
>865-576-4672
>
>
>-----Original Message-----
>From: Daniel-Constantin Mierla [mailto:daniel@iptel.org]
>Sent: Thursday, March 25, 2004 12:47 PM
>To: Morris, Scott
>Subject: Re: [Serusers] Radius
>
>
>Have you checked the radiusclient library version? Which is yours?
>
>Daniel
>
>On 03/25/04 18:32, Morris, Scott wrote:
>
>
>
>>Daniel,
>>
>>Could you take a look at my RADIUS issue I posted? I can't go any
>>further until I can get SER to see RADIUS.
>>
>>Scott Morris
>>Enterprise Network Engineer
>>DOE - ORAU / ORISE
>>865-576-4672
>>
>>
>>-----Original Message-----
>>From: Daniel-Constantin Mierla [mailto:daniel@iptel.org]
>>Sent: Thursday, March 25, 2004 10:51 AM
>>To: Alessio Focardi
>>Cc: serusers(a)lists.iptel.org
>>Subject: Re: [Serusers] Radius
>>
>>
>>Hello,
>>
>>On 03/25/04 16:42, Alessio Focardi wrote:
>>
>>
>>
>>
>>
>>>Hello Daniel-Constantin,
>>>
>>>DCM> do you want to do both mysql and radius accounting? It should
>>>DCM> work
>>>DCM> together, just compile the module with the two modes enabled and
>>>DCM> set the same value for radius_flag and db_flag parameters.
>>>
>>>I would like to have sip user db in mysql and call log in radius.
>>>
>>>
>>>
>>>
>>>
>>>
>>that works. You don't need to compile acc with database support, just
>>with RADIUS.
>>
>>
>>
>>
>>
>>>Anyway compiling acc module with
>>>
>>># uncomment the next two lines if you wish to enable RADIUS accounting
>>>DEFS+=-DRAD_ACC
>>>LIBS=-L$(LOCALBASE)/lib -lradiusclient
>>>
>>>results in
>>>
>>>
>>>
>>>
>>>
>>>
>>All these errors are due to the fact you have incompatible version of
>>radiusclient library. You have radiusclient 4.1 installed and it should
>>be 3.x or the other way around -- I am not sure which, but you can find
>>it on the mailing list archive (google does a very good searching job
>>when you append site:mail.iptel.org to any of the errors below).
>>
>>.Daniel
>>
>>
>>
>>
>>
>>>make[1]: Entering directory `/usr/src/sip_router/modules/acc'
>>>make[1]: Leaving directory `/usr/src/sip_router/modules/acc'
>>>make[1]: Entering directory `/usr/src/sip_router/modules/acc' gcc
>>>-fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall
>>>
>>>
>>>
>>>
>>-minline-all-stringops -malign-double -falign-loops -mcpu=athlon
>>-DNAME='"ser"' -DVERSION='"0.8.12-tcp_nonb"' -DARCH='"i386"'
>>-DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux
>>-DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP
>>-DDNS_IP_HACK -DUSE_IPV6 -DUSE_TCP -DDISABLE_NAGLE -DF_MALLOC
>>-DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024
>>-DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD
>>-DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DRAD_ACC -c acc.c -o
>>acc.o
>>
>>
>>
>>
>>>acc.c: In function `acc_rad_request':
>>>acc.c:576:
>>>acc.c:576: warning: passing arg 2 of `rc_avpair_add' makes pointer
>>>from
>>>
>>>
>>>
>>>
>>integer without a cast
>>
>>
>>
>>
>>>acc.c:576: warning: passing arg 3 of `rc_avpair_add' makes integer
>>>from
>>>
>>>
>>>
>>>
>>pointer without a cast
>>
>>
>>
>>
>>>acc.c:576: error: too few arguments to function `rc_avpair_add'
>>>
>>>and more errors ....
>>>
>>>any guess ? tnx !
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>_______________________________________________
>>Serusers mailing list
>>serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
>>
>>
>>
>
>
>
it depends on your setup: at least you have to open port 5060 on the PC
running ser. if you want to use rtpproxy as well (for NAT traversal),
you have to open the ports used by the rtpproxy (port range is defined
in the source code).
regards,
klaus
PS: Please always cc: to the list
listas iPfone wrote:
> Ok
>
> Thank you for your reply.
>
> It seems that the only way to have a working sip server is with a real ip
> adress and a domain pointing to the same server..
>
> Only one more question, about security.. what kind of configuration i have
> to do to protect the machine running ser?
>
> I think that only openning port UDP 5060 will not do the job.. i´m rigth?
> and the rtp ... all clients have to use the same range of ports?
>
> regards
>
> Cláudio
>
> ----- Original Message -----
> From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
> To: "iPfone Telefonia IP" <info(a)ipfone.com.br>
> Cc: <serusers(a)lists.iptel.org>
> Sent: Thursday, March 25, 2004 8:10 AM
> Subject: Re: [Serusers] simple sip server
>
>
>
>>I'm sure your service will cause a lot of problems until you get an
>>static IP address. Lots of clients resolve the IP address only at
>>startup which will cause many problems if your IP address changes.
>>
>>Also having ser behind a NAT will cause lots of problems.
>>
>>regards,
>>Klaus
>>
>>iPfone Telefonia IP wrote:
>>
>>
>>>Hi!
>>>
>>>I only want to set up a sip server to let people here in my city
>>>register and have a sip adress like iptel.org do , the simplest setup
>>>possible.
>>>
>>>I have a dyn domain (sipserver.com.br) that i want to use to do
>>>that...and i have a dynamic ip. The ser machine will be behind a nat wit
>>>an ix66.
>>>
>>>Some one can give a way on how to set up it?
>>>
>>>I can make it with the basic ser.conf and ser web?
>>>
>>>I need some extras?
>>>
>>>Thanks for all
>>>
>>>Claudio
>>>
>>>
>>>------------------------------------------------------------------------
>>>
>>>_______________________________________________
>>>Serusers mailing list
>>>serusers(a)lists.iptel.org
>>>http://lists.iptel.org/mailman/listinfo/serusers
>>
>>_______________________________________________
>>Serusers mailing list
>>serusers(a)lists.iptel.org
>>http://lists.iptel.org/mailman/listinfo/serusers
>>
>
>
>
Dear friends,
I have a working installation of ser 0_8_12 that I would like to
integrate with radius accounting for call login/bill.
I have read the tutorial, but is not clear to me if I can account
with mysql (like I'm doing now) and log calls with radius ...
Any help will be appreciated ! tnx !
--
Best regards,
Alessio mailto:afoc@interconnessioni.it
