Re: [Serusers] How to enable Authentication - sr-users

25 May 2006

Btw, which ser are you using?

You should uncomment these lines too

#debug=3         # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no    # (cmd line: -E)

Then change things like this "if (!uri==myself)"  into this "if
(uri!=myself)"

On 5/25/06, Aniruddha Vaidya &lt;anir123(a)gmail.com&gt; wrote:
...
  Nope.
 It just says

 "Starting ser:
 [  OK  ]"

 BUt if try to get the status of the server

 "ser dead but subsys locked"

 Message is displayed!

 On 5/25/06, Andrey Kouprianov &lt;andrey.kouprianov(a)gmail.com&gt; wrote:
  what does "ser -c" say?

 On 5/25/06, Aniruddha Vaidya &lt;anir123(a)gmail.com&gt; wrote:
 > I did the same
 > But Now when I start with new configuration
 > I get
 > Starting SER : PID file /var/run/ser.pid does not exist -- SER start  failed
  > Error.
 >
 >
 >
 >
 >
 > On 5/25/06, Andrey Kouprianov < andrey.kouprianov(a)gmail.com&gt; wrote:
 > > Read
 > >
 > > # Uncomment this if you want digest authentication
 > > # mysql.so must be loaded !
 > > #loadmodule "/usr/local/lib/ser/modules/auth.so"
 > > #loadmodule "/usr/local/lib/ser/modules/auth_db.so"
 > >
 > >
 > >
 > >
 > > On 5/25/06, Aniruddha Vaidya &lt;anir123(a)gmail.com > wrote:
 > > > Hello All,
 > > > I'm trying to enable the authentication feature in SER. But its not
 > accepted
 > > > by the server.
 > > > This is my ser.cfg file.
 > > >
 > > > Can you tell me whats wrong ?
 > > >
 > > > #
 > > > # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $
 > > > #
 > > > # simple quick-start config script
 > > > #
 > > >
 > > > # ----------- global configuration parameters 
------------------------
  > > >
 > > > #debug=3         # debug level (cmd line: -dddddddddd)
 > > > #fork=yes
 > > > #log_stderror=no    # (cmd line: -E)
 > > >
 > > > # Uncomment these lines to enter debugging mode
 > > > #fork=no
 > > > #log_stderror=yes
 > > > #
 > > >
 > > > check_via=no    # (cmd. line: -v)
 > > > dns=no           # (cmd. line: -r)
 > > > rev_dns=no      # (cmd. line: -R)
 > > > port=5060
 > > > children=4
 > > > fifo="/tmp/ser_fifo"
 > > >
 > > > # ------------------ module loading
 > > > ----------------------------------
 > > >
 > > > # Uncomment this if you want to use SQL database
 > > > loadmodule "/usr/local/lib/ser/modules/mysql.so"
 > > >
 > > > loadmodule "/usr/local/lib/ser/modules/sl.so"
 > > > loadmodule "/usr/local/lib/ser/modules/tm.so"
 > > > loadmodule "/usr/local/lib/ser/modules/rr.so"
 > > > loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
 > > > loadmodule "/usr/local/lib/ser/modules/usrloc.so"
 > > > loadmodule  "/usr/local/lib/ser/modules/registrar.so"
  > > > loadmodule
"/usr/local/lib/ser/modules/textops.so"
 > > >
 > > > # Uncomment this if you want digest authentication
 > > > # mysql.so must be loaded !
 > > > #loadmodule "/usr/local/lib/ser/modules/auth.so"
 > > > #loadmodule "/usr/local/lib/ser/modules/auth_db.so"
 > > >
 > > > # ----------------- setting module-specific parameters 
---------------
    >
 > # -- usrloc params --
 >
 > #modparam("usrloc", "db_mode",   0)
 >
 > # Uncomment this if you want to use SQL database
 > # for persistent storage and comment the previous line
 > modparam("usrloc", "db_mode", 2)
 >
 > # -- auth params --
 > # Uncomment if you are using auth module
 > #
 > modparam("auth_db", "calculate_ha1", yes)
 > #
 > # If you set "calculate_ha1" parameter to yes (which true in this 
config),
  > # uncomment also the following parameter)
 > #
 > modparam("auth_db", "password_column", "password")
 >
 > # -- rr params --
 > # add value to ;lr param to make some broken UAs happy
 > modparam("rr", "enable_full_lr", 1)
 >
 > # -------------------------  request routing logic  -------------------
  >
 > # main routing logic
 >
 > route{
 >
 >     # initial sanity checks -- messages with
 >     # max_forwards==0, or excessively long requests
 >     if (!mf_process_maxfwd_header("10")) {
 >         sl_send_reply("483","Too Many Hops");
 >         break;
 >     };
 >     if (msg:len >=  2048 ) {
 >         sl_send_reply("513", "Message too big");
 >         break;
 >     };
 >
 >
 >     # we record-route all messages -- to make sure that
 >     # subsequent messages will go through our proxy; that's
 >     # particularly good if upstream and downstream entities
 >     # use different transport protocol
 >     if (!method=="REGISTER") record_route();
 >
 >     # subsequent messages withing a dialog should take the
 >     # path determined by record-routing
 >     if (loose_route()) {
 >         # mark routing logic in request
 >         append_hf("P-hint: rr-enforced\r\n");
 >         route(1);
 >         break;
 >     };
 >
 >     if (!uri==myself) {
 >         # mark routing logic in request
 >         append_hf("P-hint: outbound\r\n");
 >         route(1);
 >         break;
 >     };
 >
 >     # if the request is for other domain use UsrLoc
 >     # (in case, it does not work, use the following command
 >     # with proper names and addresses in it)
 >     if (uri==myself) {
 >
 >         if (method=="REGISTER") {
 >
 > # Uncomment this if you want to use digest authentication
 >             if (!www_authorize("<InternalSER>",
 > "subscriber")) {
 >                 www_challenge("<InternalSER>", "0");
 >                 break;
 >             };
 >
 >             save("location");
 >             break;
 >         };
 >
 >         lookup("aliases");
 >         if (!uri==myself) {
 >             append_hf("P-hint: outbound alias\r\n");
 >             route(1);
 >             break;
 >         };
 >
 >         # native SIP destinations are handled using our USRLOC DB
 >         if (!lookup("location")) {
 >             sl_send_reply("404", "Not Found");
 >             break;
 >         };
 >     };
 >     append_hf("P-hint: usrloc applied\r\n");
 >     route(1);
 > }
 >
 > route[1]
 > {
 >     # send it out now; use stateful forwarding as it works reliably
 >     # even for UDP2TCP
 >     if (!t_relay()) {
 >         sl_reply_error();
 >     };
 > }
 >
 >
 > Thanks,
 > Aniruddha
 >
 > _______________________________________________
 > Serusers mailing list
 > Serusers(a)lists.iptel.org
 > http://lists.iptel.org/mailman/listinfo/serusers
 >
 >
 >
 _______________________________________________
 Serusers mailing list
 Serusers(a)lists.iptel.org
 http://lists.iptel.org/mailman/listinfo/serusers

  _______________________________________________
 Serusers mailing list
 Serusers(a)lists.iptel.org
 http://lists.iptel.org/mailman/listinfo/serusers