hi, All
I have setup the SER with auth enable for MySQL ( and radius also .. at a time only one is used ) I am able to see that if user is not in database he is not able to login to SOFTPHONE .... Now I want to enable accounting also ,,, as in my case auth is working perfectly fine but accounting is not working ... I have tried all the things ,, but still I am missing somthing ...... please help me ...... as even inserting the acc module in ser.cfg file nothing is getting inserted into database .. in the form of accounting information..
At the same time where can i get the information about .. what is a information stored in each mysql table
---------------------------------------------------------------------------------------------------------------------------------
my ser.cfg file is as follows ( where i have compiled ser with all the module enable)
------------------------------------------------------------------------------------------------------------------------------------
[root@test ser]# cat ser.cfg
#
# $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $
#
# simple quick-start config script
#
# ----------- global configuration parameters ------------------------
debug=5 # debug level (cmd line: -dddddddddd)
fork=yes
log_stderror=yes # (cmd line: -E)
/* Uncomment these lines to enter debugging mode
debug=7
fork=no
log_stderror=yes
*/
check_via=no # (cmd. line: -v)
dns=no # (cmd. line: -r)
rev_dns=no # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/auth_db.so"
#loadmodule "/usr/local/lib/ser/modules/auth_radius.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
# -- auth_radius params --
#modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf")
#modparam("usrloc", "db_mode", 0)
# --domain module--
modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser")
#modparam("domain", "db_mode", 1)
#modparam("domain", "domain_table", "domain")
#modparam("domain", "domain_col", "domain")
# --acc params--
modparam("acc", "log_level", 1)
modparam("acc", "log_flag", 2)
#modparam("acc", "log_missed_flag", 2)
#modparam("acc", "log_fmt", "fimos")
#modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser")
#modparam("acc", "db_missed_flag", 2)
# Uncomment this if you want to use SQL database
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 1)
# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this config),
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")
# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)
# ------------------------- request routing logic -------------------
# main routing logic
route{
# initial sanity checks -- messages with
# max_forwards==0, or excessively long requests
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
break;
};
if ( msg:len > max_len ) {
sl_send_reply("513", "Message too big");
break;
};
# we record-route all messages -- to make sure that
# subsequent messages will go through our proxy; that's
# particularly good if upstream and downstream entities
# use different transport protocol
record_route();
# loose-route processing
if (loose_route()) {
t_relay();
break;
};
# if the request is for other domain use UsrLoc
# (in case, it does not work, use the following command
# with proper names and addresses in it)
if (uri=='192.168.1.246') {
if (method=="REGISTER") {
# Uncomment this if you want to use digest authentication
if (!www_authorize("192.168.1.246", "subscriber")) {
www_challenge("192.168.1.246", "0");
break;
};
save("location");
break;
};
# native SIP destinations are handled using our USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
# forward to current uri now; use stateful forwarding; that
# works reliably even if we forward from TCP to UDP
if (!t_relay()) {
sl_reply_error();
};
}
Please see teh table list
[root@test ser]# mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 376 to server version: 3.23.58
Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
mysql> use ser
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
mysql> show tables
-> ;
+-----------------------+
| Tables_in_ser |
+-----------------------+
| acc |
| active_sessions |
| aliases |
| config |
| domain |
| event |
| grp |
| location |
| missed_calls |
| pending |
| phonebook |
| preferences |
| reserved |
| server_monitoring |
| server_monitoring_agg |
| silo |
| subscriber |
| uri |
| version |
+-----------------------+
19 rows in set (0.00 sec)
---------------------------------
Yahoo! Mail Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
Hello List,
This isn't really a technical question, but probably rather a question about
SER's acceptance by the termination service provider out there. I have been
looking around for a termination service provider out there that would work
with SER and I could not find a decent one thus far. Most of them (at least
six providers) I found seem to only work with Asterisk or UA like ATA186,
and their approach with ppl using SER are "if it works, it works; if not,
too bad, find another service provider, we are not going to look into why
our system does not work with SER". Most of them said their gateways are
SIP-compliant, then why would it be so hard for their gateways to work with
SER? There are three providers listed in onsip.org and I tried one of them,
but I pretty much get no response on my support questions.
Do most of you build your own gateway(s) to use with your SER platform? If
someone is working with reliable termination provider(s) and would like to
recommend them to me, please email me. Thank you very much.
_________________________________________________________________
Powerful Parental Controls Let your child discover the best the Internet has
to offer.
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht…
Start enjoying all the benefits of MSN® Premium right now and get the
first two months FREE*.
thanks Mohammad.
ac
--- "info(a)beeplove.com" <info(a)beeplove.com> wrote:
> It can be done by DNS SRV record.
>
> Mohammad
>
>
> Original Message:
> -----------------
> From: a c lra101(a)yahoo.com
> Date: Tue, 10 May 2005 09:51:29 -0700 (PDT)
> To: serusers(a)lists.iptel.org
> Subject: [Serusers] sip load balancing
>
>
> hello,
>
> got a question on SER. Could SER do load balance
> across SIP servers?
>
> for example:
>
> SIP carrier --> SER --> Media/App Servers {multiple}
>
> Are there any Configuration examples I can look at?
>
> thank you
> ac
>
>
>
> __________________________________
> Yahoo! Mail Mobile
> Take Yahoo! Mail with you! Check email on your
> mobile phone.
> http://mobile.yahoo.com/learn/mail
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
>
--------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
>
>
> _______________________________________________
> Serusers mailing list
> serusers(a)lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>
__________________________________
Yahoo! Mail Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
http://mobile.yahoo.com/learn/mail
It can be done by DNS SRV record.
Mohammad
Original Message:
-----------------
From: a c lra101(a)yahoo.com
Date: Tue, 10 May 2005 09:51:29 -0700 (PDT)
To: serusers(a)iptel.org
Subject: [Serusers] sip load balancing
hello,
got a question on SER. Could SER do load balance
across SIP servers?
for example:
SIP carrier --> SER --> Media/App Servers {multiple}
Are there any Configuration examples I can look at?
thank you
ac
__________________________________
Yahoo! Mail Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
http://mobile.yahoo.com/learn/mail
_______________________________________________
Serusers mailing list
Serusers(a)iptel.org
http://mail.iptel.org/mailman/listinfo/serusers
--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .
I sent you a private message in french... I think it's better if evryone can
understand advices in this mailing-list (if my english is not too bad !
;-) ) so I prefer posting in english..
----- Original Message -----
From: "michael p" <mikep3000(a)hotmail.com>
To: <vincent.verdot(a)int-evry.fr>
Sent: Tuesday, May 10, 2005 5:21 PM
Subject: Re: [serusers] what does it mean
> salut vincent
>
> si tu parles francais tu peux peut etre m'expliquer en francais ;)
>
> les credentials sont les comptes URI qui se rajoute ds les via a chaque
> passage d'un proxy?
>
> j'ai pas trop compris
>
> Merci
>
> M.
>
> >From: "Vincent Verdot" <vincent.verdot(a)int-evry.fr>
> >To: <serusers(a)lists.iptel.org>
> >Subject: Re: [serusers] what does it mean
> >Date: Tue, 10 May 2005 17:16:40 +0200
> >
> >For example, if a user's SIP message must be forwarded by two proxies
(from
> >two distincts realms) and must be authenticated in the both.. then the
sip
> >message should contain 2 credentials : 1 for user-proxy1 authentication
and
> >an another one for proxy1-proxy2 authentication.
> >
> >Credential =~ hash(shared secret + nonce + ...)
> >
> >example (you can have many lines like this...):
> >****************
> >Authorization: Digest
>
>username="Vincent",realm="int-evry.fr",nonce="xxxxxxxxxxxx",uri="sip:int-ev
r
> >y.fr",response="xxxxxxxxxxxxxxxx",algorithm=MD5
> >****************
> >
> >----- Original Message -----
> >From: "michael p" <mikep3000(a)hotmail.com>
> >To: <serusers(a)lists.iptel.org>
> >Sent: Tuesday, May 10, 2005 4:42 PM
> >Subject: [serusers] what does it mean
> >
> >
> > > hi excuse me but it's a little difficult for me as a french this doc
in
> > > english about ser
> > >
> > > what does mean the word credentials in "A SIP message may contain
> >several
> > > credentials" ?
> > >
> > > can you give me an example please?
> > >
> > > thanks
> > >
> > > M.
> > >
> > >
> > > _______________________________________________
> > > Serusers mailing list
> > > serusers(a)lists.iptel.org
> > > http://lists.iptel.org/mailman/listinfo/serusers
> >
> >_______________________________________________
> >Serusers mailing list
> >serusers(a)lists.iptel.org
> >http://lists.iptel.org/mailman/listinfo/serusers
>
>
hi excuse me but it's a little difficult for me as a french this doc in
english about ser
what does mean the word credentials in "A SIP message may contain several
credentials" ?
can you give me an example please?
thanks
M.
Something like this before your final route should work..
if (!proxy_authorize("blah.realm.blah", "subscriber")) {
xlog("L_INFO", "Auth failed before %rm from <%fu>. sending
challenge\n");
proxy_challenge("blah.realm.blah", "1");
break;
};
if (!method == "CANCEL" && !method == "ACK" ) {
if (!is_user_in("Credentials", "int")) {
xlog("L_INFO", "User dialout but no privs or no ACL,
dropping %fu URI %ru\n");
sl_send_reply("403", "Forbidden go away");
break;
}
}
-----Original Message-----
From: Edgardo O. Gonzales II [mailto:edgardo.g@pacific.net.ph]
Sent: Tuesday, May 10, 2005 8:35 AM
To: serusers(a)lists.iptel.org
Subject: [Serusers] check user if authenticated
Hi!
How will I check if user is authenticated or not before I permit him to
make a call.
thanks,
ed
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
