Hi!
I'm not sure about this, but I think the problem is that the hashed password also include an random generated string.
What you can do is to authenticate only on the first server and trust the request automaticall if REGISTER request comes from the other server.
regards, klaus
John LI wrote:
Hi Klaus,
Thanks for your response, I have another question: I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no problem to make call to each other, but when I try to registered 2 sip client on the different machine, the problem happend.
For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20
I changed ser.cfg in ser A as
if (!src_ip==192.168.0.20) { log("*****replicate***"); t_replicate("192.168.0.20", "5060");
and on B
if (!src_ip==192.168.0.10) { log("*****replicate***"); t_replicate("192.168.0.10", "5060");
And when I try to regiseter SIP client on A, it can register on A, then the Ser A will send a Register request to B like this:
U 192.168.0.10:5060 -> 192.168.0.20:5060 REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route: <sip:192.168.0.10;ftag=35a 3@ny1.signalc.com..From: 3001sip:3001@ny1.signalc.com;user=phone;tag=35adc-1 =phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f. 060..Contact: sip:3001@192.168.0.30:5060;user=phone..Max-Forwards: 69..User- ..Expires: 900..Supported: timer..Authorization: Digest username="3001",realm=
,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d 50
U 192.168.0.20:5060 -> 192.168.0.10:5060 SIP/2.0 401 Unauthorized..Call-ID: 55af-6a37c-4000fbb3@ny1.signalc.com..From: ag=35adc-1408..To: 3001sip:3001@ny1.signalc.com;user=phone;tag=b27e1a1d33761 R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via: SIP/2.0/U est realm="ny1.signalc.com", nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4". inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback tell c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate the 3001 although the 3001 has the same user ID and Password on the Ser B.
I wonder if the modification on the ser.cfg is correct, should I do more things for this?
Thanks
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: "Serusers" serusers@lists.iptel.org Sent: Friday, March 26, 2004 4:36 AM Subject: Re: [Serusers] The problem when enable the MySql
Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
Hi Klaus,
Thanks for your instaruction, after I do all those steps, the Ser with
the
Digest creditial works fine now.
My Questions is, after I complile and installed the ser, is the Ser
database
installed?
No, the ser database is not installed by "make install". You have to use the ser_mysql.sh script to create the database.
Need I to use the serctl create to create the database ser database again(from my practice, the Ser DB has been setup after all
those
steps), need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards, klaus
Thanks for you advice again.
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: serusers@lists.iptel.org Sent: Thursday, March 25, 2004 3:07 AM Subject: Re: [Serusers] The problem when enable the MySql
compile ser by calling make: # make
compile ser modules by calling: # make modules
compile mysql ser modules by calling: # make modules modules=modules/mysql
install ser: # make install
install mysql module: # cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
regards, klaus
John LI wrote:
Dear Sir,
I am installing the Ser on Redhat 9.0 platform.
I download ser-0.8.12_src.tar.gz, and compile the souce code, and install it. The Ser working fine with out the MySQL enabled.
I download the MySQL packges from www.mysql.com http://www.mysql.com
MySQL-client-4.0.18-0.i386.rpm MySQL-server-4.0.18-0.i386.rpm MySQL-shared-4.0.18-0.i386.rpm
and install them, and Mysql can start up.
After this, I download the ser-0.8.12_src.tar.gz
and try to install it, and it give me out the error messge error: Failed dependencies: ser = 0.8.12 is needed by ser-mysql-0.8.12-0
I don't know what this means.
BTW, when i enable the MySQL in ser.cfg, it give out the following
error
messages: 0(25007) ERROR: load_module: could not open module </usr/local/lib/ser/modules/mysql.so>: /usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No such file or directory I wonder how can I get the mysql.so module.
I am the fresh man in using Ser, please give me some instructions.
John
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
the secret-generation password is by default random. For use with SIP-based replication, it must be congigured to same value on both hosts. The example in SER documentation actually shows it. (Note too that you need to enable some additional tools if you wish to have both replication and NAT traversal working.)
-jiri
At 12:15 AM 3/27/2004, Klaus Darilion wrote:
Hi Klaus, Thanks for your response, I have another question: I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no problem to make call to each other, but when I try to registered 2 sip client on the different machine, the problem happend. For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20 I changed ser.cfg in ser A as if (!src_ip==192.168.0.20) { log("*****replicate***"); t_replicate("192.168.0.20", "5060"); and on B if (!src_ip==192.168.0.10) { log("*****replicate***"); t_replicate("192.168.0.10", "5060"); And when I try to regiseter SIP client on A, it can register on A, then the Ser A will send a Register request to B like this: U 192.168.0.10:5060 -> 192.168.0.20:5060 REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route: <sip:192.168.0.10;ftag=35a 3@ny1.signalc.com..From: 3001sip:3001@ny1.signalc.com;user=phone;tag=35adc-1 =phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f. 060..Contact: sip:3001@192.168.0.30:5060;user=phone..Max-Forwards: 69..User- ..Expires: 900..Supported: timer..Authorization: Digest username="3001",realm= ,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d 50 U 192.168.0.20:5060 -> 192.168.0.10:5060 SIP/2.0 401 Unauthorized..Call-ID: 55af-6a37c-4000fbb3@ny1.signalc.com..From: ag=35adc-1408..To: 3001sip:3001@ny1.signalc.com;user=phone;tag=b27e1a1d33761 R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via: SIP/2.0/U est realm="ny1.signalc.com", nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4". inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback tell c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate the 3001 although the 3001 has the same user ID and Password on the Ser B. I wonder if the modification on the ser.cfg is correct, should I do more things for this? Thanks John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: "Serusers" serusers@lists.iptel.org Sent: Friday, March 26, 2004 4:36 AM Subject: Re: [Serusers] The problem when enable the MySql
Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
Hi Klaus,
Thanks for your instaruction, after I do all those steps, the Ser with
the
Digest creditial works fine now.
My Questions is, after I complile and installed the ser, is the Ser
database
installed?
No, the ser database is not installed by "make install". You have to use the ser_mysql.sh script to create the database.
Need I to use the serctl create to create the database ser database again(from my practice, the Ser DB has been setup after all
those
steps), need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards, klaus
Thanks for you advice again.
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: serusers@lists.iptel.org Sent: Thursday, March 25, 2004 3:07 AM Subject: Re: [Serusers] The problem when enable the MySql
compile ser by calling make: # make
compile ser modules by calling: # make modules
compile mysql ser modules by calling: # make modules modules=modules/mysql
install ser: # make install
install mysql module: # cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
regards, klaus
John LI wrote:
Dear Sir,
I am installing the Ser on Redhat 9.0 platform.
I download ser-0.8.12_src.tar.gz, and compile the souce code, and install it. The Ser working fine with out the MySQL enabled.
I download the MySQL packges from www.mysql.com http://www.mysql.com
MySQL-client-4.0.18-0.i386.rpm MySQL-server-4.0.18-0.i386.rpm MySQL-shared-4.0.18-0.i386.rpm
and install them, and Mysql can start up.
After this, I download the ser-0.8.12_src.tar.gz
and try to install it, and it give me out the error messge error: Failed dependencies: ser = 0.8.12 is needed by ser-mysql-0.8.12-0
I don't know what this means.
BTW, when i enable the MySQL in ser.cfg, it give out the following
error
messages: 0(25007) ERROR: load_module: could not open module </usr/local/lib/ser/modules/mysql.so>: /usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No such file or directory I wonder how can I get the mysql.so module.
I am the fresh man in using Ser, please give me some instructions.
John
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
-- Jiri Kuthan http://iptel.org/~jiri/
What do you mean by "tools"? For symmetric NATs, the proxy that sends the request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
regards, Klaus
Jiri Kuthan wrote:
the secret-generation password is by default random. For use with SIP-based replication, it must be congigured to same value on both hosts. The example in SER documentation actually shows it. (Note too that you need to enable some additional tools if you wish to have both replication and NAT traversal working.)
-jiri
At 12:15 AM 3/27/2004, Klaus Darilion wrote:
Hi Klaus, Thanks for your response, I have another question: I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no problem to make call to each other, but when I try to registered 2 sip client on the different machine, the problem happend. For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20 I changed ser.cfg in ser A as if (!src_ip==192.168.0.20) { log("*****replicate***"); t_replicate("192.168.0.20", "5060"); and on B if (!src_ip==192.168.0.10) { log("*****replicate***"); t_replicate("192.168.0.10", "5060"); And when I try to regiseter SIP client on A, it can register on A, then the Ser A will send a Register request to B like this: U 192.168.0.10:5060 -> 192.168.0.20:5060 REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route: <sip:192.168.0.10;ftag=35a 3@ny1.signalc.com..From: 3001sip:3001@ny1.signalc.com;user=phone;tag=35adc-1 =phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f. 060..Contact: sip:3001@192.168.0.30:5060;user=phone..Max-Forwards: 69..User- ..Expires: 900..Supported: timer..Authorization: Digest username="3001",realm= ,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d 50 U 192.168.0.20:5060 -> 192.168.0.10:5060 SIP/2.0 401 Unauthorized..Call-ID: 55af-6a37c-4000fbb3@ny1.signalc.com..From: ag=35adc-1408..To: 3001sip:3001@ny1.signalc.com;user=phone;tag=b27e1a1d33761 R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via: SIP/2.0/U est realm="ny1.signalc.com", nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4". inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback tell c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate the 3001 although the 3001 has the same user ID and Password on the Ser B. I wonder if the modification on the ser.cfg is correct, should I do more things for this? Thanks John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: "Serusers" serusers@lists.iptel.org Sent: Friday, March 26, 2004 4:36 AM Subject: Re: [Serusers] The problem when enable the MySql
Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
Hi Klaus,
Thanks for your instaruction, after I do all those steps, the Ser with
the
Digest creditial works fine now.
My Questions is, after I complile and installed the ser, is the Ser
database
installed?
No, the ser database is not installed by "make install". You have to use the ser_mysql.sh script to create the database.
Need I to use the serctl create to create the database ser database again(from my practice, the Ser DB has been setup after all
those
steps), need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards, klaus
Thanks for you advice again.
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: serusers@lists.iptel.org Sent: Thursday, March 25, 2004 3:07 AM Subject: Re: [Serusers] The problem when enable the MySql
compile ser by calling make: # make
compile ser modules by calling: # make modules
compile mysql ser modules by calling: # make modules modules=modules/mysql
install ser: # make install
install mysql module: # cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
regards, klaus
John LI wrote:
>Dear Sir, > >I am installing the Ser on Redhat 9.0 platform. > >I download ser-0.8.12_src.tar.gz, and compile the souce code, and >install it. >The Ser working fine with out the MySQL enabled. > >I download the MySQL packges from www.mysql.com http://www.mysql.com > >MySQL-client-4.0.18-0.i386.rpm >MySQL-server-4.0.18-0.i386.rpm >MySQL-shared-4.0.18-0.i386.rpm > >and install them, and Mysql can start up. > >After this, I download the ser-0.8.12_src.tar.gz > >and try to install it, and it give me out the error messge >error: Failed dependencies: > ser = 0.8.12 is needed by ser-mysql-0.8.12-0 > >I don't know what this means. > >BTW, when i enable the MySQL in ser.cfg, it give out the following
error
>messages: >0(25007) ERROR: load_module: could not open module ></usr/local/lib/ser/modules/mysql.so>: >/usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No >such file or directory >I wonder how can I get the mysql.so module. > >I am the fresh man in using Ser, please give me some instructions. > >John >
>_______________________________________________ >Serusers mailing list >serusers@lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
-- Jiri Kuthan http://iptel.org/~jiri/
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends the request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so, hearbeat one of them, VRRP another one and potentialy some more.
-jiri
Do I have to start/restart ser after an IP takeover or is it somehow possible to configue the virtual IP address in advance so that ser uses this IP address as soon as it becomes available?
Klaus
Jiri Kuthan wrote:
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends the request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so, hearbeat one of them, VRRP another one and potentialy some more.
-jiri
Try:
listen=<your.ha.ip.address>
in ser.cfg
Alex
--On 28 March 2004 13:50 +0200 Klaus Darilion klaus.mailinglists@pernau.at wrote:
Do I have to start/restart ser after an IP takeover or is it somehow possible to configue the virtual IP address in advance so that ser uses this IP address as soon as it becomes available?
Alex
In this case, ser will only start up if this machine currently serves the virtual IP address. Therefore I guess it is a "must" to restart ser after IP takeover to serve also the virtual IP.
klaus
Alex Bligh wrote:
Try:
listen=<your.ha.ip.address>
in ser.cfg
Alex
--On 28 March 2004 13:50 +0200 Klaus Darilion klaus.mailinglists@pernau.at wrote:
Do I have to start/restart ser after an IP takeover or is it somehow possible to configue the virtual IP address in advance so that ser uses this IP address as soon as it becomes available?
Alex
--On 28 March 2004 14:56 +0200 Klaus Darilion klaus.mailinglists@pernau.at wrote:
In this case, ser will only start up if this machine currently serves the virtual IP address. Therefore I guess it is a "must" to restart ser after IP takeover to serve also the virtual IP.
heartbeat (or whatever) should /start/ (not restart) ser for you, running on the ha IP address.
Alex
On Mar 28, 2004 at 14:56, Klaus Darilion klaus.mailinglists@pernau.at wrote:
In this case, ser will only start up if this machine currently serves the virtual IP address. Therefore I guess it is a "must" to restart ser after IP takeover to serve also the virtual IP.
You can have the interface with the virtual ip in the down state and bring it up after the take-over. Ser can start listening on a downed interface.
Andrei
Hi Klaus and Jiri,
I have compiled Free Radius server and Radius client, and installed them in the same machine with the Ser.
I check the Radius server by using Radius client, and it works file with the testing.
I read the folloing message from the RadiusHowto: "SIP Express Router can be configured to use RADIUS server for authentication, accounting, and group membership checking. Since configuration of RADIUS seems to be a common source of problems, we decided to put together this howto. "
My Question: If I installed the Free Radius server, is the acc module has been installed as well, How could I configure the Ser to create the CDR, is the CDR in the log file, or Can I create the CDR table in the Mysql DB?
Thanks for you help.
Regards
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "Jiri Kuthan" jiri@iptel.org Cc: "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Sunday, March 28, 2004 3:50 AM Subject: NAT traversal with redundant server (The problem when enable the MySql)
Do I have to start/restart ser after an IP takeover or is it somehow possible to configue the virtual IP address in advance so that ser uses this IP address as soon as it becomes available?
Klaus
Jiri Kuthan wrote:
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
On 29-03 15:16, John LI wrote:
My Question: If I installed the Free Radius server, is the acc module has been installed as well, How could I configure the Ser to create the CDR, is the CDR in the log file, or Can I create the CDR table in the Mysql DB?
Yes, you have to use acc module if you want to generate CDR. By default acc module uses syslog to report this information, if you want the CDR to go to the database or radius then you have to edit sip_router/modules/acc/Makefile, uncomment radius and/or database settings and recompile the module. See sip_router/modules/acc/README for more details.
Jan.
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar ball in the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file you mentioned like sip_router/modules/acc/Makefile?
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase when I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
The third issue is , if I just want the database accounting, no need for Radius Accounting, should I still uncomment the line concerened with Radius accounting, can I just uncomment line concerned with the database accounting?
The fourth issue is, I have load the acc.so in in the ser.cfg, it supposed to use the syslog to write the cdr in the Syslog file, is that right? which file I should looking for the CDR information.
Thanks for you help
Regards
John
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "John LI" john@signalc.com Cc: "Klaus Darilion" klaus.mailinglists@pernau.at; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Tuesday, March 30, 2004 4:45 AM Subject: Re: [Serusers] CDR Issue
On 29-03 15:16, John LI wrote:
My Question: If I installed the Free Radius server, is the acc module
has
been installed as well, How could I configure the Ser to create the CDR,
is
the CDR in the log file, or Can I create the CDR table in the Mysql DB?
Yes, you have to use acc module if you want to generate CDR. By default acc module uses syslog to report this information, if you want the CDR to go to the database or radius then you have to edit sip_router/modules/acc/Makefile, uncomment radius and/or database settings and recompile the module. See sip_router/modules/acc/README for more details.
Jan.
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar ball in the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file you mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase when I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database accounting, no need for Radius Accounting, should I still uncomment the line concerened with Radius accounting, can I just uncomment line concerned with the database accounting?
Uncomment just database related lines if you want database accounting only.
The fourth issue is, I have load the acc.so in in the ser.cfg, it supposed to use the syslog to write the cdr in the Syslog file, is that right? which file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the distribution).
Jan.
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the acc , subscriber, location tables, I would like to know how to write the information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "John LI" john@signalc.com Cc: "Klaus Darilion" klaus.mailinglists@pernau.at; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:20 AM Subject: Re: [Serusers] CDR Issue
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase
when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database accounting, no need for Radius Accounting, should I still uncomment the line concerened with
Radius
accounting, can I just uncomment line concerned with the database accounting?
Uncomment just database related lines if you want database accounting only.
The fourth issue is, I have load the acc.so in in the ser.cfg, it
supposed
to use the syslog to write the cdr in the Syslog file, is that right?
which
file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the distribution).
Jan.
missed_calls can be filled also by the acc module -> see the parameters in the README file of the acc module.
Klaus
John LI wrote:
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the acc , subscriber, location tables, I would like to know how to write the information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "John LI" john@signalc.com Cc: "Klaus Darilion" klaus.mailinglists@pernau.at; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:20 AM Subject: Re: [Serusers] CDR Issue
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase
when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database accounting, no need for Radius Accounting, should I still uncomment the line concerened with
Radius
accounting, can I just uncomment line concerned with the database accounting?
Uncomment just database related lines if you want database accounting only.
The fourth issue is, I have load the acc.so in in the ser.cfg, it
supposed
to use the syslog to write the cdr in the Syslog file, is that right?
which
file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the distribution).
Jan.
Hi Klaus,
I have tried to install the serweb on to the system, and after i try to go to the http://localhost/installed-folder/html/admin/index.php, I got the error message: Fatal error: Call to undefined function: mysql_pconnect() in /var/www/html/serweb_2004-01-04/phplib/db_mysql.inc on line 73
It is becuase I need to install the PHP4 on the server, and if it is so, how can I to make sure the PHP4 I installed on the server support the Mysql feature?
Thanks for your help.
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: "Jan Janak" jan@iptel.org; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:54 AM Subject: Re: [Serusers] CDR Issue
missed_calls can be filled also by the acc module -> see the parameters in the README file of the acc module.
Klaus
John LI wrote:
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the
acc
, subscriber, location tables, I would like to know how to write the information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "John LI" john@signalc.com Cc: "Klaus Darilion" klaus.mailinglists@pernau.at; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:20 AM Subject: Re: [Serusers] CDR Issue
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase
when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database accounting, no need
for
Radius Accounting, should I still uncomment the line concerened with
Radius
accounting, can I just uncomment line concerned with the database accounting?
Uncomment just database related lines if you want database accounting only.
The fourth issue is, I have load the acc.so in in the ser.cfg, it
supposed
to use the syslog to write the cdr in the Syslog file, is that right?
which
file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the distribution).
Jan.
I guess you haven't installed all the mysql libraries, maybe some php_mysql stuff is missing.
$ php -v will give you your version!
klaus
John LI wrote:
Hi Klaus,
I have tried to install the serweb on to the system, and after i try to go to the http://localhost/installed-folder/html/admin/index.php, I got the error message: Fatal error: Call to undefined function: mysql_pconnect() in /var/www/html/serweb_2004-01-04/phplib/db_mysql.inc on line 73
It is becuase I need to install the PHP4 on the server, and if it is so, how can I to make sure the PHP4 I installed on the server support the Mysql feature?
Thanks for your help.
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalc.com Cc: "Jan Janak" jan@iptel.org; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:54 AM Subject: Re: [Serusers] CDR Issue
missed_calls can be filled also by the acc module -> see the parameters in the README file of the acc module.
Klaus
John LI wrote:
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the
acc
, subscriber, location tables, I would like to know how to write the information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message ----- From: "Jan Janak" jan@iptel.org To: "John LI" john@signalc.com Cc: "Klaus Darilion" klaus.mailinglists@pernau.at; "Jiri Kuthan" jiri@iptel.org; "Serusers" serusers@lists.iptel.org Sent: Wednesday, March 31, 2004 5:20 AM Subject: Re: [Serusers] CDR Issue
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
the /home/alan/, then I changed the Makefile in /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module, dose that mean recompile the acc.so module itself or recomplie the whole ser? Becuase
when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database accounting, no need
for
Radius Accounting, should I still uncomment the line concerened with
Radius
accounting, can I just uncomment line concerned with the database accounting?
Uncomment just database related lines if you want database accounting only.
The fourth issue is, I have load the acc.so in in the ser.cfg, it
supposed
to use the syslog to write the cdr in the Syslog file, is that right?
which
file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the distribution).
Jan.
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied in /var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends the
request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
you can change the problem by giving rw access to /tmp/ser_fifo for everybody. But this of course is a security risk if there are other useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after startup /usr/local/sbin/ser -h should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied in /var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends the
request to the UA must have the same IP address as the proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat) is the only way (except UAs which can register at multiple proxies). Is there any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalphone.com Cc: "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org; "Jiri Kuthan" jiri@iptel.org Sent: Tuesday, April 27, 2004 11:30 AM Subject: Re: serweb issu
you can change the problem by giving rw access to /tmp/ser_fifo for everybody. But this of course is a security risk if there are other useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after startup /usr/local/sbin/ser -h should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this
problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the
request to the UA must have the same IP address as the proxy that
received
the REGISTER request - so I thought of using IP takeover (heartbeat) is
the
only way (except UAs which can register at multiple proxies). Is there
any
other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
That's not all - because next time you restart ser, ser will set the permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser. I'm starting ser with: ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the permissions of the fifo.
This works fine for me with ser 0.8.12 stable. recently there were some changes to the fifo and user/group switching in unstable ser. So, I don't know if this also works with unstable ser.
regards klaus
John LI wrote:
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalphone.com Cc: "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org; "Jiri Kuthan" jiri@iptel.org Sent: Tuesday, April 27, 2004 11:30 AM Subject: Re: serweb issu
you can change the problem by giving rw access to /tmp/ser_fifo for everybody. But this of course is a security risk if there are other useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after startup /usr/local/sbin/ser -h should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this
problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the
request to the UA must have the same IP address as the proxy that
received
the REGISTER request - so I thought of using IP takeover (heartbeat) is
the
only way (except UAs which can register at multiple proxies). Is there
any
other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
It's called fifo_mode=777 :-)
- Atle
* Klaus Darilion klaus.mailinglists@pernau.at [040427 21:40]:
That's not all - because next time you restart ser, ser will set the permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser. I'm starting ser with: ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the permissions of the fifo.
This works fine for me with ser 0.8.12 stable. recently there were some changes to the fifo and user/group switching in unstable ser. So, I don't know if this also works with unstable ser.
regards klaus
John LI wrote:
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalphone.com Cc: "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org; "Jiri Kuthan" jiri@iptel.org Sent: Tuesday, April 27, 2004 11:30 AM Subject: Re: serweb issu
you can change the problem by giving rw access to /tmp/ser_fifo for everybody. But this of course is a security risk if there are other useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after startup /usr/local/sbin/ser -h should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this
problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the
request to the UA must have the same IP address as the proxy that
received
the REGISTER request - so I thought of using IP takeover (heartbeat) is
the
only way (except UAs which can register at multiple proxies). Is there
any
other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
That's exactly what I'm asking on the other mail. Since the introduction of daemonize() function, the fifo file is always own by root even I instruct SER to run as say 'ser'. The problem lies on the do_suid() sequence in the main.c file.
To me, if we change uid and/or group id to a less privileged user, the fifo file should be created under the new user's permission as well. Here is what I've changed to suit my environment. See the sequence of the ------> line.
---- Before ---- /* intialize fifo server -- we need to open the fifo before * do_suid() and start the fifo server after all the socket * are initialized, to inherit them*/ if (init_fifo_server()<0) { LOG(L_ERR, "initializing fifo server failed\n"); goto error; } /* Initialize Unix domain socket server */ if (init_unixsock_socket()<0) { LOG(L_ERR, "Error while creating unix domain sockets\n"); goto error; } --------> if (do_suid()==-1) goto error; /* try to drop priviledges */ /* process_no now initialized to zero -- increase from now on as new processes are forked (while skipping 0 reserved for main */
---- After ---- --------> if (do_suid()==-1) goto error; /* try to drop priviledges */ /* intialize fifo server -- we need to open the fifo before * do_suid() and start the fifo server after all the socket * are initialized, to inherit them*/ if (init_fifo_server()<0) { LOG(L_ERR, "initializing fifo server failed\n"); goto error; } /* Initialize Unix domain socket server */ if (init_unixsock_socket()<0) { LOG(L_ERR, "Error while creating unix domain sockets\n"); goto error; } ----
Sorry, I do not know how to do that 'cvs diff' kind of thing. So, the cum's bit above. Not sure whether the CVS source will be changed either. There must be a reason the author do it that way. In my opinion, no offence, it's a bug but I'm open to discussion.
Zeus
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Klaus Darilion Sent: Wednesday, 28 April 2004 5:40 AM To: John LI Cc: Jiri Kuthan; Serusers; John LI Subject: [Serusers] Re: serweb issu
That's not all - because next time you restart ser, ser will set the permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser. I'm starting ser with: ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the permissions of the fifo.
This works fine for me with ser 0.8.12 stable. recently there were some changes to the fifo and user/group switching in unstable ser. So, I don't know if this also works with unstable ser.
regards klaus
John LI wrote:
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "John LI" john@signalphone.com Cc: "John LI" john@signalc.com; "Serusers"
serusers@lists.iptel.org; "Jiri
Kuthan" jiri@iptel.org Sent: Tuesday, April 27, 2004 11:30 AM Subject: Re: serweb issu
you can change the problem by giving rw access to /tmp/ser_fifo for everybody. But this of course is a security risk if there are other useres which have access to the server.
You can overcome this by changing the userid and groupid of
ser after
startup /usr/local/sbin/ser -h should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then
apache can
write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this
problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message ----- From: "Jiri Kuthan" jiri@iptel.org To: "Klaus Darilion" klaus.mailinglists@pernau.at; "John LI" john@signalc.com; "Serusers" serusers@lists.iptel.org Sent: Saturday, March 27, 2004 5:46 PM Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the
request to the UA must have the same IP address as the proxy that
received
the REGISTER request - so I thought of using IP takeover
(heartbeat)
is
the
only way (except UAs which can register at multiple proxies). Is there
any
other way to solve this problem?
no, you need to take-over IP. There are different tools
to achieve
so,
hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
-
Alex Bligh -
Andrei Pelinescu-Onciul -
Atle Samuelsen -
Jan Janak -
Jiri Kuthan -
John LI -
John LI -
Klaus Darilion -
Zeus Ng