[Serusers] How to enable Authentication

[Andrey Kouprianov]

Btw, which ser are you using?

You should uncomment these lines too

#debug=3         # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no    # (cmd line: -E)

Then change things like this "if (!uri==myself)"  into this "if (uri!=myself)"


On 5/25/06, Aniruddha Vaidya <anir123 at gmail.com> wrote:
> Nope.
> It just says
>
> "Starting ser:
> [  OK  ]"
>
> BUt if try to get the status of the server
>
> "ser dead but subsys locked"
>
> Message is displayed!
>
>
>
> On 5/25/06, Andrey Kouprianov <andrey.kouprianov at gmail.com> wrote:
> > what does "ser -c" say?
> >
> > On 5/25/06, Aniruddha Vaidya <anir123 at gmail.com> wrote:
> > > I did the same
> > > But Now when I start with new configuration
> > > I get
> > > Starting SER : PID file /var/run/ser.pid does not exist -- SER start
> failed
> > > Error.
> > >
> > >
> > >
> > >
> > >
> > > On 5/25/06, Andrey Kouprianov < andrey.kouprianov at gmail.com> wrote:
> > > > Read
> > > >
> > > > # Uncomment this if you want digest authentication
> > > > # mysql.so must be loaded !
> > > > #loadmodule "/usr/local/lib/ser/modules/auth.so"
> > > > #loadmodule "/usr/local/lib/ser/modules/auth_db.so"
> > > >
> > > >
> > > >
> > > >
> > > > On 5/25/06, Aniruddha Vaidya <anir123 at gmail.com > wrote:
> > > > > Hello All,
> > > > > I'm trying to enable the authentication feature in SER. But its not
> > > accepted
> > > > > by the server.
> > > > > This is my ser.cfg file.
> > > > >
> > > > > Can you tell me whats wrong ?
> > > > >
> > > > > #
> > > > > # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $
> > > > > #
> > > > > # simple quick-start config script
> > > > > #
> > > > >
> > > > > # ----------- global configuration parameters
> ------------------------
> > > > >
> > > > > #debug=3         # debug level (cmd line: -dddddddddd)
> > > > > #fork=yes
> > > > > #log_stderror=no    # (cmd line: -E)
> > > > >
> > > > > # Uncomment these lines to enter debugging mode
> > > > > #fork=no
> > > > > #log_stderror=yes
> > > > > #
> > > > >
> > > > > check_via=no    # (cmd. line: -v)
> > > > > dns=no           # (cmd. line: -r)
> > > > > rev_dns=no      # (cmd. line: -R)
> > > > > port=5060
> > > > > children=4
> > > > > fifo="/tmp/ser_fifo"
> > > > >
> > > > > # ------------------ module loading
> > > > > ----------------------------------
> > > > >
> > > > > # Uncomment this if you want to use SQL database
> > > > > loadmodule "/usr/local/lib/ser/modules/mysql.so"
> > > > >
> > > > > loadmodule "/usr/local/lib/ser/modules/sl.so"
> > > > > loadmodule "/usr/local/lib/ser/modules/tm.so"
> > > > > loadmodule "/usr/local/lib/ser/modules/rr.so"
> > > > > loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
> > > > > loadmodule "/usr/local/lib/ser/modules/usrloc.so"
> > > > > loadmodule
> "/usr/local/lib/ser/modules/registrar.so"
> > > > > loadmodule "/usr/local/lib/ser/modules/textops.so"
> > > > >
> > > > > # Uncomment this if you want digest authentication
> > > > > # mysql.so must be loaded !
> > > > > #loadmodule "/usr/local/lib/ser/modules/auth.so"
> > > > > #loadmodule "/usr/local/lib/ser/modules/auth_db.so"
> > > > >
> > > > > # ----------------- setting module-specific parameters
> ---------------
> > > > >
> > > > > # -- usrloc params --
> > > > >
> > > > > #modparam("usrloc", "db_mode",   0)
> > > > >
> > > > > # Uncomment this if you want to use SQL database
> > > > > # for persistent storage and comment the previous line
> > > > > modparam("usrloc", "db_mode", 2)
> > > > >
> > > > > # -- auth params --
> > > > > # Uncomment if you are using auth module
> > > > > #
> > > > > modparam("auth_db", "calculate_ha1", yes)
> > > > > #
> > > > > # If you set "calculate_ha1" parameter to yes (which true in this
> > > config),
> > > > > # uncomment also the following parameter)
> > > > > #
> > > > > modparam("auth_db", "password_column", "password")
> > > > >
> > > > > # -- rr params --
> > > > > # add value to ;lr param to make some broken UAs happy
> > > > > modparam("rr", "enable_full_lr", 1)
> > > > >
> > > > > # -------------------------  request routing logic
> > > -------------------
> > > > >
> > > > > # main routing logic
> > > > >
> > > > > route{
> > > > >
> > > > >     # initial sanity checks -- messages with
> > > > >     # max_forwards==0, or excessively long requests
> > > > >     if (!mf_process_maxfwd_header("10")) {
> > > > >         sl_send_reply("483","Too Many Hops");
> > > > >         break;
> > > > >     };
> > > > >     if (msg:len >=  2048 ) {
> > > > >         sl_send_reply("513", "Message too big");
> > > > >         break;
> > > > >     };
> > > > >
> > > > >
> > > > >     # we record-route all messages -- to make sure that
> > > > >     # subsequent messages will go through our proxy; that's
> > > > >     # particularly good if upstream and downstream entities
> > > > >     # use different transport protocol
> > > > >     if (!method=="REGISTER") record_route();
> > > > >
> > > > >     # subsequent messages withing a dialog should take the
> > > > >     # path determined by record-routing
> > > > >     if (loose_route()) {
> > > > >         # mark routing logic in request
> > > > >         append_hf("P-hint: rr-enforced\r\n");
> > > > >         route(1);
> > > > >         break;
> > > > >     };
> > > > >
> > > > >     if (!uri==myself) {
> > > > >         # mark routing logic in request
> > > > >         append_hf("P-hint: outbound\r\n");
> > > > >         route(1);
> > > > >         break;
> > > > >     };
> > > > >
> > > > >     # if the request is for other domain use UsrLoc
> > > > >     # (in case, it does not work, use the following command
> > > > >     # with proper names and addresses in it)
> > > > >     if (uri==myself) {
> > > > >
> > > > >         if (method=="REGISTER") {
> > > > >
> > > > > # Uncomment this if you want to use digest authentication
> > > > >             if (!www_authorize("<InternalSER>",
> > > > > "subscriber")) {
> > > > >                 www_challenge("<InternalSER>", "0");
> > > > >                 break;
> > > > >             };
> > > > >
> > > > >             save("location");
> > > > >             break;
> > > > >         };
> > > > >
> > > > >         lookup("aliases");
> > > > >         if (!uri==myself) {
> > > > >             append_hf("P-hint: outbound alias\r\n");
> > > > >             route(1);
> > > > >             break;
> > > > >         };
> > > > >
> > > > >         # native SIP destinations are handled using our USRLOC DB
> > > > >         if (!lookup("location")) {
> > > > >             sl_send_reply("404", "Not Found");
> > > > >             break;
> > > > >         };
> > > > >     };
> > > > >     append_hf("P-hint: usrloc applied\r\n");
> > > > >     route(1);
> > > > > }
> > > > >
> > > > > route[1]
> > > > > {
> > > > >     # send it out now; use stateful forwarding as it works reliably
> > > > >     # even for UDP2TCP
> > > > >     if (!t_relay()) {
> > > > >         sl_reply_error();
> > > > >     };
> > > > > }
> > > > >
> > > > >
> > > > > Thanks,
> > > > > Aniruddha
> > > > >
> > > > > _______________________________________________
> > > > > Serusers mailing list
> > > > > Serusers at lists.iptel.org
> > > > > http://lists.iptel.org/mailman/listinfo/serusers
> > > > >
> > > > >
> > > > >
> > > > _______________________________________________
> > > > Serusers mailing list
> > > > Serusers at lists.iptel.org
> > > > http://lists.iptel.org/mailman/listinfo/serusers
> > > >
> > >
> > >
> > _______________________________________________
> > Serusers mailing list
> > Serusers at lists.iptel.org
> > http://lists.iptel.org/mailman/listinfo/serusers
> >
>
>