27 Mar
2004
27 Mar
'04
12:15 a.m.
Hi!
I'm not sure about this, but I think the problem is that the hashed
password also include an random generated string.
What you can do is to authenticate only on the first server and trust
the request automaticall if REGISTER request comes from the other server.
regards,
klaus
John LI wrote:
Hi Klaus,
Thanks for your response, I have another question:
I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on
both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no
problem to make call to each other, but when I try to registered 2 sip
client on the different machine, the problem happend.
For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20
I changed ser.cfg in ser A as
if (!src_ip==192.168.0.20) {
log("*****replicate***");
t_replicate("192.168.0.20", "5060");
and on B
if (!src_ip==192.168.0.10) {
log("*****replicate***");
t_replicate("192.168.0.10", "5060");
And when I try to regiseter SIP client on A, it can register on A, then the
Ser A will send a Register request to B like this:
U 192.168.0.10:5060 -> 192.168.0.20:5060
REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route:
<sip:192.168.0.10;ftag=35a
3@ny1.signalc.com..From:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=35adc-1
=phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP
192.168.0.10;branch=z9hG4bK247f.
060..Contact: <sip:3001@192.168.0.30:5060;user=phone>..Max-Forwards:
69..User-
..Expires: 900..Supported: timer..Authorization: Digest
username="3001",realm=
,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d
50
U 192.168.0.20:5060 -> 192.168.0.10:5060
SIP/2.0 401 Unauthorized..Call-ID:
55af-6a37c-4000fbb3@ny1.signalc.com..From:
ag=35adc-1408..To:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=b27e1a1d33761
R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via:
SIP/2.0/U
est realm="ny1.signalc.com",
nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4".
inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback
tell
c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com
via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate
the 3001 although the 3001 has the same user ID and Password on the Ser B.
I wonder if the modification on the ser.cfg is correct, should I do more
things for this?
Thanks
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalc.com>
Cc: "Serusers" <serusers(a)lists.iptel.org>
Sent: Friday, March 26, 2004 4:36 AM
Subject: Re: [Serusers] The problem when enable the MySql
those
error
Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
>Hi Klaus,
>
>Thanks for your instaruction, after I do all those steps, the Ser with
the
>Digest creditial works fine now.
>
>My Questions is, after I complile and installed the ser, is the Ser
database
installed?
No, the ser database is not installed by "make install". You have to use
the ser_mysql.sh script to create the database.
>Need I to use the serctl create to create the database ser
>database again(from my practice, the Ser DB has been setup after all steps),
need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you
are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards,
klaus
>Thanks for you advice again.
>
>John
>
>
>
>----- Original Message -----
>From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
>To: "John LI" <john(a)signalc.com>
>Cc: <serusers(a)lists.iptel.org>
>Sent: Thursday, March 25, 2004 3:07 AM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>>compile ser by calling make:
>># make
>>
>>compile ser modules by calling:
>># make modules
>>
>>compile mysql ser modules by calling:
>># make modules modules=modules/mysql
>>
>>install ser:
>># make install
>>
>>install mysql module:
>># cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
>>
>>
>>regards,
>>klaus
>>
>>John LI wrote:
>>
>>
>>>Dear Sir,
>>>
>>>I am installing the Ser on Redhat 9.0 platform.
>>>
>>>I download ser-0.8.12_src.tar.gz, and compile the souce code, and
>>>install it.
>>>The Ser working fine with out the MySQL enabled.
>>>
>>>I download the MySQL packges from www.mysql.com <http://www.mysql.com>
>>>
>>>MySQL-client-4.0.18-0.i386.rpm
>>>MySQL-server-4.0.18-0.i386.rpm
>>>MySQL-shared-4.0.18-0.i386.rpm
>>>
>>>and install them, and Mysql can start up.
>>>
>>>After this, I download the ser-0.8.12_src.tar.gz
>>>
>>>and try to install it, and it give me out the error messge
>>>error: Failed dependencies:
>>> ser = 0.8.12 is needed by ser-mysql-0.8.12-0
>>>
>>>I don't know what this means.
>>>
>>>BTW, when i enable the MySQL in ser.cfg, it give out the following
>>messages:
>>0(25007) ERROR: load_module: could not open module
>></usr/local/lib/ser/modules/mysql.so>:
>>/usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No
>>such file or directory
>>I wonder how can I get the mysql.so module.
>>
>>I am the fresh man in using Ser, please give me some instructions.
>>
>>John
>>
>>
------------------------------------------------------------------------
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
27 Mar
27 Mar
9:46 a.m.
New subject: [Serusers] The problem when enable the MySql
the secret-generation password is by default random. For use with SIP-based
replication, it must be congigured to same value on both hosts. The example
in SER documentation actually shows it. (Note too that you need to enable
some additional tools if you wish to have both replication and NAT traversal
working.)
-jiri
At 12:15 AM 3/27/2004, Klaus Darilion wrote:
--
Jiri Kuthan http://iptel.org/~jiri/
Hi Klaus,
Thanks for your response, I have another question:
I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on
both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no
problem to make call to each other, but when I try to registered 2 sip
client on the different machine, the problem happend.
For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20
I changed ser.cfg in ser A as
if (!src_ip==192.168.0.20) {
log("*****replicate***");
t_replicate("192.168.0.20", "5060");
and on B
if (!src_ip==192.168.0.10) {
log("*****replicate***");
t_replicate("192.168.0.10", "5060");
And when I try to regiseter SIP client on A, it can register on A, then the
Ser A will send a Register request to B like this:
U 192.168.0.10:5060 -> 192.168.0.20:5060
REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route:
<sip:192.168.0.10;ftag=35a
3@ny1.signalc.com..From:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=35adc-1
=phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP
192.168.0.10;branch=z9hG4bK247f.
060..Contact: <sip:3001@192.168.0.30:5060;user=phone>..Max-Forwards:
69..User-
..Expires: 900..Supported: timer..Authorization: Digest
username="3001",realm=
,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d
50
U 192.168.0.20:5060 -> 192.168.0.10:5060
SIP/2.0 401 Unauthorized..Call-ID:
55af-6a37c-4000fbb3@ny1.signalc.com..From:
ag=35adc-1408..To:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=b27e1a1d33761
R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via:
SIP/2.0/U
est realm="ny1.signalc.com",
nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4".
inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback
tell
c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com
via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate
the 3001 although the 3001 has the same user ID and Password on the Ser B.
I wonder if the modification on the ser.cfg is correct, should I do more
things for this?
Thanks
John
----- Original Message ----- From: "Klaus Darilion"
<klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalc.com>
Cc: "Serusers" <serusers(a)lists.iptel.org>
Sent: Friday, March 26, 2004 4:36 AM
Subject: Re: [Serusers] The problem when enable the MySql
those
error
>>>>messages:
>>>>0(25007) ERROR: load_module: could not open module
>>>></usr/local/lib/ser/modules/mysql.so>:
>>>>/usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No
>>>>such file or directory
>>>>I wonder how can I get the mysql.so module.
>>>>
>>>>I am the fresh man in using Ser, please give me some instructions.
>>>>
>>>>John
>>>>
>
>>>------------------------------------------------------------------------
>>>
>>>>_______________________________________________
>>>>Serusers mailing list
>>>>serusers(a)lists.iptel.org
>>>>http://lists.iptel.org/mailman/listinfo/serusers
>>>
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
>Hi Klaus,
>
>Thanks for your instaruction, after I do all those steps, the Ser with
the
>Digest creditial works fine now.
>
>My Questions is, after I complile and installed the ser, is the Ser
database
installed?
No, the ser database is not installed by "make install". You have to use
the ser_mysql.sh script to create the database.
>Need I to use the serctl create to create the database ser
>database again(from my practice, the Ser DB has been setup after all steps),
need I to install the ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you
are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards,
klaus
>Thanks for you advice again.
>
>John
>
>
>
>----- Original Message ----- From: "Klaus Darilion"
<klaus.mailinglists(a)pernau.at>
>To: "John LI" <john(a)signalc.com>
>Cc: <serusers(a)lists.iptel.org>
>Sent: Thursday, March 25, 2004 3:07 AM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>>compile ser by calling make:
>># make
>>
>>compile ser modules by calling:
>># make modules
>>
>>compile mysql ser modules by calling:
>># make modules modules=modules/mysql
>>
>>install ser:
>># make install
>>
>>install mysql module:
>># cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
>>
>>
>>regards,
>>klaus
>>
>>John LI wrote:
>>
>>
>>>Dear Sir,
>>>
>>>I am installing the Ser on Redhat 9.0 platform.
>>>
>>>I download ser-0.8.12_src.tar.gz, and compile the souce code, and
>>>install it.
>>>The Ser working fine with out the MySQL enabled.
>>>
>>>I download the MySQL packges from www.mysql.com <http://www.mysql.com>
>>>
>>>MySQL-client-4.0.18-0.i386.rpm
>>>MySQL-server-4.0.18-0.i386.rpm
>>>MySQL-shared-4.0.18-0.i386.rpm
>>>
>>>and install them, and Mysql can start up.
>>>
>>>After this, I download the ser-0.8.12_src.tar.gz
>>>
>>>and try to install it, and it give me out the error messge
>>>error: Failed dependencies:
>>> ser = 0.8.12 is needed by ser-mysql-0.8.12-0
>>>
>>>I don't know what this means.
>>>
>>>BTW, when i enable the MySQL in ser.cfg, it give out the following
28 Mar
28 Mar
1:29 a.m.
New subject: [Serusers] The problem when enable the MySql
What do you mean by "tools"? For symmetric NATs, the proxy that sends
the request to the UA must have the same IP address as the proxy that
received the REGISTER request - so I thought of using IP takeover
(heartbeat) is the only way (except UAs which can register at multiple
proxies). Is there any other way to solve this problem?
regards,
Klaus
Jiri Kuthan wrote:
the secret-generation password is by default random.
For use with SIP-based
replication, it must be congigured to same value on both hosts. The example
in SER documentation actually shows it. (Note too that you need to enable
some additional tools if you wish to have both replication and NAT traversal
working.)
-jiri
At 12:15 AM 3/27/2004, Klaus Darilion wrote:
--
Jiri Kuthan http://iptel.org/~jiri/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
Hi Klaus,
Thanks for your response, I have another question:
I installed 2 Ser on the different machine, and add the 2 user 3001 3002 on
both Ser. I configuer 2 SIP client to Regiseter to the same ser, there is no
problem to make call to each other, but when I try to registered 2 sip
client on the different machine, the problem happend.
For example, 2 ser server IP is A=192.168.0.10 and B=192.168.0.20
I changed ser.cfg in ser A as
if (!src_ip==192.168.0.20) {
log("*****replicate***");
t_replicate("192.168.0.20", "5060");
and on B
if (!src_ip==192.168.0.10) {
log("*****replicate***");
t_replicate("192.168.0.10", "5060");
And when I try to regiseter SIP client on A, it can register on A, then the
Ser A will send a Register request to B like this:
U 192.168.0.10:5060 -> 192.168.0.20:5060
REGISTER sip:ny1.signalc.com SIP/2.0..Record-Route:
<sip:192.168.0.10;ftag=35a
3@ny1.signalc.com..From:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=35adc-1
=phone>..CSeq: 102 REGISTER..Via: SIP/2.0/UDP
192.168.0.10;branch=z9hG4bK247f.
060..Contact: <sip:3001@192.168.0.30:5060;user=phone>..Max-Forwards:
69..User-
..Expires: 900..Supported: timer..Authorization: Digest
username="3001",realm=
,response="4890af0391f9985e7d28a4f98e9132ab",nonce="4064805a3152161d3bb4ba9d
50
U 192.168.0.20:5060 -> 192.168.0.10:5060
SIP/2.0 401 Unauthorized..Call-ID:
55af-6a37c-4000fbb3@ny1.signalc.com..From:
ag=35adc-1408..To:
3001<sip:3001@ny1.signalc.com;user=phone>;tag=b27e1a1d33761
R..Via: SIP/2.0/UDP 192.168.0.10;branch=z9hG4bK247f.7ee9ba07.0..Via:
SIP/2.0/U
est realm="ny1.signalc.com",
nonce="406490a267fa70c71b2e27a481dfbde8b5fd6bd4".
inux))..Content-Length: 0..Warning: 392 192.168.0.20:5060 "Noisy feedback
tell
c_port=5060 in_uri=sip:ny1.signalc.com out_uri=sip:ny1.signalc.com
via_cnt==2"
Ser A will try to register 3001 to Ser B, but Ser B dose not authenticate
the 3001 although the 3001 has the same user ID and Password on the Ser B.
I wonder if the modification on the ser.cfg is correct, should I do more
things for this?
Thanks
John
----- Original Message ----- From: "Klaus Darilion"
<klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalc.com>
Cc: "Serusers" <serusers(a)lists.iptel.org>
Sent: Friday, March 26, 2004 4:36 AM
Subject: Re: [Serusers] The problem when enable the MySql
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers Hi John!
comments inline
PS: Please always cc: to the list.
John LI wrote:
>Hi Klaus,
>
>Thanks for your instaruction, after I do all those steps, the Ser with
the
>Digest creditial works fine now.
>
>My Questions is, after I complile and installed the ser, is the Ser
database
>installed?
No, the ser database is not installed by "make install". You have to use
the ser_mysql.sh script to create the database.
>Need I to use the serctl create to create the database ser
>database again(from my practice, the Ser DB has been setup after all
those
>steps), need I to install the
ser-mysql-0.8.12-0 RPM package again?
Once you have created the databse, you inly have to re-create it, if you
are using a new version of ser which uses a new format.
If you compile ser from source, you don't need any of the rpm packages.
regards,
klaus
>Thanks for you advice again.
>
>John
>
>
>
>----- Original Message ----- From: "Klaus Darilion"
<klaus.mailinglists(a)pernau.at>
>To: "John LI" <john(a)signalc.com>
>Cc: <serusers(a)lists.iptel.org>
>Sent: Thursday, March 25, 2004 3:07 AM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>
>>compile ser by calling make:
>># make
>>
>>compile ser modules by calling:
>># make modules
>>
>>compile mysql ser modules by calling:
>># make modules modules=modules/mysql
>>
>>install ser:
>># make install
>>
>>install mysql module:
>># cp modules/mysql/mysql.so /usr/local/lib/ser/modules/
>>
>>
>>regards,
>>klaus
>>
>>John LI wrote:
>>
>>
>>
>>>Dear Sir,
>>>
>>>I am installing the Ser on Redhat 9.0 platform.
>>>
>>>I download ser-0.8.12_src.tar.gz, and compile the souce code, and
>>>install it.
>>>The Ser working fine with out the MySQL enabled.
>>>
>>>I download the MySQL packges from www.mysql.com <http://www.mysql.com>
>>>
>>>MySQL-client-4.0.18-0.i386.rpm
>>>MySQL-server-4.0.18-0.i386.rpm
>>>MySQL-shared-4.0.18-0.i386.rpm
>>>
>>>and install them, and Mysql can start up.
>>>
>>>After this, I download the ser-0.8.12_src.tar.gz
>>>
>>>and try to install it, and it give me out the error messge
>>>error: Failed dependencies:
>>> ser = 0.8.12 is needed by ser-mysql-0.8.12-0
>>>
>>>I don't know what this means.
>>>
>>>BTW, when i enable the MySQL in ser.cfg, it give out the following
error
>>>>messages:
>>>>0(25007) ERROR: load_module: could not open module
>>>></usr/local/lib/ser/modules/mysql.so>:
>>>>/usr/local/lib/ser/modules/mysql.so: cannot open shared object file: No
>>>>such file or directory
>>>>I wonder how can I get the mysql.so module.
>>>>
>>>>I am the fresh man in using Ser, please give me some instructions.
>>>>
>>>>John
>>>>
>
>>>------------------------------------------------------------------------
>>>
>>>
>>>>_______________________________________________
>>>>Serusers mailing list
>>>>serusers(a)lists.iptel.org
>>>>http://lists.iptel.org/mailman/listinfo/serusers
>>>
1:46 a.m.
New subject: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For symmetric
NATs, the proxy that sends the request to the UA must have the same IP address as the
proxy that received the REGISTER request - so I thought of using IP takeover (heartbeat)
is the only way (except UAs which can register at multiple proxies). Is there any other
way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so, hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
1:50 p.m.
New subject: [Serusers] NAT traversal with redundant server (The problem when enable the MySql)
Do I have to start/restart ser after an IP takeover or is it somehow
possible to configue the virtual IP address in advance so that ser uses
this IP address as soon as it becomes available?
Klaus
Jiri Kuthan wrote:
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
What do you mean by "tools"? For
symmetric NATs, the proxy that sends the request to the UA must have the same IP address
as the proxy that received the REGISTER request - so I thought of using IP takeover
(heartbeat) is the only way (except UAs which can register at multiple proxies). Is there
any other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so, hearbeat one
of them, VRRP another one and potentialy some more.
-jiri
1:58 p.m.
New subject: [Serusers] NAT traversal with redundant server (The problem when enable the MySql)
Try:
listen=<your.ha.ip.address>
in ser.cfg
Alex
--On 28 March 2004 13:50 +0200 Klaus Darilion
<klaus.mailinglists(a)pernau.at> wrote:
Do I have to start/restart ser after an IP takeover or
is it somehow
possible to configue the virtual IP address in advance so that ser uses
this IP address as soon as it becomes available?
Alex
2:56 p.m.
New subject: [Serusers] NAT traversal with redundant server (The problem when enable the MySql)
In this case, ser will only start up if this machine currently serves
the virtual IP address. Therefore I guess it is a "must" to restart ser
after IP takeover to serve also the virtual IP.
klaus
Alex Bligh wrote:
Try:
listen=<your.ha.ip.address>
in ser.cfg
Alex
--On 28 March 2004 13:50 +0200 Klaus Darilion
<klaus.mailinglists(a)pernau.at> wrote:
Do I have to start/restart ser after an IP
takeover or is it somehow
possible to configue the virtual IP address in advance so that ser uses
this IP address as soon as it becomes available?
Alex
3:25 p.m.
New subject: [Serusers] NAT traversal with redundant server (The problem when enable the MySql)
--On 28 March 2004 14:56 +0200 Klaus Darilion
<klaus.mailinglists(a)pernau.at> wrote:
In this case, ser will only start up if this machine
currently serves the
virtual IP address. Therefore I guess it is a "must" to restart ser after
IP takeover to serve also the virtual IP.
heartbeat (or whatever) should /start/ (not restart) ser for you, running
on the ha IP address.
Alex
3:39 p.m.
New subject: [Serusers] NAT traversal with redundant server (The problem when enable the MySql)
On Mar 28, 2004 at 14:56, Klaus Darilion <klaus.mailinglists(a)pernau.at> wrote:
In this case, ser will only start up if this machine
currently serves
the virtual IP address. Therefore I guess it is a "must" to restart ser
after IP takeover to serve also the virtual IP.
You can have the interface with the virtual ip in the down state and
bring it up after the take-over. Ser can start listening on a downed
interface.
Andrei
30 Mar
30 Mar
1:16 a.m.
New subject: [Serusers] CDR Issue
Hi Klaus and Jiri,
I have compiled Free Radius server and Radius client, and installed them in
the same machine with the Ser.
I check the Radius server by using Radius client, and it works file with the
testing.
I read the folloing message from the RadiusHowto:
"SIP Express Router can be configured to use RADIUS server for
authentication, accounting, and group membership checking. Since
configuration of RADIUS seems to be a common source of problems, we decided
to put together this howto. "
My Question: If I installed the Free Radius server, is the acc module has
been installed as well, How could I configure the Ser to create the CDR, is
the CDR in the log file, or Can I create the CDR table in the Mysql DB?
Thanks for you help.
Regards
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "Jiri Kuthan" <jiri(a)iptel.org>
Cc: "John LI" <john(a)signalc.com>om>; "Serusers"
<serusers(a)lists.iptel.org>
Sent: Sunday, March 28, 2004 3:50 AM
Subject: NAT traversal with redundant server (The problem when enable the
MySql)
Do I have to start/restart ser after an IP takeover or
is it somehow
possible to configue the virtual IP address in advance so that ser uses
this IP address as soon as it becomes available?
Klaus
Jiri Kuthan wrote:
> At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>
>>What do you mean by "tools"? For symmetric NATs, the proxy that sends
the request to the UA must have the same IP address as the proxy that
received the REGISTER request - so I thought of using IP takeover
(heartbeat) is the only way (except UAs which can register at multiple
proxies). Is there any other way to solve this problem?
>
>
> no, you need to take-over IP. There are different tools to achieve so,
hearbeat one
of them, VRRP
another one and potentialy some more.
-jiri
2:45 p.m.
New subject: [Serusers] CDR Issue
On 29-03 15:16, John LI wrote:
My Question: If I installed the Free Radius server, is
the acc module has
been installed as well, How could I configure the Ser to create the CDR, is
the CDR in the log file, or Can I create the CDR table in the Mysql DB?
Yes, you have to use acc module if you want to generate CDR. By
default acc module uses syslog to report this information, if you
want the CDR to go to the database or radius then you have to edit
sip_router/modules/acc/Makefile, uncomment radius and/or database
settings and recompile the module. See sip_router/modules/acc/README
for more details.
Jan.
9:52 p.m.
New subject: [Serusers] CDR Issue
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar ball in
the /home/alan/, then I changed the Makefile in
/home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file you
mentioned like sip_router/modules/acc/Makefile?
The other issue is when you talk recomplie the Module, dose that mean
recompile the acc.so module itself or recomplie the whole ser? Becuase when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the
system asked me to complie the the source in the main ser directory.
The third issue is , if I just want the database accounting, no need for
Radius Accounting, should I still uncomment the line concerened with Radius
accounting, can I just uncomment line concerned with the database
accounting?
The fourth issue is, I have load the acc.so in in the ser.cfg, it supposed
to use the syslog to write the cdr in the Syslog file, is that right? which
file I should looking for the CDR information.
Thanks for you help
Regards
John
----- Original Message -----
From: "Jan Janak" <jan(a)iptel.org>
To: "John LI" <john(a)signalc.com>
Cc: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "Jiri
Kuthan"
<jiri(a)iptel.org>rg>; "Serusers" <serusers(a)lists.iptel.org>
Sent: Tuesday, March 30, 2004 4:45 AM
Subject: Re: [Serusers] CDR Issue
On 29-03 15:16, John LI wrote:
> My Question: If I installed the Free Radius server, is the acc module
has
> been installed as well, How could I configure the
Ser to create the CDR,
is
the CDR in the
log file, or Can I create the CDR table in the Mysql DB?
Yes, you have to use acc module if you want to generate CDR. By
default acc module uses syslog to report this information, if you
want the CDR to go to the database or radius then you have to edit
sip_router/modules/acc/Makefile, uncomment radius and/or database
settings and recompile the module. See sip_router/modules/acc/README
for more details.
Jan.
31 Mar
31 Mar
3:20 p.m.
New subject: [Serusers] CDR Issue
On 30-03 11:52, John LI wrote:
Hi Jan,
I get the tar ball from the Iptel, and untar it, and I untar the tar ball in
the /home/alan/, then I changed the Makefile in
/home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file you
mentioned like sip_router/modules/acc/Makefile?
Yes.
The other issue is when you talk recomplie the Module,
dose that mean
recompile the acc.so module itself or recomplie the whole ser? Becuase when
I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the
system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
The third issue is , if I just want the database
accounting, no need for
Radius Accounting, should I still uncomment the line concerened with Radius
accounting, can I just uncomment line concerned with the database
accounting?
Uncomment just database related lines if you want database accounting
only.
The fourth issue is, I have load the acc.so in in the
ser.cfg, it supposed
to use the syslog to write the cdr in the Syslog file, is that right? which
file I should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the
distribution).
Jan.
3:54 p.m.
New subject: [Serusers] CDR Issue
missed_calls can be filled also by the acc module -> see the parameters
in the README file of the acc module.
Klaus
John LI wrote:
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the
action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the acc
, subscriber, location tables, I would like to know how to write the
information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message -----
From: "Jan Janak" <jan(a)iptel.org>
To: "John LI" <john(a)signalc.com>
Cc: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "Jiri
Kuthan"
<jiri(a)iptel.org>rg>; "Serusers" <serusers(a)lists.iptel.org>
Sent: Wednesday, March 31, 2004 5:20 AM
Subject: Re: [Serusers] CDR Issue
when
Radius
supposed
On 30-03 11:52, John LI wrote:
>Hi Jan,
>
>I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
>the /home/alan/, then I changed the Makefile
in
>/home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned
like sip_router/modules/acc/Makefile?
Yes.
>The other issue is when you talk recomplie the Module, dose that mean
>recompile the acc.so module itself or recomplie the whole ser? Becuase I tried to
run the make in the /home/alan/ser-0.8.12/modules/acc, the
system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
>The third issue is , if I just want the database accounting, no need for
>Radius Accounting, should I still uncomment the line concerened with
accounting, can I just uncomment line concerned with the database
accounting?
Uncomment just database related lines if you want database accounting
only.
>The fourth issue is, I have load the acc.so in in the ser.cfg, it >to use the syslog to write the cdr in the
Syslog file, is that right?
which
file I
should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the
distribution).
Jan.
6:42 p.m.
New subject: [Serusers] CDR Issue
Hi Jan,
Thanks for you response, after I set the DB flag in the ser.cfg, all the
action could be writen to the acc table. thanks for you help.
In the ser db there is a bunch of tables there, I am now only using the acc
, subscriber, location tables, I would like to know how to write the
information into the missed_call table, active_action table etc.
Thanks
John
----- Original Message -----
From: "Jan Janak" <jan(a)iptel.org>
To: "John LI" <john(a)signalc.com>
Cc: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "Jiri
Kuthan"
<jiri(a)iptel.org>rg>; "Serusers" <serusers(a)lists.iptel.org>
Sent: Wednesday, March 31, 2004 5:20 AM
Subject: Re: [Serusers] CDR Issue
when
Radius
supposed
On 30-03 11:52, John LI wrote:
> Hi Jan,
>
> I get the tar ball from the Iptel, and untar it, and I untar the tar
ball in
> the /home/alan/, then I changed the Makefile in
> /home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
you
mentioned like
sip_router/modules/acc/Makefile?
Yes.
> The other issue is when you talk recomplie the Module, dose that mean
> recompile the acc.so module itself or recomplie the whole ser? Becuase I tried to run
the make in the /home/alan/ser-0.8.12/modules/acc, the
system asked me to complie the the source in the main ser directory.
I would recommend to recompile the whole ser.
> The third issue is , if I just want the database accounting, no need for
> Radius Accounting, should I still uncomment the line concerened with accounting,
can I just uncomment line concerned with the database
accounting?
Uncomment just database related lines if you want database accounting
only.
> The fourth issue is, I have load the acc.so in in the ser.cfg, it > to use the syslog to write the cdr in the Syslog
file, is that right?
which
file I should
looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the
distribution).
Jan.
2 Apr
2 Apr
1:13 a.m.
New subject: [Serusers] CDR Issue
Hi Klaus,
I have tried to install the serweb on to the system, and after i try to go
to the http://localhost/installed-folder/html/admin/index.php, I got the
error message:
Fatal error: Call to undefined function: mysql_pconnect() in
/var/www/html/serweb_2004-01-04/phplib/db_mysql.inc on line 73
It is becuase I need to install the PHP4 on the server, and if it is so, how
can I to make sure the PHP4 I installed on the server support the Mysql
feature?
Thanks for your help.
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalc.com>
Cc: "Jan Janak" <jan(a)iptel.org>rg>; "Jiri Kuthan"
<jiri(a)iptel.org>rg>; "Serusers"
<serusers(a)lists.iptel.org>
Sent: Wednesday, March 31, 2004 5:54 AM
Subject: Re: [Serusers] CDR Issue
supposed
missed_calls can be filled also by the acc module
-> see the parameters
in the README file of the acc module.
Klaus
John LI wrote:
> Hi Jan,
>
> Thanks for you response, after I set the DB flag in the ser.cfg, all the
> action could be writen to the acc table. thanks for you help.
>
> In the ser db there is a bunch of tables there, I am now only using the
acc
> , subscriber, location tables, I would like to
know how to write the
> information into the missed_call table, active_action table etc.
>
> Thanks
>
> John
>
> ----- Original Message -----
> From: "Jan Janak" <jan(a)iptel.org>
> To: "John LI" <john(a)signalc.com>
> Cc: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "Jiri
Kuthan"
> <jiri(a)iptel.org>rg>; "Serusers" <serusers(a)lists.iptel.org>
> Sent: Wednesday, March 31, 2004 5:20 AM
> Subject: Re: [Serusers] CDR Issue
>
>
>
>>On 30-03 11:52, John LI wrote:
>>
>>>Hi Jan,
>>>
>>>I get the tar ball from the Iptel, and untar it, and I untar the tar
>
> ball in
>
>>>the /home/alan/, then I changed the Makefile in
>>>/home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
>
> you
>
>>>mentioned like sip_router/modules/acc/Makefile?
>>
>> Yes.
>>
>>
>>>The other issue is when you talk recomplie the Module, dose that mean
>>>recompile the acc.so module itself or recomplie the whole ser? Becuase
>
> when
>
>>>I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the
>>>system asked me to complie the the source in the main ser directory.
>>
>> I would recommend to recompile the whole ser.
>>
>>
>>>The third issue is , if I just want the database accounting, no need
for
>Radius Accounting, should I still uncomment the
line concerened with
Radius
accounting, can I just uncomment line concerned with the database
accounting?
Uncomment just database related lines if you want database accounting
only.
>The fourth issue is, I have load the acc.so in in the ser.cfg, it >to use the syslog to write the cdr in the
Syslog file, is that right?
which
file I
should looking for the CDR information.
/var/log/messages or /var/log/daemon.log (depending on the
distribution).
Jan.
11:23 a.m.
New subject: [Serusers] CDR Issue
I guess you haven't installed all the mysql libraries, maybe some
php_mysql stuff is missing.
$ php -v
will give you your version!
klaus
John LI wrote:
Hi Klaus,
I have tried to install the serweb on to the system, and after i try to go
to the http://localhost/installed-folder/html/admin/index.php, I got the
error message:
Fatal error: Call to undefined function: mysql_pconnect() in
/var/www/html/serweb_2004-01-04/phplib/db_mysql.inc on line 73
It is becuase I need to install the PHP4 on the server, and if it is so, how
can I to make sure the PHP4 I installed on the server support the Mysql
feature?
Thanks for your help.
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalc.com>
Cc: "Jan Janak" <jan(a)iptel.org>rg>; "Jiri Kuthan"
<jiri(a)iptel.org>rg>; "Serusers"
<serusers(a)lists.iptel.org>
Sent: Wednesday, March 31, 2004 5:54 AM
Subject: Re: [Serusers] CDR Issue
missed_calls can be filled also by the acc module
-> see the parameters
in the README file of the acc module.
Klaus
John LI wrote:
>Hi Jan,
>
>Thanks for you response, after I set the DB flag in the ser.cfg, all the
>action could be writen to the acc table. thanks for you help.
>
>In the ser db there is a bunch of tables there, I am now only using the
acc
>, subscriber, location tables, I would like to
know how to write the
>information into the missed_call table, active_action table etc.
>
>Thanks
>
>John
>
>----- Original Message -----
>From: "Jan Janak" <jan(a)iptel.org>
>To: "John LI" <john(a)signalc.com>
>Cc: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "Jiri
Kuthan"
><jiri(a)iptel.org>l.org>; "Serusers" <serusers(a)lists.iptel.org>
>Sent: Wednesday, March 31, 2004 5:20 AM
>Subject: Re: [Serusers] CDR Issue
>
>
>
>
>>On 30-03 11:52, John LI wrote:
>>
>>
>>>Hi Jan,
>>>
>>>I get the tar ball from the Iptel, and untar it, and I untar the tar
>
>ball in
>
>
>>>the /home/alan/, then I changed the Makefile in
>>>/home/alan/ser-0.8.12/modules/acc, I wonder if it is the correct file
>
>you
>
>
>>>mentioned like sip_router/modules/acc/Makefile?
>>
>> Yes.
>>
>>
>>
>>>The other issue is when you talk recomplie the Module, dose that mean
>>>recompile the acc.so module itself or recomplie the whole ser? Becuase
>
>when
>
>
>>>I tried to run the make in the /home/alan/ser-0.8.12/modules/acc, the
>>>system asked me to complie the the source in the main ser directory.
>>
>> I would recommend to recompile the whole ser.
>>
>>
>>
>>>The third issue is , if I just want the database accounting, no need
for
>Radius Accounting, should I still uncomment the
line concerened with
Radius
>accounting, can I just uncomment line
concerned with the database
>accounting?
Uncomment just database related lines if you want database accounting
only.
>The fourth issue is, I have load the acc.so in in the ser.cfg, it
supposed
>to use the syslog to write the cdr in the
Syslog file, is that right?
which
>file I should looking for the CDR
information.
/var/log/messages or /var/log/daemon.log (depending on the
distribution).
Jan.
27 Apr
27 Apr
8:30 p.m.
New subject: [Serusers] Re: serweb issu
you can change the problem by giving rw access to /tmp/ser_fifo for
everybody. But this of course is a security risk if there are other
useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after
startup
/usr/local/sbin/ser -h
should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can
write to the fifo.
klaus
John LI wrote:
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message -----
From: "Jiri Kuthan" <jiri(a)iptel.org>
To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John LI"
<john(a)signalc.com>om>; "Serusers" <serusers(a)lists.iptel.org>
Sent: Saturday, March 27, 2004 5:46 PM
Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>What do you mean by "tools"? For symmetric NATs, the proxy that sends the
request to the UA must have the same IP address as the proxy that received
the REGISTER request - so I thought of using IP takeover (heartbeat) is the
only way (except UAs which can register at multiple proxies). Is there any
other way to solve this problem?
no, you need to take-over IP. There are different
tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some
more.
-jiri
9:39 p.m.
New subject: [Serusers] Re: serweb issu
That's not all - because next time you restart ser, ser will set the
permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser.
I'm starting ser with:
ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the permissions
of the fifo.
This works fine for me with ser 0.8.12 stable. recently there were some
changes to the fifo and user/group switching in unstable ser. So, I
don't know if this also works with unstable ser.
regards
klaus
John LI wrote:
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning
disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalphone.com>
Cc: "John LI" <john(a)signalc.com>om>; "Serusers"
<serusers(a)lists.iptel.org>rg>; "Jiri
Kuthan" <jiri(a)iptel.org>
Sent: Tuesday, April 27, 2004 11:30 AM
Subject: Re: serweb issu
you can change the problem by giving rw access to
/tmp/ser_fifo for
everybody. But this of course is a security risk if there are other
useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after
startup
/usr/local/sbin/ser -h
should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can
write to the fifo.
klaus
John LI wrote:
>Hi Jiri and Klaus,
>
>I installed the serweb, and when log in to user accout, get the warning:
>
>Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
>/var/www/html/serweb_2004-01-04/html/functions.php on line 206
>
>
>I am runing ser using the root, and I wonder how can I resolve this
problem?
>what ownership should I assign to the
/tmp/ser_fifo?
>
>Thanks
>
>John
>
>
>----- Original Message -----
>From: "Jiri Kuthan" <jiri(a)iptel.org>
>To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John
LI"
><john(a)signalc.com>c.com>; "Serusers" <serusers(a)lists.iptel.org>
>Sent: Saturday, March 27, 2004 5:46 PM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>>At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>>
>>
>>>What do you mean by "tools"? For symmetric NATs, the proxy that
sends
the
>request to the UA must have the same IP
address as the proxy that
received
>the REGISTER request - so I thought of using
IP takeover (heartbeat) is
the
>only way (except UAs which can register at
multiple proxies). Is there
any
>other way to solve this problem?
>
>
>>no, you need to take-over IP. There are different tools to achieve so,
>
>hearbeat one
>
>
>>of them, VRRP another one and potentialy some more.
>>
>>-jiri
>>
>>
>
>
>
9:51 p.m.
New subject: [Serusers] Re: serweb issu
It's called fifo_mode=777 :-)
- Atle
* Klaus Darilion <klaus.mailinglists(a)pernau.at> [040427 21:40]:
That's not all - because next time you restart
ser, ser will set the
permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser.
I'm starting ser with:
ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the permissions
of the fifo.
This works fine for me with ser 0.8.12 stable. recently there were some
changes to the fifo and user/group switching in unstable ser. So, I
don't know if this also works with unstable ser.
regards
klaus
John LI wrote:
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning
disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalphone.com>
Cc: "John LI" <john(a)signalc.com>om>; "Serusers"
<serusers(a)lists.iptel.org>rg>; "Jiri
Kuthan" <jiri(a)iptel.org>
Sent: Tuesday, April 27, 2004 11:30 AM
Subject: Re: serweb issu
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
you can change the problem by giving rw access to
/tmp/ser_fifo for
everybody. But this of course is a security risk if there are other
useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after
startup
/usr/local/sbin/ser -h
should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can
write to the fifo.
klaus
John LI wrote:
>Hi Jiri and Klaus,
>
>I installed the serweb, and when log in to user accout, get the warning:
>
>Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
>/var/www/html/serweb_2004-01-04/html/functions.php on line 206
>
>
>I am runing ser using the root, and I wonder how can I resolve this
problem?
>what ownership should I assign to the
/tmp/ser_fifo?
>
>Thanks
>
>John
>
>
>----- Original Message -----
>From: "Jiri Kuthan" <jiri(a)iptel.org>
>To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John
LI"
><john(a)signalc.com>c.com>; "Serusers" <serusers(a)lists.iptel.org>
>Sent: Saturday, March 27, 2004 5:46 PM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>>At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>>
>>
>>>What do you mean by "tools"? For symmetric NATs, the proxy that
sends
the
>request to the UA must have the same IP
address as the proxy that
received
>the REGISTER request - so I thought of using
IP takeover (heartbeat) is
the
>only way (except UAs which can register at
multiple proxies). Is there
any
>other way to solve this problem?
>
>
>>no, you need to take-over IP. There are different tools to achieve so,
>
>hearbeat one
>
>
>>of them, VRRP another one and potentialy some more.
>>
>>-jiri
>>
>>
>
>
>
11:06 p.m.
New subject: [Serusers] serweb issu
Hi Jiri and Klaus,
I installed the serweb, and when log in to user accout, get the warning:
Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied in
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
I am runing ser using the root, and I wonder how can I resolve this problem?
what ownership should I assign to the /tmp/ser_fifo?
Thanks
John
----- Original Message -----
From: "Jiri Kuthan" <jiri(a)iptel.org>
To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John LI"
<john(a)signalc.com>om>; "Serusers" <serusers(a)lists.iptel.org>
Sent: Saturday, March 27, 2004 5:46 PM
Subject: Re: [Serusers] The problem when enable the MySql
At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>What do you mean by "tools"? For symmetric NATs, the proxy that sends the
request to the UA must have the same IP address as the proxy that received
the REGISTER request - so I thought of using IP takeover (heartbeat) is the
only way (except UAs which can register at multiple proxies). Is there any
other way to solve this problem?
no, you need to take-over IP. There are different tools to achieve so,
hearbeat
one
of them, VRRP another one and potentialy some more.
-jiri
28 Apr
28 Apr
12:16 a.m.
New subject: [Serusers] Re: serweb issu
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning
disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalphone.com>
Cc: "John LI" <john(a)signalc.com>om>; "Serusers"
<serusers(a)lists.iptel.org>rg>; "Jiri
Kuthan" <jiri(a)iptel.org>
Sent: Tuesday, April 27, 2004 11:30 AM
Subject: Re: serweb issu
you can change the problem by giving rw access to
/tmp/ser_fifo for
everybody. But this of course is a security risk if there are other
useres which have access to the server.
You can overcome this by changing the userid and groupid of ser after
startup
/usr/local/sbin/ser -h
should give you the hints how to set user and group id.
Then put apache and the ser user into the same group, then apache can
write to the fifo.
klaus
John LI wrote:
> Hi Jiri and Klaus,
>
> I installed the serweb, and when log in to user accout, get the warning:
>
> Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission denied
in
>
/var/www/html/serweb_2004-01-04/html/functions.php on line 206
>
>
> I am runing ser using the root, and I wonder how can I resolve this
problem?
>
> what ownership should I assign to the /tmp/ser_fifo?
>
> Thanks
>
> John
>
>
> ----- Original Message -----
> From: "Jiri Kuthan" <jiri(a)iptel.org>
> To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John
LI"
> <john(a)signalc.com>om>; "Serusers" <serusers(a)lists.iptel.org>
> Sent: Saturday, March 27, 2004 5:46 PM
> Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>>At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>>
>>>What do you mean by "tools"? For symmetric NATs, the proxy that
sends
the
>
> request to the UA must have the same IP address as the proxy that
received
> the REGISTER request - so I thought of using IP
takeover (heartbeat) is
the
> only way (except UAs which can register at
multiple proxies). Is there
any
other way to
solve this problem?
no, you need to take-over IP. There are different
tools to achieve so,
hearbeat one
of them, VRRP another one and potentialy some
more.
-jiri
2:54 a.m.
New subject: [Serusers] Re: serweb issu
That's exactly what I'm asking on the other mail. Since the introduction of
daemonize() function, the fifo file is always own by root even I instruct
SER to run as say 'ser'. The problem lies on the do_suid() sequence in the
main.c file.
To me, if we change uid and/or group id to a less privileged user, the fifo
file should be created under the new user's permission as well. Here is what
I've changed to suit my environment. See the sequence of the ------> line.
---- Before ----
/* intialize fifo server -- we need to open the fifo before
* do_suid() and start the fifo server after all the socket
* are initialized, to inherit them*/
if (init_fifo_server()<0) {
LOG(L_ERR, "initializing fifo server failed\n");
goto error;
}
/* Initialize Unix domain socket server */
if (init_unixsock_socket()<0) {
LOG(L_ERR, "Error while creating unix domain
sockets\n");
goto error;
}
--------> if (do_suid()==-1) goto error; /* try to drop priviledges */
/* process_no now initialized to zero -- increase from now
on
as new processes are forked (while skipping 0 reserved
for main
*/
---- After ----
--------> if (do_suid()==-1) goto error; /* try to drop priviledges */
/* intialize fifo server -- we need to open the fifo before
* do_suid() and start the fifo server after all the socket
* are initialized, to inherit them*/
if (init_fifo_server()<0) {
LOG(L_ERR, "initializing fifo server failed\n");
goto error;
}
/* Initialize Unix domain socket server */
if (init_unixsock_socket()<0) {
LOG(L_ERR, "Error while creating unix domain
sockets\n");
goto error;
}
----
Sorry, I do not know how to do that 'cvs diff' kind of thing. So, the cum's
bit above. Not sure whether the CVS source will be changed either. There
must be a reason the author do it that way. In my opinion, no offence, it's
a bug but I'm open to discussion.
Zeus
-----Original Message-----
From: serusers-bounces(a)lists.iptel.org
[mailto:serusers-bounces@lists.iptel.org] On Behalf Of Klaus Darilion
Sent: Wednesday, 28 April 2004 5:40 AM
To: John LI
Cc: Jiri Kuthan; Serusers; John LI
Subject: [Serusers] Re: serweb issu
That's not all - because next time you restart ser, ser will set the
permissions again to 660 and apache can't write to the fifo.
So, try to solve it as I said.
I created a user ser and a group ser.
I'm starting ser with:
ser -g ser
Furthermore I added the apache user to the group 'ser'
This allows apache to write to the fifo without changing the
permissions
of the fifo.
This works fine for me with ser 0.8.12 stable. recently there
were some
changes to the fifo and user/group switching in unstable ser. So, I
don't know if this also works with unstable ser.
regards
klaus
John LI wrote:
(heartbeat)
to achieve
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi Klaus,
That is great!
I have change the /tmp/ser_fifo's mode to a+w, and the the warning
disapeared. and seemed everything working fine.
Thanks so much for your help
John
----- Original Message -----
From: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>
To: "John LI" <john(a)signalphone.com>
Cc: "John LI" <john(a)signalc.com>om>; "Serusers"
<serusers(a)lists.iptel.org>rg>; "Jiri
Kuthan" <jiri(a)iptel.org>
Sent: Tuesday, April 27, 2004 11:30 AM
Subject: Re: serweb issu
>you can change the problem by giving rw access to /tmp/ser_fifo for
>everybody. But this of course is a security risk if there are other
>useres which have access to the server.
>
>You can overcome this by changing the userid and groupid of
ser after
>startup /usr/local/sbin/ser -h
>should give you the hints how to set user and group id.
>
>Then put apache and the ser user into the same group, then
apache can
write to
the fifo.
klaus
John LI wrote:
>Hi Jiri and Klaus,
>
>I installed the serweb, and when log in to user accout, get the
>warning:
>
>Warning: fopen(/tmp/ser_fifo): failed to open stream: Permission
>denied
in
>/var/www/html/serweb_2004-01-04/html/functions.php on line 206
>
>
>I am runing ser using the root, and I wonder how can I resolve this
problem?
>what ownership should I assign to the
/tmp/ser_fifo?
>
>Thanks
>
>John
>
>
>----- Original Message -----
>From: "Jiri Kuthan" <jiri(a)iptel.org>
>To: "Klaus Darilion" <klaus.mailinglists(a)pernau.at>at>; "John
LI"
><john(a)signalc.com>c.com>; "Serusers" <serusers(a)lists.iptel.org>
>Sent: Saturday, March 27, 2004 5:46 PM
>Subject: Re: [Serusers] The problem when enable the MySql
>
>
>
>
>>At 01:29 AM 3/28/2004, Klaus Darilion wrote:
>>
>>
>>>What do you mean by "tools"? For symmetric NATs, the proxy that
>>>sends
the
>request to the UA must have the same IP
address as the proxy that
received
>>the REGISTER request - so I thought of using IP takeover >is
the
>only way (except UAs which can register at
multiple proxies). Is
>there
any
>>other way to solve this problem?
>>
>>
>>>no, you need to take-over IP. There are different tools
>>so,
>
>hearbeat one
>
>
>>of them, VRRP another one and potentialy some more.
>>
>>-jiri
>>
>>
>
>
>
7305
days inactive
7338
days old
22 comments
9 participants
participants (9)
-
Alex Bligh -
Andrei Pelinescu-Onciul -
Atle Samuelsen -
Jan Janak -
Jiri Kuthan -
John LI -
John LI -
Klaus Darilion -
Zeus Ng