[SR-Users] PCSCF Access denied issue

[Kranti Kumar]

Thank you so much Franz.

As suggested, We have modified bind address to Physical address of the
server, but still we have the same error message.(Access denied for user
'pcscf'@'pcscf.net1.test' (using password: YES))


Please fund the attached my.cnf file for your reference.

We tried to bind with 0.0.0.0 , HSS IP and P-CSCF IP.
Following is the list of severs and their IP addresses:
HSS- xx.xx.xx.171
PCSCF-  xx.xx.xx.175

Could you please help us to resolve this issue.

Regards,
-kranti

From: Franz Edler <franz.edler at kabsi.at>
Date: Sat, Dec 23, 2017 at 10:49 AM
Subject: AW: [SR-Users] PCSCF Access denied issue
To: "Kamailio (SER) - Users Mailing List"
<sr-users at lists.kamailio.org>, "Kamailio (SER) - Users Mailing List"
<sr-users at lists.sip-router.org>, raghavender goud
<raghu6519 at gmail.com>


You should try to set the bind-address in /etc/mysql/my.cnf to the
corresponding physical address.


BR Franz

On Sat, Dec 23, 2017 at 8:41 AM, Kranti Kumar <krantikumara at gmail.com>
wrote:

> Hi All,
>
> We are using *Kamailio IMS VM* image and we are able to run HSS(/hss.sh)
> successfully. But while running PCSCF (kamailio -f /usr/local/etc/kamailio/kamailio-pcscf.cfg),
> we are getting below errors.
>
> 0(1772) DEBUG: <core> [db.c:209]: db_bind_mod(): using db bind api for
> db_mysql
>
> 0(1772) DEBUG: <core> [db.c:314]: db_do_init2(): connection 0x7f208368d1b8
> not  found in pool
>
> 0(1772) DEBUG: db_mysql [km_my_con.c:98]: db_mysql_new_connection():
> opening co nnection: mysql://xxxx:xxxx@server.net1.test/pcscf
>
> 0(1772) ERROR: db_mysql [km_my_con.c:124]: db_mysql_new_connection():
> driver er ror: Access denied for user 'pcscf'@'pcscf.net1.test' (using
> password: YES)
>
> 0(1772) ERROR: <core> [db.c:318]: db_do_init2(): could not add connection
> to the pool 0(1772) ERROR: ims_usrloc_pcscf [usrloc_db.c:79]: init_db():
> unable to co nnect to the database
>
> 0(1772) ERROR: ims_usrloc_pcscf [ul_mod.c:203]: mod_init(): Error
> initializing  db connection
>
> 0(1772) ERROR: <core> [sr_module.c:962]: init_mod(): Error while
> initializing module ims_usrloc_pcscf (/usr/local/lib64/kamailio/
> modules/ims_usrloc_pcscf.so)
>
> ERROR: error while initializing modules
>
>
> To fix the above error, we tried below commands
>
>
>
> *mysql -u root -p    GRANT ALL ON *.* TO root IDENTIFIED BY 'root';
> quit*
> - replace bind-address in /etc/mysql/my.cnf to 0.0.0.0
>
> But still we are getting the same issue.
>
> Could any one please help us to resolve this issue. Could any one please
> guide us the troubleshooting steps.
>
> Thank you so much in advance.
>
>
> Regards,
>
> -kranti
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20171227/e67d0857/attachment-0001.html>
-------------- next part --------------
#
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
#
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html

# This will be passed to all mysql clients
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
[client]
port            = 3306
socket          = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs
# The following values assume you have at least 32M ram

# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket          = /var/run/mysqld/mysqld.sock
nice            = 0

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
lc-messages-dir = /usr/share/mysql
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 10.200.8.175
#bind-address           = 0.0.0.0
#bind-address           = 10.0.0.10
#bind-address           = 10.0.0.11
#bind-address           = 10.0.0.12
#
# * Fine Tuning
#
key_buffer              = 16M
max_allowed_packet      = 16M
thread_stack            = 192K
thread_cache_size       = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover         = BACKUP
#max_connections        = 100
#table_cache            = 64
#thread_concurrency     = 10
#
# * Query Cache Configuration
#
query_cache_limit       = 1M
query_cache_size        = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file        = /var/log/mysql/mysql.log
#general_log             = 1
#
# Error log - should be very few entries.
#
log_error = /var/log/mysql/error.log
#
# Here you can see queries with especially long duration
#slow_query_log_file = /var/log/mysql/mysql-slow.log
#slow_query_log      = 1
#long_query_time = 2
#log_queries_not_using_indexes
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
#       other settings you may need to change.
#server-id              = 1
#log_bin                        = /var/log/mysql/mysql-bin.log
expire_logs_days        = 10
max_binlog_size         = 100M
#binlog_do_db           = include_database_name
#binlog_ignore_db       = include_database_name
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem



[mysqldump]
quick
quote-names
max_allowed_packet      = 16M

[mysql]
#no-auto-rehash # faster start of mysql but no tab completition

[isamchk]
key_buffer              = 16M

#
# * IMPORTANT: Additional settings that can override those from this file!
#   The files must end with '.cnf', otherwise they'll be ignored.
#
!includedir /etc/mysql/conf.d/