- sr-users - kamailio.org

[Serusers] Avoiding caller ID spoofing....
by sip 27 Oct '05

27 Oct '05

I think I asked this question before, but I honestly can't remember (been one of those weeks). How can I avoid someone spoofing caller ID by just putting in fake info into their Display Name field in their UA client? I'd like to be able to replace the display name with one of my choosing (preferably based on some rules about the caller's ID... i.e. if the caller is a user on our system, replace his/her display name with the last name, first name from the DB subscriber info. If the caller is from a different system, remove the display name completely and just pass the sip info so that at least a valid identification is seen). This involves the dreaded modification of the From: header (although it shouldn't break RFC because it doesn't actually involve modifying the URI. Is there a reasonable way to do this or does this call for some more module hacking (maybe taking bits from the UAC module and rewriting it to accept an avp or some such) ? N.

2 3

[Serusers] RE: Segmentation fault - Core dump
by deepak.chandrasekaran＠wipro.com 27 Oct '05

27 Oct '05

GDB says like this: Program received signal SIGSEGV, Segmentation fault. 0x00f104aa in mod_init () at authrad_mod.c:123 123 attrs[A_SERVICE_TYPE]->n = "Service-Type"; (gdb) backtrace #0 0x00f104aa in mod_init () at authrad_mod.c:123 #1 0x080772bb in init_mod (m=0x810c2c8) at sr_module.c:474 #2 0x0805e378 in main (argc=2, argv=0xbff7efc4) at main.c:1553 Any ideas? Thanks! Regards, Deepak ________________________________ From: Deepak Chandrasekaran (WT01 - Voice & Next Generation Networks) Sent: Thursday, October 27, 2005 10:24 AM To: 'serusers(a)lists.iptel.org' Cc: 'serdev(a)lists.iptel.org' Subject: Segmentation fault - Core dump Hi, Is there any problem with Fedora Core 4 and ser-0.9.3 with radius authentication? I am using ser-0.9.3, radiusclient-ng 0.5.1 with freeradius-1.0.4 and it is working fine on RedHat 9. I am using the same config with Fedora Core 4. Modules are compiled fine and .so files are successfully generated. But whenever I start SER, it gives me like: 0(0) DEBUG: init_mod: auth_radius 0(0) auth_radius - Initializing Segmentation fault (core dumped) Please let me know if am going wrong somewhere. This is of urgent need and so kindly reply ASAP... Thanks in advance... Regards, Deepak Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

RE: [Serusers] end the session if no media
by Hakan YASTI 27 Oct '05

27 Oct '05

Hi Teigre, Thanks for your reply and kind suggestions. In fact, I am using a session controller for sip calls. And it alerts me via email when a sessiıon is reached for about 60 minutes. At that time, I check it manually and kil the session if the session is abondened. By sending BYE messages to both legs. From the PSTN side I get the reply what I assume ( 200 OK ) but from the sip side I get No transaction exist. Because the session was ended before and session controller couldn’t get the BYE message for some reasons. ( Network failure or something else ). What I am looking for that, from the media proxy, I see the active rtp session when I use media proxy for the calls. And I assume that, when the call has finished and couldn’t send or get BYE message, there will be no rtp stream going on. May be I am wrong for this. If rtp session is still open when the a side hunp up and couldn’t send bye , there is nothing to do except killing the session with sending bye messages to both sides, because there is no way to understand the call is active or not. Best Regards, Hakan ________________________________ From: Greger V. Teigre [mailto:greger@teigre.com] Sent: Wednesday, October 26, 2005 10:00 AM To: Hakan YASTI; serusers(a)lists.iptel.org; ritesh.j(a)net4.in Subject: Re: [Serusers] end the session if no media Hakan and Ritesh, It seems to me that you are both asking about the same thing. This topic has been discussed many times on serusers. Search google (site:mail.iptel.org) for "BYE stateful sipsak", I'm pretty sure you will get some info. Also, this FAQ could help: http://www.onsip.org/modules/xoopsfaq/index.php?cat_id=3#q2 g-) ----- Original Message ----- From: Hakan YASTI <mailto:hyasti@teletek.net> To: serusers(a)lists.iptel.org Sent: Thursday, October 13, 2005 09:13 AM Subject: [Serusers] end the session if no media Hi, I wonder, is there any way, to end the session when the media has ended. Sometimes, we have problem at BYE message. For some reasons, the bye is not coming and may be it is coming wrong. At that time, the media is ended but the call is seen as active. I am using ser and using media proxy. Any suggestion for this issue ? Best Regards, Hakan YASTI NGN Engineer Teletek Telekomünikasyon Hizmetleri A.Þ. Ayazma Dere Cad. Akþit Plaza No:12 Fulya, Beþiktaþ ISTANBUL - TURKEY Tel : +90 212 310 22 34 Fax : +90 212 227 8700 GSM : +90 533 669 06 84 E-mail: hakan.yasti(a)teletek.net <mailto:hakan.yasti@teletek.net> http://www.teletek.net ________________________________ _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers Disclaimer: This e-mail (including any attachments) may contain confidential and/or privileged information. Copying, disclosure or distribution of the material in this e-mail without our companys' authority is strictly forbidden. If you are not the intended recipient (or have received this e-mail in error), please notify the sender and delete it from your system immediately. Our Company makes no warranty as to the accuracy or completeness of any information contained in this message and hereby excludes any liability of any kind for the information contained therein or for the information transmission, reception, storage or use of such in any way whatsoever. Any opinions expressed in this message are those of the author and may not necessarily reflect the opinions of Our Company. Yasal Uyarı: Bu e-posta'nin içerdigi bilgiler (ekleri de dahil olmak üzere) gizlidir. Şirketimizin onayı olmaksızın içeriği kopyalanamaz, üçüncü kişilere açıklanamaz veya iletilemez . Bu mesajın gönderilmek istendiği kişi değilseniz (ya da bu e-posta’yı yanlışlıkla aldıysanız), lütfen yollayan kişiyi haberdar ediniz ve mesajı sisteminizden derhal siliniz. Şirketimiz bu mesajın içerdigi bilgilerin doğruluğu veya eksiksiz olduğu konusunda bir garanti vermemektedir. Bu nedenle bilgilerin ne şekilde olursa olsun içeriğinden, iletilmesinden, alınmasından, saklanmasından sorumlu değildir. Bu mesajın içeriği yazarına ait olup, Şirketimizin görüşlerini içermeyebilir.

2 1

[Serusers] end the session if no media
by Hakan YASTI 27 Oct '05

27 Oct '05

Hi, I wonder, is there any way, to end the session when the media has ended. Sometimes, we have problem at BYE message. For some reasons, the bye is not coming and may be it is coming wrong. At that time, the media is ended but the call is seen as active. I am using ser and using media proxy. Any suggestion for this issue ? Best Regards, Hakan YASTI NGN Engineer Teletek Telekomünikasyon Hizmetleri A.Þ. Ayazma Dere Cad. Akþit Plaza No:12 Fulya, Beþiktaþ ISTANBUL - TURKEY Tel : +90 212 310 22 34 Fax : +90 212 227 8700 GSM : +90 533 669 06 84 E-mail: hakan.yasti(a)teletek.net <mailto:hakan.yasti@teletek.net> http://www.teletek.net

3 3

[Serusers] Segmentation fault - Core dump
by deepak.chandrasekaran＠wipro.com 27 Oct '05

27 Oct '05

Hi, Is there any problem with Fedora Core 4 and ser-0.9.3 with radius authentication? I am using ser-0.9.3, radiusclient-ng 0.5.1 with freeradius-1.0.4 and it is working fine on RedHat 9. I am using the same config with Fedora Core 4. Modules are compiled fine and .so files are successfully generated. But whenever I start SER, it gives me like: 0(0) DEBUG: init_mod: auth_radius 0(0) auth_radius - Initializing Segmentation fault (core dumped) Please let me know if am going wrong somewhere. This is of urgent need and so kindly reply ASAP... Thanks in advance... Regards, Deepak Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

[Users] Read through database : openser
by ranveer kunal 27 Oct '05

27 Oct '05

Hello friends, I need a common database as I am trying to loadbalance 2-3 opensers. How can I make sure that the changes committed by one server, is reflected to other. ie. say user1 registers via ser1 and entry is added to the database. now when i quesry server2 for options of user1 i should get 200 ok. i mean is there a mechanism to read thru the database. like cache less mode. Regards, Ranveer.

1 0

[Serusers] REGISTER attempt when db is down
by yserge 26 Oct '05

26 Oct '05

With recently changed behavior of MySQL the reconnection scheme of SER ( and I am running SER 0.9.4 and MySQL 5.0.13 ) would no longer work.. It's OK, that can be fixed with slight correction of MySQL configuration or with minor change in SER code.. What I noticed though is that if the database does go down, the REGISTER request does not get any response, while I would expect SER to still send something like 500 Internal Server Error.. I wonder if it's a SER bug or a routing script issue.. Thanks, Sergei

3 5

Re: [Serusers] AVPOPS syntax help
by Pol Novell Balcells 26 Oct '05

26 Oct '05

Ok! I will try to acomplish it by creating a new table in ser database. But this suxs a lot because serctl script only fills in aliases database, so I will have to do it by hand!! Any trouble will be reported again. p.d: Moltes gràcies, tant sem nota? El 26/10/2005, a las 12:35, Samuel Osorio Calvo escribió: > I haven't played with AVP much so I might be wrong, but I think you > should replace the $ from the username after the alias: > > avp_db_load($alias/$username,i:alias")---> > avp_db_load($alias/username,i:alias") > > ^ > And about the pushto....I have no idea if it accepts two headers, > so somebody with more experience will tell you if it is possible to > push the alias into the ruri and to in the same avp_pushto. Just a > guess, try to do it in two different commands. > > Hope it helps, > > Samuel. > > P.D. Espero q algú et pugui ajudar...sort!! > > Unclassified > > >>>> Pol <kuroki(a)gmail.com> 10/19/05 09:27PM >>> >>>> >>>> > Hi SerUsers! > I'm completly crazy tryin' to do the following: > I just want to load from DB user alias and rewrite it into "$to > $ruri", because these calls shoud go directly to asterisk voicemail > and they are numerical not alphanumeric. > i tried to do the following: > > if(avp_db_load($alias/$username,i:alias") > avp_pushto("$ruri/$to","alias") > just to load from alias table username into an integer called alias > and then pushed to new $ruri. > > I'm new in ser and avps module it's really usefull but a little bit > "unreadable", plz this should work for tomorrow :$ any help plz!? > be as much especific as can, because i don't know if i have done the > proper modparams. > these are: > > modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ser") > modparam("avpops", "avp_table", "usr_preferences") > #modparam("avpops", "use_domain", "1") > modparam("avpops", "uuid_column", "uuid") > modparam("avpops", "username_column", "username") > modparam("avpops", "domain_column", "domain") > modparam("avpops", "attribute_column", "attribute") > modparam("avpops", "value_column", "value") > modparam("avpops", "type_column", "type") > > THX > > > On 10/13/05, Iqbal <iqbal(a)gigo.co.uk> wrote: > > >> >> >> Hi >> >> I think you have the source syntax written below in the avp_db_load >> statements >> >> so the source will have $from or $to or $ruri optionally followed >> by the >> words "username" or domain >> >> eg >> >> avp_db_load($from/username) of avp_db_load($to/domain) ---note >> these are >> not completed syntax >> >> OR instead of the sip_uri which is $from,$to,$ruri you can have >> avp_alias >> >> which is exactly what it says, its an alias, >> >> Str_value this is the number directly related to the predefined >> alias in >> the line above >> >> The name can be a string S: >> interger i: >> >> or you can leave out the S: and just use the name >> >> or of course an alias >> >> I know thats probably not clear...in fact I just read it myself, >> the best >> thing with avpops , is to look at the db, and create a few, and >> then see >> how to pop them out and play with 'em >> >> Iqbal >> >> >> On 10/12/2005, "Lenir" <lenirsantiago(a)yahoo.com> wrote: >> >> >> >>> Hello list, >>> >>> I'm reading the documentation for AVPOPS, and Im a little >>> confused in this >>> section: >>> >>> -------------------------------------------------------------------- >>> -------- >>> ----- >>> #avp_db_load(source,name) >>> #Loads from DB into memory the AVPs corresponding to the given >>> source. >>> >>> Meaning of the parameters is as follows: >>> >>> >>> source - what info is used for identifying the AVPs. Parameter >>> syntax: >>> >>> >>> source = (sip_uri)['/'('username'|'domain')]) | (avp_alias) | >>> str_value >>> >>> sip_uri = '$from' | '$to' | '$ruri' >>> >>> >>> name - which AVPs will be loaded from DB into memory. Parameter >>> syntax is: >>> >>> >>> name = avp_spec['/'(table_name|'$'db_scheme)] >>> >>> avp_spec = ''|'s:'|'i:'|avp_name|avp_alias >>> >>> >>> Example 1-12. avp_db_load usage >>> >>> .... >>> avp_db_load("$from","i:678"); >>> avp_db_load("$ruri/domain","i:/domain_preferences"); >>> avp_db_load("$uuid","s:404fwd/fwd_table"); >>> avp_db_load("$ruri","i:123/$some_scheme"); >>> .... >>> >>> -------------------------------------------------------------------- >>> -------- >>> ----- >>> >>> My question are: >>> >>> Can someone explain the source syntax? >>> Can someone explain the name syntax? >>> what are i:, s:, avp_name and avp_alias? >>> >>> Thanks! >>> >>> Lenir >>> >>> >>> >>> _______________________________________________ >>> Serusers mailing list >>> serusers(a)lists.iptel.org >>> http://lists.iptel.org/mailman/listinfo/serusers >>> >>> >>> >>> >> >> _______________________________________________ >> Serusers mailing list >> serusers(a)lists.iptel.org >> http://lists.iptel.org/mailman/listinfo/serusers >> >> _____________________________________________________________________ >> Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es >> >> >> > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > _____________________________________________________________________ Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es

1 0

[Serusers] SER Server and Cisco Call Manager 3.3
by gorand＠dvvti.com 26 Oct '05

26 Oct '05

Okay you Cisco Call Manager and SER GURU's. Two questions in this posting the first one is what I call the harder of the two. I work for a company which has Cisco Call manager 3.3 and 2 gateway routers running h323. The system works well when it works. Yet as we all know Cisco Call Manager does not support SIP. Only 4.0 supports sip trunking. Yet my company has sales people who want to use the phones to connect into the company and use their system in a remote user fashion. What I want to do is setup a small SER server on the DMZ configure it for remote users to call internal extensions which are configured by the Cisco Call Manager and I want to my remote users to be able to call out to PSTN via our routers using h323. Is this difficult to do with SER. If possible in your response give me details, and configuration examples. Currently we are using a 5 year old VPN and that is killing our VPN appliance and would rather have it external for our sales force to connect directly from home via a sip device. That was question 1. Second question, I have SER installed on a FEDORA Core 4 and one of the forum users was nice enough to forward me RPM's of Ser. I installed all the RPM along with SERWEB. I am unable to access the url via http://<your-host>/ser/admin Everything installed properly I have looked at my httpd and have done multple /etc/rc.d/init.d/httpd start Everything seems like it starting up. I just can't get the SerWeb working properly. Thanks in Advance Goran Donev

2 1

[Users] SIP clients and DNS SRV
by Helge Waastad 26 Oct '05

26 Oct '05

Hi, this is not a technical question regarding OpenSER, but more of req for information. I'm using Cisco phones and gateways and have implemented DNS SRV redundancy. However, I have never seen a SIP phone that really works with DNS SRV redundancy, except from Cisco. (which actually works as a charm) Does anyone know other phones that can use dns srv for redundancy? At least Cisco tries the next DNS SRV entry if it receives a port unreachable from the highest priority proxy... -- mvh/best regards Helge Waastad System Engineer Smartnet

5 5

[Serusers] Is there a way to do read through database in ser ?
by ranveer kunal 26 Oct '05

26 Oct '05

Hi, I am using 2 ser servers and they both share a common database, so they write the location information to that database. but problem is they don'read the information from database, is there a way to force them to lookup the database, so that changes made by one are reflected to other or atleast to refresh cache from database. Regards, Ranveer.

2 2

[Serusers] help on linking ser to mysql
by Dhiman D Chowdhury 26 Oct '05

26 Oct '05

Hi, I will appreciate your kind help in the following issue: 1. I could not find ser-mysql package for download. I need the package for REDHAT linux 9.0. -- Can anybody please help? 2. I have Mysql server that automatically installed with REDHAT linux but when I tried: mysql> connect ser -- it fails with a message, "error 1049 unknown database ser". Please help. Thanks Pappu

1 0

[Serusers] AVPOPS syntax help
by Lenir 26 Oct '05

26 Oct '05

Hello list, I'm reading the documentation for AVPOPS, and Im a little confused in this section: ---------------------------------------------------------------------------- ----- #avp_db_load(source,name) #Loads from DB into memory the AVPs corresponding to the given source. Meaning of the parameters is as follows: source - what info is used for identifying the AVPs. Parameter syntax: source = (sip_uri)['/'('username'|'domain')]) | (avp_alias) | str_value sip_uri = '$from' | '$to' | '$ruri' name - which AVPs will be loaded from DB into memory. Parameter syntax is: name = avp_spec['/'(table_name|'$'db_scheme)] avp_spec = ''|'s:'|'i:'|avp_name|avp_alias Example 1-12. avp_db_load usage ... avp_db_load("$from","i:678"); avp_db_load("$ruri/domain","i:/domain_preferences"); avp_db_load("$uuid","s:404fwd/fwd_table"); avp_db_load("$ruri","i:123/$some_scheme"); ... ---------------------------------------------------------------------------- ----- My question are: Can someone explain the source syntax? Can someone explain the name syntax? what are i:, s:, avp_name and avp_alias? Thanks! Lenir

4 3

[Serusers] mailing list
by Iqbal 26 Oct '05

26 Oct '05

Hi has there been extremly low traffic on the list over the last few days, or is it my ISP Iqbal

2 1

[Users] openSER on interix
by Public Dump 26 Oct '05

26 Oct '05

Was anynbody able to compile/run openSER on the Windows Interix Environment (part of Microsoft Services for UNIX) ?

2 1

[Serusers] Automatic purge of users
by Damien Sandras 26 Oct '05

26 Oct '05

Hello, I would like to know if SER stores somewhere the last "registration" date for a given user. I have looked at all tables and couldn't find such a field. So I would like to know if there is a recommended way to automatically delete all users who haven't logged in since more than x months? Thank you, -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2006 : http://www.fosdem.org v_/_ SIP Phone : sip:dsandras@gnomemeeting.net sip:600000@gnomemeeting.net

2 1

FW: [Users] SIP clients and DNS SRV
by Helge Waastad 26 Oct '05

26 Oct '05

Forgot CC on this one..... -----Original Message----- From: Helge Waastad Sent: 26. oktober 2005 13:56 To: 'Zen Kato' Subject: RE: [Users] SIP clients and DNS SRV Hi, You know, even if DNS SRV works fine, you will have problems with NAT'ed clients behind firewalls. Ther reason is that the session is opened between the server handeling the registration and the UAC. If this on crashes, the second one will never be able to send INVITE to the UAC since there is no open session through the firewall. Yes, you will see service unavaliability up to the registration interval, depending on the UAC functionality. The only solution for this is a (outbound) proxy cluster using Linux-HA (or vrrp) and a IP address take-over. (Or a Border Controller, but these are not for free..) Cisco 7960 works fine (also snom) I've seen that Sipura in 3.1.5 release also supports dns srv for redundancy/failover, but I have'nt tried it. -----Original Message----- From: Zen Kato [mailto:zenkato@pis.bekkoame.ne.jp] Sent: 26. oktober 2005 13:45 To: Helge Waastad Cc: klaus.mailinglists(a)pernau.at; users(a)openser.org Subject: Re: [Users] SIP clients and DNS SRV Hi, I posted on [serusers] regarding DNS SRV,t_replicate,backup server and GS phones. My test resut of BT101(1.0.7.11-newest) and GXP2000(1.0.1.9) was no good. My question is eventhough we set up DNS SRV on server side, if sip clients does not suppot DNS SRV, do we have a risk of (5+5)minutes out of service time when we set up 5 minutes REGISTER intervals? If UA have multiple REGISTERs outgoing lines such as GXP2000, we could set up Line1 for sip1&sip2(DNS SRV) Line2 for sip3 server. In this case if line1 does not work, the user can use Line2. Xlite can register 3 sip servers, but only default sip proxy can use as outgoing line, so the Xlite users have (5+5)minutes out of service risk. Does Cisco 7960 work perfectly on DNS SRV? Regards, Zen Helge Waastad wrote : > Hi, > I've started to add some more information to voip-info. > I'm still waiting for response from Grandstream and others on their > support (or future support) for DNS SRV. > > br hw > > On Wed, 2005-10-19 at 17:32 +0200, Klaus Darilion wrote: > > Hi Helge! > > > > According to my tests, also SNOM can do SRV based failover. > > > > I've published my test results at: > > http://www.voip-info.org/wiki/view/SRV+implementations > > > > Please add your test results to this. > > > > regards > > klaus > > > > Helge Waastad wrote: > > > Hi, > > > this is not a technical question regarding OpenSER, but more of > > > req for information. > > > > > > I'm using Cisco phones and gateways and have implemented DNS SRV > > > redundancy. > > > However, I have never seen a SIP phone that really works with DNS > > > SRV redundancy, except from Cisco. (which actually works as a > > > charm) > > > > > > Does anyone know other phones that can use dns srv for redundancy? > > > > > > At least Cisco tries the next DNS SRV entry if it receives a port > > > unreachable from the highest priority proxy... > > > > > > > > > -- > mvh/best regards > Helge Waastad > System Engineer > Smartnet > (+47)67830017 > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users >

1 0

Re: [Serusers] AVPOPS syntax help
by Samuel Osorio Calvo 26 Oct '05

26 Oct '05

I haven't played with AVP much so I might be wrong, but I think you should replace the $ from the username after the alias: avp_db_load($alias/$username,i:alias")---> avp_db_load($alias/username,i:alias") ^ And about the pushto....I have no idea if it accepts two headers, so somebody with more experience will tell you if it is possible to push the alias into the ruri and to in the same avp_pushto. Just a guess, try to do it in two different commands. Hope it helps, Samuel. P.D. Espero q algú et pugui ajudar...sort!! Unclassified >>> Pol <kuroki(a)gmail.com> 10/19/05 09:27PM >>> Hi SerUsers! I'm completly crazy tryin' to do the following: I just want to load from DB user alias and rewrite it into "$to $ruri", because these calls shoud go directly to asterisk voicemail and they are numerical not alphanumeric. i tried to do the following: if(avp_db_load($alias/$username,i:alias") avp_pushto("$ruri/$to","alias") just to load from alias table username into an integer called alias and then pushed to new $ruri. I'm new in ser and avps module it's really usefull but a little bit "unreadable", plz this should work for tomorrow :$ any help plz!? be as much especific as can, because i don't know if i have done the proper modparams. these are: modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ser") modparam("avpops", "avp_table", "usr_preferences") #modparam("avpops", "use_domain", "1") modparam("avpops", "uuid_column", "uuid") modparam("avpops", "username_column", "username") modparam("avpops", "domain_column", "domain") modparam("avpops", "attribute_column", "attribute") modparam("avpops", "value_column", "value") modparam("avpops", "type_column", "type") THX On 10/13/05, Iqbal <iqbal(a)gigo.co.uk> wrote: > > > Hi > > I think you have the source syntax written below in the avp_db_load > statements > > so the source will have $from or $to or $ruri optionally followed by the > words "username" or domain > > eg > > avp_db_load($from/username) of avp_db_load($to/domain) ---note these are > not completed syntax > > OR instead of the sip_uri which is $from,$to,$ruri you can have avp_alias > > which is exactly what it says, its an alias, > > Str_value this is the number directly related to the predefined alias in > the line above > > The name can be a string S: > interger i: > > or you can leave out the S: and just use the name > > or of course an alias > > I know thats probably not clear...in fact I just read it myself, the best > thing with avpops , is to look at the db, and create a few, and then see > how to pop them out and play with 'em > > Iqbal > > > On 10/12/2005, "Lenir" <lenirsantiago(a)yahoo.com> wrote: > > >Hello list, > > > >I'm reading the documentation for AVPOPS, and Im a little confused in this > >section: > > > >---------------------------------------------------------------------------- > >----- > >#avp_db_load(source,name) > >#Loads from DB into memory the AVPs corresponding to the given source. > > > >Meaning of the parameters is as follows: > > > > > >source - what info is used for identifying the AVPs. Parameter syntax: > > > > > >source = (sip_uri)['/'('username'|'domain')]) | (avp_alias) | str_value > > > >sip_uri = '$from' | '$to' | '$ruri' > > > > > >name - which AVPs will be loaded from DB into memory. Parameter syntax is: > > > > > >name = avp_spec['/'(table_name|'$'db_scheme)] > > > >avp_spec = ''|'s:'|'i:'|avp_name|avp_alias > > > > > >Example 1-12. avp_db_load usage > > > >.... > >avp_db_load("$from","i:678"); > >avp_db_load("$ruri/domain","i:/domain_preferences"); > >avp_db_load("$uuid","s:404fwd/fwd_table"); > >avp_db_load("$ruri","i:123/$some_scheme"); > >.... > > > >---------------------------------------------------------------------------- > >----- > > > >My question are: > > > >Can someone explain the source syntax? > >Can someone explain the name syntax? > >what are i:, s:, avp_name and avp_alias? > > > >Thanks! > > > >Lenir > > > > > > > >_______________________________________________ > >Serusers mailing list > >serusers(a)lists.iptel.org > >http://lists.iptel.org/mailman/listinfo/serusers > > > > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > _____________________________________________________________________ > Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es > _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] EmbeddedObj.o sipstack make error - Cannot compile b2bua
by administrator 26 Oct '05

26 Oct '05

Hello everybody, I am trying to install b2bus from cvs and I get the following error: make[1]: Leaving directory `/root/vocal/sip/sipstack' make[1]: Entering directory `/root/vocal/sip/sipstack' g++ -Wall -fPIC -Wno-deprecated -D_REENTRANT -DUSE_PTHREADS -g -I../../build -I../../build/../sdp/sdp2 -I../../build/../util -I../../build/../util/threads -I../../build/../util/logging -I../../build/../util/crypto -I../../build/../util/statistics -I../../build/../util/snmp -I../../build/../util/signals -I../../build/../util/behavior -I../../build/../util/io -I../../build/../util/services -I../../build/../util/transport -I../../build/../util/config -I../../build/../util/dnssrv -I../../build/../util/deprecated -I../../build/../util/adt -I../../build/../contrib/libxml2.Linux.i686 -I../../build/../contrib/libxml2.Linux.i686/include/libxml -I../../build/../contrib/libxml2.Linux.i686/include -DVOCAL_USE_DEPRECATED -DVOCAL_USING_PENTIUM -DOLD_PROV -c -o obj.debug.Linux.i686/EmbeddedObj.o EmbeddedObj.cxx BaseUrl.hxx:146: error: specialization of βtemplate<class _Key> struct __gnu_cxx::hashβ in different namespace /usr/lib/gcc/i386-redhat-linux/4.0.1/../../../../include/c++/4.0.1/ext/hash_ fun.h:71: error: from definition of βtemplate<class _Key> struct __gnu_cxx::hashβ EmbeddedObj.cxx: In member function βData Vocal::EmbeddedObj::doReverseEscape(const std::string&)β: EmbeddedObj.cxx:213: warning: comparison between signed and unsigned integer expressions make[1]: *** [obj.debug.Linux.i686/EmbeddedObj.o] Error 1 make[1]: Leaving directory `/root/vocal/sip/sipstack' make: *** [sip] Error 2 I user SER(0.9.4) and freeRadius (latest) on Fedora Core 4. Please Help ASAP. Thank you in advance Yiannis Marios

1 0

[Serusers] EmbeddedObj Sipstack make error
by Yiannis Martis 26 Oct '05

26 Oct '05

Hello everybody, I am trying to install b2bus from cvs and I get the following error: make[1]: Leaving directory `/root/vocal/sip/sipstack' make[1]: Entering directory `/root/vocal/sip/sipstack' g++ -Wall -fPIC -Wno-deprecated -D_REENTRANT -DUSE_PTHREADS -g -I../../build -I../../build/../sdp/sdp2 -I../../build/../util -I../../build/../util/threads -I../../build/../util/logging -I../../build/../util/crypto -I../../build/../util/statistics -I../../build/../util/snmp -I../../build/../util/signals -I../../build/../util/behavior -I../../build/../util/io -I../../build/../util/services -I../../build/../util/transport -I../../build/../util/config -I../../build/../util/dnssrv -I../../build/../util/deprecated -I../../build/../util/adt -I../../build/../contrib/libxml2.Linux.i686 -I../../build/../contrib/libxml2.Linux.i686/include/libxml -I../../build/../contrib/libxml2.Linux.i686/include -DVOCAL_USE_DEPRECATED -DVOCAL_USING_PENTIUM -DOLD_PROV -c -o obj.debug.Linux.i686/EmbeddedObj.o EmbeddedObj.cxx BaseUrl.hxx:146: error: specialization of βtemplate<class _Key> struct __gnu_cxx::hashβ in different namespace /usr/lib/gcc/i386-redhat-linux/4.0.1/../../../../include/c++/4.0.1/ext/hash_fun.h:71: error: from definition of βtemplate<class _Key> struct __gnu_cxx::hashβ EmbeddedObj.cxx: In member function βData Vocal::EmbeddedObj::doReverseEscape(const std::string&)β: EmbeddedObj.cxx:213: warning: comparison between signed and unsigned integer expressions make[1]: *** [obj.debug.Linux.i686/EmbeddedObj.o] Error 1 make[1]: Leaving directory `/root/vocal/sip/sipstack' make: *** [sip] Error 2 I user SER(0.9.4) and freeRadius (latest) on Fedora Core 4. Please Help ASAP. Thank you in advance Yiannis Marios _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar - get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

1 0

[Serusers] Error while compiling kphone package version 4.2
by rajesh.rajguru＠wipro.com 26 Oct '05

26 Oct '05

Hi, We are trying to make package of kphone from http://www.wirlab.net/kphone/ <http://www.wirlab.net/kphone/> We have downloaded kphone package version "KPhone 4.2" from the above mentioned site After referring to INSTALL instructions, we have executed following steps 1) go to kphone dir and do ./configure. This was executed properly 2) do make . When we are doing make we got following error ---------- make[1]: Entering directory `/home/wipro/SER_Test/kphone/kphone' c++ -I/usr/lib/qt3-gcc2.96/include -Wall -O3 -I. -I../gsm -I../ilbc -I../dissipa te2 -DHAVE_CONFIG_H -DSHARE_DIR=\"/usr/local/share/apps/kphone\" -DPO_DIR=\"/usr /local/share/kphone/translations//\" -c -o kphone.o kphone.cpp kphone.cpp: In member function `void KPhone::createTrayIcon()': kphone.cpp:272: no method `QPixmap::fromMimeSource' kphone.cpp:274: no method `QPixmap::fromMimeSource' kphone.cpp: In member function `void KPhone::updateTrayIcon()': kphone.cpp:297: no method `QPixmap::fromMimeSource' kphone.cpp:299: no method `QPixmap::fromMimeSource' make[1]: *** [kphone.o] Error 1 make[1]: Leaving directory `/home/wipro/SER_Test/kphone/kphone' make: *** [all] Error 2 ----------- In fact we also got this error for older versions of kphone package like KPhone 4.1.1, KPhone 4.1.0 We tried commenting call to fromMimeSource in file kphone.cpp, and then doing make, but it gives some unresolved symbols at the end Please let us know if you have also faced same types of errors and if yes then any pointers about this will be of great help Thanks in advance for your help Regards, Rajesh Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

2 1

[Users] Beer on Wednesday 26th
by Helge Waastad 26 Oct '05

26 Oct '05

Hi, If I can make it, I'll stop by. The question is, what do SER/OpenSER people look like ;-) BTW, There will be a seminar, first of all regarding Asterisk but also discussing SER, on the 1th of November I guess it would be possible to have some discussions after this aswell. http://www.asterisk.no/asterisk/endelig_norges_foerste_asterisk_seminar_ meld_deg_paa_naa hw

3 3

[Serusers] FW: Call logs
by Colin Jordan 26 Oct '05

26 Oct '05

I can not find where the call logs are in the ser database. What can I do to enable call information logging (time stamps, destination, exc) ? DISCLAIMER: The information in this message is confidential and is legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized.If receiving in error please accept our apologies and notify the sender immediately. You must also delete the original message from your machine. If you are not the intended recipient, any use, disclosure, copying, distribution or action taken in reliance of it, is prohibited and maybe unlawful.

1 0

[Serusers] fee-for-service SER server
by Michael Kendall 26 Oct '05

26 Oct '05

Dear Wizards, Many of you seem to be running public SER servers with hundreds of users. I would like to become a paying customer of such a SER server, but cannot find any such services advertised on the internet. Can someone please recommend a running, fee-for-service SER server? A few weeks ago, I asked this same question, and got zero responses. And I mean no responses of any kind. Is this the wrong forum to ask such a question? Even messages pointing out why I am a total idiot would have been preferable to total silence. If there are reasons that it is not practical for anyone to operate a fee-for-service SER server, I would love to see some discussion of what makes it so impractical. Please feel free to speculate on why you think such services have not been created. thanks, Michael

2 1

[Serusers] latest rtpproxy + ser-0.8.14 + nathelper!!
by s0914508 26 Oct '05

26 Oct '05

Hi! I have some problems with rtp proxy. And the syslog tells that my rtpproxy can work (enable!!) ---------------------------------------- UA1: 10.10.54.131 (caller), behind NAT UA2: 218.171.144.86 (callee), public Internet SIP UA: Windows Messenger 5.1 SIP Server: ser-v0.8.14 Load module: nathelper RTP Proxy: latest rtpproxy (not portaone) NAT: CiscoSymmetric NAT ----------------------------------------- [Problem] Callee can hear caller's voice, but caller can't hear callee's. The the packet analysis is like this http://sip.csie.ncyu.edu.tw/~coolboy/calleereceiveinvite.JPG the line ( c= IN IP4 140.130.201.15 ) is NAT Server's IP address, not rtp proxy's IP address(140.130.175.2). I use force_rtp_proxy("140.130.175.2" ); to change c=IP4 with IP address(140.130.175.2), but it seems doesn't work. ----------------------------------------- Does anyone know how to solve my problem and the reason? It's very important to me. Thanks a lot !! ----------------------------------------- [Question] 1. Does c=IP4 get from rtpproxy if I use rtpproxy.?? And how they operate?? 2. I want to compile the latest nathelper module with FreeBSD system. I've read the 'Makefile', but it says "don't run with this Makefile, you should use 'master.Makefile' ". Does anyone can tell me how to do?? --== Mail Via Ncyu Mail ==--

2 1

[Serusers] How to modify the URI.
by gc 26 Oct '05

26 Oct '05

I am new to SER. I'd like to modify some of the sip headers like 'uri' and 'from' header to remove +1 prefix from the phone number. What I want to do is to change +15042339988(a)3.2.4.3 to 5042339988(a)3.2.4.3 Can somebody show me how to do it in ser.cfg? gc

2 1

[Serusers] Ser 0.94 Segfaults when using auth_db module
by Hilco de Lathouder 26 Oct '05

26 Oct '05

2 1

RE: [Serusers] auto configuration
by Ricardo Martinez 26 Oct '05

26 Oct '05

Hi Nhadie. I'm using the autoprovisioning system with PAP2 and Sipura. I don't know if the other phones have this feature. I also know that SJPhone can have this feaure too. Regards, Ricardo Martinez.- > -----Mensaje original----- > De: Nhadie [mailto:nhadie@cbcpworld.com] > Enviado el: Jueves, 08 de Septiembre de 2005 10:43 > Para: serusers(a)lists.iptel.org > Asunto: [Serusers] auto configuration > > > Hi List! > > Would just like to ask how can I automatically download a > configuration for > a SIP phone. I mean , let's say I have a client that bought > the phone, once > he plugged it in on the internet it will download a > configuration file, that > has it's username, password, sip proxy etc. I use > Grandstream, PAP2, Sipura, > x-lite x-pro and eyebeam. Is that possible? > > Thank You > > Regards, > Nhadie > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

4 3

[Serusers] SER cannot connect to MySQL Server
by romulus 26 Oct '05

26 Oct '05

HI, I'm using Debian Linux(while I have no idea how to check its version), and running SER on my PC. I installed MySQL 4.1.14 and SER 0.9.4, chmoded the /tmp directory to 777, and the MySQL server runs well. But when I start SER, it does not run and leaves some error message in syslog like this: -------------------------------------------------------------------------------------------- Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: Maxfwd module- initializing Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: new_connection(): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: db_init(): Could not create a connection Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: ERROR: auth_db_ver: unable to open database connection Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: auth_db:str_fixup(): Error while querying table version Oct 10 14:31:03 Serverhost /usr/sbin/ser[6525]: ERROR: fix_expr : fix_actions error -------------------------------------------------------------------------------------------- The file /var/run/mysqld/mysqld.sock doest not exist, but the MySQL still runs well. I also don't know if it is correct. Does anyone know how to resolve this? Thank you! ser.cfg, "gulab.twbbs.org" is my domain. -------------------------------------------------------------------------------------------- # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/lib/ser/modules/mysql.so" loadmodule "/usr/lib/ser/modules/sl.so" loadmodule "/usr/lib/ser/modules/tm.so" loadmodule "/usr/lib/ser/modules/rr.so" loadmodule "/usr/lib/ser/modules/maxfwd.so" loadmodule "/usr/lib/ser/modules/usrloc.so" loadmodule "/usr/lib/ser/modules/registrar.so" loadmodule "/usr/lib/ser/modules/textops.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/lib/ser/modules/auth.so" loadmodule "/usr/lib/ser/modules/auth_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri=~"gulab.twbbs.org") { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!www_authorize("gulab.twbbs.org", "subscriber")) { www_challenge("gulab.twbbs.org", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } -------------------------------------------------------------------------------------------- my.cnf -------------------------------------------------------------------------------------------- # # The MySQL database server configuration file. # # You can copy this to one of: # - "/etc/mysql/my.cnf" to set global options, # - "/var/lib/mysql/my.cnf" to set server-specific options or # - "~/.my.cnf" to set user-specific options. # # One can use all long options that the program supports. # Run program with --help to get a list of available options and with # --print-defaults to see which it would actually understand and use. # # For explanations see # http://dev.mysql.com/doc/mysql/en/server-system-variables.html # This will be passed to all mysql clients # It has been reported that passwords should be enclosed with ticks/quotes # escpecially if they contain "#" chars... # Remember to edit /etc/mysql/debian.cnf when changing the socket location. [client] port = 3306 socket = /var/run/mysqld/mysqld.sock # Here is entries for some specific programs # The following values assume you have at least 32M ram # This was formally known as [safe_mysqld]. Both versions are currently parsed. [mysqld_safe] socket = /var/run/mysqld/mysqld.sock nice = 0 [mysqld] # # * Basic Settings # user = mysql pid-file = /var/run/mysqld/mysqld.pid socket = /var/run/mysqld/mysqld.sock port = 3306 basedir = /usr datadir = /var/lib/mysql tmpdir = /tmp language = /usr/share/mysql/english skip-external-locking # # For compatibility to other Debian packages that still use # libmysqlclient10 and libmysqlclient12. old_passwords = 1 # # Instead of skip-networking the default is now to listen only on # localhost which is more compatible and is not less secure. bind-address = 127.0.0.1 # # * Fine Tuning # key_buffer = 16M max_allowed_packet = 16M thread_stack = 128K # # * Query Cache Configuration # query_cache_limit = 1048576 query_cache_size = 16777216 query_cache_type = 1 # # * Logging and Replication # # Both location gets rotated by the cronjob. # Be aware that this log type is a performance killer. #log = /var/log/mysql.log #log = /var/log/mysql/mysql.log # # Error logging goes to syslog. This is a Debian improvement :) # # Here you can see queries with especially long duration #log-slow-queries = /var/log/mysql/mysql-slow.log # # The following can be used as easy to replay backup logs or for replication. #server-id = 1 log-bin = /var/log/mysql/mysql-bin.log # See /etc/mysql/debian-log-rotate.conf for the number of files kept. max_binlog_size = 104857600 #binlog-do-db = include_database_name #binlog-ignore-db = include_database_name # # * BerkeleyDB # # According to an MySQL employee the use of BerkeleyDB is now discouraged # and support for it will probably cease in the next versions. skip-bdb # # * InnoDB # # InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/. # Read the manual for more InnoDB related options. There are many! # # * Security Features # # Read the manual, too, if you want chroot! # chroot = /var/lib/mysql/ # # If you want to enable SSL support (recommended) read the manual or my # HOWTO in /usr/share/doc/mysql-server/SSL-MINI-HOWTO.txt.gz # ssl-ca=/etc/mysql/cacert.pem # ssl-cert=/etc/mysql/server-cert.pem # ssl-key=/etc/mysql/server-key.pem [mysqldump] quick quote-names max_allowed_packet = 16M [mysql] #no-auto-rehash # faster start of mysql but no tab completition [isamchk] key_buffer = 16M # # * NDB Cluster # # See /usr/share/doc/mysql-server-*/README.Debian for more information. # # The following configuration is read by the ndbd storage daemons, # not from the ndb_mgmd management daemon. # # [MYSQL_CLUSTER] # ndb-connectstring=127.0.0.1 --------------------------------------------------------------------------------------------

2 1

[Serusers] DNS SRV,t_replicate,backup server and GS phones
by Zen Kato 26 Oct '05

26 Oct '05

Hi, I have been testing 'DNS SRV', backup server and t_replicate with two 'ser'servers, BT101(firmware:1.0.7.11), and two GXP2000s(1.0.1.9). The t_replicate works fine between sip1(main) and sip2(backup) servers. Then, I stopped 'ser' on sip1 server, three UAs sent REGISTERs not to sip1 but to sip2. I tested make calls between three UAs, sip2 took care of sip calls, worked fine. After that, I restarted 'ser' on sip1. But the three UAs still send REGISTER to sip2, eventhough sip1 came back and became alive. I set up 5 minutes intervals for these theree UAs for REGISTER. So, I stopped 'ser' on sip2 for 10-15 minutes, three UAs sent REGISTERs to sip1 again and tryed to 't_replicate' to sip2, these were failed as 'destination unreachable'. Then I restarted 'ser' on sip2 again. After REGISTERed on sip1, t_replicate send REGISTERs from sip1 to sip2. Now, everything works fine. Is this server side opration normal? Or these UAs are still bad boys? Regards, Zen

1 1

[Users] Release 1.0.0 scheduled for Friday, October 28
by Daniel-Constantin Mierla 25 Oct '05

25 Oct '05

Hello everybody, the new stable release is scheduled for next Friday, October 28. It will be versioned *1.0.0* instead of 0.10.0 since mandatory requirements of RFC are in place (the last major one, TLS is now in the trunk) and a lot of new features have been introduced. The release was postponed several time to allow more time for testing. There is no known bug at this moment that is not going to be fixed before release (the last one, reported by Klaus causing memory leak for CANCEL transactions in failure routes has been localized and expect to have it fixed tomorrow on CVS). Until Friday, remaining docs should be updated and relevant documents (changelog, new features, deprecated stuff) have to be written. We have to ask people willing to generate packages for different architecture to give some help since we do not have access to all OS distributions. We can provide guidelines for those that need them. If you are aware of some things that are missing for this release, please report them to devel(a)openser.org Cheers, Daniel

3 4

[Users] OpenSER and Asterisk
by Barry Flanagan 25 Oct '05

25 Oct '05

Hi, I want to use openser as proxy/registrar with Asterisk. Users will exist both in openser's subscriber database and in asterisk's sip friends. I have this kind of working, but have a few questions. Currently openser authenticates users fine, and will route to * for pstn and asterisk will accept the call if I have openser set up in * sip.conf as a proxy. I would rather, however, that the user gets authenticated as themselves on asterisk, rather than the call happening as the proxy user. without openser set up in asterisk, I get continual 407 Proxy Authentication required. Additionally, it appears that the call is still routing through openser, rather than being directly between the client and asterisk. Questions: 1. How can I set it up so that when a call gets sent to * that authentication takes place directly between asterisk and the client 2. How should I be sending the call from openser so that the rest of the call is directly between asterisk and the client? Any working configs would be welcome - these seem to be hard to come by. Thanks. -- -Barry Flanagan

3 4

[Users] Error
by Ronald Wiplinger 25 Oct '05

25 Oct '05

I have in my name server the lines: trace-intl.net: _sip._udp.trace-intl.net. IN SRV 20 0 5062 dns.trace-int.net. trace-intl.net-internal: _sip._udp IN SRV 20 0 5062 voip but on the same machine another domain runs with the same lines for port 5060 My intention was to use trace-intl.net for Openser on 5062, while Asterisk rmains on 5060. It seems, that this lines convert all tries to connect at 5062 to connect to 5060. Could that be? I have now disabled the lines ( _sip._udp ....) for Asterisk, but still receive the error: Oct 25 08:17:36 viop2 /usr/local/sbin/openser[9142]: Maxfwd module- initializing Oct 25 08:17:36 viop2 /usr/local/sbin/openser[9142]: ERROR: udp_init: bind(5, 0x622a04, 16) on 127.0.0.1: Address already in use How can I solve that? bye Ronald Wiplinger

2 1

[Serusers] SER and multiple gateways
by Stefan Prelle 25 Oct '05

25 Oct '05

Hi, I like to use SER for distribute calls on multiple PSTN gateways. In a first step I just have two gateways and need SER to do some load balancing. AFAIK previous SER versions came with a load balancing module. What are the current options to do this (beside some kind of suffix routing)? Regards, Stefan

2 1

[Serusers] IAS (Microsoft Internet Authentication Service)
by Andrej Sirk 25 Oct '05

25 Oct '05

Hello, can somebody suggest me how to configure those two IAS and SER. I need to authenticate from SER to IAS. I am using radiusclient-ng.

1 0

[Users] Children=
by Glenn Dalgliesh 25 Oct '05

25 Oct '05

Wondering what the school of thought it about the number the children that should be specified given a statefull configuration with approx 300 users with expiration of 60 sec and nat_ping of 30sec and modparam("usrloc|domain", "db_mode", 1) with postgres and any other related tweaks. Thanks

2 1

[Serusers] HELP:could NOT account BYE/CANCEL messages with RADIUS
by shikun.wang 25 Oct '05

25 Oct '05

Hi,all I've tried to use RADIUS(freeradius-0.9.1) to account with SER(ser-0.9.3).But I can't account BYE or CANCEL messages,while I can account INVITE and ACK. In ser.cfg I write as follows: ... modparam("acc", "log_level", 4) modparam("acc", "radius_flag", 2) modparam("acc", "radius_missed_flag", 3) ... if (method=="INVITE") { log(1, "INVITE\n"); if (!radius_proxy_authorize("")) { proxy_challenge("", "0"); setflag(3); break; }; setflag(2); }; if (method=="BYE" || method=="CANCEL") { log (1, "BYE or CANCEL\n");\ setflag(2); }; ... What's wrong with it?Is there anything I miss to configure? Please give me any hint and thanks a lot.

1 0

[Users] Commercial support
by Brandon Price 25 Oct '05

25 Oct '05

Where does one get commercial level, priority support for openser. We are a voip provider looking towards basing the second revision of our network on openser. I have been able to get most things working but some applications like using serial forking for call hunt, a custom cnam module, and getting some modules (avpops, and uac_redirect) to perform as documented are beyond my experience with the software. We do however have time constraints so I ask simply, where can I get priority per incident support for openser as my e-mails to voice- sistem.ro have been unanswered. Any help is greatly appreciated. Also congratulations to the developers on the 1.0 release you are the guys that give guys like me hope. Thank you very much for openser, I hope I get the chance to work with you in the future.

2 2

[Serusers] Ser stop responding requests when scanned with SiVuS
by Hoa Thai Duy 25 Oct '05

25 Oct '05

Hi all Yesterday, I downloaded and scanned my stable SER system (production), and it stoped responding to Subscriber requests. The Tool is at http://vopsecurity.org/sivus-1.09.exe, remember to have JRE installed on Windows. I deployed the configuration guideline at onsip, OpenSER 0.9.5 Anyone have tested the Security Scanner, pls. help Brgds Hoa

2 6

[Serusers] Install problems
by Philip Jones 25 Oct '05

25 Oct '05

I have downloaded and untar'd SER on a hosted server. According to install doc's I should be able to use ser start from /etc/rc.d/init.d under Fedora but, nothing. Does anyone have a more detailed install guide? I'm quite new to Linux, sorry. I'm not sure whether I need to build the program either, the guide appears tobe a little vague.

2 1

[Serusers] CDRTool auth_user table
by Adrian Georgescu 24 Oct '05

24 Oct '05

The archive was incorrect pl download again, I have rebuilt it and now the create_tables.mysql script has all the tables. Adrian

1 0

[Users] fix_nated_contact()
by Alexander Ph. Lintenhofer 24 Oct '05

24 Oct '05

Hi everybody, Is there a reason why fix_nated_contact() only works for UDP? My problem is that in the case of TCP and tcp-aliases only the port is taken from the via-header. The IP-addr is taken from the source of the packet. This leads to the fact that in case of NAT and TCP no alias-mapping is found.... If I comment the lines in nathelper.c which exclude the use of TCP all works fine - so what is the reason for fix_nated_contact() to be only processed with UDP? Any reasons for this? regards, Philipp

1 0

[Serusers] CDRTool auth_user table
by Josh Horton 24 Oct '05

24 Oct '05

Can someone send me the structure of the auth_user table for CDRTool. I just downloaded CDRTool-3.3.5 and followed the install instructions. When I run "./setup_mysql.sh password localhost" I get the following error: ERROR 1146 (42S02) at line 1: Table 'cdrtool.auth_user' doesn't exist Thanks, Josh I can not find a single reference to a table creation in any files. see below: [root@localhost CDRTool]# pwd /var/www/CDRTool [root@localhost CDRTool]# grep -R auth_user * accounts_lib.phtml: $query="select * from auth_user"; accounts.phtml: $query="delete from auth_user"; accounts.phtml: $query="update auth_user set accounts.phtml: $query="select * from auth_user"; accounts.phtml: $query="insert into auth_user log.phtml: $query="select * from auth_user where perms like '%admin%'"; phplib/local.inc: var $database_table = "auth_user"; phplib/local.inc: $this->db->query("select * from auth_user where phplib/local.inc: $update="update auth_user setup/mysql/alter_tables.mysql:alter table auth_user change column only_customer domainFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_cscode codeFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_cli aNumberFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_after_date afterDateFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user drop column only_cardservice; setup/mysql/alter_tables.mysql:alter table auth_user drop column only_cardclass; setup/mysql/alter_tables.mysql:alter table auth_user change column display_card compidFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user add column serviceFilter varchar(255) not null after codeFilter; setup/mysql/alter_tables.mysql:alter table auth_user change column codeFilter cscodeFilter varchar(255) not null; setup/mysql/create_data.mysql:INSERT INTO auth_user VALUES ('c14cbf141ab1b7cd009356f555b607dc','admin','admin','admin,callsearch,statis tics,sqlquery','2099-01-02','AG Projects','Administrator','+31208005160','support(a)1example.com','1','','','' ,'','','','','ser_radius,cisco,asterisk,ser_acc,ser_missed_calls','0','','20 10-07-11 04:48:00','xj28k'); SOAP/server_lib.php: $query="select * from auth_user

1 0

[Serusers] scope of flags ?
by Ramin Nikaeen 24 Oct '05

24 Oct '05

Valued Colleagues, Can anyone tell me what is scope of the "flags" used in ser.cfg? When I do a "setflag(3)", is it valid throughout a : - Transaction? - Dialogue? - Call? I do a "setflag(3)" when I receive an INVITE and expect the flag 3 to be set when I receive the associated BYE. However, when I do an "isflagset(3)" when I receive the BYE, the flag is not set?! Can someone tell me why?! Thanks ramin

3 2

[Serusers] How to avoid calling route() in a failure_route block?
by Tim Klein 24 Oct '05

24 Oct '05

I have an unusual need: If a contact in the usrloc database is unreachable for any reason, I must immediately delete it from the usrloc database. I know how to do the deletion, but I don't know the right way to write my configuration script. Below is the script that I want to write. But I think it won't work, because I think it's illegal for a failure_route block to call a route() command. (Am I correct about that?) Can anyone tell me what I should do instead of the following? Thank you in advance! Tim ============== route { [...irrelevant stuff omitted...] if (method==INVITE) { route(1); } } route[1] { if (lookup("location")) { t_on_failure("99"); t_relay(); } else { t_reply("404","Not Found"); } } failure_route[99] { delete_location_from_usrloc(); # I will write this function. route(1); } ==============

3 3

RE: [Serusers] Serweb not displaying calls
by John, Paul 24 Oct '05

24 Oct '05

I followed the instructions, still can't get calls logged by the acc. Here is my ser.cfg. What am I doing wrong? Do I need to use db parameters in acc module? I get "not found" when I try to use these. ------------------------------------------------------------ [root@localhost ser]# ser -E 0(11826) set_mod_param_regex: parameter <db_url> not found in module <acc> 0(11826) parse error (82,58-59): Can't set module parameter 0(11826) set_mod_param_regex: parameter <db_missed_flag> not found in module <acc> 0(11826) parse error (83,36-37): Can't set module parameter 0(11826) set_mod_param_regex: parameter <db_flag> not found in module <acc> 0(11826) parse error (84,29-30): Can't set module parameter ERROR: bad config file (3 errors) ------------------------------------------------------------- Ser.cfg file ------------------------------------------------------------ # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=4 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" fifo_mode=0666 alias="10.100.1.79" alias="sip.ipc.com" sip_warning=yes listen="10.100.1.79" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/fork.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! #loadmodule "/usr/local/lib/ser/modules/auth.so" #loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/root/usr/local/lib/ser/modules/acc.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # #modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) modparam("acc", "log_fmt", "fimos") modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "log_missed_flag", 2) modparam("acc", "report_ack", 0) modparam("acc", "failed_transactions", 1) modparam("acc", "early_media", 1) modparam("acc", "db_url", "sql://ser:heslo@localhost/ser") modparam("acc", "db_missed_flag", 2) modparam("acc", "db_flag", 1) modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("usrloc", "db_mode", 2) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; if (method =="INVITE"){ log(1, "INVITE MESSAGE RECEIVED-START ACCOUNTING\n"); setflag(1); }; if (method=="BYE" || method=="CANCEL"){ log(1, "STOP ACCOUNTING\n"); setflag(1); } if (uri=~"^sip:90[0-9][0-9]@") { rewritehost("ns.sip.ipc.com"); forward(uri:host,uri:port); break; } if (uri=~"^sip:95[0-9][0-9]@") { if (method=="REGISTER") { sl_send_reply("488", "Not Acceptable Here"); break; } if (!fork_dset( )) { sl_send_reply("404", "Not Found"); } else { if (!t_relay( )) { sl_reply_error( ); } } break; } # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # if (!www_authorize("iptel.org", "subscriber")) { # www_challenge("iptel.org", "0"); # break; # }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } Paul

1 0

[Users] [Fwd: Accounting with OPENSER]
by Klaus Darilion 24 Oct '05

24 Oct '05

moved discussion to mailing list -------- Original Message -------- Subject: Accounting with OPENSER Date: Mon, 24 Oct 2005 10:22:41 -0200 From: Jeffrey Drago < Reply-To: Jeffrey Drago Hi Klaus.. I saw a lot of your posts trought the mailing lists and I would be glad if you try to help me with a simple one... This is the scenario: * (Asterisk) ----- MYSQL DB -> where I'm going to write the CDR. | | | | * (Asterisk)-------------( OPENSER------- Carrier...(termination) | | | *(Asterisk)------| I Would like to know if its possible to bill only after the ACK until the BYE Signal... Is this a hard thing to do with OPENSER? Thanks for your help. Jeffrey M. Drago ASP Solutions Diretor Rua Cel. Carneiro Júnior, 58 Sl. 14 (35) 3622-0732 37500-018 - Itajubá - MG http://www.aspsolutions.com.br/

2 2

[Serusers] Commercial loadbalancer, NATed clients and src port problems
by George Perantinos 24 Oct '05

24 Oct '05

Hello list. My setup consists of two SER servers behind an F5 Big-IP for load balancing. The servers are "pooled" behind a virtual server (i.e. they present a common IP address to the rest of the world) created at the Big-IP and I'm using call-id persistence. My ser.cfgs are slightly modified mediaproxy examples from onsip.org. Each SER replicates to the other REGISTER messages, so that both servers are the same. So far so good. Suppose that NATed UAC1 is registered at SER1 (SER1 is sending the 4 byte udp packet every 60sec in order to keep its NAT binding open) and UAC2 sends him an INVITE: 1) If the INVITE gets served by SER1 everything is OK. 2) If the INVITE gets served by SER2 then: a) SER2 sends the message from port 5060, b) but the packet arrives at UAC1 with source port 5061 (or 5062 or whatever). This means that for some reason the Big-IP changes the source port it receives from SER2 to something other and, of course, the packet does not pass UAC1's NAT binding. So, the conclusion is that a UAC is only reachable through the SER that keeps it's NAT binding open. In order to solve this problem (and until SER can support path headers) I employed the method and the patch discussed at http://lists.iptel.org/pipermail/serdev/2005-September/005814.html (thanx for the patch Evan). I have to admit that this system was my first experience with a Big-IP, so I'm wondering: Am I doing something wrong at the Big-IP? Or is this Big-IP behavior (altering source ports received from internal servers) typical to every (even commercial) load balancer? Has anyone ever had success with any load balancer, multiple SERs and NATed clients, especially F5s? Regards, George

2 1

[Serusers] problem with ser instalation
by Cadu 24 Oct '05

24 Oct '05

Hi, I try to install in debian with apt but the instaler show this mensage "0(2214) WARNING: fix_socket_list: could not rev. resolve xxx.xxx.xxx.xxx 0(2214) WARNING: fix_socket_list: could not rev. resolve xxx.xxx.xxx.xxx" and when I try to run ser with serctl start show this error: Starting SER : PID file /var/run/ser.pid does not exist -- SER start failed Some one know how I can fix this problems? tanks all. Carlos Eduardo.

2 1

Re: [Serusers] Get alias for user
by Damien Sandras 24 Oct '05

24 Oct '05

Le lundi 24 octobre 2005 à 14:21 +0200, Samuel Osorio Calvo a écrit : > When you process the incoming: > > INVITE dsandras aT gnome.org > > and reaches lookup("aliases");, the Req-URI will be AUTOMATICALLY rewritten to have: > > INVITE 6001 aT gnome.org > > Isn't this what you want???? You don't need rewriteuri for anything, lookup will do the job for you. > I just wanted the reverse. 6001 is the alias, not dsandras :) But I think Jan answered, I need to create a reversealias table. -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

When you process the incoming: INVITE dsandras aT gnome.org and reaches lookup("aliases");, the Req-URI will be AUTOMATICALLY rewritten to have: INVITE 6001 aT gnome.org Isn't this what you want???? You don't need rewriteuri for anything, lookup will do the job for you. Samuel. Unclassified. >>> Damien Sandras <dsandras(a)gnomemeeting.net> 10/24/05 02:12PM >>> Le lundi 24 octobre 2005 à 14:06 +0200, Samuel Osorio Calvo a écrit : > lookup("aliases"); > > will do the job for you if aliases is the name of the table containing the alias bindings (by default it will be). > I had understood this, but the problem here is that I need the reverse: the original request uri contains the username and I need to rewrite it into the user alias. Example, SER receives INVITE dsandras @ gnomemeeting.net, and I want to use rewriteuri to rewrite the INVITE into INVITE 600001 @ gnomemeeting.net. Is that possible? -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

In the lines: # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) you select the mode you want to use the database. If you put 2, the "records" added to SER via serctl will be propagated to the permanent database not immediately but periodically. I think this periodicity can not be set in the config file. If you use 1, all records inserted with serctl will immediately be written also to the database. So I guess you don't see the changes immediately and think that there is a problem....either wait more or put 1 to the dbmode to check if there is a problem with the database. Samuel. Unclassified. >>> ranveer kunal <ranveerkunal(a)gmail.com> 10/24/05 11:17AM >>> Hello Folks, I am trying to use SER with some external database (mysql), which is there on a remote system, no matter what I do, when I add a user via serctl, the user is added to local database server only. I am sending my ser.cfg file, kindly help me thanks . .. . ------------------------------------------------------------------------------------------------------------------- # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=yes # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 # advertised_address is the via header's FQDN advertised_address="ran.test" fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@skywalker/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/options.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("auth_db", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("uri_db", "db_url", "mysql://ser:heslo@skywalker/ser") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol # if U want ip addr for RR just give record_route(); if (!method=="REGISTER") record_route_preset("sip:ran.test"); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # uncomment the 4 lines if U donot authentication. if (!www_authorize("skywalker", "subscriber")) { www_challenge("skywalker", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; if ((method==OPTIONS) && (! uri=~"sip:.*[@]+.*")) { options_reply(); }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP #force_rport(); # if (!(method==ACK | method=="CANCEL" | method=="BYE")) { #comment 4 lines for non suth # if (!proxy_authorize("sip.test", "subscriber")) { # proxy_challenge("sip.test","0"); # break; # }; # }; if (!t_relay()) { sl_reply_error(); }; } _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

lookup("aliases"); will do the job for you if aliases is the name of the table containing the alias bindings (by default it will be). Samuel Unclassified. >>> Damien Sandras <dsandras(a)gnomemeeting.net> 10/24/05 10:26AM >>> Hello, I plan to deploy a service based on SER and I'm facing a simple problem. All users have both a username (e.g. sip:dsandras AT_ gnomemeeting.net) and one alias (e.g. sip:600001 AT_ gnomemeeting.net). I have another service running in back-end that only supports numerical SIP addresses. So I would like to use "rewriteuri" in ser.cfg to rewrite the user part of the SIP URL. The problem is that I want to rewrite the original username (dsandras) into its numerical alias (600001). My question is thus: how can I get the numerical alias from a username in ser.cfg in order to use it? Thank you, -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] Remote Mysql error
by ranveer kunal 24 Oct '05

24 Oct '05

Hello Folks, I am trying to use SER with some external database (mysql), which is there on a remote system, no matter what I do, when I add a user via serctl, the user is added to local database server only. I am sending my ser.cfg file, kindly help me thanks . .. . ------------------------------------------------------------------------------------------------------------------- # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=yes # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 # advertised_address is the via header's FQDN advertised_address="ran.test" fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@skywalker/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/options.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("auth_db", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("uri_db", "db_url", "mysql://ser:heslo@skywalker/ser") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol # if U want ip addr for RR just give record_route(); if (!method=="REGISTER") record_route_preset("sip:ran.test"); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # uncomment the 4 lines if U donot authentication. if (!www_authorize("skywalker", "subscriber")) { www_challenge("skywalker", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; if ((method==OPTIONS) && (! uri=~"sip:.*[@]+.*")) { options_reply(); }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP #force_rport(); # if (!(method==ACK | method=="CANCEL" | method=="BYE")) { #comment 4 lines for non suth # if (!proxy_authorize("sip.test", "subscriber")) { # proxy_challenge("sip.test","0"); # break; # }; # }; if (!t_relay()) { sl_reply_error(); }; }

2 1

[Users] Call Forwarding using uac_redirect
by Brandon Price 24 Oct '05

24 Oct '05

I am trying to implement call forwarding using the uac_redirect module. My user agents reply with a SIP 302 Moved Temporarily message when the unconditional call forward is set. In the contact field there is something like this... Contact Binding: <sip:13143212222@ser1.manhattan.sipnetwork.net> I need ser to add a plus to that then send the call back out to our pstn carrier. I have tried this... if (t_check_status("302")) get_redirects("6:2","redirect"); prefix("+"); rewritehost("pstn.carriers.ip"); t_relay(); and putting it in a failure route then forcing that route failure_route[2] { get_redirects("6:2","redirect"); prefix("+"); rewritehost("our.pstn.carriers.ip"); t_relay(); I even tried if (t_check_status("302")){ # what to do if device tells us to forward to another number add_diversion("user-forward"); get_redirects("6:2","redirect"); prefix("+"); rewritehost("our.pstn.carriers.ip"); t_relay(); but apparently get_redirects can only be used in a failure_route Has anyone been able to get this working? On a 302 get the redirects from the contact field using get_redirects append with a "+" and rewritehost somewhere else it seemed so simple. Any help is as always greatly appreciated, especially from daniel(a)voice-system.ro cause like me he's too far for norway beer.

2 1

[Serusers] Get alias for user
by Damien Sandras 24 Oct '05

24 Oct '05

Hello, I plan to deploy a service based on SER and I'm facing a simple problem. All users have both a username (e.g. sip:dsandras AT_ gnomemeeting.net) and one alias (e.g. sip:600001 AT_ gnomemeeting.net). I have another service running in back-end that only supports numerical SIP addresses. So I would like to use "rewriteuri" in ser.cfg to rewrite the user part of the SIP URL. The problem is that I want to rewrite the original username (dsandras) into its numerical alias (600001). My question is thus: how can I get the numerical alias from a username in ser.cfg in order to use it? Thank you, -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

2 1

[Serusers] SERWEB Problem: "DB Error: not found" and "Bad username or password"
by Rafael R. GV 24 Oct '05

24 Oct '05

Hi I am running Ser (0.9.5-pre1 (i386/linux)) and serweb-0.9.3, Mysql 4.1.15 Php 4.4.0 Apache2 realm is configured properly in serweb (it match with domain column in subscriber table), but I have this errors even with default admin/heslo user: DB Error: not found Bad username or password Whats wrong...? rafael

2 1

[Serusers] SERWEB
by gorand＠dvvti.com 24 Oct '05

24 Oct '05

I am trying to configure SerWeb. I downloaded the tarball, extracted it. I installed apache on my linux box, and the apache server is running properly. Now comes the fun part. I looked at the instructions. it is saying that the www is is /var/www/html/htdocs Yet the only place I see that directory is in /usr/local/apache2/htdocs I moved the files as they requested except to that directory. I typed mv html /usr/local/apache2/htdocs/serweb and mv phplib /usr/local/apache2/htdocs/phplib Now this is where I am stuck. Can someone tell me what needs to be done in order for this to work properly. Thanks. Goran D

2 1

[Serusers] presence agent
by Ángel Gómez 24 Oct '05

24 Oct '05

hi,I have installed the pa module for the SER, and now I want to test it. I send a subscrive but SER says than is an invalid request, can some one send me how to send a subscribe via sipsak to SER, and if is posible, how to sen a notify. Thanks in advance.

1 0

[Serusers] RE: SERweb-0.9.4 Errors
by Iddrisu 24 Oct '05

24 Oct '05

Hi, Newbie- pls help. I have redhat 9 server Mysql 4.1.12 Apache 1.3.33 Php-4.1.11 Ser-0.9.4 All working ok. I followed Dan Austin’s Howto. I’m getting following serweb install errors when I try launching : HYPERLINK "http://mydomain.com/serweb/install/dir/admin/index.php/"http://mydomain .com/serweb/install/dir/admin/index.php/ Warning: main(../../config/config_paths.php): failed to open stream: No such file or directory in /var/www/html/serweb/main_prepend.php on line 10 Fatal error: main(): failed opening required ‘../../config/config_paths.php’ (include_path=’ .:/var/www/html/serweb’) in /var/www/html/serweb/main_prepend.php on line 10. Your help will be much appreciated. Idris -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/146 - Release Date: 21/10/2005

3 2

[Serusers] SER and PostgreSQL schema.
by Adam Rybak 24 Oct '05

24 Oct '05

Hello, is there avaiable postgres database schema for ser database? Regards, Adam Rybak

1 0

[Serusers] retry_count
by yserge 24 Oct '05

24 Oct '05

Hi, I do not know how to search through the list.. Surely that question has already been asked.. I can't get the "retry_count" parameter, described in the documentation, to work with Digest Authentication. I also can't find any trace of that parameter when searching through the source code of SER. Do I miss something, or was this feature abandoned, obsoleted, never implemented? Thanks, Sergei

2 1

Re: [Serusers] Radius client connection to remote RADIUS server failure
by zhangshuai 24 Oct '05

24 Oct '05

Alan Baker, Of course radius server can listen to remote radius client. I think one server could be connected to several clients. If you have tried all steps on http://www.iptel.org/ser/doc/ser_radius/ser_radius.html, then there should be no problems. >Can the "radiusclient-ng" client make a remote connection to a RADIUS >server? Does the RADIUS server need to be running on the same box as SER >Router for RADIUS client to work? It seems like the "radiusclient" SER >Router uses can only make a successful connection to the RADIUS server via >Localhost. I have searched around different mailing lists and noticed, I am >faced with the same problem most people are having with the client. Is their >a fix for this madness? Can someone post there working "radiusclient.conf". >Please help. > >Thanks, >Alan > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > = = = = = = = = = = = = = = = = = = = =

1 0

[Serusers] problem with ser install
by Carlos Eduardo 23 Oct '05

23 Oct '05

Hi, I try to install ser 0.9.4 an show this message Warning: fix_socket_list: could not rev. resolve 192.168.200.1 and when i try to run ser, show this error: PID file /var/run/ser.pid does not exist -- SER start failed tanks, Carlos Eduardo Simas Donato.

1 0

[Serusers] USRLOC info in PostgreSQL database.
by Adam Rybak 22 Oct '05

22 Oct '05

Hello, i have succesfully configured retrieving authentication information from Postgres database but i cannot use postgres for USRLOC data. in debug i get: .. 0(0) find_mod_export: <db_use_table> in module mysql not found 0(0) bind_dbmod: Module mysql does not export db_use_table function 0(0) ERROR: mod_init(): Can't bind database module 0(0) init_mod(): Error while initializing module usrloc ERROR: error while initializing modules .. but im not loading Mysql modules! Config: .. loadmodule "/usr/local/ser/lib/ser/modules/postgres.so" loadmodule "/usr/local/ser/modules/auth.so" loadmodule "/usr/local/ser/modules/auth_db.so" .. modparam("auth_db","db_url", "postgres://user:pass@127.0.0.1:5432/dbv") modparam("usrloc", "db_mode", 1) .. what can be a problem? Regards, Adam Rybak

2 1

[Serusers] problems compiling
by dave cra 22 Oct '05

22 Oct '05

I was able to compile the SER source code successfully with gcc after some tweaking. However, when I ran ser restart, I had the following errors in /var/adm/messages: Oct 20 15:50:42 wngds0je ser[556]: [ID 861198 daemon.error] ERROR: load_module: could not open module</usr/local/lib/ser/modules/mysql.so>: ld.so.1: ser: fatal: relocation error: file /usr/local/lib/ser/modules/mysql.so: symbol floor: referenced symbol not found Oct 20 15:50:42 wngds0je ser[556]: [ID 587890 daemon.crit] parse error (28,13-14): failed to load module Anybody have any suggestions why it could not find/load the mysql module? Thanks Dave --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

3 4

[Users] I cannot login
by Ronald Wiplinger 22 Oct '05

22 Oct '05

I tried sipsak: C:\Documents and Settings\user\My Documents\sipsak>sipsak-0.8.8.exe -U -C sip:80 0000(a)vpbx.elmit.com -a rest000 -s sip:800000@vpbx.elmit.com:5062 -Hvpbx.elmit.com warning: redirects are not expected in USRLOC. disableing request: REGISTER sip:vpbx.elmit.com:5062 SIP/2.0 Authorization: Digest username="800000", uri="sip:vpbx.elmit.com:5062", algorith m=MD5, realm="vpbx.elmit.com", nonce="435724cfa071bd7b4ef9bd25c01b4c5dc020aca3", response="62e960c0de81fa17af1e53a78156bb78" Via: SIP/2.0/UDP vpbx.elmit.com:3652;rport From: <sip:800000@vpbx.elmit.com:5062> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 1856953657(a)vpbx.elmit.com CSeq: 2 REGISTER Contact: sip:800000@vpbx.elmit.com Expires: 15 Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre response: SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP vpbx.elmit.com:3652;rport=3652;received=192.168.250.108 From: <sip:800000@vpbx.elmit.com:5062> To: <sip:800000@vpbx.elmit.com:5062>;tag=2560d490c3265ff35995c6bbde62a7c3.9f22 Call-ID: 1856953657(a)vpbx.elmit.com CSeq: 2 REGISTER WWW-Authenticate: Digest realm="vpbx.elmit.com", nonce="435724cfa071bd7b4ef9bd25 c01b4c5dc020aca3" Server: OpenSer (1.0.0-pre0 (x86_64/linux)) Content-Length: 0 Warning: 392 192.168.250.20:5062 "Noisy feedback tells: pid=22704 req_src_ip=19 2.168.250.108 req_src_port=3652 in_uri=sip:vpbx.elmit.com:5062 out_uri=sip:vpbx. elmit.com:5062 via_cnt==1" error: authorization failed request already contains (Proxy-) Authorization, but received 40[1|7], see above Another try without -U but with -vv C:\Documents and Settings\user\My Documents\sipsak>sipsak-0.8.8.exe -C sip:80000 0(a)vpbx.elmit.com -a rest000 -s sip:800000@vpbx.elmit.com:5062 -Hvpbx.elmit.com - vv New message with Via-Line: OPTIONS sip:800000@vpbx.elmit.com:5062 SIP/2.0 Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Contact: <sip:sipsak@vpbx.elmit.com:3731> Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre Accept: text/plain ** request ** OPTIONS sip:800000@vpbx.elmit.com:5062 SIP/2.0 Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Contact: <sip:sipsak@vpbx.elmit.com:3731> Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre Accept: text/plain message received: SIP/2.0 404 Not Found Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport=3731;received=192.168.250.108 From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062>;tag=2560d490c3265ff35995c6bbde62a7c3.e6e1 Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Server: OpenSer (1.0.0-pre0 (x86_64/linux)) Content-Length: 0 Warning: 392 192.168.250.20:5062 "Noisy feedback tells: pid=22702 req_src_ip=19 2.168.250.108 req_src_port=3731 in_uri=sip:800000@vpbx.elmit.com:5062 out_uri=si p:800000@vpbx.elmit.com:5062 via_cnt==1" ** reply received after 11.000 ms ** SIP/2.0 404 Not Found final received C:\Documents and Settings\user\My Documents\sipsak> Any ideas? bye Ronald Wiplinger

3 11

[Serusers] RE: PAID SUPPORT REQUIRED FOR SERWEB INSTALLATION
by Iddrisu 22 Oct '05

22 Oct '05

Paid support urgently required for serweb installation. Get back to me via my email address or phone Idris Ph : +61 893411156 Fx : +61 893411156 Mob:+61419822692 Email: iabdul(a)iinet.net.au -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/143 - Release Date: 19/10/2005

1 0

[Users] Beer on Wednesday 26th
by Atle Samuelsen 21 Oct '05

21 Oct '05

Hi Guys And Girls, Fellow Serusers, Greger and Me where thinking of trying to join the norwegian troops at Beer Palace on Aker Brygge at 5pm, Upcoming Wednesday. Anybody Intrested in Joining for a Beer or 5? Best Regards Atle

2 2

[Serusers] SER + MediaProxy Issues
by Hemant Patel (IP) 21 Oct '05

21 Oct '05

2 1

[Serusers] Radius client connection to remote RADIUS server failure
by Alan Baker 21 Oct '05

21 Oct '05

Can the "radiusclient-ng" client make a remote connection to a RADIUS server? Does the RADIUS server need to be running on the same box as SER Router for RADIUS client to work? It seems like the "radiusclient" SER Router uses can only make a successful connection to the RADIUS server via Localhost. I have searched around different mailing lists and noticed, I am faced with the same problem most people are having with the client. Is their a fix for this madness? Can someone post there working "radiusclient.conf". Please help. Thanks, Alan

1 0

[Serusers] Using the dialed number in a query
by Iqbal 21 Oct '05

21 Oct '05

Hi I cant seem to work out howto use the dialed number in a SQL query, is this possible, I just want the To Part pulled and used in a separate query. tks Iqbal

1 0

[Serusers] SQL Query and Accounting
by John, Paul 21 Oct '05

21 Oct '05

I'm having similar problems that you had. Can I have your ser.cfg and config.php file to see what I'm doing wrong? Paul

1 0

[Serusers] Ser stop responding requests when scanned with SiVuS
by Hoa Thai Duy 21 Oct '05

21 Oct '05

Hi all Yesterday, I downloaded and scanned my stable SER system (production), and it stoped responding to Subscriber requests. The Tool is at http://vopsecurity.org/sivus-1.09.exe, remember to have JRE installed on Windows. I deployed the configuration guideline at onsip, OpenSER 0.9.5 Anyone have tested the Security Scanner, pls. help Brgds Hoa

1 0

[Serusers] Serweb not displaying calls
by John, Paul 21 Oct '05

21 Oct '05

I have setup serweb-0-8-14 and use ser-0-8-12. I can login to the serweb without any problems, but it won't display any call accounting info. No errors are being reported in the logs. Also, my SER is not capturing any calls in the ACC table. I manually entered a call into ACC table to see if SERWEB would display it, but it wouldn't. My ser.cfg is attached. Any suggestions to make these work? Paul

2 1

[Serusers] Open source billing solution for SER (VoIP)
by Jithendranath 21 Oct '05

21 Oct '05

Hello experts, I was trying to set up a VoIP system with SER as my signalling proxy and was able to get lot of useful info from this mailing list. Thank you. I would like to know if there exists an open source billing solution which can fit seemlessly with SER and can handle realtime rating ( in a prepaid scenario). My initial study on this gave me the following link with a list of open source billing solutions. I would also like to know some reivews on these from experts like you. Since I have very less time to bring my project to life. http://www.voip-info.org/wiki/view/Open+Source+Billing+Systems Thanks a lot in advance. Regards, Jithu

2 1

Re: [Serusers] rewriting domain
by Samuel Osorio Calvo 21 Oct '05

21 Oct '05

In fact I would say it's not a stupid hardphone but one of the few that properly set the Contact to a domain name instead of an IP address. This has lots of advantages...I wish all of them use domain names. To solve it there are several approaches: 1) set use_domain to 0 in your SER config file, so only the user part of the URIs will be used to lookup, save, etc This way it does not matter wether the end-point sets in the domain part. This option is only possible if your SER serves only one domain. 2)I don't understand why you have configured SER and DNS to use domain.com and the UA to use sip.domain.com....why don't you change SER and DNS to use sip.domain.com or play with the configuration of the UA to use domain.com??? Hope it helps, Samuel Unclassified. >>> Maciej (B*winiarski <luzik(a)task.gda.pl> 10/21/05 08:21AM >>> i have stupid hardphone, proxy, registrer server is always domain :/ I have configured DNS and ser to use some domain.com as sip domain, but proxy have sip.mydomain.com addres. Registering is no problem because i can tell what domain ser should search but problem is for examplke with aliases i don't want write every time `serctl alias add user(a)domain.com` `serctl alias add user(a)sip.domain.com` if (uri=~".*sip\.my\.domain\.com") { rewritehost("my.somain.com"; } don't work becaus it rewrites requested uri i hope you get my point. Any one know how to solve this problem?

1 0

[Users] SIP Dialer Sending Many BYE Packets
by sagar 21 Oct '05

21 Oct '05

Hi All, I am using SER with Asterisk.Sipdialer works fine but when disconnecting the call dialer sends many BYE messages. Can any body help me please .Here is the SER screen I am getting 3(2544) Trying to register 4(2545) Trying to register 4(2545) Registered 3(2544) Trying to register 3(2544) Registered 4(2545) Trying to register 2(2542) Trying to register 3(2544) Trying to register 4(2545) Registered 2(2542) Registered 3(2544) Registered 1(2541) Trying to register 1(2541) Registered 3(2544) Warning: sl_send_reply: I won't send a reply for ACK!! 3(2544) Warning: sl_send_reply: I won't send a reply for ACK!! 4(2545) Warning: sl_send_reply: I won't send a reply for ACK!! 2(2542) Warning: sl_send_reply: I won't send a reply for ACK!! 4(2545) Warning: sl_send_reply: I won't send a reply for ACK!! 1(2541) Trying to register 3(2544) Trying to register 3(2544) Registered 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 1(2541) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) ERROR: warning_builder: buffer size exceeded 1(2541) WARNING: warning skipped -- too big 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 3(2544) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 2(2542) Bye Please tell me why it is happening. Thanks in advance. Sagar --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 1

[Serusers] information regarding stun documentation
by Muhammad Asif Fayyaz 21 Oct '05

21 Oct '05

I read that a sample stun server with client is written by iptel.org<http://iptel.org>with the name of mystun. Its written that it is the part of SER. But i could not find mystun on the iptel.org <http://iptel.org>. It is available on berlios site. I have also downloaded the SER from iptel.org<http://iptel.org>but stun was not there as part of SER. I have mystun code but could not find its code documentation. can any one tell me where an i get it. waiting for some guidence.

1 0

[Serusers] rewriting domain
by Maciej Świniarski 21 Oct '05

21 Oct '05

i have stupid hardphone, proxy, registrer server is always domain :/ I have configured DNS and ser to use some domain.com as sip domain, but proxy have sip.mydomain.com addres. Registering is no problem because i can tell what domain ser should search but problem is for examplke with aliases i don't want write every time `serctl alias add user(a)domain.com` `serctl alias add user(a)sip.domain.com` if (uri=~".*sip\.my\.domain\.com") { rewritehost("my.somain.com"; } don't work becaus it rewrites requested uri i hope you get my point. Any one know how to solve this problem?

1 0

[Serusers] acc+nat
by Maciej Świniarski 21 Oct '05

21 Oct '05

hi i have little problem with acc and nat becaus mysql records created with acc module contains ip behind nat. And yes, i use fix_nated_contact befor setting flag for acc module. Any one have some experience with this issue?

1 0

[Serusers] 180 do not forward:
by share phone 21 Oct '05

21 Oct '05

Hi All, when we receive 180 message do not forward any help on this i need to know how to change the received 180 and keep 100 on it. if (status =~"180") { sl_Send_reply("100","is trying") Regards, Karun --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

1 0

[Serusers] ip address instead of domain name in aliases table
by Eric 20 Oct '05

20 Oct '05

Greetings, I am somewhat baffled by a behavior in SER-0.9.4 where it adds records to the aliases table but the domain column contains the IP address instead of the domain name. I spent hours on the web site trying to find any solution on this issue with no success. Any guidance will be appreciated. Thanks Eric. --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 3

[Serusers] MySQL Problem
by gorand＠dvvti.com 20 Oct '05

20 Oct '05

I can not get MYSQL to Work. Can someone shed some light on what I am doing wrong. Thanks [root@testpbx root]# serctl add 17233 1723 xxx(a)abc.com MySql password: ERROR 1045: Access denied for user: 'serro@localhost' (Using password: YES) ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user to the database failed [root@testpbx root]# [root@testpbx root]# [root@testpbx root]# /usr/sbin/ser_mysql.sh create MySql password for root: creating database ser ... ERROR 1045: Access denied for user: 'root@localhost' (Using password: YES) [root@testpbx root]#

4 4

Re: [Serusers] MySQL Problem
by Andreas Granig 20 Oct '05

20 Oct '05

gorand(a)dvvti.com wrote: > root@testpbx root]# flush privileges > -bash: flush: command not found > [root@testpbx root]# > [root@testpbx root]# It's a mysql command. Can you login to mysql as root? Andy

1 0

[Serusers] Which database fields (table subscriber and aliases) are needed by ser?
by Frank Fischer 20 Oct '05

20 Oct '05

Hi all i'm planing to create a simple application interface to administer subscriber and alias data directly in the mysql db backend (i will use Andreas Granig's userloc-cl module). Looking at the mysql database that comes with ser, there seem to be a lot of fields in the subscriber and aliases table that are not needed by ser itself but only by serweb. Do i get this right? If so, is there any specification of the fields that are required by ser (incl. valid value range) so i know which fields i have to administer? Are there any fields needed by ser which i may not touch? If there is no such documentation, maybe someone knows and would be willing to place a few comments to the table listings below? Thanks a lot for your help! Kind regards Frank subscriber ------------------------ phplib_id username domain password first_name last_name phone email_address datetime_created datetime_modified confirmation flag sendnotification greeting ha1 ha1b allow_find timezone rpid domn uuid aliases ------------------------ username domain contact received expires q callid cseq last_modified replicate state flags user_agent

5 5

Re: [Serusers] Third party Registrations in SER proxies
by sandeep kamath 20 Oct '05

20 Oct '05

As a follow up question . Do we have a mechanism by which a SER proxy can get/pull information from another SER proxy about clients registered. Here is a scenario. I have deployed a SER proxy - "PROXY-A" to which a very large number of users are registered. I need to bring down PROXY-A for maintenance and replace it with PROXY-B but donot want the users to register again. Is there some way by which PROXY-B can pull the info out of PROXY-A so that the customers donot see this transition. Is it possible for a SER Proxy to fwd all the learnt registration information to a backend central registrar. If any call needs to be routed (eg: an invite message being received) the proxy can lookup the central registrar and route the call . thanks, sandeep > > On 10/20/05, sandeep kamath <sandyk76(a)gmail.com> wrote: > > > Hi, > > I had posted this query to the SIP implementors mailing list . So for > > those who have not read this let me summarise the problem. > > > > "I wanted to know if there is a mechanism where registration information > > could be shared among SIP proxies.wrt to SER . This is helpful in a farm > > that is being loadbalanced. > > > > The topology is a vserver that has two SER proxies S1 and S2 on UDP. > > > > A client 'A' sends a register request to the loadbalancer vip/vserver > > and the load balancer chooses a service S1 tied on the vip/vserver . The > > client is registered at the server S1. Now a new call comes for this client, > > hits the vip and the call hashes to the other service S2 bound to the vip. > > If S1 and S2 are not sharing the same DB or are not talking to the same > > registrar we will have a problem. " > > > > As a solution Dale R. Worley from pingtel suggested that A SIP registrar > > can actively duplicate its information into another SIP > > registrar by doing third-party REGISTERs to it > > . > > > > So my question is how do I set up this third party Registration > > mechanism in SER so that a client registers with one proxy and inturn the > > proxy transfers this registration info to other participating proxies? > > > > thanks, > > sandeep > > > > > > > > > > _______________________________________________ > > Serusers mailing list > > serusers(a)lists.iptel.org > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > >

1 0

[Serusers] failure_route problem
by Jaroslaw Gawron 20 Oct '05

20 Oct '05

Hello all I am using SER together with Asterisk as a voicemail server. When the user does not pick up the call for 15 s the SER is rewriting the url and forward it to the Asterisk t_on_reply("1"); t_on_failure("1"); if (!t_relay()) { if(isflagset(6)) { unforce_rtp_proxy(); } sl_reply_error(); }; failure_route[1]{ log(1,"!!!!!!!!!!! Timeout!!!!!!!!!!!!!!!!"); revert_uri(); rewritehostport("10.1.3.11:5061"); append_branch(); t_relay(); break(); } But my problem is that SER still rewrites the url and forwards it to asterisk even that the calling person has hung up. Does anyone know how to do it that SER will forward the call only in case of time out and will not forward when the caller hang up. Any help will be welcome. Best regards Jarek

2 1

[Serusers] Ser + Sems + Voicemail dont work
by Antonio Membrives 20 Oct '05

20 Oct '05

2 1

[Serusers] ser fifo
by Müller Thorsten 20 Oct '05

20 Oct '05

Hi all, is it possible to distinguish between messages coming out of a network and messages coming from the ser-fifo? I get SIP-messages from the fifo and I would like to treat them differently from messages of hte network in ser.cfg! Thanks Thorsten

1 0

[Serusers] ser-mysql-problem
by rupesh boyana 20 Oct '05

20 Oct '05

hello ser users, i am trying to insert mysql and authorisation modules in to ser. i want to control the user logins. after refering to the SER getting started document i have loaded mysql and auth etc.. modules in to the ser.cfg. then i tried creating the database 'ser' with 'subscriber' table and "username , domain , password" as fields. but when i used the command "serctl add 1000 password user1@nowhere" it is giving the following error "SER/FIFO not accessible: 2". then when i started SER , i got the following messages in /var/log Oct 20 16:57:30 localhost ser: WARNING: fix_socket_list: could not rev. resolve 192.168.1.247 Oct 20 16:57:30 localhost ser: WARNING: fix_socket_list: could not rev. resolve 192.168.1.247 Oct 20 16:57:30 localhost ser[7006]: Maxfwd module- initializing Oct 20 16:57:30 localhost ser[7007]: WARNING: no fifo_db_url given - fifo DB commands disabled! i am giving my ser.cfg file: #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@192.168.1.247/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line #modparam("usrloc", "db_mode", 2) modparam("auth_db|uri_db|usrloc", "db_url", "mysql://ser:heslo@192.168.1.247/ser") # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_mode", 2) # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) #modparam("pa","default_expires",1800) #modparam("pa","timer_interval",10) #modparam("pa","use_db",0) #modparam("pa","use_place_table",0) #modparam("pa","use_bsearch",0) #modparam("pa","use_location_package",0) #modparam("pa","pa_domain","bigU.edu") # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { #rupesh code start if (method=="INVITE") { route(2); break; } else if (method=="REGISTER") { # Uncomment this if you want to use digest authentication sl_send_reply("100", "Trying"); if (!www_authorize("192.168.1.247", "subscriber")) { www_challenge("192.168.1.247", "0"); break; }; if (!check_to()) { sl_send_reply("401", "Unauthorized"); break; }; consume_credentials(); if(!save("location")) { sl_reply_error(); }; break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } route[2] { if(!proxy_authorize("192.168.1.247","subscriber")) { proxy_challenge("192.168.1.247","0"); break; } else if(!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(): lookup("aliases"); if(uri!=myself) route(1); break; }; if(!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; route(1); } hope some one can give me some guidance regarding the same, thank you, Rupesh

1 0

[Serusers] Does postgresql-8.0.4 compatible with ser-0.9.4?
by Chia Huey Lim 20 Oct '05

20 Oct '05

Hi list, Does postgresql-8.0.4 compatible with ser-0.9.4? Although /lib/ser/modules/postgres.so exists, I have got this error ERROR: load_module: could not open module </lib/ser/modules/postgres.so>: libpq.so.4: cannot open shared object file: No such file or directory Regards, Chia -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/143 - Release Date: 10/19/2005

2 1

[Users] Problems with ACC
by deviator deviator 20 Oct '05

20 Oct '05

I have Openser 0.9.5, works fine and i want to use acc debug=3 fork=yes log_stderror=no listen=212.XXX.XXX.XXX # This is where OpenSER installed port=5060 children=4 dns=no rev_dns=no fifo="/tmp/openser_fifo" fifo_db_url="mysql://openser:openserrw@localhost/openser" loadmodule "/usr/local/lib/openser/modules/mysql.so" loadmodule "/usr/local/lib/openser/modules/sl.so" loadmodule "/usr/local/lib/openser/modules/tm.so" loadmodule "/usr/local/lib/openser/modules/rr.so" loadmodule "/usr/local/lib/openser/modules/maxfwd.so" loadmodule "/usr/local/lib/openser/modules/usrloc.so" loadmodule "/usr/local/lib/openser/modules/registrar.so" loadmodule "/usr/local/lib/openser/modules/auth.so" loadmodule "/usr/local/lib/openser/modules/auth_db.so" loadmodule "/usr/local/lib/openser/modules/uri.so" loadmodule "/usr/local/lib/openser/modules/uri_db.so" loadmodule "/usr/local/lib/openser/modules/mediaproxy.so" loadmodule "/usr/local/lib/openser/modules/nathelper.so" loadmodule "/usr/local/lib/openser/modules/textops.so" loadmodule "/usr/local/lib/openser/modules/domain.so" loadmodule "/usr/local/lib/openser/modules/acc.so" modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("auth_db", "use_domain", 1) modparam("domain", "db_mode", 1) modparam("nathelper", "rtpproxy_disable", 1) modparam("nathelper", "natping_interval", 180) modparam("mediaproxy","natping_interval", 30) modparam("mediaproxy","mediaproxy_socket", "/var/run/mediaproxy.sock") modparam("mediaproxy","sip_asymmetrics","/usr/local/etc/openser/sip-asymmetric-clients") modparam("mediaproxy","rtp_asymmetrics","/usr/local/etc/openser/rtp-asymmetric-clients") modparam("usrloc", "db_mode", 2) modparam("usrloc", "use_domain", 1) modparam("registrar", "default_expires", 60) modparam("registrar", "min_expires", 30) modparam("registrar", "nat_flag", 6) modparam("registrar", "use_domain", 1) modparam("rr", "enable_full_lr", 1) modparam("acc", "db_url", "mysql://openser:openserrw@localhost/openser") modparam("acc", "failed_transactions", 1) modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "db_flag", 1) --------------------- on starting i receive 2 errors: (15583) set_mod_param_regex: parameter <db_flag> not found in module <acc> (15583) parse error (59,19-20): Can't set module parameter (15583) set_mod_param_regex: parameter <db_url> not found in module <acc> (15583) parse error (60,20-21): Can't set module parameter ERROR: bad config file (2 errors) pls help me, what i'm doing wrong ????

2 1

[Serusers] Third party Registrations in SER proxies
by sandeep kamath 20 Oct '05

20 Oct '05

Hi, I had posted this query to the SIP implementors mailing list . So for those who have not read this let me summarise the problem. "I wanted to know if there is a mechanism where registration information could be shared among SIP proxies.wrt to SER . This is helpful in a farm that is being loadbalanced. The topology is a vserver that has two SER proxies S1 and S2 on UDP. A client 'A' sends a register request to the loadbalancer vip/vserver and the load balancer chooses a service S1 tied on the vip/vserver . The client is registered at the server S1. Now a new call comes for this client, hits the vip and the call hashes to the other service S2 bound to the vip. If S1 and S2 are not sharing the same DB or are not talking to the same registrar we will have a problem. " As a solution Dale R. Worley from pingtel suggested that A SIP registrar can actively duplicate its information into another SIP registrar by doing third-party REGISTERs to it . So my question is how do I set up this third party Registration mechanism in SER so that a client registers with one proxy and inturn the proxy transfers this registration info to other participating proxies? thanks, sandeep

1 0

[Users] Persistently storing headers from onreply_route()?
by Joachim Fabini 20 Oct '05

20 Oct '05

Hi again, Having solved the previous topic using Bogdan's hint I stumbled straight into a new problem. Is there a workaround for not being able to use the avp-ops from onreply_route? Some details on the reason: We implement the Service- Route extension according to RFC 3608. The registrar returns in the 200OK a ServiceRoute header where all proxies on the (return) path register themselves. The last proxy (that forwards the 200 OK to the UA) is supposed to store the ServiceRoute locally. Our plan was straight-forward: to store the header field's content via avp-ops from within the onreply_route. Unfortunately avp-ops are not available in onreply_route - Bogdan explains the reason why in <http://www.archivum.info/serdev%40iptel.org/2005-02/msg00274.html> Is there a specific reason why the access to the avp list is not synchronized? Performance? Basically, provided a good description of the implementation and concept, imho it could be left to users to restrict themselves to have avpops writes in only in their onreply_routes for a specific avp pair. Or, provide synchronized avps? So, does anyone have an idea how we can: - Store an AVP containing header fields extracted from a 200 OK message - Retrieve this AVP on incoming invites in order to place these values into the message (security check and/or Route enforcement). Thanks in advance, best regards --Joachim

2 6

[Users] Newbie
by Glenn MacGregor 20 Oct '05

20 Oct '05

Hi All, I have just installed openser 0.9.5 I have connected in a simple test case. Now I am trying to implement the nathelper an I can no longer login with my sip client. My openser box is not behind a firewall, but the clients I am using are. I copies the config file for nat+rtpproxy from onsip.org. It starts fine and sees rtpproxy, but when I try to login I get check_response(): Our result = '62ae83e04a67107edf9981943597e4c2' 0(8432) check_response(): Authorization is OK 0(8432) check_username(): Digest username and URI username do NOT match 0(8432) parse_headers: flags=-1 I have tried everything I can think of to solve this problem, No luck. Any help would be great! Thanks Glenn Glenn MacGregor HighStreet Networks ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/

2 1

Re: [Serusers] AVPS NEED HELP!
by Pol Novell Balcells 20 Oct '05

20 Oct '05

> What i want to do is to overwrite TO header from his numeric alias, > for example. > if i call to user.user(a)mydomain.com i wannt to forward this call to > asterisk changing to header from his alias -> 12341(a)mydomain.com > because asterisk is expected to read user part from sip call and > check voicemail. > > Is any other way to acomplish it? > Regards. > > >> >> Okay... first things first. While there is a LITTLE flexibility, >> AVPops >> actually relies heavily on the FORMAT of the table you want to >> load/store data >> from. For this reason, the alias table isn't really the best thing >> to grab >> from. You COULD specify the attribute and value columns and such >> manually... >> but it would be a right pain in the ass, I can tell you that. >> >> >> What EXACTLY are you trying to do? Perhaps there's another way to >> go about it. >> >> N. >> >> On Wed, 19 Oct 2005 23:50:10, pol novell balcells wrote >> >> >>> Hi SerUsers! >>> I'm completly crazy tryin' to do the following: >>> I just want to load from DB user alias and rewrite it into "$to >>> $ruri", because these calls shoud go directly to asterisk >>> voicemail >>> and they are numerical not alphanumeric. >>> i tried to do the following: >>> >>> if(avp_db_load($alias/$username,i:alias") >>> avp_pushto("$ruri/$to","alias") >>> just to load from alias table username into an integer called alias >>> and then pushed to new $ruri. >>> >>> I'm new in ser and avps module it's really usefull but a little bit >>> "unreadable", plz this should work for tomorrow :$ any help >>> plz!? >>> be as much especific as can, because i don't know if i have done >>> the >>> proper modparams. >>> these are: >>> >>> modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ >>> ser") >>> modparam("avpops", "avp_table", "usr_preferences") >>> #modparam("avpops", "use_domain", "1") >>> modparam("avpops", "uuid_column", "uuid") >>> modparam("avpops", "username_column", "username") >>> modparam("avpops", "domain_column", "domain") >>> modparam("avpops", "attribute_column", "attribute") >>> modparam("avpops", "value_column", "value") >>> modparam("avpops", "type_column", "type") >>> >>> THX >>> >>> ____________________________________________________________________ >>> _ >>> Mensaje analizado y protegido, tecnologia antivirus >>> www.trendmicro.es >>> >>> _______________________________________________ >>> Serusers mailing list >>> serusers(a)lists.iptel.org >>> http://lists.iptel.org/mailman/listinfo/serusers >>> >>> >> >> >> _____________________________________________________________________ >> Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es >> >> > > _____________________________________________________________________ Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es

1 0

[Serusers] call drops after about 30 seconds
by Fernando Schmitt 20 Oct '05

20 Oct '05

Check if the both endpoints are receiving the packets properly and also, if your billing system is working properly. Some bad formed packets may result in call drop. Fernando Schmitt -----Original Message----- From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of serusers-request(a)lists.iptel.org Sent: quarta-feira, 19 de outubro de 2005 08:00 To: serusers(a)lists.iptel.org Subject: Serusers Digest, Vol 30, Issue 19 Send Serusers mailing list submissions to serusers(a)lists.iptel.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.iptel.org/mailman/listinfo/serusers or, via email, send a message with subject or body 'help' to serusers-request(a)lists.iptel.org You can reach the person managing the list at serusers-owner(a)lists.iptel.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Serusers digest..." Today's Topics: 1. Re: mangling request URI according to To: and userlocation value (Francesco Fondelli) 2. call drops after about 30 seconds (maka) 3. 423 message for Register Expires (share phone) 4. SIP Dialer Sending Many BYE Packets (sagar) 5. Re: [OT] MAX TNT as a Media Gateway (Vamsi Pottangi) 6. Can I send Binary Data through SIP IM? (Abhijit A. Mahajani) 7. How many BHCC? (Matteo Piazza) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Oct 2005 14:11:11 +0200 From: Francesco Fondelli <francesco.fondelli(a)gmail.com> Subject: [Serusers] Re: mangling request URI according to To: and userlocation value To: serusers(a)lists.iptel.org Message-ID: <4354E65F.5030601(a)gmail.com> Content-Type: text/plain; charset=us-ascii; format=flowed > and assume that entry in userloc has a "Server: Bar 1.0 PBX" value sorry, here I meant the "User-Agent: 'Bar 1.0 PBX'" entry. thank you very much Ciao FF ------------------------------ Message: 2 Date: Tue, 18 Oct 2005 15:32:30 +0300 From: maka <icokan(a)gmail.com> Subject: [Serusers] call drops after about 30 seconds To: SER <serusers(a)lists.iptel.org> Message-ID: <826761540510180532v4683e151x2a9a6ba209f1061d(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" hello everyone, I am using ser-0.9.0 together wit asterisk-1.0.6. I am testing it with a couple of hardware AT-320 IP phones from Atcom, using a PA168S chip. They seem to be working fine, with stun behind nat, and they can call other user-agents (softphones, asterisk adn the pstn through it), but whenever I make a call between the two phones, everytime the call is dropped after about 34 seconds, even when calling between phones on Public IP addresses. I am actually clueless why this happens, I tried changing the NAT ttl value, bu to no effect, and it is not supposed to be a codec mismatch too since both phones use absolutely the same codecs, in the same order of preference. Appreciate the feedback, cheers -- I'm sick and tired of being sick and tired...

1 0

[Serusers] AVPS NEED HELP!
by pol novell balcells 20 Oct '05

20 Oct '05

Hi SerUsers! I'm completly crazy tryin' to do the following: I just want to load from DB user alias and rewrite it into "$to $ruri", because these calls shoud go directly to asterisk voicemail and they are numerical not alphanumeric. i tried to do the following: if(avp_db_load($alias/$username,i:alias") avp_pushto("$ruri/$to","alias") just to load from alias table username into an integer called alias and then pushed to new $ruri. I'm new in ser and avps module it's really usefull but a little bit "unreadable", plz this should work for tomorrow :$ any help plz!? be as much especific as can, because i don't know if i have done the proper modparams. these are: modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ ser") modparam("avpops", "avp_table", "usr_preferences") #modparam("avpops", "use_domain", "1") modparam("avpops", "uuid_column", "uuid") modparam("avpops", "username_column", "username") modparam("avpops", "domain_column", "domain") modparam("avpops", "attribute_column", "attribute") modparam("avpops", "value_column", "value") modparam("avpops", "type_column", "type") THX _____________________________________________________________________ Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es

2 1

[Users] Re: group_radius radius_is_user_in
by Tavis P 19 Oct '05

19 Oct '05

Sorry, i always tend to think more than i write/talk What i meant was that you can pass the necessary information during the authentication using the auth_radius module or during feature request using the avp_radius depending on what you are trying to do with the feature Lenir wrote: >I will try that as a workaround. > >For the SER-DEVEL and OPENSER-DEVEL guys...can any of you comment on this? > >Thanks > >-----Original Message----- >From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >Sent: Wednesday, October 19, 2005 4:40 PM >To: Lenir >Cc: users(a)openser.org; serusers(a)iptel.org >Subject: Re: group_radius radius_is_user_in > >I've never used the group_radius module so i'm not certain what it >expects from the radius server (its not well documented currently) > >Although you may be able to optimize a bit and skip the >radius_is_user_in function call and simply pass the users group back as >an SIP-AVP attribute in the radreply table, and then check for that AVP >in the OpenSER script > >What i've done is commented the group checking SQL from the freeradius >sql.conf file so that when a user authenticates or when an avp_radius >call is made only 2 SQL queries are sent, instead of the 4-5 used when >group check is enabled. > >Try this, it should work and it will save you ~10 sql queries and a >radius request/response > > >Lenir wrote: > > > >>I'm trying to use group_radius module to check if the user is in a >>particular radius group. I'm calling radius_is_user_in function to do this. >>Here is the snippet in my config that calls that function: >> >>route[2] { >> >> # ----------------------------------------------------------------- >> # REGISTER Message Handler >> # ---------------------------------------------------------------- >> sl_send_reply("100", "Trying"); >> >> if (!radius_www_authorize("")) { >> xlog("L_INFO","$ci - $fu - User not authenticated, Radius >>Authenticating...\n"); >> www_challenge("","0"); >> return; >> } else { >> xlog("L_INFO","$ci - $fu - User authenticated...\n"); >> }; >> >> if (radius_is_user_in("From", "Dialin")){ >> xlog("L_INFO","From: User is in Radius Group >> >> >Dialin!!!!\n"); > > >> } else { >> xlog("L_INFO","From: User *IS NOT* Group Dialin!!!!!\n"); >> }; >> >> if (radius_is_user_in("From", "Dialin2")){ >> xlog("L_INFO","From: User is in Radius Group >>Dialin2!!!!\n"); >> } else { >> xlog("L_INFO","From: User *IS NOT* Group Dialin2!!!!!\n"); >> }; >> >> #if (!radius_check_to()) { >> # sl_send_reply("401", "Unauthorized"); >> # return; >> #}; >> >> consume_credentials(); >> >> if (!save("location")) { >> sl_reply_error(); >> }; >>} >> >> >>-----Original Message----- >>From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >>Sent: Wednesday, October 19, 2005 3:59 PM >>To: Lenir >>Cc: users(a)openser.org; serusers(a)iptel.org >>Subject: Re: group_radius radius_is_user_in >> >>Well either way the radius server is going to respond with an >>"Access-Accept" because you have set the auth-type to "none" (which is >>necessary because you are not authenticating and can not provide the >>necessary credentials). >> >>>From the trace you showed me below, i see two radius requests both for >>the user 1000 and both of which respond as i would expect. >> >>I'm not what you are trying to accomplish, are you using the >>group_radius module or just loading the group information using avp_radius? >> >> >>Lenir wrote: >> >> >> >> >> >>>This is my users file: >>> >>>DEFAULT Auth-Type = System >>> Fall-Through = 1 >>> >>>DEFAULT Service-Type == Call-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >>> >>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >>> >>> >>>mysql> select * from radcheck; >>>+----+----------+-----------+----+----------+ >>>| id | UserName | Attribute | op | Value | >>>+----+----------+-----------+----+----------+ >>>| 1 | Jhassell | Password | == | changeme | >>>| 2 | Rneis | Password | == | changeme | >>>| 3 | 1000 | Password | == | 1000 | >>>| 4 | 2000 | Password | == | 2000 | >>>| 5 | 3000 | Password | == | 3000 | >>>+----+----------+-----------+----+----------+ >>>5 rows in set (0.00 sec) >>> >>>mysql> select * from radreply; >>>Empty set (0.00 sec) >>> >>>mysql> select * from usergroup; >>>+----+----------+------------+ >>>| id | UserName | GroupName | >>>+----+----------+------------+ >>>| 1 | Jhassell | Dialin | >>>| 2 | Rneis | Staticdial | >>>| 3 | 1000 | Dialin | >>>| 4 | 2000 | Dialin | >>>| 5 | 3000 | Dialin | >>>| 6 | 3000 | Dialin2 | >>>+----+----------+------------+ >>>6 rows in set (0.00 sec) >>> >>>mysql> select * from radgroupcheck; >>>Empty set (0.00 sec) >>> >>>mysql> select * from radgroupreply; >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>---+ >>>| id | GroupName | Attribute | op | Value | >>>prio | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >>>0 | >>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >>>0 | >>>| 3 | Dialin | SIP-AVP | = | Sip-Group:Dialin | >>>0 | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>3 rows in set (0.00 sec) >>> >>>mysql> select * from radpostauth; >>>Empty set (0.00 sec) >>> >>> >>> >>>Here's the debug, notice how it returns access-accept whether its in the >>>right group or not. Shouldn't it return access-reject for group Dialin2? >>>----------------- >>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=152, >>>length=66 >>> User-Name = "1000(a)xx.xx.xx.xx" >>> Sip-Group = "Dialin" >>> Service-Type = Group-Check >>> NAS-IP-Address = 127.0.0.1 >>> NAS-Port = 0 >>>Processing the authorize section of radiusd.conf >>>modcall: entering group authorize for request 4 >>>modcall[authorize]: module "preprocess" returns ok for request 4 >>>modcall[authorize]: module "chap" returns noop for request 4 >>>modcall[authorize]: module "mschap" returns noop for request 4 >>>modcall[authorize]: module "digest" returns noop for request 4 >>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>"1000(a)xx.xx.xx.xx" >>> rlm_realm: Found realm "xx.xx.xx.xx" >>> rlm_realm: Adding Stripped-User-Name = "1000" >>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>> rlm_realm: Authentication realm is LOCAL. >>>modcall[authorize]: module "suffix" returns noop for request 4 >>>rlm_eap: No EAP-Message, not doing EAP >>>modcall[authorize]: module "eap" returns noop for request 4 >>> users: Matched entry DEFAULT at line 156 >>> users: Matched entry DEFAULT at line 161 >>>modcall[authorize]: module "files" returns ok for request 4 >>>radius_xlat: '1000' >>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radcheck WHERE Username = '1000' ORDER BY id' >>>rlm_sql (sql): Reserving sql socket id: 0 >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radcheck WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radreply WHERE Username = '1000' ORDER BY id' >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radreply WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Checking profile DEFAULT >>>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Released sql socket id: 0 >>>modcall[authorize]: module "sql" returns ok for request 4 >>>modcall: group authorize returns ok for request 4 >>>rad_check_password: Found Auth-Type None >>>rad_check_password: Auth-Type = Accept, accepting the user >>>radius_xlat: 'Authenticated by group Dialin' >>>Sending Access-Accept of id 152 to xx.xx.xx.xx:33167 >>> Reply-Message = "Authenticated by group Dialin" >>> SIP-AVP = "Sip-Group:Dialin" >>>Finished request 4 >>>Going to the next request >>>Waking up in 6 seconds... >>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=153, >>>length=67 >>> User-Name = "1000(a)xx.xx.xx.xx" >>> Sip-Group = "Dialin2" >>> Service-Type = Group-Check >>> NAS-IP-Address = 127.0.0.1 >>> NAS-Port = 0 >>>Processing the authorize section of radiusd.conf >>>modcall: entering group authorize for request 5 >>>modcall[authorize]: module "preprocess" returns ok for request 5 >>>modcall[authorize]: module "chap" returns noop for request 5 >>>modcall[authorize]: module "mschap" returns noop for request 5 >>>modcall[authorize]: module "digest" returns noop for request 5 >>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>"1000(a)xx.xx.xx.xx" >>> rlm_realm: Found realm "xx.xx.xx.xx" >>> rlm_realm: Adding Stripped-User-Name = "1000" >>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>> rlm_realm: Authentication realm is LOCAL. >>>modcall[authorize]: module "suffix" returns noop for request 5 >>>rlm_eap: No EAP-Message, not doing EAP >>>modcall[authorize]: module "eap" returns noop for request 5 >>> users: Matched entry DEFAULT at line 156 >>> users: Matched entry DEFAULT at line 161 >>>modcall[authorize]: module "files" returns ok for request 5 >>>radius_xlat: '1000' >>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radcheck WHERE Username = '1000' ORDER BY id' >>>rlm_sql (sql): Reserving sql socket id: 4 >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radcheck WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radreply WHERE Username = '1000' ORDER BY id' >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radreply WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Checking profile DEFAULT >>>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Released sql socket id: 4 >>>modcall[authorize]: module "sql" returns ok for request 5 >>>modcall: group authorize returns ok for request 5 >>>rad_check_password: Found Auth-Type None >>>rad_check_password: Auth-Type = Accept, accepting the user >>>radius_xlat: 'Authenticated by group Dialin' >>>Sending Access-Accept of id 153 to xx.xx.xx.xx:33167 >>> Reply-Message = "Authenticated by group Dialin" >>> SIP-AVP = "Sip-Group:Dialin" >>>Finished request 5 >>> >>>-----Original Message----- >>>From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >>>Sent: Friday, October 14, 2005 7:21 PM >>>To: Lenir >>>Cc: users(a)openser.org; serusers(a)iptel.org >>>Subject: Re: group_radius radius_is_user_in >>> >>>Ugh the subject line is getting really munged up ;P >>> >>>Hmmm, what does the output from "radiusd -X" look like for the exchange? >>> >>> >>>Lenir wrote: >>> >>> >>> >>> >>> >>> >>> >>>>Tavis, >>>> >>>>Thanks for your input, that did fix the problem. I did have the "files" >>>>before "sql" in radiusd.conf. Also I followed your advice about taking >>>> >>>> >out > > >>>>"Auth-Type" out of mysql table and let DEFAULT in users file do the >>>> >>>> >trick. > > >>>> >>>> >>>> >>>> >> >> >> >> >>>>However it's semi-working. >>>> >>>>Accourding to the snippet from my ser.cfg file, now I get the following >>>> >>>> >in > > >>>>stderr: >>>>0(4866) 000d2890-d47f0003-4a230347-53c6189b(a)yy.yy.yy.yy - >>>>sip:1000@xx.xx.xx.xx - User authenticated... >>>>0(4866) Credentials: User is in Radius Group Dialin!!!! >>>>0(4866) Credentials: User is in Radius Group Dialin2!!!! >>>> >>>>No matter which parameter I use for the function radius_is_user_in(), it >>>>always returns TRUE. When in fact it should return FALSE for Group >>>> >>>> >>>> >>>> >>Dialin2. >> >> >> >> >>>>I've tried: >>>> >>>>if (radius_is_user_in("From", "Dialin2")){... >>>>if (radius_is_user_in("Credentials", "Dialin2")){... >>>> >>>> >>>> >>>> >>>> >>>>Here's what I did to fix future problems: >>>> >>>>EFAULT Auth-Type = System >>>> Fall-Through = 1 >>>> >>>>DEFAULT Service-Type == Call-Check, Auth-Type := Digest >>>> >>>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>>> >>>>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >>>> >>>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>>> >>>>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >>>> >>>> >>>>Also, for those of you using the latest version of freeradius, you may >>>> >>>> >>>> >>>> >>have >> >> >> >> >>>>to comment out the following lines as they conflict with dictionary.ser >>>> >>>> >>>> >>>> >>>> >>>> >>>(SER >>> >>> >>> >>> >>> >>> >>>>CVS) and dictionary.sip (comes with radiusclient-NG) >>>> >>>>#VALUE Service-Type Voice 12 >>>>#VALUE Service-Type Fax 13 >>>>#VALUE Service-Type Modem-Relay 14 >>>>#VALUE Service-Type IAPP-Register 15 >>>>#VALUE Service-Type IAPP-AP-Check 16 >>>> >>>> >>>>Thanks, >>>> >>>> >>>>Lenir >>>> >>>> >>>>-----Original Message----- >>>>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On >>>>Behalf Of Tavis P >>>>Sent: Friday, October 14, 2005 1:49 PM >>>>To: lsantiago(a)globalgatewaycom.com >>>>Cc: serdev(a)iptel.org; serusers(a)iptel.org; devel(a)openser.org; >>>>users(a)openser.org >>>>Subject: [Serusers] Re: [Serdev] group_radius radius_is_user_in >>>> >>>>Oops, i spoke too soon >>>> >>>>It looks like you have placed the "files" module before the "sql" module >>>>in your radiusd.conf >>>> >>>>Its matching your DEFAULT entry in files (setting the Auth-Type to none) >>>>but the sql module is later changing the Auth-Type to "digest" >>>> >>>>Changing the order would solve this problem, as you want it to match the >>>>SQL statement first and than the section in the files last (which >>>>changes the Auth-Type) >>>> >>>>Also, you may want to reduce the load on your database by not setting >>>>the Auth-Type in the database and instead setting in the users file with >>>>a DEFAULT statement as (at least in my case) it isn't somthing that need >>>>to be dynamic. >>>> >>>>lenirsantiago(a)yahoo.com wrote: >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>Hello list, >>>>> >>>>>I've been trying my hardest today to get group_radius to work, and its >>>>>function radius_is_user_in(). >>>>>I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>digest >>> >>> >>> >>> >>> >>> >>>>>authentication. >>>>> >>>>>Radius authentication works fine. >>>>>The problem is that when radius_is_user_in() function gets called, it >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>sends >>> >>> >>> >>> >>> >>> >>>>>a radius message but without the User-Password field and freeradius >>>>>complains that it requires it since we are using Digest. >>>>>I've seen a couple of posts here, but they were never answered: >>>>>http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >>>>>http://mail.iptel.org/pipermail/serusers/2005-March/017075.html >>>>> >>>>>----- >>>>>I have a small test in my ser.cfg file: >>>>> if (!radius_www_authorize("")) { >>>>> xlog("L_I","%ci - %fu - User not authenticated, Radius >>>>>Authenticating...\n"); >>>>> www_challenge("","0"); >>>>> break; >>>>> } else { >>>>> xlog("L_I","%ci - %fu - User authenticated...\n"); >>>>> }; >>>>> >>>>> if (radius_is_user_in("From", "Dialin")){ >>>>> xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); >>>>> } else { >>>>> xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); >>>>> }; >>>>> >>>>> if (radius_is_user_in("Credentials", "Dialin2")){ >>>>> xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); >>>>> } else { >>>>> xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); >>>>> }; >>>>> >>>>>----- >>>>>In /etc/raddb/users file I have the following at line 152: >>>>>DEFAULT Auth-Type = System >>>>> Fall-Through = 1 >>>>> >>>>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>>>> >>>>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>>>> >>>>>----- >>>>> >>>>>These are mysql tables: >>>>> >>>>>+----+----------+-----------+----+----------+ >>>>>| id | UserName | Attribute | op | Value | >>>>>+----+----------+-----------+----+----------+ >>>>>| 1 | Jhassell | Password | == | changeme | >>>>>| 2 | Rneis | Password | == | changeme | >>>>>| 3 | 1000 | Password | == | 1000 | >>>>>| 4 | 2000 | Password | == | 2000 | >>>>>| 5 | 3000 | Password | == | 3000 | >>>>>| 8 | 1000 | Auth-Type | := | Digest | >>>>>+----+----------+-----------+----+----------+ >>>>> >>>>>+----+-----------+-----------+----+--------+ >>>>>| id | GroupName | Attribute | op | Value | >>>>>+----+-----------+-----------+----+--------+ >>>>>| 6 | Dialin | Auth-Type | := | Accept | >>>>>+----+-----------+-----------+----+--------+ >>>>> >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>>| id | GroupName | Attribute | op | Value >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>prio | >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>0 | >>>>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>0 | >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>> >>>>>+----+----------+---------------+----+------------------+ >>>>>| id | UserName | Attribute | op | Value | >>>>>+----+----------+---------------+----+------------------+ >>>>>| 1 | 1000 | Reply-Message | = | "Authenticated" | >>>>>| 2 | 1000 | Sip-Group | = | Dialin | >>>>>| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >>>>>+----+----------+---------------+----+------------------+ >>>>> >>>>>+----+----------+------------+ >>>>>| id | UserName | GroupName | >>>>>+----+----------+------------+ >>>>>| 1 | Jhassell | Dialin | >>>>>| 2 | Rneis | Staticdial | >>>>>| 3 | 1000 | Dialin | >>>>>| 4 | 2000 | Dialin | >>>>>| 5 | 3000 | Dialin | >>>>>| 6 | 3000 | Dialin2 | >>>>>+----+----------+------------+ >>>>> >>>>>------ >>>>> >>>>>This is the debug I get from freeradius for the group check: >>>>> >>>>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >>>>>length=67 >>>>> User-Name = "1000(a)xx.xx.xx.xx" >>>>> Sip-Group = "Dialin2" >>>>> Service-Type = Group-Check >>>>> NAS-IP-Address = 127.0.0.1 >>>>> NAS-Port = 0 >>>>>Processing the authorize section of radiusd.conf >>>>>modcall: entering group authorize for request 74 >>>>>modcall[authorize]: module "preprocess" returns ok for request 74 >>>>>modcall[authorize]: module "chap" returns noop for request 74 >>>>>modcall[authorize]: module "mschap" returns noop for request 74 >>>>>modcall[authorize]: module "digest" returns noop for request 74 >>>>>rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>>>"1000(a)xx.xx.xx.xx" >>>>>rlm_realm: Found realm "xx.xx.xx.xx" >>>>>rlm_realm: Adding Stripped-User-Name = "1000" >>>>>rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>>>>rlm_realm: Adding Realm = "xx.xx.xx.xx" >>>>>rlm_realm: Authentication realm is LOCAL. >>>>>modcall[authorize]: module "suffix" returns noop for request 74 >>>>>rlm_eap: No EAP-Message, not doing EAP >>>>>modcall[authorize]: module "eap" returns noop for request 74 >>>>>users: Matched entry DEFAULT at line 152 >>>>>users: Matched entry DEFAULT at line 158 >>>>>modcall[authorize]: module "files" returns ok for request 74 >>>>>radius_xlat: '1000' >>>>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>>>rlm_sql (sql): Released sql socket id: 0 >>>>>modcall[authorize]: module "sql" returns ok for request 74 >>>>>modcall: group authorize returns ok for request 74 >>>>>rad_check_password: Found Auth-Type Digest >>>>>auth: type "digest" >>>>>Processing the authenticate section of radiusd.conf >>>>>modcall: entering group authenticate for request 74 >>>>>ERROR: No Digest-Nonce: Cannot perform Digest authentication >>>>>modcall[authenticate]: module "digest" returns invalid for request 74 >>>>>modcall: group authenticate returns invalid for request 74 >>>>>auth: Failed to validate the user. >>>>>Delaying request 74 for 1 seconds >>>>>Finished request 74 >>>>>Going to the next request >>>>>--- Walking the entire request list --- >>>>>Waking up in 1 seconds... >>>>>--- Walking the entire request list --- >>>>>Waking up in 1 seconds... >>>>>--- Walking the entire request list --- >>>>>Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 >>>>> Reply-Message = "Authenticated" >>>>>Waking up in 4 seconds... >>>>>--- Walking the entire request list --- >>>>>Cleaning up request 74 ID 15 with timestamp 434f1121 >>>>>Nothing to do. Sleeping until we see a request. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>Any help in this matter would be deeply appreciated, >>>>> >>>>> >>>>> >>>>> >>>>>Lenir >>>>> >>>>> >>>>> >>>>> >>>>>_______________________________________________ >>>>>Serdev mailing list >>>>>Serdev(a)iptel.org >>>>>http://mail.iptel.org/mailman/listinfo/serdev >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>_______________________________________________ >>>>Serusers mailing list >>>>Serusers(a)iptel.org >>>>http://mail.iptel.org/mailman/listinfo/serusers >>>> >>>> >>>>_______________________________________________ >>>>Serdev mailing list >>>>Serdev(a)iptel.org >>>>http://mail.iptel.org/mailman/listinfo/serdev >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >>> >>> >>> >> >> >> >> >> >> > > > > > >

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users