"
Try to avoid using keys larger then 1024 bytes. Large keys
significantly slow down the TLS connection handshake, thus limiting
the maximum SIP-router TLS connection rate.
"
Is this still a valid recommendation? Based on which size of CPU/system?
/O
Hello,
is anyone aware of a git command that downloads locally only one branch
of sip repository?
I searched on the web and found only some tools, but maybe there are
standard git commands to help.
Thanks,
Daniel
--
Daniel-Constantin Mierla
* Kamailio SIP Masterclass, Nov 9-13, 2009, Berlin
* http://www.asipto.com/index.php/sip-router-masterclass/
Hi all,
There is a permission problem if the daemon is started given -u and -g
parameters (sets up user and group for the process).
The do_suid function (defined in demonize.c) is called after the call to
init_modules(), so the mod_init functions of the configured module are
loaded before the call to do_suid. This wasn't a problem in 1.3 because
no module(I am aware off) use the uid and gid of the process to do
permission checks.
This has changed in 1.5, module carrierroute, as there is a check to see
if the route file in config-file mode (usually
/etc/kamailio/carrierroute.conf) has the right permission set on it
(Issues an warning if it's worldly writable and error if it's not
writable by the process owner). This of course is a problem because
kamailio hasn't yet setuid()/setgid() so the checks are done using the
wrong uid.
A correct (imho) course of action is to move the call to do_suid
function before the call to init_modules()(and before any other calls to
initialization functions).
I've attached a small patch that does this (tested).
There are any considerations on why the init_modules() should be called
with another uid/gid?
Greetings,
Marius
Index: main.c
===================================================================
--- main.c (revision 5937)
+++ main.c (working copy)
@@ -656,10 +656,6 @@
LM_WARN("using only the first listen address (no fork)\n");
}
- /* try to drop privileges */
- if (do_suid(uid, gid)==-1)
- goto error;
-
/* we need another process to act as the timer*/
if (start_timer_processes()!=0) {
LM_CRIT("cannot start timer process(es)\n");
@@ -752,7 +748,6 @@
/* all processes should have access to all the sockets (for sending)
* so we open all first*/
- if (do_suid(uid, gid)==-1) goto error; /* try to drop privileges */
/* udp processes */
for(si=udp_listen; si; si=si->next){
@@ -1278,6 +1273,12 @@
LM_INFO("no private memory pool configured, processes use system memory\n");
#endif
+ /* Set uid/gid */
+ if (do_suid(uid, gid)==-1){
+ LM_ERR("failed to drop privileges");
+ goto error; /* try to drop privileges */
+ }
+
/* Init statistics */
if (init_stats_collector()<0) {
LM_ERR("failed to initialize statistics\n");
@@ -1330,3 +1331,4 @@
cleanup(0);
return ret;
}
+
dear,
I want creat video client chat in net. So, I am using jmf2.1e to send and
recieve video.
Can I use kamailio OpenSER to relay two client video chat in the internet?
if it's possible how I can do that?
thinks.
Hello,
Attached are the minutes from the last meeting in Berlin. I also
uploaded them to the wiki:
http://sip-router.org/wiki/meetings/berlin_2009
The minutes are probably not complete because in addition to being a
scribe, I was also trying to be a meeting participant, well, I did my
best. Enjoy.
-- Jan
currently i have to make these hacks in order to rename sercmd and
DEFAULT_CTL_SOCKET:
# Rename sercmd and DEFAULT_CTL_SOCKET
sed -i -e 's/NAME=sercmd/NAME=sip-proxy_ctl/' utils/sercmd/Makefile
sed -i -e 's!sercmd/sercmd!sercmd/sip-proxy_ctl!' Makefile
sed -i -e 's/ser_ctl/sip-proxy_ctl/' modules/ctl/ctl_defaults.h
those hack should not be needed and renaming should happen automatically
based on MAIN_NAME or SHORT_NAME.
i tried once to hack the makefiles for that, but was not successful.
-=- juha
Bugs item #2877313, was opened at 2009-10-12 21:35
Message generated for change (Tracker Item Submitted) made by
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2877313&group_…
Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: ver devel
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: https://www.google.com/accounts ()
Assigned to: Nobody/Anonymous (nobody)
Summary: fix_nated_contact() then encode_contact() causes core dump
Initial Comment:
When one runs fix_nated_contact() from the nathelper module for it's intended purpose (it must complete successfully) and then run encode_contact() from the siputils module (it also must complete) Kamailio always core-dumps with:
CRITICAL:core:del_lump: offset exceeds message size (202688 > 602) aborting...
This seems to have something to do with re-writing the contact header twice and not fixing the message size the second time but I can't say for sure.
I have a core file, but it seems rather large (44M). It can be uploaded if need be. This is occurring with both the release 1.5.2tls & 1.6.0notls dev trunk.
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=743020&aid=2877313&group_…
today when io tried to start a couple of days old sr, it crashed at
start like this:
#0 cfg_update_local (no_cbs=0) at cfg/cfg_struct.h:257
257 cfg_child_cb = cfg_child_cb->next;
(gdb) where
#0 cfg_update_local (no_cbs=0) at cfg/cfg_struct.h:257
#1 0x08086b2f in cleanup (show_status=0) at main.c:519
#2 0x080870d1 in shutdown_children (sig=<value optimized out>, show_status=0)
at main.c:648
#3 0x0808b04b in main (argc=Cannot access memory at address 0x0
) at main.c:2245
the reason may be that the address that sr is supposed to be listening
at, does not exist, but no matter what, sr must not crash:
Oct 12 11:47:56 localhost kernel: [ 4371.305724] sip-proxy[7470]: segfault at 1c ip 08085c34 sp bfa62af0 error 4 in sip-proxy[8048000+164000]
Oct 12 11:47:56 localhost /usr/sbin/sip-proxy[7470]: INFO: <core> [udp_server.c:217]: INFO: udp_init: SO_RCVBUF is finally 262142
Oct 12 11:47:56 localhost /usr/sbin/sip-proxy[7470]: ERROR: <core> [udp_server.c:388]: ERROR: udp_init: bind(6, 0x8219380, 16) on 192.98.101.10: Cannot assign requested address
-- juha