- sr-users - kamailio.org

[Serusers] sip load balancing
by a c 11 May '05

11 May '05

hello, got a question on SER. Could SER do load balance across SIP servers? for example: SIP carrier --> SER --> Media/App Servers {multiple} Are there any Configuration examples I can look at? thank you ac __________________________________ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail

4 3

Re: [Serusers] Problem compiling postgres module
by Gorka Guridi 11 May '05

11 May '05

I solved the problem. This file is in package postgresql-dev of debian. I installed it, delete the precompiled version of ser that i had (and didn't work), and recompile all another time. It successfully creates the postgres.so Sorry for time lost. Regards. Gorka.

1 0

[Serusers] php_mysql package
by Llanos Serna García-Conde 11 May '05

11 May '05

1 0

RE: [Serusers] php with mysql, where is APXS?
by Llanos Serna García-Conde 11 May '05

11 May '05

1 0

Re: [Serusers] serweb:apxs and php
by Karel Kozlik 11 May '05

11 May '05

Hello Llanos, first: please include mailing list in your replies in order to others can see answers Debian is one from several linux distributions. See http://www.debian.org/ for more informations. I can't tell you which distribution are you have installed. Try write command 'apt-get'. If this command exists, it is possible that you are useing debian. By the way I recommend to learn linux basics before you will try install any application to it. regards Karel Llanos Serna García-Conde napsal(a): > > > > Hello, thanks for your help. I'm just a student that's why I have so > many problems. To be honest, I'm not sure if I use debian, I mean, I > don't work with it but maybe it's running and the system does work with > it,- This is what I've found in my PC. > > /usr/share/doc/dialog-0.9b/samples/debian.rc > /usr/share/pixmaps/nautilus/Bluecurve/gnome-application-x-debian-package.png > /usr/share/pixmaps/gnome-debian.png > /usr/src/ser-0.8.14/debian > /usr/src/ser-0.8.14/debian/changelog > /usr/src/ser-0.8.14/debian/compat > /usr/src/ser-0.8.14/debian/control > /usr/src/ser-0.8.14/debian/copyright > /usr/src/ser-0.8.14/debian/cron.d.ex > /usr/src/ser-0.8.14/debian/ex.package.doc-base > /usr/src/ser-0.8.14/debian/manpage.1.ex > /usr/src/ser-0.8.14/debian/manpage.sgml.ex > /usr/src/ser-0.8.14/debian/postinst > /usr/src/ser-0.8.14/debian/postrm > /usr/src/ser-0.8.14/debian/preinst.ex > /usr/src/ser-0.8.14/debian/prerm.ex > /usr/src/ser-0.8.14/debian/rules > /usr/src/ser-0.8.14/debian/shlibs.local > /usr/src/ser-0.8.14/debian/watch.ex > > Do you think i only need to install de packages you told me ? Or am I > not using debian? Thanks. > > Llanos > > >Hello, > >apx should be part of af apache. But is long ago when I last > >compiled php. I don't remember it well. If you are useing debian, > >you only need install packages: libapache-mod-php4, php4-mysql and > >php4-pear > > > >Karel > > > >Llanos Serna García-Conde napsal(a): > >>Hello, I've got a serious problem with the isntallation of Serweb > >>and would really appreciate some help. > >>Before trying to install SERWEB, I had already apache running on my > >>pc: > >>Server version: Apache/2.0.40. > >>The error I found when trying to log to SERWEB was > >>*Fatal error*: Call to undefined function: mysql_pconnect() in > >>*/var/www/html/serweb/serweb_2004-07-27/phplib/db_mysql.inc* on > >>line *73* > >>and according to the INSTALL documente that was given with SERWEB I > >>found out I had to install php with mysql support. > >>I downloaded php-4.3.11 and tried to follow instructions for > >>installation, but I needed to include the option --with-apxs and > >>the configuration tool couldn't find apxs, neither could I > >>manually. I tried to install it including only the option > >>--with-mysql but the error I get is still the same one. > >> What should i do? Should I reinstall apache? Any other ideas? Is > >>it a php-mysql error for sure?Thank you!! > >>Llanos > >> > >> > >> > >>------------------------------------------------------------------------ > >> > >>_______________________________________________ > >>Serusers mailing list > >>serusers(a)lists.iptel.org > >>http://lists.iptel.org/mailman/listinfo/serusers

2 1

[Serusers] serweb:apxs and php
by Llanos Serna García-Conde 11 May '05

11 May '05

2 2

[Serusers] Can't run Ser with Radius
by Silent Man 11 May '05

11 May '05

Hi, I'm new to SER and I really need your help. I'm trying to install SER 0.8.14 with a radius (Freeradius) authentification and accounting, but I Still have this error message when I "make" : authrad_mod.c:111: error: `DICT_VENDOR' undeclared (first use in this function) authrad_mod.c:111: error: (Each undeclared identifier is reported only once authrad_mod.c:111: error: for each function it appears in.) authrad_mod.c:111: error: `vend' undeclared (first use in this function) authrad_mod.c:135: attention : affectation transforme un entier en pointeur sans transtypage authrad_mod.c:140: error: too many arguments to function `rc_conf_str' authrad_mod.c:140: error: too many arguments to function `rc_read_dictionary' authrad_mod.c:145: attention : implicit declaration of function `rc_dict_findvend' authrad_mod.c:163: error: too many arguments to function `rc_dict_findattr' authrad_mod.c:163: error: too many arguments to function `rc_dict_findval' make: *** [authrad_mod.o] Erreur 1 I've followed all the steps in this tutorial http://www.iptel.org/ser/doc/ser_radius/ser_radius.html, installed two radius client : Radius Client Library (http://developer.berlios.de/projects/radiusclient-ng) and (http://freshmeat.net/projects/radiusclient/). $ cat /usr/local/include/radiusclient.h |grep ,v * $Id: radiusclient.h,v 1.9 1999/01/06 23:53:04 lf Exp $ $ cat /etc/ld.so.conf /usr/X11R6/lib /usr/local/lib My Environnement contain these two variables : INCLUDE_PATH=/usr/local/include LIB_PATH=/usr/local/lib/ Thanks in advance.

1 2

[Serusers] exported function : m_store(mode)
by Vincent Verdot 11 May '05

11 May '05

Could someone explain me what does the "m_store(mode)" exported function from the "msilo" module do ? I read the doc but I don't understand...

1 1

Re: [Serusers] Re: [Serdev] Patched free-TLS implementation
by Cesc Santasusana 11 May '05

11 May '05

Hi, Good you found out. The reason i turned session caching completely off was because it was not properly configured. So, putting it on a TODO list, i disable it completely, waiting to add it later. Now i found out that the TLS implementation of minisip, the phone i use, was kinda broken. In my working copy i have activated and configured ser-tls with server-side caching, and it works. The problem is that i read that the default session caching provided by openssl is rather simple, and even that it should not be used in any production environment. That was another reason to disable it. And also that some changes in the way reads and writes are handled should be changed ... I will send a patch to fix all this ... Another thing ... the tls code needs to be more "configurable", from the config file. What is the best way to do this? Adding variables to cfx.XX files? or maybe a tls-module could do that also plus several other features? Regards, Cesc Unclassified >>> Alex Mack <amack(a)fhm.edu> 05/10/05 03:10PM >>> Hi again! Funny thing I found out: snom 190 doesn't even USE Session Caching but it seems to need the server to be alel to. It doesn't request the old Session ID, every new TLS connection from the phone to SER is a new one without a session ID. From what I understand with session caching, the client, in order to refetch a session, has to provide the session ID given by the server in the first handshake. Alex Mack Alex Mack schrieb: > Hi! > > I've managed to find out what's bothering the snom 190: It's the > missing TLS Session ID when Session Chaching is turned off. > > The session ID is given to the client for being able to request that > session later on from the server. But > > SSL_CTX_set_session_cache_mode( _ctx, SSL_SESS_CACHE_OFF ); > > turned off Session Caching, so no Session ID is generated and > transfered and that seems to confuse the snom phones. So they answer > the SERVER HELLO immediately with an ALERT and break up the > connection. It seems like snom190 need to have session caching turned > on... > > The snom's firmware is: snom190-SIP 3.60b 6249 > > snom's softphone (emulating a snom 360 with firmware "snomSoft-SIP > 3.57q") seems to have the same problem. > > BTW, what was the problem with session caching in the first place? > Performance hit? > > Alex Mack > > Benny Ben-Ami schrieb: > >> Try checking the expiration date of the certificate and the time & >> date of >> the phone. I once had a phone where the time was not set and he >> rejected the server >> certificate due to date expiration. >> -----Original Message----- >> From: serdev-bounces(a)iptel.org [mailto:serdev-bounces@lists.iptel.org] On >> Behalf >> Of Alex Mack >> Sent: Wednesday, May 04, 2005 7:29 PM >> To: Cesc Santasusana >> Cc: serdev(a)lists.iptel.org; serusers(a)lists.iptel.org >> Subject: Re: [Serusers] Re: [Serdev] Patched free-TLS implementation >> >> Hi Cesc! >> >> I tried your previuos suggestions on changing cleint certificate >> check. I'm now running SSL_VERIFY_NONE. MS Messenger works again. But >> the snom >> still fails. >> Ethereal tells me the server doesn't ask for a client certificate any >> more. >> Ethereal also shows that "Cipher Suite: TLS_RSA_WITH_RC4_128_SHA" was >> selected. So far so good, but the snom still rejects the Server Hello >> with an Alert. >> >> What else have you changed? The original version worked with the snoms. >> >> BTW patch throws some warnings: >> >> # patch -i patch.core.cfg.files.diff >> patching file cfg.y >> Hunk #1 FAILED at 1. >> 1 out of 6 hunks FAILED -- saving rejects to file cfg.y.rej patching >> file >> cfg.lex Hunk #1 FAILED at 1. >> 1 out of 5 hunks FAILED -- saving rejects to file cfg.lex.rej >> >> cfg.y.rej reads: >> *************** >> *** 1,5 **** >> /* >> - * $Id: cfg.y,v 1.2 2005/01/06 14:35:10 sam Exp $ >> * >> * cfg grammar >> * >> --- 1,5 ---- >> /* >> + * $Id: cfg.y,v 1.4 2005/05/03 08:16:35 cesc Exp $ >> * >> * cfg grammar >> * >> >> cfg.lex.rej reads: >> *************** >> *** 1,5 **** >> /* >> - * $Id: cfg.lex,v 1.2 2005/01/06 14:35:10 sam Exp $ >> * >> * scanner for cfg files >> * >> --- 1,5 ---- >> /* >> + * $Id: cfg.lex,v 1.3 2005/04/11 08:18:31 cesc Exp $ >> * >> * scanner for cfg files >> * >> >> Seems to be a minor mismatch, it compiles well anyway. >> >> Alex Mack >> >> Cesc Santasusana schrieb: >> >> >> >>> Hi, >>> >>> Yeah ... I send it with my default config which is using client and >>> server >>> >> >> authentication. >> >> >>> I use this settings with minisip client (supports client side certs) >>> and >>> >> >> for tls between ser proxies. It works perfect. >> >> >>> To turn client authentication off, check: >>> tls/tls_init.c file >>> init_ssl_ctx_behavior function >>> >>> the line >>> SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | >>> SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); >>> >>> means that the server will request a certificate from the client and >>> if it >>> >> >> doesn't get one, it will fail. >> >> >>> Try changing it with: >>> SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, >>> 0); this way the server will request a cert, the client will not >>> provide, but >>> >> >> on the following renegotiation, the server (ser) will not ask for a >> cert. >> >> >>> And if you want to turn verification off ... completely ... >>> SSL_CTX_set_verify( _ctx, SSL_VERIFY_NONE, 0); this will also work >>> for you if only using tls for ser2phone ... it will not work if you >>> want tls >>> >> >> between proxies ... as the ser client will accept ANY certificate >> from the >> ser server. >> >> >>> And then, from the prompt: >>> >>> >>> >>>> make TLS=1 all && make TLS=1 install ;) >>>> >>>> >>> >>> This whole verification thing needs to be improved and probably the >>> >> >> parameters should be changeable directly from the config file. This >> and many >> other parameters should be exchangeable without the need to recompile. >> >> >>> Any volunteer for a ser-tls.README? :D >>> >>> Can you provide me with some extra info from the snom phones and the >>> >> >> messenger? Do it offline, so you can send me some ethereal captures >> and ser >> logs ... >> >>> Regards, >>> >>> Cesc >>> >>> >>> >>> >>> >>> >>>>>> Alex Mack <amack(a)fhm.edu> 05/04/05 02:01PM >>> >>>>>> >>>>>> >>>>> >>> Hi Cesc! >>> >>> I compiled in your patch. >>> >>> Now I'm facing a new problem: SER wants a client certificate from >>> the UA. Snom phones immediately reply with an ALERT and break up >>> connection upon the certificate requests. MS Messenger on the other >>> hand sends at least a reply - without certificate - and SER rejects >>> the Client Hello because of the missing client certificate: >>> >>> tls_accept: Error in SSL: >>> tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer >>> did not return a certificate >>> >>> Could you please provide some more documentation about the new TLS >>> options you added? It seems you've implemented support for client >>> certificates for a two-way certificate authorization - which would >>> be a good thing if supported by the UAs, which don't right now. So >>> how can I turn it off again and get back to server side certification? >>> >>> Alex Mack >>> >>> Cesc Santasusana schrieb: >>> >>> >>> >>> >>> >>>> Hi everybody, >>>> >>>> The last i sent is a replacement as a whole for the original code >>>> sent by >>>> >>> >> P. Griffiths. Sorry i forgot to mention that. >> >> >>>> The patches for cfg.y and cfg.lex are both in the same file >>>> (patch.core.cfg..files.diff) within the zip. I was lazy :) I resent >>>> it as >>>> >>> >> a whole, and not as a diff, because i indented all the code with tabs, >> instead of spaces (so a diff would be bigger than just sending all the >> files). >> >> >>>> As for the CVS thing ... i agree with Juha. Either gets into the >>>> >>> >> "official" cvs or we do something about it. The code i think is rather >> stable as it is (i only tested on my debian linux box, soon i will >> try on an >> ARM linux and i will report back on that too). For me, as long as it >> gets >> into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use >> 0.9.0 .... so all my patches are against it). >> >>>> On a more philosophical level, i understand the "quietness" on iptel's >>>> >>> >> side ... they have their own version, and make money on it. But the >> thing is >> that this free version is here to stay ... it is the "problem" of >> opensource. >> >>>> Another option would be for them to release their proprietary >>>> >>> >> implementation if they feel that it is a better, more tested one. >> >>>> In any case, i think that this whole thing needs to be decided fast. >>>> >>>> Regards! >>>> >>>> Cesc >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>>> Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>> Hi Cesc! >>>> >>>> Nice to have those fixes in a package. >>>> >>>> Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or >>>> *instead* of cfg.y.patch? >>>> >>>> Or is your version a patched one which replaces the original >>>> implementation as a whole? In that case where's cfg.lex.patch? >>>> >>>> Alex Mack >>>> >>>> Cesc Santasusana schrieb: >>>> >>>> >>>> >>>> >>>> >>>>> Hi, >>>>> >>>>> I really hate to be so pushy, but i dont understand how such an >>>>> important >>>>> >>>> >> piece of code as TLS is not moving on into CVS ... or anywhere else >> by this >> matter. I will keep sending patches till i get tired (soon). >> >> >>>>> Anyway ... i thought someone may be interested in a compilation >>>>> fix for >>>>> >>>> >> cfg.y introduced with the tls_domains (it would not compile if the cfg.y >> file had been patched but the tls-core files were not there); a bug >> fix for >> the session caching (fixed by turning session caching and resumption >> off); >> and an extension (the ability to choose the list of allowed ciphers >> from the >> config file). Oh, and all the files have been tabbed, instead of >> spaced (for >> indentation). >> >> >>>>> Enjoy! >>>>> >>>>> Cesc >>>>> >>>>> >>>>> >>>>> >>>> >>> >>> >>> >>> >>>>> --------------------------------------------------------------------- >>>>> --- >>>>> >>>>> _______________________________________________ >>>>> Serdev mailing list >>>>> serdev(a)lists.iptel.org >>>>> http://lists.iptel.org/mailman/listinfo/serdev >>>>> >>>>> >>>>> >>>>> >>>>> >>>> >>>> _______________________________________________ >>>> Serusers mailing list >>>> serusers(a)lists.iptel.org >>>> http://lists.iptel.org/mailman/listinfo/serusers >>>> >>>> _______________________________________________ >>>> Serusers mailing list >>>> serusers(a)lists.iptel.org >>>> http://lists.iptel.org/mailman/listinfo/serusers >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >>> >>> >> >> >> _______________________________________________ >> Serdev mailing list >> serdev(a)lists.iptel.org >> http://lists.iptel.org/mailman/listinfo/serdev >> >> >> >> >> > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] Ser Accepting Calls From Asterisk
by Mr Greg Plater 11 May '05

11 May '05

Hi I am using the onsip getting started doc with mediaproxy. Calls for registered users on SER work great but when I try to call a registered ser user from my asterisk box. I get a response in Asterisk Debug. Says "failed to auth on INVITE" If I wish to allow calls from my asterisk box to registered users on SER what do I change. IN SER.cfg I note these 2 snippets if (!www_authorize("","subscriber")) { www_challenge("","0"); break; }; if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; };

2 1

[Serusers] Radiator + SER
by Edgardo O. Gonzales II 11 May '05

11 May '05

Hi! Can somebody help us on how to install SER supporting radiator. If possible provide us a scratch for us to easily understand the process. Your immediate feedback is highly appreciated. thanks, ed

1 0

[Serusers] RE: [Sems] How to absorb ACKs in UAS mode?
by Franz Edler 11 May '05

11 May '05

From: Stefan Sayer Sent: Tuesday, May 10, 2005 4:02 PM > in my opinion t_newtran() will release the transmission on processing of > an ACK so the 200 is not retransmitted; have a look at t_newtran (in > t_lookup.c about line 1094). Unfortunately I cannot verify this behaviour. See my code snippet of ser.cfg below. Without explicitly using t_relay() for ACK the 200 OKs are retransmitted by SER. Calling t_newtran() is obviously not enough to stop retransmissions. Any further opinions around? Regards Franz --- code snippet of ser.cfg follows -------------------------------------- if (method=="INVITE" || method=="BYE" || method=="CANCEL" || method=="ACK") { # switch to stateful mode: if (!t_newtran()) { sl_send_reply("500","could not create transaction\n"); break; }; if (method=="INVITE" && uri=~"sip:910@") { t_reply("100","Trying - just wait a minute !"); if(!t_write_req("/tmp/am_fifo","announcement")) { t_reply("500","error contacting sems"); }; break; }; if (method=="BYE" || method=="CANCEL") { if(!t_write_req("/tmp/am_fifo","bye")) { t_reply("500","error contacting sems"); }; break; }; if (method=="ACK") { t_relay(); }; };

1 0

[Serusers]Serweb Problem
by chin31kimo 11 May '05

11 May '05

try to modify the "output_buffering=on" in the php.ini and restart your apache server >Hi SerUser! >Can somebody help me with this problem.. >After I install and configure serweb as stated on >configuration guide.. I >got a blank page >accessing admin and user_interface page. >On logs of my apache, this is the feedback .. >210.23.237.236 - - [21/Apr/2005:23:51:12 +0800] "GET >/serweb/user_interface/index.php?phplib_Session=4026e0eaf3aa336098b7e1d2926f49ff&phplib_Session=dc200ec3587d1985cf9aaf706d3b248c&phplib_Session=8d66aaa5f4418cb75126beda37c2acde&phplib_Session=14d85207dd2ec6439325db9f78bea914&phplib_Session=3a23bcfc1ecae59dcefead744c64aaf3&phplib_Session=6ff4d142925c0574d1d3614bcb679578&phplib_Session=5d83ca96f291e0310ab4777442a547f9&phplib_Session=8ac2999cee413bde7ef4769b8f73b860&phplib_Session=96c5b130e01b2db96d73bc050248183e&phplib_Session=9ae3f9631ab331d0c0299cf394e6f691&phplib_Session=ddb01b22fdc4d988a9093a37cf4ee00b&phplib_Session=d48993a3af2167a562d151f2cb285ce4&phplib_Session=2492b77a05e07417c38d229d30f58d9a&phplib_Session=a4edc5415a40e4a922c4dbf721f25dc0&phplib_Session=5d41839c67fbc842ac27f59a558e982a&phplib_Session=7b5b95a63d36ffdf9b412264bf941691&phplib_Session=507571c99dc312b6e36ea364de2644f4&phplib_Session=0992981f5a11f248824edbb95f5db9f3&phplib_Session=1f25b8f300e72b404a54ab4c2c4060e8&phplib_Session=870611806d28cda0d0021f8422454! > 12a&ph >p >lib_Session=f5c422596455228e1749a081e1d9be1e&phplib_Session=2ecc3410c0ef13c4a66f12d51b02e7a3&phplib_Session=ff433b28f8596fe03518398fef080887&phplib_Session=aec18ca4299ec9009c236cde5d0bb733&phplib_Session=5937f583e214b20d67999da9947a9b7c&phplib_Session=854621f5353598bf6b6c9fd0f882766a&phplib_Session=0809e0fb3fddff21a14190e4240b814a&phplib_Session=22b80c053272e22c30c33a883182e014&phplib_Session=7c69db32533cd64b763462353c20d927&phplib_Session=c4eeba51a9991c5161269dafa9647d38&phplib_Session=472ca546c8ff6970ea9cae514940b86f&phplib_Session=c3c6871818a255d4eafe2d8a373228ef&phplib_Session=fded6f2f186c6d2dedd467a2b93f5c2a&phplib_Session=53033ca88aa7ec64b25d70f8ac424086&phplib_Session=62744ffaf3c7866e2f3324b1d6ca9f69&phplib_Session=d43a04d83057e27859e9a9db63782a4c&phplib_Session=bb309e7809c1341764212cab865e33ce&phplib_Session=002136a613c2bdee8d927d8a43be20ad&phplib_Session=82a678edfc54753212929c25f5fb5221&phplib_Session=2de93e7370b1de73041c6f4dc21a11df&phplib_Session=dfd10093b5f05cccd! >3178ad >f >cc3f8c62 HTTP/1.1" 302 - >Is there something I miss during the configuration .. >thanks, >ed _______________________________________________________________________ Yahoo!奇摩電子信箱免費容量250MB，信件在多也不怕 http://tw.promo.yahoo.com/mail_new/index.html

1 0

[Serusers] db_insert_ucontact(): Error while inserting contact
by Pawel Urawski 10 May '05

10 May '05

Hello, I would like to use my SER with dbtext for user location. I made everything that was written in the readmee file. Ser starts ok without any errors, but when I try to register a new user I get in syslog: May 10 22:07:53 qwe ser[2042]: db_insert_ucontact(): Error while inserting contact May 10 22:07:53 qwe ser[2042]: insert_ucontact(): Error while inserting in database Any idea ? Regards. Pawel.

1 0

[Serusers] BYE from Cisco gateway
by Torbjørn Lium 10 May '05

10 May '05

I'm using a cisco 1760 with a VIC2-4FXO card for my calls to PSTN. If a user on a softphone hangs up first the PSTN port on the cisco is released and new calls can be made on the same voice port. But when the user on the PSTN side hangs up first the voice port on the cisco stays open until the user on the softphone hangs up. Any ideas what I'm doing wrong?

2 2

[Serusers] migration 0.8.14 -> 0.9.0 and SQL broken
by Mik 10 May '05

10 May '05

Hello, I am started using SER from 0.8.14 version. All was fine. I use postgres SQL for registered location, stored cridentical username & password. But I needed some basic UAC functionalities like client authentication on other SIP-proxy. I take uac module. This module don't work with 0.8.14 SER. And I take 0.9.0. Compile and install new ser & modules. After that ALL my SQL shema is broken! SER don't work with SQL! Why? I nothing change in ser.cfg..... Old version 0.8.14 work, but new version 0.9.0 don't work. postgres - initializing stateless - initializing textops - initializing 0(0) Maxfwd module- initializing acc - initializing exec - initializing 0(0) bind_dbmod: Module sql does not export db_use_table function 0(0) ERROR: mod_init(): Can't bind database module 0(0) init_mod(): Error while initializing module usrloc ERROR: error while initializing modules If I am deleted 2 modules from SER.CFG: loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" I have error in other module postgres - initializing stateless - initializing textops - initializing 0(0) Maxfwd module- initializing acc - initializing exec - initializing 0(0) bind_dbmod: Module sql does not export db_use_table function 0(0) ERROR: auth_db_bind: unable to bind to the database module 0(0) init_mod(): Error while initializing module auth_db ERROR: error while initializing modules SER.CFG (very simple for debug): # ----------- global configuration parameters ------------------------ user=voip listen=213.24.21.2 log_stderror=yes debug=3 fifo="/var/run/ser.pipe" fifo_mode=0600 children=5 alias=tagan.ru alias=megalink.com.ru sip_warning=no # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/postgres.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/xlog.so" loadmodule "/usr/local/lib/ser/modules/exec.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" # ----------------- setting module-specific parameters --------------- modparam("usrloc", "db_url" ,"sql://pgsql@localhost/megalink") modparam("usrloc", "db_mode", 1) modparam("auth_db", "db_url" ,"sql://pgsql@localhost/megalink") modparam("auth_db", "password_column", "password") modparam("auth_db", "calculate_ha1", yes) modparam("acc", "log_level", 1) modparam("acc", "early_media", 1) modparam("acc", "failed_transactions", 1) modparam("acc", "log_missed_flag", 3) modparam("acc", "report_cancels", 1) #modparam("acc", "db_url" ,"sql://pgsql@localhost/megalink") modparam("acc", "log_flag", 1) # ------------------------- request routing logic ------------------- route [0] { break; }

2 1

[Serusers] SER ..... How to enable the Accounting with MYSQL
by Manoj Ghag 10 May '05

10 May '05

hi, All I have setup the SER with auth enable for MySQL ( and radius also .. at a time only one is used ) I am able to see that if user is not in database he is not able to login to SOFTPHONE .... Now I want to enable accounting also ,,, as in my case auth is working perfectly fine but accounting is not working ... I have tried all the things ,, but still I am missing somthing ...... please help me ...... as even inserting the acc module in ser.cfg file nothing is getting inserted into database .. in the form of accounting information.. At the same time where can i get the information about .. what is a information stored in each mysql table --------------------------------------------------------------------------------------------------------------------------------- my ser.cfg file is as follows ( where i have compiled ser with all the module enable) ------------------------------------------------------------------------------------------------------------------------------------ [root@test ser]# cat ser.cfg # # $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ debug=5 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=yes # (cmd line: -E) /* Uncomment these lines to enter debugging mode debug=7 fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 fifo="/tmp/ser_fifo" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" #loadmodule "/usr/local/lib/ser/modules/auth_radius.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- # -- auth_radius params -- #modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient/radiusclient.conf") #modparam("usrloc", "db_mode", 0) # --domain module-- modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser") #modparam("domain", "db_mode", 1) #modparam("domain", "domain_table", "domain") #modparam("domain", "domain_col", "domain") # --acc params-- modparam("acc", "log_level", 1) modparam("acc", "log_flag", 2) #modparam("acc", "log_missed_flag", 2) #modparam("acc", "log_fmt", "fimos") #modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser") #modparam("acc", "db_missed_flag", 2) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 1) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol record_route(); # loose-route processing if (loose_route()) { t_relay(); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri=='192.168.1.246') { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!www_authorize("192.168.1.246", "subscriber")) { www_challenge("192.168.1.246", "0"); break; }; save("location"); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; # forward to current uri now; use stateful forwarding; that # works reliably even if we forward from TCP to UDP if (!t_relay()) { sl_reply_error(); }; } Please see teh table list [root@test ser]# mysql Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 376 to server version: 3.23.58 Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> use ser Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> show tables -> ; +-----------------------+ | Tables_in_ser | +-----------------------+ | acc | | active_sessions | | aliases | | config | | domain | | event | | grp | | location | | missed_calls | | pending | | phonebook | | preferences | | reserved | | server_monitoring | | server_monitoring_agg | | silo | | subscriber | | uri | | version | +-----------------------+ 19 rows in set (0.00 sec) --------------------------------- Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone.

3 2

[Serusers] SIP-PSTN Termination
by Matt morris 10 May '05

10 May '05

Hello List, This isn't really a technical question, but probably rather a question about SER's acceptance by the termination service provider out there. I have been looking around for a termination service provider out there that would work with SER and I could not find a decent one thus far. Most of them (at least six providers) I found seem to only work with Asterisk or UA like ATA186, and their approach with ppl using SER are "if it works, it works; if not, too bad, find another service provider, we are not going to look into why our system does not work with SER". Most of them said their gateways are SIP-compliant, then why would it be so hard for their gateways to work with SER? There are three providers listed in onsip.org and I tried one of them, but I pretty much get no response on my support questions. Do most of you build your own gateway(s) to use with your SER platform? If someone is working with reliable termination provider(s) and would like to recommend them to me, please email me. Thank you very much. _________________________________________________________________ Powerful Parental Controls Let your child discover the best the Internet has to offer. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht… Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.

2 1

RE: [Serusers] sip load balancing
by a c 10 May '05

10 May '05

thanks Mohammad. ac --- "info(a)beeplove.com" <info(a)beeplove.com> wrote: > It can be done by DNS SRV record. > > Mohammad > > > Original Message: > ----------------- > From: a c lra101(a)yahoo.com > Date: Tue, 10 May 2005 09:51:29 -0700 (PDT) > To: serusers(a)lists.iptel.org > Subject: [Serusers] sip load balancing > > > hello, > > got a question on SER. Could SER do load balance > across SIP servers? > > for example: > > SIP carrier --> SER --> Media/App Servers {multiple} > > Are there any Configuration examples I can look at? > > thank you > ac > > > > __________________________________ > Yahoo! Mail Mobile > Take Yahoo! Mail with you! Check email on your > mobile phone. > http://mobile.yahoo.com/learn/mail > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > -------------------------------------------------------------------- > mail2web - Check your email from the web at > http://mail2web.com/ . > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > __________________________________ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail

1 0

[Serusers] UAC module problem with uac_auth()
by Mik 10 May '05

10 May '05

Hello, I am try uac_auth() client authentication to another SIP server (PSTN gateway) entity via Digest authentication. All my attempts failure with log messagess: ...... 3(98356) DEBUG:uac:uac_auth: picked reply is 0x0, code 401 3(98356) BUG:uac:uac_auth: empty reply on picked branch ...... I use example from http://www.voice-system.ro/docs/uac/ar01s06.html Give my good advice. I think, all needed information below. My SIP server: 213.24.21.2 My UAC: 213.24.21.30 PSTN gateway: 212.53.35.244 SIP messages send/recived with PSTN gateway: 213.24.21.2 -> 212.53.35.244 Session Initiation Protocol Request-Line: INVITE sip:70456@212.53.35.244:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Record-Route: <sip:213.24.21.2;ftag=ef40b40ea4;lr> Via: SIP/2.0/UDP 213.24.21.2;branch=z9hG4bK2102.c205a46.0 Via: SIP/2.0/UDP 213.24.21.30:5060;branch=z9hG4bKef40b40ea497 From: <sip:2000@213.24.21.2>;tag=ef40b40ea4 To: <sip:70456@213.24.21.2> Call-ID: ef2efc40-3cdd-b417-810e-0002a401969c(a)213.24.21.30 CSeq: 97 INVITE Supported: timer, replaces Min-SE: 1800 Date: Mon, 19 Jul 2004 20:28:31 GMT User-Agent: AddPac SIP Gateway Contact: <sip:2000@213.24.21.30> Accept: application/sdp Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, REFER, NOTIFY Content-Type: application/sdp Content-Length: 249 Max-Forwards: 16 Message body Session Description Protocol 212.53.35.244 -> 213.24.21.2 Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 213.24.21.2:5060;branch=z9hG4bK2102.c205a46.0 Via: SIP/2.0/UDP 213.24.21.30:5060;branch=z9hG4bKef40b40ea497 From: <sip:2000@213.24.21.2>;tag=ef40b40ea4 To: <sip:70456@213.24.21.2>;tag=3846972144 Call-ID: ef2efc40-3cdd-b417-810e-0002a401969c(a)213.24.21.30 CSeq: 97 INVITE Content-Length: 0 212.53.35.244 -> 213.24.21.2 Session Initiation Protocol Status-Line: SIP/2.0 401 Unauthorized Status-Code: 401 Resent Packet: False Message Header Via: SIP/2.0/UDP 213.24.21.2:5060;branch=z9hG4bK2102.c205a46.0 Via: SIP/2.0/UDP 213.24.21.30:5060;branch=z9hG4bKef40b40ea497 From: <sip:2000@213.24.21.2>;tag=ef40b40ea4 To: <sip:70456@213.24.21.2> Call-ID: ef2efc40-3cdd-b417-810e-0002a401969c(a)213.24.21.30 CSeq: 97 INVITE Contact: "SIP-H.323 IWF" <sip:TGK4@212.53.35.244:50666;transport=tcp> Record-Route: <sip:212.53.35.244:5060;lr> Record-Route: <sip:213.24.21.2;lr> WWW-Authenticate: Digest realm="etc.tario.ru",nonce="4280dfdc5f3d72476c787a60f587f741" Content-Length: 0 My ser.cfg: user=voip listen=213.24.21.2 log_stderror=yes debug=3 fifo="/var/run/ser.pipe" fifo_mode=0600 children=5 alias=tagan.ru alias=megalink.com.ru sip_warning=no # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/xlog.so" loadmodule "/usr/local/lib/ser/modules/exec.so" loadmodule "/usr/local/lib/ser/modules/uac.so" modparam("uac","credential","user:etc.tario.ru:password") route [0] { ..... skip...... if (method=="INVITE") { if (isflagset(2)) { # Our user xlog("L_INFO", "[%ci]: GO TO PSTN.\n"); t_on_failure("3"); t_relay_to_udp("212.53.35.244","5060"); break; } sl_send_reply("404", "Not found."); break; } ..... skip...... failure_route[3] { # authentication reply received? if ( t_check_status("401|407") ) { # have we already tried to authenticate? if (isflagset(7)) { t_reply("513","Authentication failed"); xlog("L_INFO", "[%ci]: Remote authentication failed\n"); break; } if (uac_auth()) { # mark that auth was performed setflag(7); # trigger again the failure route t_on_failure("3"); # repeat the request with auth response this time append_branch(); t_relay(); break; } t_reply("514","Unknow authentication peer"); xlog("L_INFO", "[%ci]: Unknown authentication peer.\n"); break; } }

1 0

RE: [Serusers] sip load balancing
by info＠beeplove.com 10 May '05

10 May '05

It can be done by DNS SRV record. Mohammad Original Message: ----------------- From: a c lra101(a)yahoo.com Date: Tue, 10 May 2005 09:51:29 -0700 (PDT) To: serusers(a)iptel.org Subject: [Serusers] sip load balancing hello, got a question on SER. Could SER do load balance across SIP servers? for example: SIP carrier --> SER --> Media/App Servers {multiple} Are there any Configuration examples I can look at? thank you ac __________________________________ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail _______________________________________________ Serusers mailing list Serusers(a)iptel.org http://mail.iptel.org/mailman/listinfo/serusers -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

Re: [serusers] what does it mean
by Vincent Verdot 10 May '05

10 May '05

I sent you a private message in french... I think it's better if evryone can understand advices in this mailing-list (if my english is not too bad ! ;-) ) so I prefer posting in english.. ----- Original Message ----- From: "michael p" <mikep3000(a)hotmail.com> To: <vincent.verdot(a)int-evry.fr> Sent: Tuesday, May 10, 2005 5:21 PM Subject: Re: [serusers] what does it mean > salut vincent > > si tu parles francais tu peux peut etre m'expliquer en francais ;) > > les credentials sont les comptes URI qui se rajoute ds les via a chaque > passage d'un proxy? > > j'ai pas trop compris > > Merci > > M. > > >From: "Vincent Verdot" <vincent.verdot(a)int-evry.fr> > >To: <serusers(a)lists.iptel.org> > >Subject: Re: [serusers] what does it mean > >Date: Tue, 10 May 2005 17:16:40 +0200 > > > >For example, if a user's SIP message must be forwarded by two proxies (from > >two distincts realms) and must be authenticated in the both.. then the sip > >message should contain 2 credentials : 1 for user-proxy1 authentication and > >an another one for proxy1-proxy2 authentication. > > > >Credential =~ hash(shared secret + nonce + ...) > > > >example (you can have many lines like this...): > >**************** > >Authorization: Digest > >username="Vincent",realm="int-evry.fr",nonce="xxxxxxxxxxxx",uri="sip:int-ev r > >y.fr",response="xxxxxxxxxxxxxxxx",algorithm=MD5 > >**************** > > > >----- Original Message ----- > >From: "michael p" <mikep3000(a)hotmail.com> > >To: <serusers(a)lists.iptel.org> > >Sent: Tuesday, May 10, 2005 4:42 PM > >Subject: [serusers] what does it mean > > > > > > > hi excuse me but it's a little difficult for me as a french this doc in > > > english about ser > > > > > > what does mean the word credentials in "A SIP message may contain > >several > > > credentials" ? > > > > > > can you give me an example please? > > > > > > thanks > > > > > > M. > > > > > > > > > _______________________________________________ > > > Serusers mailing list > > > serusers(a)lists.iptel.org > > > http://lists.iptel.org/mailman/listinfo/serusers > > > >_______________________________________________ > >Serusers mailing list > >serusers(a)lists.iptel.org > >http://lists.iptel.org/mailman/listinfo/serusers > >

1 0

[Serusers] check user if authenticated
by Edgardo O. Gonzales II 10 May '05

10 May '05

Hi! How will I check if user is authenticated or not before I permit him to make a call. thanks, ed

2 2

[serusers] what does it mean
by michael p 10 May '05

10 May '05

hi excuse me but it's a little difficult for me as a french this doc in english about ser what does mean the word credentials in "A SIP message may contain several credentials" ? can you give me an example please? thanks M.

2 1

RE: [Serusers] check user if authenticated
by Matt Schulte 10 May '05

10 May '05

Something like this before your final route should work.. if (!proxy_authorize("blah.realm.blah", "subscriber")) { xlog("L_INFO", "Auth failed before %rm from <%fu>. sending challenge\n"); proxy_challenge("blah.realm.blah", "1"); break; }; if (!method == "CANCEL" && !method == "ACK" ) { if (!is_user_in("Credentials", "int")) { xlog("L_INFO", "User dialout but no privs or no ACL, dropping %fu URI %ru\n"); sl_send_reply("403", "Forbidden go away"); break; } } -----Original Message----- From: Edgardo O. Gonzales II [mailto:edgardo.g@pacific.net.ph] Sent: Tuesday, May 10, 2005 8:35 AM To: serusers(a)lists.iptel.org Subject: [Serusers] check user if authenticated Hi! How will I check if user is authenticated or not before I permit him to make a call. thanks, ed _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] sipath
by Iqbal 10 May '05

10 May '05

Hi has anyone used this to flash a router and get ser on a router like linksys Iqbal

1 0

Re: [Serusers] Re: [Serdev] Patched free-TLS implementation
by Alex Mack 10 May '05

10 May '05

Hi! I've managed to find out what's bothering the snom 190: It's the missing TLS Session ID when Session Chaching is turned off. The session ID is given to the client for being able to request that session later on from the server. But SSL_CTX_set_session_cache_mode( _ctx, SSL_SESS_CACHE_OFF ); turned off Session Caching, so no Session ID is generated and transfered and that seems to confuse the snom phones. So they answer the SERVER HELLO immediately with an ALERT and break up the connection. It seems like snom190 need to have session caching turned on... The snom's firmware is: snom190-SIP 3.60b 6249 snom's softphone (emulating a snom 360 with firmware "snomSoft-SIP 3.57q") seems to have the same problem. BTW, what was the problem with session caching in the first place? Performance hit? Alex Mack Benny Ben-Ami schrieb: >Try checking the expiration date of the certificate and the time & date of >the phone. >I once had a phone where the time was not set and he rejected the server >certificate due to date expiration. > >-----Original Message----- >From: serdev-bounces(a)iptel.org [mailto:serdev-bounces@lists.iptel.org] On Behalf >Of Alex Mack >Sent: Wednesday, May 04, 2005 7:29 PM >To: Cesc Santasusana >Cc: serdev(a)lists.iptel.org; serusers(a)lists.iptel.org >Subject: Re: [Serusers] Re: [Serdev] Patched free-TLS implementation > >Hi Cesc! > >I tried your previuos suggestions on changing cleint certificate check. >I'm now running SSL_VERIFY_NONE. MS Messenger works again. But the snom >still fails. >Ethereal tells me the server doesn't ask for a client certificate any more. >Ethereal also shows that "Cipher Suite: TLS_RSA_WITH_RC4_128_SHA" >was selected. So far so good, but the snom still rejects the Server Hello >with an Alert. > >What else have you changed? The original version worked with the snoms. > >BTW patch throws some warnings: > ># patch -i patch.core.cfg.files.diff >patching file cfg.y >Hunk #1 FAILED at 1. >1 out of 6 hunks FAILED -- saving rejects to file cfg.y.rej patching file >cfg.lex Hunk #1 FAILED at 1. >1 out of 5 hunks FAILED -- saving rejects to file cfg.lex.rej > >cfg.y.rej reads: >*************** >*** 1,5 **** > /* >- * $Id: cfg.y,v 1.2 2005/01/06 14:35:10 sam Exp $ > * > * cfg grammar > * >--- 1,5 ---- > /* >+ * $Id: cfg.y,v 1.4 2005/05/03 08:16:35 cesc Exp $ > * > * cfg grammar > * > >cfg.lex.rej reads: >*************** >*** 1,5 **** > /* >- * $Id: cfg.lex,v 1.2 2005/01/06 14:35:10 sam Exp $ > * > * scanner for cfg files > * >--- 1,5 ---- > /* >+ * $Id: cfg.lex,v 1.3 2005/04/11 08:18:31 cesc Exp $ > * > * scanner for cfg files > * > >Seems to be a minor mismatch, it compiles well anyway. > >Alex Mack > >Cesc Santasusana schrieb: > > > >>Hi, >> >>Yeah ... I send it with my default config which is using client and server >> >> >authentication. > > >>I use this settings with minisip client (supports client side certs) and >> >> >for tls between ser proxies. It works perfect. > > >>To turn client authentication off, check: >>tls/tls_init.c file >>init_ssl_ctx_behavior function >> >>the line >>SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | >>SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); >> >>means that the server will request a certificate from the client and if it >> >> >doesn't get one, it will fail. > > >>Try changing it with: >>SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, 0); >>this way the server will request a cert, the client will not provide, but >> >> >on the following renegotiation, the server (ser) will not ask for a cert. > > >>And if you want to turn verification off ... completely ... >>SSL_CTX_set_verify( _ctx, SSL_VERIFY_NONE, 0); this will also work for >>you if only using tls for ser2phone ... it will not work if you want tls >> >> >between proxies ... as the ser client will accept ANY certificate from the >ser server. > > >>And then, from the prompt: >> >> >> >> >>>make TLS=1 all && make TLS=1 install ;) >>> >>> >>> >>> >>This whole verification thing needs to be improved and probably the >> >> >parameters should be changeable directly from the config file. This and many >other parameters should be exchangeable without the need to recompile. > > >>Any volunteer for a ser-tls.README? :D >> >>Can you provide me with some extra info from the snom phones and the >> >> >messenger? Do it offline, so you can send me some ethereal captures and ser >logs ... > > >>Regards, >> >>Cesc >> >> >> >> >> >> >>>>>Alex Mack <amack(a)fhm.edu> 05/04/05 02:01PM >>> >>>>> >>>>> >>>>> >>>>> >>Hi Cesc! >> >>I compiled in your patch. >> >>Now I'm facing a new problem: SER wants a client certificate from the >>UA. Snom phones immediately reply with an ALERT and break up connection >>upon the certificate requests. MS Messenger on the other hand sends at >>least a reply - without certificate - and SER rejects the Client Hello >>because of the missing client certificate: >> >>tls_accept: Error in SSL: >>tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer >>did not return a certificate >> >>Could you please provide some more documentation about the new TLS >>options you added? It seems you've implemented support for client >>certificates for a two-way certificate authorization - which would be a >>good thing if supported by the UAs, which don't right now. So how can I >>turn it off again and get back to server side certification? >> >>Alex Mack >> >>Cesc Santasusana schrieb: >> >> >> >> >> >>>Hi everybody, >>> >>>The last i sent is a replacement as a whole for the original code sent by >>> >>> >P. Griffiths. Sorry i forgot to mention that. > > >>>The patches for cfg.y and cfg.lex are both in the same file >>>(patch.core.cfg..files.diff) within the zip. I was lazy :) I resent it as >>> >>> >a whole, and not as a diff, because i indented all the code with tabs, >instead of spaces (so a diff would be bigger than just sending all the >files). > > >>>As for the CVS thing ... i agree with Juha. Either gets into the >>> >>> >"official" cvs or we do something about it. The code i think is rather >stable as it is (i only tested on my debian linux box, soon i will try on an >ARM linux and i will report back on that too). For me, as long as it gets >into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use >0.9.0 .... so all my patches are against it). > > >>>On a more philosophical level, i understand the "quietness" on iptel's >>> >>> >side ... they have their own version, and make money on it. But the thing is >that this free version is here to stay ... it is the "problem" of >opensource. > > >>>Another option would be for them to release their proprietary >>> >>> >implementation if they feel that it is a better, more tested one. > > >>>In any case, i think that this whole thing needs to be decided fast. >>> >>>Regards! >>> >>>Cesc >>> >>> >>> >>> >>> >>> >>> >>> >>>>>>Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>Hi Cesc! >>> >>>Nice to have those fixes in a package. >>> >>>Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or >>>*instead* of cfg.y.patch? >>> >>>Or is your version a patched one which replaces the original >>>implementation as a whole? In that case where's cfg.lex.patch? >>> >>>Alex Mack >>> >>>Cesc Santasusana schrieb: >>> >>> >>> >>> >>> >>> >>>>Hi, >>>> >>>>I really hate to be so pushy, but i dont understand how such an important >>>> >>>> >piece of code as TLS is not moving on into CVS ... or anywhere else by this >matter. I will keep sending patches till i get tired (soon). > > >>>>Anyway ... i thought someone may be interested in a compilation fix for >>>> >>>> >cfg.y introduced with the tls_domains (it would not compile if the cfg.y >file had been patched but the tls-core files were not there); a bug fix for >the session caching (fixed by turning session caching and resumption off); >and an extension (the ability to choose the list of allowed ciphers from the >config file). Oh, and all the files have been tabbed, instead of spaced (for >indentation). > > >>>>Enjoy! >>>> >>>>Cesc >>>> >>>> >>>> >>>> >>>> >>>> >>Unclassified >> >> >> >> >>>>--------------------------------------------------------------------- >>>>--- >>>> >>>>_______________________________________________ >>>>Serdev mailing list >>>>serdev(a)lists.iptel.org >>>>http://lists.iptel.org/mailman/listinfo/serdev >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>_______________________________________________ >>>Serusers mailing list >>>serusers(a)lists.iptel.org >>>http://lists.iptel.org/mailman/listinfo/serusers >>> >>>_______________________________________________ >>>Serusers mailing list >>>serusers(a)lists.iptel.org >>>http://lists.iptel.org/mailman/listinfo/serusers >>> >>> >>> >>> >>> >>> >>> >> >> >> >> >> > >_______________________________________________ >Serdev mailing list >serdev(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serdev > > > > >

1 1

[Serusers] Problem compiling postgres module
by Gorka Guridi 10 May '05

10 May '05

Hi When I tried to compile this module, i obtain this error messages. In file con_postgres.h there is this include: #include "libpq-fe.h" I tried to find this file but it doesn't appear anywhere. What is the utility of this file? Thanks a lot. Best regards. Gorka. make[1]: Entering directory `/root/ser/ser-0.8.14/modules/postgres' ../../Makefile.rules:77: aug_alloc.d: No such file or directory ../../Makefile.rules:77: aug_util.d: No such file or directory ../../Makefile.rules:77: db_con.d: No such file or directory ../../Makefile.rules:77: db_mod.d: No such file or directory ../../Makefile.rules:77: db_res.d: No such file or directory ../../Makefile.rules:77: db_utils.d: No such file or directory ../../Makefile.rules:77: db_val.d: No such file or directory ../../Makefile.rules:77: dbase.d: No such file or directory In file included from dbase.c:49: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_val.c:49: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_res.c:44: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_con.c:44: con_postgres.h:43:22: libpq-fe.h: No such file or directory make[1]: Leaving directory `/root/ser/ser-0.8.14/modules/postgres' make[1]: Entering directory `/root/ser/ser-0.8.14/modules/postgres' ../../Makefile.rules:77: db_con.d: No such file or directory ../../Makefile.rules:77: db_res.d: No such file or directory ../../Makefile.rules:77: db_val.d: No such file or directory ../../Makefile.rules:77: dbase.d: No such file or directory In file included from dbase.c:49: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_val.c:49: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_res.c:44: con_postgres.h:43:22: libpq-fe.h: No such file or directory In file included from db_con.c:44: con_postgres.h:43:22: libpq-fe.h: No such file or directory gcc-3.3 -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='""' -DVERSION='"0.8.14"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc-3.3 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_TCP -DDISABLE_NAGLE -DF_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -I/usr/local/pgsql/include -I/usr/include/postgresql -c aug_alloc.c -o aug_alloc.o aug_alloc.c: In function `mem_bad': aug_alloc.c:118: warning: no return statement in function returning non-void aug_alloc.c: In function `mem_nomem': aug_alloc.c:161: warning: long unsigned int format, size_t arg (arg 4) aug_alloc.c: In function `mem_alloc': aug_alloc.c:228: warning: suggest parentheses around assignment used as truth value aug_alloc.c: In function `aug_set_nomem_func': etc.

1 0

[Serusers] t_write_unix
by TCCHAN 10 May '05

10 May '05

Hi ALL: Can anyone help! I try to call "t_write_unix" in script and found that it isn't implemented in tm modules. But documentation from Sems clearly show that tm is the module I should load. I am using Ser0.814. Do I need a newer version? Thanks. Regards, TC Chan

2 1

[Serusers] [ser-0.8.14] ERROR: Could NOT resolve hostname
by Star Bravo 10 May '05

10 May '05

Hi All, I am running ser-0.8.14 on a Public IP. Sometimes I see following errors while looking at /var/log/messages ser[20575]: ERROR: mk_proxy: could not resolve hostname: "serdomain.com" ser[20575]: ERROR: uri2proxy: bad host name in URI <sip:serdomain.com> ser[20575]: ERROR: t_forward_nonack: failure to add branches where, "serdomain.com" is the domain name of the machine running SER and is mapped to a Public IP. Any help in this regard will be much appreciated. Thks & Rgds, - Bravo

2 1

[Serusers] t_relay won't give up
by Brett's Asterisk Account 10 May '05

10 May '05

Hey All, I'm having a problem. I'm attempting a: if (!t_relay()) { route(2); break } When the destination ignores the request (perhaps the domain portion of the RURI points to a server that is down?), I see the INVITE processed like 10 times. Here is the trace.. 11.066729 192.168.20.10 -> 192.168.50.100 SIP/SDP Request: INVITE sip:2015551212;rn=2015550099;npdi=yes@192.168.50.100;dtg=HSTNSIPORIG02;user=phone, with session description 4(24793) ******** INCOMMING CALL FROM TRUSTED IP ADDRESS 4(24793) INFO Checking ANI from Trusted IP 4(24793) INFO: ANI Verification successful for trusted IP 4(24793) ****** INCOMING CALL PASSED SECURITY CHECKS 4(24793) INFO: Begining attempt 1 DID route for trusted ip customer 4(24793) ****** FOUND DID TABLE ROUTE 11.318093 192.168.50.100 -> 192.168.20.10 SIP Status: 100 trying -- your call is important to us 11.318223 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 11.425865 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 13.429423 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 17.436544 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 21.443657 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 23.328599 192.168.20.10 -> 192.168.50.100 SIP Request: CANCEL sip:2015551212;rn=2015550099;npdi=yes@192.168.50.100;dtg=UTEXHSTNSIPORIG02;user=phone 3(24790) ******** INCOMMING CALL FROM TRUSTED IP ADDRESS 3(24790) INFO Checking ANI from Trusted IP 3(24790) INFO: ANI Verification successful for trusted IP 3(24790) ****** INCOMING CALL PASSED SECURITY CHECKS 3(24790) INFO: Begining attempt 1 DID route for trusted ip customer 3(24790) ****** FOUND DID TABLE ROUTE 23.581023 192.168.50.100 -> 192.168.20.10 SIP Status: 200 ok -- no more pending branches 25.451776 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 29.458898 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 33.466012 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 37.473130 192.168.50.100 -> 10.1.2.3 SIP/SDP Request: INVITE sip:2015551212@10.1.2.3, with session description 40.479489 192.168.50.100 -> 192.168.20.10 SIP Status: 408 Request Timeout 40.487743 192.168.20.10 -> 192.168.50.100 SIP Request: ACK sip:2015551212;rn=2015550099;npdi=yes@192.168.50.100;dtg=HSTNSIPORIG02;user=phone 10.1.2.3 is not a real node.. but it really does attempt to send a call there.. I'd like for it to attempt, die, and process the next route. I've considered using t_on_failure, but it's not really what I want.. I want this failure to occur for any status >500 (ie: 5xx and 6xx) AND for dead SIP (ie, no SIP reply at all). t_on_failure will catch too much. Also, it takes too long to timeout. I could have sworn I had this working with t_relay the other day. Am I doing something wrong? What is making it retry over and over? Thanks, Brett

1 0

[Serusers] writing modules
by Greg Martin 10 May '05

10 May '05

Is there anything more then serdev and the source code to aid with writing modules? Is this the correct list for programming questions relating to modules? Greg Martin Technology & Operations TELUS Communication Inc. office: 780-493-2786 cell: 780-718-4139

2 1

[Serusers] RV: problems with digest
by Lucas Aimaretto 10 May '05

10 May '05

> Hi all, > > I'm having trouble at authentication using radius and digest. > Look at radius output. The rare thing is that some phones get > registered nicely, but others no. The ones who get registered > are X-Lite softphones and grandstream. The ones that not, are > the ATAs from voip solutions, MTA-V102. Any help would be > appreciated. The user is 1991106 and has NO PASSWORD assigned > ... ( but all of the users have NO PASSWORD ). > > rad_recv: Access-Request packet from host IP_SER:33483, > id=196, length=269 > User-Name = "1991106@IP_SER" > Digest-Attributes = 0x0a0931393931313036 > Digest-Attributes = 0x01103230382e3232312e3136392e3838 > Digest-Attributes = > 0x022a34323766656365613663303066636665343337623439613936343664 > 303666373363396635353639 > Digest-Attributes = 0x04147369703a3230382e3232312e3136392e3838 > Digest-Attributes = 0x030a5245474953544552 > Digest-Response = "9b256af89daa817caf568f682e1d15a6" > Service-Type = IAPP-Register > X-Ascend-PW-Lifetime = 0x31393931313036 > Cisco-AVPair = > "call-id=efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5" > NAS-IP-Address = IP_SER > NAS-Port = 5060 > Processing the authorize section of radiusd.conf > modcall: entering group authorize for request 213 > modcall[authorize]: module "preprocess" returns ok for request 213 > modcall[authorize]: module "attr_filter" returns noop for > request 213 > modcall[authorize]: module "chap" returns noop for request 213 > rlm_digest: Converting Digest-Attributes to something sane... > Digest-User-Name = "1991106" > Digest-Realm = "IP_SER" > Digest-Nonce = "427fecea6c00fcfe437b49a9646d06f73c9f5569" > Digest-URI = "sip:IP_SER" > Digest-Method = "REGISTER" > rlm_digest: Adding Auth-Type = DIGEST > modcall[authorize]: module "digest" returns ok for request 213 > rlm_realm: Looking up realm "IP_SER" for User-Name = > "1991106@IP_SER" > rlm_realm: Found realm "IP_SER" > rlm_realm: Adding Stripped-User-Name = "1991106" > rlm_realm: Proxying request from user 1991106 to realm IP_SER > rlm_realm: Adding Realm = "IP_SER" > rlm_realm: Authentication realm is LOCAL. > modcall[authorize]: module "suffix" returns noop for request 213 > radius_xlat: '1991106' > rlm_sql (sql): sql_set_user escaped user --> '1991106' > radius_xlat: 'rad_authorize_check_query '1991106'' > rlm_sql (sql): Reserving sql socket id: 1 > radius_xlat: '' > radius_xlat: 'rad_authorize_reply_query '1991106',''' > radius_xlat: '' > rlm_sql (sql): Released sql socket id: 1 > modcall[authorize]: module "sql" returns ok for request 213 > modcall: group authorize returns ok for request 213 > rad_check_password: Found Auth-Type DIGEST > auth: type "digest" > Processing the authenticate section of radiusd.conf > modcall: entering group authenticate for request 213 > A1 = 1991106:IP_SER: > A2 = REGISTER:sip:IP_SER > KD = > b3b6936f2a09f4749902ff9f6e0f1b71:427fecea6c00fcfe437b49a9646d0 > 6f73c9f5569:1111962db7ab8b0547fc8fbaa6408dd6 > rlm_digest: FAILED authentication > modcall[authenticate]: module "digest" returns reject for > request 213 > modcall: group authenticate returns reject for request 213 > auth: Failed to validate the user. > Sending Access-Reject of id 196 to IP_SER:33483 > > ... any ideas ?? > > Look at this NGREP's ... > > U IP_UA:60975 -> IP_SER:5060 > REGISTER sip:IP_SER SIP/2.0. > Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2952116395. > From: <sip:1991106@IP_SER>;tag=2375800474. > To: <sip:1991106@IP_SER>. > Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. > CSeq: 15158 REGISTER. > Contact: sip:1991106@10.0.0.5:5070. > Expires: 120. > Max-Forwards: 70. > User-Agent: SIP-ICSG102-1.372-icablesystem/v2.0_enabled. > Content-Length: 0. > > U IP_SER:5060 -> IP_UA:60975 > SIP/2.0 401 Unauthorized. > Via: SIP/2.0/UDP > 10.0.0.5:5070;branch=z9hG4bK2952116395;rport=60975;received=64 > .32.92.159. > From: <sip:1991106@IP_SER>;tag=2375800474. > To: <sip:1991106@IP_SER>;tag=6f0d146d94c4cb042663ff3cf87e2e72.527a. > Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. > CSeq: 15158 REGISTER. > WWW-Authenticate: Digest realm="IP_SER", > nonce="427feab914e565fceccccccf1852a2b0ae3b69cb". > Content-Length: 0. > Warning: 392 IP_SER:5060 "Noisy feedback tells: pid=5366 > req_src_ip=IP_UA req_src_port=60975 in_uri=sip:IP_SER > out_uri=sip:IP_SER via_cnt==1". > > U IP_UA:60975 -> IP_SER:5060 > REGISTER sip:IP_SER SIP/2.0. > Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2608934381. > From: <sip:1991106@IP_SER>;tag=1079893788. > To: <sip:1991106@IP_SER>. > Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. > CSeq: 15159 REGISTER. > Contact: sip:1991106@10.0.0.5:5070. > Expires: 120. > Authorization: Digest username="1991106", realm="IP_SER", > nonce="427feab914e565fceccccccf1852a2b0ae3b69cb", > uri="sip:IP_SER", response="c7dc44af5d16f48c410813a7f4dc98f2". > Max-Forwards: 70. > User-Agent: SIP-ICSG102-1.372-icablesystem/v2.0_enabled. > Content-Length: 0. > > U IP_SER:5060 -> IP_UA:60975 > SIP/2.0 401 Unauthorized. > Via: SIP/2.0/UDP > 10.0.0.5:5070;branch=z9hG4bK2608934381;rport=60975;received=64 > .32.92.159. > From: <sip:1991106@IP_SER>;tag=1079893788. > To: <sip:1991106@IP_SER>;tag=6f0d146d94c4cb042663ff3cf87e2e72.16e1. > Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. > CSeq: 15159 REGISTER. > WWW-Authenticate: Digest realm="IP_SER", > nonce="427feab914e565fceccccccf1852a2b0ae3b69cb". > Content-Length: 0. > Warning: 392 IP_SER:5060 "Noisy feedback tells: pid=5366 > req_src_ip=IP_UA req_src_port=60975 in_uri=sip:IP_SER > out_uri=sip:IP_SER via_cnt==1". > > So, you can see that the UA wants to register. Ser tells him > to send nonce and digest data, but, once the UA resends the > info, it gets an 401 Unauthorized message. I do not know why > .... :( because it works with other phones ( xlite, grandstream ) ... Hi there again ... I've made another test and found out that if I assign a password to the UserAgent, it works perfectly well ... :( But only with this UserAgent only ( VoipSolutions' MTA-V102 ) ... With Xlite or Grandstream it does not matter if the UserAgent has a password or not. Any ideas why is the password bothering ... ??? Best Regards, Lucas -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.11.5 - Release Date: 04/05/2005

2 1

Re: [Serusers] pa module
by harry gaillac 09 May '05

09 May '05

First I would like to understand how to pa module works with database (pa.sql) because of i don't find docs. > The only thing currently shared between PA and the > XCAP server is > watcherinfo. PA and XCAP exchange information > through a table in the > database. The XCAP server sends a FIFO command or a > SIP message to PA > to tell it to refresh the watcherinfo for a user. I need help Harry --- Jamey Hicks <jamey.hicks(a)hp.com> a écrit: > harry gaillac wrote: > > >hello, > > > >Thanks for your reply. > > > >I try to understand drafts from : > >http://www.ietf.org/html.charters/simple-charter.html > > > >I looked at > >http://pals.internet2.edu/downloads/xcap/xcap-0.1.tar.gz > > > >however I don't find documentation at iptel.org in > >order to answer to my problem: > >Configuring Ser to handle ressource list with URI > > > > > SER does not handle resource lists. However, the > XCAP server will allow > a UA to GET/PUT resource lists. Do you have a > suggestion on how to form > the URIs for resource lists? > > The only thing currently shared between PA and the > XCAP server is > watcherinfo. PA and XCAP exchange information > through a table in the > database. The XCAP server sends a FIFO command or a > SIP message to PA > to tell it to refresh the watcherinfo for a user. I > imagine that a > similar scheme could be used for resource lists. > > It might actually be easier, especially in the case > of watcher lists, > for PA to just fetch the xml and parse it rather > than to force things > into a database. This would make it easier for the > XML schema to be > extended. > > What do you think? > > Jamey > > __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

[Serusers] problems with digest
by Lucas Aimaretto 09 May '05

09 May '05

Hi all, I'm having trouble at authentication using radius and digest. Look at radius output. The rare thing is that some phones get registered nicely, but others no. The ones who get registered are X-Lite softphones and grandstream. The ones that not, are the ATAs from voip solutions, MTA-V102. Any help would be appreciated. The user is 1991106 and has NO PASSWORD assigned ... ( but all of the users have NO PASSWORD ). rad_recv: Access-Request packet from host IP_SER:33483, id=196, length=269 User-Name = "1991106@IP_SER" Digest-Attributes = 0x0a0931393931313036 Digest-Attributes = 0x01103230382e3232312e3136392e3838 Digest-Attributes = 0x022a343237666563656136633030666366653433376234396139363436643036663733 63396635353639 Digest-Attributes = 0x04147369703a3230382e3232312e3136392e3838 Digest-Attributes = 0x030a5245474953544552 Digest-Response = "9b256af89daa817caf568f682e1d15a6" Service-Type = IAPP-Register X-Ascend-PW-Lifetime = 0x31393931313036 Cisco-AVPair = "call-id=efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5" NAS-IP-Address = IP_SER NAS-Port = 5060 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 213 modcall[authorize]: module "preprocess" returns ok for request 213 modcall[authorize]: module "attr_filter" returns noop for request 213 modcall[authorize]: module "chap" returns noop for request 213 rlm_digest: Converting Digest-Attributes to something sane... Digest-User-Name = "1991106" Digest-Realm = "IP_SER" Digest-Nonce = "427fecea6c00fcfe437b49a9646d06f73c9f5569" Digest-URI = "sip:IP_SER" Digest-Method = "REGISTER" rlm_digest: Adding Auth-Type = DIGEST modcall[authorize]: module "digest" returns ok for request 213 rlm_realm: Looking up realm "IP_SER" for User-Name = "1991106@IP_SER" rlm_realm: Found realm "IP_SER" rlm_realm: Adding Stripped-User-Name = "1991106" rlm_realm: Proxying request from user 1991106 to realm IP_SER rlm_realm: Adding Realm = "IP_SER" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 213 radius_xlat: '1991106' rlm_sql (sql): sql_set_user escaped user --> '1991106' radius_xlat: 'rad_authorize_check_query '1991106'' rlm_sql (sql): Reserving sql socket id: 1 radius_xlat: '' radius_xlat: 'rad_authorize_reply_query '1991106',''' radius_xlat: '' rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 213 modcall: group authorize returns ok for request 213 rad_check_password: Found Auth-Type DIGEST auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 213 A1 = 1991106:IP_SER: A2 = REGISTER:sip:IP_SER KD = b3b6936f2a09f4749902ff9f6e0f1b71:427fecea6c00fcfe437b49a9646d06f73c9f556 9:1111962db7ab8b0547fc8fbaa6408dd6 rlm_digest: FAILED authentication modcall[authenticate]: module "digest" returns reject for request 213 modcall: group authenticate returns reject for request 213 auth: Failed to validate the user. Sending Access-Reject of id 196 to IP_SER:33483 ... any ideas ?? Look at this NGREP's ... U IP_UA:60975 -> IP_SER:5060 REGISTER sip:IP_SER SIP/2.0. Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2952116395. From: <sip:1991106@IP_SER>;tag=2375800474. To: <sip:1991106@IP_SER>. Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. CSeq: 15158 REGISTER. Contact: sip:1991106@10.0.0.5:5070. Expires: 120. Max-Forwards: 70. User-Agent: SIP-ICSG102-1.372-icablesystem/v2.0_enabled. Content-Length: 0. U IP_SER:5060 -> IP_UA:60975 SIP/2.0 401 Unauthorized. Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2952116395;rport=60975;received=64.32.92.159 . From: <sip:1991106@IP_SER>;tag=2375800474. To: <sip:1991106@IP_SER>;tag=6f0d146d94c4cb042663ff3cf87e2e72.527a. Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. CSeq: 15158 REGISTER. WWW-Authenticate: Digest realm="IP_SER", nonce="427feab914e565fceccccccf1852a2b0ae3b69cb". Content-Length: 0. Warning: 392 IP_SER:5060 "Noisy feedback tells: pid=5366 req_src_ip=IP_UA req_src_port=60975 in_uri=sip:IP_SER out_uri=sip:IP_SER via_cnt==1". U IP_UA:60975 -> IP_SER:5060 REGISTER sip:IP_SER SIP/2.0. Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2608934381. From: <sip:1991106@IP_SER>;tag=1079893788. To: <sip:1991106@IP_SER>. Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. CSeq: 15159 REGISTER. Contact: sip:1991106@10.0.0.5:5070. Expires: 120. Authorization: Digest username="1991106", realm="IP_SER", nonce="427feab914e565fceccccccf1852a2b0ae3b69cb", uri="sip:IP_SER", response="c7dc44af5d16f48c410813a7f4dc98f2". Max-Forwards: 70. User-Agent: SIP-ICSG102-1.372-icablesystem/v2.0_enabled. Content-Length: 0. U IP_SER:5060 -> IP_UA:60975 SIP/2.0 401 Unauthorized. Via: SIP/2.0/UDP 10.0.0.5:5070;branch=z9hG4bK2608934381;rport=60975;received=64.32.92.159 . From: <sip:1991106@IP_SER>;tag=1079893788. To: <sip:1991106@IP_SER>;tag=6f0d146d94c4cb042663ff3cf87e2e72.16e1. Call-ID: efbfcb25db042b56d47ddbe74e640d8f(a)10.0.0.5. CSeq: 15159 REGISTER. WWW-Authenticate: Digest realm="IP_SER", nonce="427feab914e565fceccccccf1852a2b0ae3b69cb". Content-Length: 0. Warning: 392 IP_SER:5060 "Noisy feedback tells: pid=5366 req_src_ip=IP_UA req_src_port=60975 in_uri=sip:IP_SER out_uri=sip:IP_SER via_cnt==1". So, you can see that the UA wants to register. Ser tells him to send nonce and digest data, but, once the UA resends the info, it gets an 401 Unauthorized message. I do not know why .... :( because it works with other phones ( xlite, grandstream ) ... Best Regards Lucas -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.11.5 - Release Date: 04/05/2005

1 0

[Serusers] rtpproxy
by harry gaillac 09 May '05

09 May '05

Hi all, We can read in CVS log for ser/rtpproxy/rtp_server.c Among major user-visible changes is addition of simple media-server functionality, which allows on-demand replacing one of RTP streams in session with one generated from local file. This will be used to introduce music-on-hold and similar functionality in nathelper later. Anybody could tell me more how to set up MOH server ? Regards __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

2 1

Re: [Serusers] pa module
by Jamey Hicks 09 May '05

09 May '05

harry gaillac wrote: >hello, > >Thanks for your reply. > >I try to understand drafts from : >http://www.ietf.org/html.charters/simple-charter.html > >I looked at >http://pals.internet2.edu/downloads/xcap/xcap-0.1.tar.gz > >however I don't find documentation at iptel.org in >order to answer to my problem: >Configuring Ser to handle ressource list with URI > > SER does not handle resource lists. However, the XCAP server will allow a UA to GET/PUT resource lists. Do you have a suggestion on how to form the URIs for resource lists? The only thing currently shared between PA and the XCAP server is watcherinfo. PA and XCAP exchange information through a table in the database. The XCAP server sends a FIFO command or a SIP message to PA to tell it to refresh the watcherinfo for a user. I imagine that a similar scheme could be used for resource lists. It might actually be easier, especially in the case of watcher lists, for PA to just fetch the xml and parse it rather than to force things into a database. This would make it easier for the XML schema to be extended. What do you think? Jamey

1 0

[Serusers] Ser and Firewall
by Alex 09 May '05

09 May '05

Hi SerUsers, I got in troble cause Since I installed SER behind e Firewall ; and I opened the port 5060 on the firewall but I' Can't register by my UAC !! my question is: Hhave I Open other ports then the 5060?? thanks in advance for your help!! Alex

1 0

[Serusers] pa module
by harry gaillac 09 May '05

09 May '05

Hello, We can read in README (pa module) 1.3.4. pa_domain (string) Hostname of xcap server associated with presence agent. Example 1-4. Set default_expires parameter ... modparam("pa", "pa_domain", "ser.example.com") ... Does ser is a XCAP server ? Regards Harry __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

2 1

[Serusers] how to determine if a user is already authenticated or not ?
by St�phane Muller 09 May '05

09 May '05

Sorry for my stupid questions, I'm still a newbee in the VoiP domain ! I would like to allow only authenticated users to perform INVITE messages to special accounts. Form example : INVITE messages for "sip:conference@mydomain.com" must be authenticated. Another "stupid" question : where are stored those SETFLAG() functions ? Is it posible for example to SETFLAG() a user just after is it authenticated, and after that use ISFLAGSET() for a particular INVITE ?? Thank you very much guys ! -- Stéphane Muller -- SMuller(a)urbanet.ch le 08.05.2005 --

3 3

[Serusers] HELP... SER + Asterisk as feature server
by admin 09 May '05

09 May '05

Can anyone here help me understand what I missing with this setup. I want to use Asterisk as a feature server only, speaking only SIP (no IAX), and use SER for registration to minimize necessary bandwidth. SIP-phone <-->SER <--> * <--> PSTN Provider <--> Regular-phone Regular-phone <--> PSTN Provider <--> SER <--> * <--> SIP-phone I want to allow SIP users to transfer calls to other users, either on the system or on the PSTN. I'm not sure how to make this work with *. From what I understand, once a call is setup by SER the caller has no access to * because * is not in the media path. If so, * would not be able to catch the DTMF tones and transfer the call. Is this correct? Any help would be greatly appreciated!

1 0

[Serusers] SER + * on same BOX, behind NAT and doing NAT
by maka 09 May '05

09 May '05

hi all, I am currently working on the following: UAC1(10.10.10.15)---(10.10.10.1)SER+*(192.168.1.5)---(.1)DSL I can connect to the * from UAC1, can call PSTN through asterisk from UAC1, and SER is ok with registering and proxying SIP msgs between external (public IP) clients. I can't however get an external UAC to hear * echo test or call the PSTN through *. Any suggestions would be greatly appreciated, cheers;-)

1 0

[Serusers] how to overcome Echo problem ?
by Gorge 09 May '05

09 May '05

Dear All, I have just install my ser + midaproxy . while i testing i heard echo and its really annoying how to over come this problem ? I am using ser from onsip.org Gorge

1 0

RE: [serusers] ser.cfg
by Ricardo Martinez 09 May '05

09 May '05

Or you can try the tutorial from http://www.onsip.org Regards, Ricardo.- > -----Mensaje original----- > De: Matt Schulte [mailto:mschulte@netlogic.net] > Enviado el: Lunes, 09 de Mayo de 2005 9:33 > Para: michael p; serusers(a)lists.iptel.org > Asunto: RE: [serusers] ser.cfg > > > A little outdated but good nonetheless.. > > http://www.iptel.org/ser/admin.html > > -----Original Message----- > From: michael p [mailto:mikep3000@hotmail.com] > Sent: Monday, May 09, 2005 8:32 AM > To: serusers(a)lists.iptel.org > Subject: [serusers] ser.cfg > > > hi > > how can i learn about the configuration of "ser.cfg" ? > > i didn't find anything on the internet. > > and i don't succeed to understand how write the routes and the others > things... > > please answer me > > thanks > > M. > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

2 1

[Serusers] Help with AVPs
by Steve Blair 09 May '05

09 May '05

Hello: I'm trying to load a number from MySQL, check that number to insure it matches "appropriate" syntax then replace the username part of the RURI with this new string. I've tried several things without success. Does anyone have any suggestions on how this can be accomplished. I successfully load a numeric string (a telephone number) from the usr_preferences table. I'd like to check if this value is a five digit extension, eleven digit local number (preficed with a 9), or some other type of call. One approach I used follows. This fails with a syntax error. avp_write("^sip:[3468][0-9]{4}", "$callmatch"); if (avp_check("$calltype","re/$callmatch/g)) { avp_write("oncampus", "$calltype"); xlog("L_INFO", "\n[SER]: call type: ONCAMPUS \n"); }; I've also tried embedding the regular expression in the if construct without success. Any thoughts? Thanks,Steve -- ISC Network Engineering The University of Pennsylvania 3401 Walnut Street, Suite 221A Philadelphia, PA 19104 voice: 215-573-8396 215-746-8001 fax: 215-898-9348 sip:blairs@upenn.edu

1 0

RE: [Serusers] problem: chkconfig --add mediaproxy
by info＠beeplove.com 09 May '05

09 May '05

Never mind, I have found the answer. MOhammad Original Message: ----------------- From: info(a)beeplove.com info(a)beeplove.com Date: Mon, 9 May 2005 11:38:51 -0400 To: serusers(a)iptel.org Subject: [Serusers] problem: chkconfig --add mediaproxy Hello, Whenever I try, chkconfig --add mediaproxy I get, "service mediaproxy does not support chkconfig" I have put boot/mediaproxy.other (that came with source) file as /etc/rc.d/init.d/mediaproxy Can anybody help please. MOhammad -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ . _______________________________________________ Serusers mailing list Serusers(a)iptel.org http://mail.iptel.org/mailman/listinfo/serusers -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

[Serusers] problem: chkconfig --add mediaproxy
by info＠beeplove.com 09 May '05

09 May '05

Hello, Whenever I try, chkconfig --add mediaproxy I get, "service mediaproxy does not support chkconfig" I have put boot/mediaproxy.other (that came with source) file as /etc/rc.d/init.d/mediaproxy Can anybody help please. MOhammad -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

[Serusers] UUID
by harry gaillac 09 May '05

09 May '05

Hello, Anybody Could tell me how can we set UUID ? Regards Harry __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

[Serusers] gateway to gateway config
by Edgardo O. Gonzales II 09 May '05

09 May '05

hi! Can somebody help me with gateway to gateway confi so that I can make a call.. Setup is like this client <--> sip_gateway1 <--> internet <--> sip_gateway2 <--> client thanks, ed

1 0

[Serusers] no busy tone?
by Gerd Feiner 09 May '05

09 May '05

Hi, how do I get a busy tone when the callee is busy? (either way in- and outbound there is none at the moment). Brgds, Gerd

1 0

[Serusers] b2bua ser.cfg sample
by Olivier Taylor 09 May '05

09 May '05

Does anyone have an example of ser.cfg using b2bua. I use this scenario UA --->Ser--->B2bUa--->ua2 I I Radius Thx, Olivier

5 4

RE: [serusers] ser.cfg
by Matt Schulte 09 May '05

09 May '05

A little outdated but good nonetheless.. http://www.iptel.org/ser/admin.html -----Original Message----- From: michael p [mailto:mikep3000@hotmail.com] Sent: Monday, May 09, 2005 8:32 AM To: serusers(a)lists.iptel.org Subject: [serusers] ser.cfg hi how can i learn about the configuration of "ser.cfg" ? i didn't find anything on the internet. and i don't succeed to understand how write the routes and the others things... please answer me thanks M. _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] packet 8 , broadvoice test
by Iqbal 09 May '05

09 May '05

Hi Does anyone know if they port there numbers into a e164 exchange, if not, does anyone have an account from them, which they could post the number, so that I can call and test to see if it gets resolved, or just do a dns lookup on it Iqbal

1 0

[serusers] ser.cfg
by michael p 09 May '05

09 May '05

hi how can i learn about the configuration of "ser.cfg" ? i didn't find anything on the internet. and i don't succeed to understand how write the routes and the others things... please answer me thanks M.

1 0

[Serusers] Question about logical operators and isflagset
by Steve Blair 09 May '05

09 May '05

Hello: This should be easy but I cannot seem to get it working. I want to check if either flag is set to 1 but I consistently hit the else clause even though at least one flag is always 1. Any ideas will be appreciated. Thanks,Steve if ( isflagset(13) | isflagset(17) ) { ... } else { ... }; -- ISC Network Engineering The University of Pennsylvania 3401 Walnut Street, Suite 221A Philadelphia, PA 19104 voice: 215-573-8396 215-746-8001 fax: 215-898-9348 sip:blairs@upenn.edu

2 1

[Serusers] message waiting indicatrors, and voicemail
by Iqbal 09 May '05

09 May '05

Hi I have read a few posts (from Java) regarding MWI, has anyone beens successful with MWI and asterisk and ser combo. tks Iqbal

1 0

[Serusers] NAT & video eyebeam
by Giovanni Balasso 09 May '05

09 May '05

Hi serusers I have problem with NAT and eyebeam video streams. I have all my audio issues with nat fixed using onsip-like config files, audio sessions work as they should with no problems. But when I try to send video with eyebeam during an audio session, nothing happens. Actually eyebeam sends another INVITE, ser processes this INVITE in loose_route section by force_rtp_proxy("l"), and rtpproxy logs the request trying to use the same ports of audio stream. Does anybody knows if this is the point (ie. rtpproxy should open new ports for video stream)? How should I tell rtpproxy to use other ports? One stranger thing is that when I call someone inside the same NAT video works even forcing use of rtpproxy. Thanks for help ser.cfg sections: if (loose_route()) { if (has_totag() && (method=="INVITE" || method=="NOTIFY")) { if (nat_uac_test("19")) { setflag(6); force_rport(); fix_nated_contact(); }; if (method=="INVITE") { force_rtp_proxy("l"); }; }; t_on_reply("1"); t_relay(); break; }; } -- Giovanni Balasso giaso(a)yahoo.it

2 1

[Serusers] Logging timeouts
by Gorka Guridi 09 May '05

09 May '05

Hi all, If one of the participants in a conversation leaves it without send a BYE (unplugging the phone, etc. ), i can not log this success in mysql database. The conversation is successfully closed when SER gives a timeout error, but in this case does not appear any entry in "acc" table (appears only the "INVITE" and "ACK" entries). So, if i want to extract statistics from database, i can't know when this conversations finished. Any idea to do this? Thanks a lot. Best regards Gorka

1 0

[Serusers] new MediaProxy release 1.3.1
by Adrian Georgescu 09 May '05

09 May '05

Hello, There is a new MediaProxy release available. Changes from version 1.3.0 to 1.3.1 ----------------------------------- - Added a new option named 'start' for both the dispatcher and the media proxy server in the configuration file to specify which component to start. The option is specified in the component's section in mediaproxy.ini By default both the dispatcher and the media proxy server are started. - Renamed mediaproxy.ini to mediaproxy.ini.sample to avoid rewriting the configuration file on upgrades. For a first install the sample file should be renamed to mediaproxy.ini (see the INSTALL file) There is no change required for the SER module or SER configuration in ser.cfg. To upgrade go to http://mediaproxy.ag-projects.com/ or download the software directly from http://mediaproxy.ag-projects.com/mediaproxy-1.3.1.tar.gz Kind regards, Adrian Georgescu

1 0

[Serusers] Where the log file ?
by Gorge 09 May '05

09 May '05

Dear All, Sorry for this dump question, i m installing ser . when i m trying to test that ser from any UA. i didn't find any log to my /var/log/messages. i did try ser -D -E but now log. Gorge.

3 2

[Serusers] [ser-0.8.14] "100 Trying" and "408 Request Timeout"
by Star Bravo 09 May '05

09 May '05

Hi all, (I apologize in case my post is a redundant one) I am running ser-0.8.14 on a Public IP and trying to make an IP-to-IP call using Xten X-Lite softphones. [Call Scenario] One softphone is running on a Public IP while the other one is behind NAT running on a Private IP. [Problem] When caller softphone sends INVITE packet to SER, SER responds with "100 Trying" and finally after few seconds SER responds with "408 Request Timeout". The call does not connect, even the called party softphone (behind NAT) does not receive any SIP messages from SER. [Question] Why SER is not able to relay SIP messages to the called party softphones? [More Information] Call works fine if I initiate the call from the softphone that is behind NAT (using a Private IP) I am copying my ser.cfg file below. # ----------- global configuration parameters ------------------------ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) fifo="/tmp/ser_fifo" # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- modparam("usrloc", "db_mode", 0) modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); break; }; # loose-route processing if (loose_route()) { t_relay(); break; }; if (uri==myself) { if (method=="REGISTER") { save("location"); break; }; if(method=="INVITE") { record_route(); }; if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; if (!t_relay()) { sl_reply_error(); }; } Looking forward to your response and feedback. Thks & Rgds, - Bravo

1 0

RE: [serusers] registering
by michael p 09 May '05

09 May '05

thanks for the help now i didn't succeed to register i'm using xlite as UAC and it told me login failed when i'm testing to use user=admin, authorization user=admin, and password=heslo i know that's not come from the UAC cause i try on another one and it doesn't works i'm seeing on my database mysql, in the subscriber table, the name of admin with the password heslo. all the things works except the main thing the communications!!! do you know why? thanks very much M.

2 1

[Serusers] Micronet sp5014 cannot change proxy ip address
by Che Sosa 09 May '05

09 May '05

Anybody who uses Micronet sp5014 gateway? I can't change the proxy IP address? Any blue's clues? Thanks,

1 0

[Serusers] Email Check
by Davis Truong 09 May '05

09 May '05

I am having problem with my serweb , when adding a client through the Subscribe page, it wont send me email Please any clue?? Please help. I have sendmail, and everything installed, but the only thing that's not working is the subscribe email confirmation not sending to client.

1 0

[Serusers] double INVITE problem (newbie)
by Wojciech Ziniewicz 07 May '05

07 May '05

Hello serusers, In the latest post I did not my self clear. Here's my ser.cfg . I would like to get ONE INVITE to flag #2 but dont have any idea how to do it. I'm rather newbie to SER and please be patient :) Thank you in advance! main routing from my ser.cfg : [...] modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf") modparam("acc", "radius_flag", 2) modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser") # main routing logic route{ if (uri==myself) { if (method=="REGISTER") { if (!www_authorize("domenet.pl", "subscriber")) { www_challenge("domenet.pl", "0"); break; }; save ("location"); sl_send_reply("200","Welcome user."); break; }; }; #if (method == "BYE" | method == "CANCEL") {end_media_session(); }; if (method=="INVITE" | method=="BYE" ) { setflag(2); }; if (!method=="REGISTER") { record_route();} if (loose_route()) { #if (method=="BYE" ) { #setflag(2); t_relay(); break; #}; }; if (uri=~"^sip:8@*" { if ( method=="INVITE" || method=="ACK"){ rewritehostport ("192.168.0.163:5060"); setflag(2); t_relay(); break; }; }; if (uri=~"^sip:1@*") { if (method=="INVITE" || method=="ACK"){ rewritehostport ("192.168.0.166:5060"); setflag(2); t_relay(); break; }; }; setflag(2); if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; lookup("aliases"); if (!t_relay()) { sl_reply_error(); log (1, "...local call"); }; } -- Pozdrawiam, Wojciech Ziniewicz Optocomp sp.z.o.o, www.optocomp.pl mailto: wojtekz(a)optocomp.pl +48(0)691031535

1 0

[Serusers] no inward calls from PSTN possible
by Gerd Feiner 07 May '05

07 May '05

Hi, (sorry for posting this to two different lists, but I think there maybe different considerations of this problem) I have an SER setup with mediaproxy and a Cisco AS5350. The SER/mediaproxy is setup following the guide at www.onsip.org. The AS5350 does just simple mediaconversion (so there are two dial-peers, one for PSTN and one for VOIP). These dialpeers worked fine with a less tightened SER-config, but always had the problem of not giving me any dialtone. Now, when I dial inwards from PSTN there is a very short dialtone which gets interrupted by silence. So far so good. But, when I pick up the SIP-phone I get an error-message on my PSTN-phone telling that the service was unavailable (yes - I payed my bill :--) and the SIP-phone gets disconnected. When debugging the AS5350 i noticed that is does net get an rport when dialing inwards: voip_rtp_create_session: callID=277, dstCallID=-1 laddr=195.234.128.23, lport=18114,raddr=0.0.0.0, rport=0, type=2, sig_tos=3, ip_tos=5 When the SIP-phone is picked up, the AS5350 gets a new information regarding the rport: May 7 15:39:28 195.234.128.23 57384: ^I State : STREAM_ADDING (2) May 7 15:39:28 195.234.128.23 57385: ^I Callid : 277 May 7 15:39:28 195.234.128.23 57386: ^I Negotiated Codec : g711alaw, bytes :160 May 7 15:39:28 195.234.128.23 57387: ^I Negotiated DTMF relay : inband-voice May 7 15:39:28 195.234.128.23 57388: ^I Negotiated NTE payload : 0 May 7 15:39:28 195.234.128.23 57389: ^I Negotiated CN payload : 0 May 7 15:39:28 195.234.128.23 57390: ^I Media Srce Addr/Port : 195.234.128.23:18114 May 7 15:39:28 195.234.128.23 57391: ^I Media Dest Addr/Port : 62.141.42.76:16032 but immediately after that the call gets disconnected. When dialing from SIP to PSTN everything seems fine with the rport: voip_rtp_create_session: callID=278, dstCallID=279 laddr=195.234.128.23, lport=17496,raddr=62.141.42.76, rport=16034, type=3, sig_tos=3, ip_tos=5 I also noticed that there is a difference in the type-value: 2 when dialing inwards and 3 when dialing outwards. Any ideas why this is happening? Brgds, Gerd

1 1

[Serusers] error while compile uac
by Mik 07 May '05

07 May '05

Hello, I try to compile UAC module for SER. And I have error. Please, give me advice. ser-0.8.14 extract uac-0.9.0-0.tgz to ser-0.8.14/modules/uac gmake RESULT: # gmake ../../Makefile.modules:21: "you should run make from the main ser directory" ../../Makefile.modules:21: "you should run make from the main ser directory" gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"uac.so"' -DVERSION='"0.8.14"' -DARCH='"i386"' -DOS='"freebsd"' -DCOMPILER='"gcc 3.4"' -D__CPU_i386 -D__OS_freebsd -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_TCP -DDISABLE_NAGLE -DF_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_SOCKADDR_SA_LEN -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSGHDR_MSG_CONTROL -c auth.c -o auth.o `-mcpu=' is deprecated. Use `-mtune=' or '-march=' instead. auth.c: In function `uac_auth': auth.c:336: error: structure has no member named `t_gett' gmake: *** [auth.o] Ошибка 1 I can't find function with that name in all SER tree. # grep -R t_gett * modules/sms/sms_funcs.c: set_gettime_function(); modules/sms/sms_report.c:void set_gettime_function() modules/sms/sms_report.c: LOG(L_INFO,"INFO:sms:set_gettime_function: using system time func.\n"); modules/sms/sms_report.c: LOG(L_INFO,"INFO:sms:set_gettime_function: using ser time func.\n"); modules/sms/sms_report.h:void set_gettime_function(); Binary file modules/sms/sms_funcs.o matches Binary file modules/sms/sms_report.o matches Binary file modules/sms/sms.so matches modules/uac/auth.c: t = uac_tmb.t_gett(); # uname -a FreeBSD megalink.com.ru 5.3-RELEASE FreeBSD 5.3-RELEASE #1: Sun Nov 7 19:44:39 MSK 2004 dwl@megalink.com.ru:/usr/src/sys/i386/compile/megalink.com.ru-5.3 i386 How can I compile this module?

2 2

[Serusers] Possible bug in SER or Cisco GW?
by Francesco Bottà 07 May '05

07 May '05

Hi all, I'm observing a very strange behaviour....when I'm calling from PSTN through Cisco GW to my SER Proxy, if in my voip dial-peer there's the CLI command 'dtmf-relay rtp-nte', and then in the SDP line appears this 'a' line 'a=fmtp:101 0-16', when arrives to my SER, SER itself is unable to process it...below the ngrep dump, where the actors are: A.B.C.D: SER IP addr E.F.G.H: GW Cisco SIP signalling addr E.F.G.K: GW Cisco SIP media addr W.W.W.W: my SIP ATA addr U E.F.G.H:52007 -> A.B.C.D:5060 INVITE sip:0662293701@sip.mydomain.org:5060 SIP/2.0. Via: SIP/2.0/UDP E.F.G.H:5060;branch=z9hG4bK54A5503. From: <sip:05751944945@E.F.G.H>;tag=8E2C3094-11F5. To: <sip:0662293701@sip.mydomain.org>. Date: Fri, 06 May 2005 11:35:27 GMT. Call-ID: C73B2995-BD5911D9-971C9909-651E86BE(a)E.F.G.H. Supported: rel1xx,timer. Min-SE: 1800. Cisco-Guid: 3342503125-3176731097-3023962122-4094721758. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. CSeq: 101 INVITE. Max-Forwards: 10. Remote-Party-ID: <sip:05751944945@E.F.G.H>;party=calling;screen=yes;privacy=off. Timestamp: 1115379327. Contact: <sip:05751944945@E.F.G.H:5060>. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 536. . v=0. o=CiscoSystemsSIP-GW-UserAgent 974 6362 IN IP4 E.F.G.H. s=SIP Call. c=IN IP4 E.F.G.K. t=0 0. m=audio 19340 RTP/AVP 18 8 0 4 3 98 99 2 125 101 19. c=IN IP4 E.F.G.K. a=rtpmap:18 G729/8000. a=fmtp:18 annexb=yes. a=rtpmap:8 PCMA/8000. a=rtpmap:0 PCMU/8000. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. a=rtpmap:3 GSM/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:99 G726-24/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:125 X-CCD/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-16. a=rtpmap:19 CN/8000. a=direction:passive. # U A.B.C.D:5060 -> E.F.G.H:5060 SIP/2.0 100 trying -- your call is important to us. Via: SIP/2.0/UDP E.F.G.H:5060;branch=z9hG4bK54A5503. From: <sip:05751944945@E.F.G.H>;tag=8E2C3094-11F5. To: <sip:0662293701@sip.mydomain.org>. Call-ID: C73B2995-BD5911D9-971C9909-651E86BE(a)E.F.G.H. CSeq: 101 INVITE. Server: SPSexp (0.9.2 (i386/linux)). Content-Length: 0. Warning: 392 A.B.C.D:5060 "Noisy feedback tells: pid=9919 req_src_ip=E.F.G.H req_src_port=52007 in_uri=sip:0662293701@sip.mydomain.org:5060 out_uri=sip:0662293701@W.W.W.W:4848 via_cnt==1". . # U A.B.C.D:5060 -> W.W.W.W:4848 33275@0:1480 ........INVITE sip:0662293701@W.W.W.W:4848 SIP/2.0. Record-Route: <sip:A.B.C.D;ftag=8E2C3094-11F5;lr=on>. Via: SIP/2.0/UDP A.B.C.D;branch=z9hG4bK60cd.c694de32.0. Via: SIP/2.0/UDP E.F.G.H:5060;branch=z9hG4bK54A5503. From: <sip:05751944945@E.F.G.H>;tag=8E2C3094-11F5. To: <sip:0662293701@sip.mydomain.org>. Date: Fri, 06 May 2005 11:35:27 GMT. Call-ID: C73B2995-BD5911D9-971C9909-651E86BE(a)E.F.G.H. Supported: rel1xx,timer. Min-SE: 1800. Cisco-Guid: 3342503125-3176731097-3023962122-4094721758. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. CSeq: 101 INVITE. Max-Forwards: 9. Remote-Party-ID: <sip:05751944945@E.F.G.H>;party=calling;screen=yes;privacy=off. Timestamp: 1115379327. Contact: <sip:05751944945@E.F.G.H:5060>. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 536. . v=0. o=CiscoSystemsSIP-GW-UserAgent 974 6362 IN IP4 E.F.G.H. s=SIP Call. c=IN IP4 E.F.G.K. t=0 0. m=audio 19340 RTP/AVP 18 8 0 4 3 98 99 2 125 101 19. c=IN IP4 E.F.G.K. a=rtpmap:18 G729/8000. a=fmtp:18 annexb=yes. a=rtpmap:8 PCMA/8000. a=rtpmap:0 PCMU/8000. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. a=rtpmap:3 GSM/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:99 G726-24/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:125 X-CCD/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-16. a=rtpmap:19 CN/80 # U A.B.C.D:5060 -> W.W.W.W:4848 33276@0:1480 ........INVITE sip:0662293701@W.W.W.W:4848 SIP/2.0. Record-Route: <sip:A.B.C.D;ftag=8E2C3094-11F5;lr=on>. Via: SIP/2.0/UDP A.B.C.D;branch=z9hG4bK60cd.c694de32.0. Via: SIP/2.0/UDP E.F.G.H:5060;branch=z9hG4bK54A5503. From: <sip:05751944945@E.F.G.H>;tag=8E2C3094-11F5. To: <sip:0662293701@sip.mydomain.org>. Date: Fri, 06 May 2005 11:35:27 GMT. Call-ID: C73B2995-BD5911D9-971C9909-651E86BE(a)E.F.G.H. Supported: rel1xx,timer. Min-SE: 1800. Cisco-Guid: 3342503125-3176731097-3023962122-4094721758. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. CSeq: 101 INVITE. Max-Forwards: 9. Remote-Party-ID: <sip:05751944945@E.F.G.H>;party=calling;screen=yes;privacy=off. Timestamp: 1115379327. Contact: <sip:05751944945@E.F.G.H:5060>. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 536. . v=0. o=CiscoSystemsSIP-GW-UserAgent 974 6362 IN IP4 E.F.G.H. s=SIP Call. c=IN IP4 E.F.G.K. t=0 0. m=audio 19340 RTP/AVP 18 8 0 4 3 98 99 2 125 101 19. c=IN IP4 E.F.G.K. a=rtpmap:18 G729/8000. a=fmtp:18 annexb=yes. a=rtpmap:8 PCMA/8000. a=rtpmap:0 PCMU/8000. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. a=rtpmap:3 GSM/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:99 G726-24/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:125 X-CCD/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-16. a=rtpmap:19 CN/80 Did ever seen this strangeness?? Regards, Verbal Francesco Bottà Service Engineering Eutelia SpA Arezzo 0575-1944945 [ Ai sensi e per gli effetti della Legge sulla tutela della riservatezza personale (DLgs. 196/03 e collegate), questa mail è destinata unicamente alle persone sopra indicate e le informazioni in essa contenute sono da considerarsi strettamente riservate. E' proibito leggere, copiare, usare o diffondere il contenuto della presente mail senza autorizzazione. Se avete ricevuto questo messaggio per errore, siete pregati di rispedire lo stesso al mittente. Grazie ]

4 3

[Serusers] 0.9.0 Source and Debian Sarge Compile Problems (Jabber & MySql & Radius)
by Ozan Blotter 07 May '05

07 May '05

I'm on Debian Sarge, i want to build SER modules, radius and mysql and jabber in one time. With Mandrake and Red Hat there was no problem but now experiencing difficulties with Debian and can't find information regarding to this... rapid:/ser-0.9.0# make modules=modules/mysql modules >> it's done without problems :) rapid:/ser-0.9.0# make modules=modules/auth_radius modules make[1]: Entering directory `/ser-0.9.0/modules/auth_radius' make[1]: Leaving directory `/ser-0.9.0/modules/auth_radius' make[1]: Entering directory `/ser-0.9.0/modules/auth_radius' gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.0"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c authorize.c -o authorize.o gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.0"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c authrad_mod.c -o authrad_mod.o authrad_mod.c: In function `mod_init': authrad_mod.c:110: error: `DICT_VENDOR' undeclared (first use in this function) authrad_mod.c:110: error: (Each undeclared identifier is reported only once authrad_mod.c:110: error: for each function it appears in.) authrad_mod.c:110: error: `vend' undeclared (first use in this function) authrad_mod.c:134: warning: assignment makes pointer from integer without a cast authrad_mod.c:139: error: too many arguments to function `rc_conf_str' authrad_mod.c:139: error: too many arguments to function `rc_read_dictionary' authrad_mod.c:144: warning: implicit declaration of function `rc_dict_findvend' authrad_mod.c:159: error: too many arguments to function `rc_dict_findattr' authrad_mod.c:159: error: too many arguments to function `rc_dict_findval' make[1]: *** [authrad_mod.o] Error 1 make[1]: Leaving directory `/ser-0.9.0/modules/auth_radius' rapid:/ser-0.9.0#

3 2

[Serusers] SERWEB
by harry gaillac 07 May '05

07 May '05

Hello, I posted to you and serusers mailing list many mails about serweb in the past . You have been adding new features to serweb however I would have liked to find more documentation and roadmap for serweb project (and other projects) . Could you tell us more about XXL ? I downloaded the latest release today (unstable) by hoping it would run well with ser (unstable) . I still wish to test accounting, missed call, message stored, ... but after setting up serweb I get these messages after a user is logged. However I can't fix these errors messages: from my_account.php: Attribute named 'fw_voicemail' does not exists Attribute named 'sw_user_status_visible' does not exists from missed_calls.php: DB Error: syntax error Regards Harry __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

3 2

[Serusers] SER and NavisRadius not working
by davor jovanovic 06 May '05

06 May '05

Hi all, I'm trying to configure SER 0.8.14 to use authentication with NavisRadius 4.5.0. On my X-Lite (X-Lite v2.0 Build 1103m) client I'm getting "Login Failed! Contact Network Admin." I'm getting following message from NavisRadius. Why? => Reply-Message = "No check.password" I would be very grateful if someone could look at my ser.cfg and output from NavisRadius. Best regards **************************************************************************** * This is what I get on RADIUS server (different from SER machine) Client: Client-Class = "#default" Nas_Port_Normalization = off Radius_Remove_Trailing_Nul = TRUE Radius_Append_Trailing_Nul = FALSE Auto_Remove_Check_Items = TRUE Check_Authenticators = TRUE Session_Time_From_Time_Of_Day = FALSE Radius_Charset = "UTF8" Client-Class = "video" Client-Dictionary = "draft_ietf_radext_digest_auth_01" **** dictionary of radiusclient on SER machine is adjusted to dictionary of RADIUS, and RADIUS can recognize attributes - except if I MUST run sterman_aaa_sip_00 on NavisRadius???? I attached dictionary in radiusclient to this message **** Client-Secret = <hidden> Request: User-Name = "djovanov.srce" Digest-Username = "djovanov.srce" Digest-Realm = "srce.hr" Digest-Nonce = "427b5aa983df858da94c50d1f8132a69e3e703ad" Digest-URI = "sip:srce.hr" Digest-Method = "REGISTER" Digest-Response = "ca6202fe55c51501295a9bc6ab325420" Service-Type = IAPP-Register Anonymous = v0-a208-646A6F76616E6F7669632E73726365 **** RADIUS doesn't recognize code 208, which is Sip-Uri-User **** ****Am I missing Digest-Algorithm? Why SER doesn't send this attribute?**** NAS-IP-Address = 161.53.0.131 NAS-Port = 5060 Packet: Client-Name = "161.53.0.131" Packet-Type = Access-Request Packet-Identifier = 213 Packet-Length = 197 Packet-Authenticator = 2B25D6D4934B930EB21F8E1B6AEFFE50 Source-Address = 161.53.0.131 Source-Port = 33159 Destination-Address = 0.0.0.0 Destination-Port = 1812 Receipt-Time = "2005/05/06 13:44:32" Full-User-Name = "djovanov.srce" Base-User-Name = "djovanov.srce" Normalized-Nas-Port = 5060 19 <engine.worker.0> -> checkDigest[AuthHttpDigest] 19 <plugin.AuthHttpDigest.checkDigest> FAILURE -- No check.password 20 <engine.worker.0> Variable group trace Reply: Reply-Message = "No check.password" **** this is message is which I get from NavisRadius **** **************************************************************************** ************ This is my ser.cfg fifo_db_url="mysql://ser:heslo@localhost/ser" # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/group.so" loadmodule "/usr/local/lib/ser/modules/uri.so" loadmodule "/usr/local/lib/ser/modules/uri_radius.so" loadmodule "/usr/local/lib/ser/modules/group_radius.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so" loadmodule "/usr/local/lib/ser/modules/msilo.so" modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("usrloc", "db_mode", 2) modparam("usrloc", "timer_interval", 10) modparam("rr", "enable_full_lr", 1) modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient-ng/radiusclient.conf") modparam("auth_radius", "service_type", 15) modparam("group_radius", "use_domain", 0) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!radius_www_authorize("")) { www_challenge("", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; };

1 0

RE: [Serusers] LCR failure syntax
by Matt Schulte 06 May '05

06 May '05

Woohoo, thanks so much. Actually that lcr patch fixed it, everything works great now. Also on a related note can qm_malloc cause SER hangs or any other bad things? Does it actually fix memory leaks or just help report them? Thanks again, you rock... Matt -----Original Message----- From: Juha Heinanen [mailto:jh@tutpro.com] Sent: Wednesday, May 04, 2005 8:30 AM To: Matt Schulte Subject: RE: [Serusers] LCR failure syntax Matt Schulte writes: > FYI, I *finally* got around to doing this. A debug shows that load_gw is > in fact loading both gateways.. matt, > 8(30980) DEBUG:load_gws(): Added AVP <lcr_gw_addr,374650ce> > 8(30980) qm_malloc(0xf4edf000, 31) called from usr_avp.c: add_avp(112) > 8(30980) qm_malloc(0xf4edf000, 32) returns address 0xf509a3ec frag. > 0xf509a3d4 (size=32) on 1 -th hit > 8(30980) DEBUG:load_gws(): Added AVP <lcr_gw_port,0> > 8(30980) qm_malloc(0xf4edf000, 31) called from usr_avp.c: add_avp(112) > 8(30980) qm_malloc(0xf4edf000, 32) returns address 0xf509a43c frag. > 0xf509a424 (size=32) on 1 -th hit > 8(30980) DEBUG:load_gws(): Added AVP <lcr_gw_addr,511f7d1> > 8(30980) qm_malloc(0xf4edf000, 31) called from usr_avp.c: add_avp(112) > 8(30980) qm_malloc(0xf4edf000, 32) returns address 0xf509a48c frag. > 0xf509a474 (size=32) on 1 -th hit > 8(30980) DEBUG:load_gws(): Added AVP <lcr_gw_port,0> there was a bug in the debug output of DEBUG:load_gws(), which is fixed on the current CVS HEAD version and also in current https://tutpro.com/tmp/lcr-0.9.0.tgz. that, however, would not explain why load_gw() loads two gws, but next_gw() calls succeed only once. i checked next_gw() code and it calls search_first_avp avp = search_first_avp(gw_ap_avp_name_str, addr_port_name, &val); and if that returns an avp, destroys that avp destroy_avp(avp); after first saving its value for further processing. these are the only function calls related to avps in next_gw() function. so there is no way the second gw would disappear somewhere unless (1) you use the same avp name/number for something else too or (2) there is a bug in ser usr_avp code. i suggest that you try once more with the current lcr backport. regarding debugging, unless you are looking for memory leaks, i suggest you turn off qm_malloc debugs by commenting -DDBG_QM_MALLOC in Makefile.defs. -- juha

2 1

[Serusers] Double INVITE with radius makes two radius records
by Wojciech Ziniewicz 06 May '05

06 May '05

Problem : for each call i get two INVITE messages and one BYE message what finally gives me two record on one call. Below i give my radacct plus my ser.cfg. using SER from cvs on debian made with "make deb". ----------------------ser.cfg--------------------------------------------- [...] modparam("acc", "radius_config", "/etc/radiusclient/radiusclient.conf") modparam("acc", "radius_flag", 1) modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser") [...] if (!method=="REGISTER") record_route(); if (loose_route()) { if (method=="INVITE" || method=="ACK" || method=="BYE") { setflag(1); t_relay(); break; }; }; #traffic to PSTN Multitech. if (uri=~"^sip:8[0-9]{3}@*") { rewritehostport ("192.168.0.163:5060"); if (method=="INVITE" || method=="ACK" || method=="BYE") { setflag(1); t_relay(); break; }; }; [...] -------------#EOF----------------------------------------------------------- ------------------------------# --------------------------------radacct: -----------------------------------------1---(start)-----15:36-------------- ---------------- Fri May 6 15:36:18 2005 Acct-Status-Type = Start Service-Type = IAPP-Register Sip-Response-Code = 200 Error-Cause = 1 User-Name = "494(a)192.168.0.122" Calling-Station-Id = "sip:494@192.168.0.122" Called-Station-Id = "sip:8506633351@192.168.0.122" Sip-Translated-Request-URI = "sip:8506633351@192.168.0.163:5060" Acct-Session-Id = "FXhmq9wjIM0muabU(a)192.168.0.133" Sip-To-Tag = "1974686540" Sip-From-Tag = "jKddrjjMVfZA1LZs" Sip-Cseq = "1" NAS-IP-Address = 127.0.0.1 NAS-Port = 5060 Acct-Delay-Time = 0 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "b67ece239e51c387" Timestamp = 1115386578 -------------------------------------------------2---(start)-----15:36------ ------------------------- Fri May 6 15:36:18 2005 Acct-Status-Type = Start Service-Type = IAPP-Register Sip-Response-Code = 200 Error-Cause = 4 User-Name = "494(a)192.168.0.122" Calling-Station-Id = "sip:494@192.168.0.122" Called-Station-Id = "sip:8506633351@192.168.0.122" Sip-Translated-Request-URI = "sip:8506633351@192.168.0.163:5060" Acct-Session-Id = "FXhmq9wjIM0muabU(a)192.168.0.133" Sip-To-Tag = "1974686540" Sip-From-Tag = "jKddrjjMVfZA1LZs" Sip-Cseq = "1" NAS-IP-Address = 127.0.0.1 NAS-Port = 5060 Acct-Delay-Time = 0 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "b67ece239e51c387" Timestamp = 1115386578 ----------------------------------------------3------(stop)--15:36---------- ------------------------ Fri May 6 15:36:23 2005 Acct-Status-Type = Stop Service-Type = IAPP-Register Sip-Response-Code = 200 Error-Cause = 8 User-Name = "8506633351(a)192.168.0.122" Calling-Station-Id = "sip:8506633351@192.168.0.122" Called-Station-Id = "sip:494@192.168.0.122" Sip-Translated-Request-URI = "sip:494@192.168.0.133:5060" Acct-Session-Id = "FXhmq9wjIM0muabU(a)192.168.0.133" Sip-To-Tag = "jKddrjjMVfZA1LZs" Sip-From-Tag = "1974686540" Sip-Cseq = "2" NAS-IP-Address = 127.0.0.1 NAS-Port = 5060 Acct-Delay-Time = 0 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "3ac6feec9288d040" Timestamp = 1115386583 ---------------------------------------------------------------------------- ---------------------#EOF -- Pozdrawiam, Wojciech Ziniewicz Optocomp sp.z.o.o, www.optocomp.pl mailto: wojtekz(a)optocomp.pl +48(0)691031535

1 0

[Serusers] SER and NavisRadius not working
by davor jovanovic 06 May '05

06 May '05

Hi all, I'm trying to configure SER 0.8.14 to use authentication with NavisRadius 4.5.0. On my X-Lite (X-Lite v2.0 Build 1103m) client I'm getting "Login Failed! Contact Network Admin." I'm getting following message from NavisRadius. Why? => Reply-Message = "No check.password" I would be very grateful if someone could look at my ser.cfg and output from NavisRadius. Best regards **************************************************************************** * This is what I get on RADIUS server (different from SER machine) Client: Client-Class = "#default" Nas_Port_Normalization = off Radius_Remove_Trailing_Nul = TRUE Radius_Append_Trailing_Nul = FALSE Auto_Remove_Check_Items = TRUE Check_Authenticators = TRUE Session_Time_From_Time_Of_Day = FALSE Radius_Charset = "UTF8" Client-Class = "video" Client-Dictionary = "draft_ietf_radext_digest_auth_01" **** dictionary of radiusclient on SER machine is adjusted to dictionary of RADIUS, and RADIUS can recognize attributes - except if I MUST run sterman_aaa_sip_00 on NavisRadius???? I attached dictionary in radiusclient to this message **** Client-Secret = <hidden> Request: User-Name = "djovanov.srce" Digest-Username = "djovanov.srce" Digest-Realm = "srce.hr" Digest-Nonce = "427b5aa983df858da94c50d1f8132a69e3e703ad" Digest-URI = "sip:srce.hr" Digest-Method = "REGISTER" Digest-Response = "ca6202fe55c51501295a9bc6ab325420" Service-Type = IAPP-Register Anonymous = v0-a208-646A6F76616E6F7669632E73726365 **** RADIUS doesn't recognize code 208, which is Sip-Uri-User **** ****Am I missing Digest-Algorithm? Why SER doesn't send this attribute?**** NAS-IP-Address = 161.53.0.131 NAS-Port = 5060 Packet: Client-Name = "161.53.0.131" Packet-Type = Access-Request Packet-Identifier = 213 Packet-Length = 197 Packet-Authenticator = 2B25D6D4934B930EB21F8E1B6AEFFE50 Source-Address = 161.53.0.131 Source-Port = 33159 Destination-Address = 0.0.0.0 Destination-Port = 1812 Receipt-Time = "2005/05/06 13:44:32" Full-User-Name = "djovanov.srce" Base-User-Name = "djovanov.srce" Normalized-Nas-Port = 5060 19 <engine.worker.0> -> checkDigest[AuthHttpDigest] 19 <plugin.AuthHttpDigest.checkDigest> FAILURE -- No check.password 20 <engine.worker.0> Variable group trace Reply: Reply-Message = "No check.password" **** this is message is which I get from NavisRadius **** **************************************************************************** ************ This is my ser.cfg fifo_db_url="mysql://ser:heslo@localhost/ser" # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/group.so" loadmodule "/usr/local/lib/ser/modules/uri.so" loadmodule "/usr/local/lib/ser/modules/uri_radius.so" loadmodule "/usr/local/lib/ser/modules/group_radius.so" loadmodule "/usr/local/lib/ser/modules/auth_radius.so" loadmodule "/usr/local/lib/ser/modules/msilo.so" modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("usrloc", "db_mode", 2) modparam("usrloc", "timer_interval", 10) modparam("rr", "enable_full_lr", 1) modparam("auth_radius", "radius_config", "/usr/local/etc/radiusclient-ng/radiusclient.conf") modparam("auth_radius", "service_type", 15) modparam("group_radius", "use_domain", 0) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!radius_www_authorize("")) { www_challenge("", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; **************************************************************************** ************ This is output from XLite client SEND TIME: 367959953 SEND >> 161.53.0.131:5060 REGISTER sip:srce.hr SIP/2.0 Via: SIP/2.0/UDP 161.53.0.112:5060;rport;branch=z9hG4bK5F06B40648DE4583908CA9F59275C8AC From: djovanov.srce <sip:djovanov.srce@srce.hr>;tag=1082157231 To: djovanov.srce <sip:djovanov.srce@srce.hr> Contact: "djovanov.srce" <sip:djovanov.srce@161.53.0.112:5060> Call-ID: 9AE1D3A885904642B6446C443007BA11(a)srce.hr CSeq: 6774 REGISTER Expires: 1800 Authorization: Digest username="djovanov.srce",realm="srce.hr",nonce="427b6e9134acf8132394741bae95 d74a5994cb67",response="e6f6d76db22b74c6c0746d2cff9b34f8",uri="sip:srce.hr" Max-Forwards: 70 User-Agent: X-Lite release 1103m Content-Length: 0 RECEIVE TIME: 367959968 RECEIVE << 161.53.0.131:5060 SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 161.53.0.112:5060;rport=5060;branch=z9hG4bK5F06B40648DE4583908CA9F59275C8AC From: djovanov.srce <sip:djovanov.srce@srce.hr>;tag=1082157231 To: djovanov.srce <sip:djovanov.srce@srce.hr>;tag=06b273b7ac7b46f473f32e25d8adc515.da4f Call-ID: 9AE1D3A885904642B6446C443007BA11(a)srce.hr CSeq: 6774 REGISTER WWW-Authenticate: Digest realm="srce.hr", nonce="427b6e9134acf8132394741bae95d74a5994cb67" Server: Sip EXpress router (0.10.99-dev0 (i386/linux)) Content-Length: 0 Warning: 392 161.53.0.131:5060 "Noisy feedback tells: pid=14777 req_src_ip=161.53.0.112 req_src_port=5060 in_uri=sip:srce.hr out_uri=sip:srce.hr via_cnt==1"

1 0

[Serusers] php with mysql, where is APXS?
by Llanos Serna García-Conde 06 May '05

06 May '05

1 0

[Serusers] ser.cfg
by FaberK 06 May '05

06 May '05

Hi, I've got some problems. When I use the simple ser.cfg, everything is fine, the ser starts, I can call to other users and I can try to add other users. When I want to change and try to use MySQL, nothing goes. I always receive: Starting SER : PID file /var/run/ser.pid does not exist -- SER start failed I've tryed to touch it but nothing. I've installed the libmysqlclient; I've rebuilt the acc.so according other solutions I saw in this ml... Using the command ser -c it reply that the cfg is ok. Same thing if I try to setup to use it with PSTN What can I do??? I've got to add users, allow them to call to PSTN and accounting the calls... PLEASE HELP!!! Best Regards -- .:FaberK:.

2 1

[Serusers] problem with acc module
by karl 06 May '05

06 May '05

Hi, I have configured a cisco gateway with the timer receive-rtcp so that in case of sip client disconnection from the network, the gateway would still send a BYE and disconnects the POTS side after the timer hits. The cisco is doing the job however SER's ACC module is not registering these BYEs; i.e. I cannot account for duration of the call. Is this because no OK is sent back from the sip client that was disconnected? Is there a way to get around this? Thanks, Karl --------------------------------- Do you Yahoo!? Yahoo! Small Business - Try our new resources site!

1 0

[Serusers] Big trouble with subst() and REGISTER requests
by Jerome Martin 06 May '05

06 May '05

Hello everyone, I badly need some help on the following issue ... I am trying to rewrite the To: and From: headers in order to change some prefixes found in REGISTER requests. In fact I want to save both the original request and the modified one. However, even though subst() reports a successfull replace in the logs (textops: subst_f: replacing at offset 41 [sip:33] with [sip:0] / textops: subst_f: replacing at offset 312 [sip:33] with [sip:0] ), the message does not seem to actually be modified. When I dump the request before and after in a file, I see no difference, and the save_noreply is processing the original REGISTER request. I have read a thread from sep. 2003 where someone said the subst replacement is only effective just before the message is sent out ... so I even tried "faking" a t_relay before the save_noreply, but it does not work neither. Here is the code I am using : if (method=="REGISTER") { save("location"); exec_msg("echo -e REGISTER `date` '\n' `printenv | grep SIP` '\n' >> /var/log/ser-register.log"); if (search("^From.*sip:33.*")) { subst('/sip:33/sip:0/g'); save_noreply("location"); exec_msg("echo -e REGISTER DUP `date` '\n' `printenv | grep SIP` '\n' >> /var/log/ser-register-dup.log"); exec_msg("cat - >> /var/log/ser-register-dup.log"); break; }; break; }; Does anyone have an idea why it is not working at all ? FYI. I also tried textops replace_all function, with no luck. Best Regards, Jerome Martin

1 0

[Serusers] HELP: hunting function on ser ?
by Charles Wang 06 May '05

06 May '05

Hi, ALL: If there are three UACs(1001, 1002, 1003) register on the same SER, and they are setting as the same group number for example "1000". If another UAC make a call to 1001, and 1001 is buzy. The call will be transfer or forward to 1002 or 1003. How to implement it? Does anybody have an idea/soluton for it? Help me please. -- Best Regards Charles

2 4

Re: [Serusers] I need to alter and duplicate REGISTER saves
by Jerome Martin 06 May '05

06 May '05

Hi, I tried many things but none seems to work. I am using ser 0.8.4. With the following code in ser.cfg, every time a REGISTER arrives with the 33XXXXXX format, the request is logged in my duplicates log, but the subst line does not seem to work. I tried replace and replace_all also, but no luck. I though that maybe the exported shell variables I am dumping in my log file are not updated after the subst, but a serctl ul show clearly display only the 33XXXXXX numbers in the location database. Here is the code I am using : if (method=="REGISTER") { save("location"); exec_msg("echo -e REGISTER `date` '\n' `printenv | grep SIP` '\n' >> /var/log/ser-register.log"); if (search("^From.*sip:33.*")) { subst('/sip\:33/sip\:0/g'); save_noreply("location"); exec_msg("echo -e REGISTER DUP `date` '\n' `printenv | grep SIP` '\n' >> /var/log/ser-register-dup.log"); break; } break; }; Any idea ? Alan Litster wrote: >>Hi, >> >>Thanks for your reply. >> >>Alan Litster wrote: >> >> >> >>>Doing it the way you've suggested would mean modifying the From and To >>> >>> >>> >>> >>Indeed. I already tried that, using the replace() / replace_all() >>textops functions, but I could not even manage to have the header >>modified. It just did nothing at all .... >> >> >I've had the situation where I've needed to update the Refer-To: header as >the gateway was unable to handle it in a satisfactory manor. For this I used >the subst function in the textops module, I'm not sure if this functions any >differently to the replace functions. > > > >>Besides, in the recent thread Re: [Serusers] HF replace, someone said >>that modifying From: and To "is not allowed". >> >> >It's recomended not too, though most people want to modify the From on >INVITE's. It may not be such a problem on a REGISTER method, just do a >save_noreply("location") > > > >>But I am wondering ... ain't it the "Contact:" header which is used by >>register.so/usrloc.so ? >> >> >It's Contact header is used as the location of the UAC, >'username@ipaddress_of_uac'. The From/To fields are used as the username >part on the sip registrar, generally the From/To are the same though may not >always be the case. >See http://www.faqs.org/rfcs/rfc3261.html section 10.2 > > > >>>fields, then doing a save. This should in theory all the UAC to >>> >>> >>register on >> >> >>>the two addresses, it could get a little messy. >>> >>> >>> >>> >>I agree. I anticipate a few issues on that side. >> >> >> >>>An alternative would be to create an alias, this would be fine >>> >>> >>if you knew >> >> >>>before hand what format they would register with. >>> >>> >>> >>> >>Well, I know which server will send what format, and I can afford to >>hardcode the IPs in the ser.cfg. But after reading the section about >>aliases in the ser Admin's manual, I must confess it is not clear for >>me. Could you elaborate on that idea ? >> >> >In your example you want lookup("33122334455") to return the same as >lookup("0122334455"). Well if 33122334455 is an alias for 0122334455 it >will. First it does an alias lookup of 33122334455(a)mydomain.com which >replaces the r-uri with 0122334455(a)mydomain.com then it does a lookup on >that, finds a match and does a further replace with 0122334455(a)1.2.3.4 (The >IP address of the UAC from the Contact record) > > > >>>>-----Original Message----- >>>>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org]On >>>>Behalf Of Jerome Martin >>>>Sent: 04 May 2005 15:16 >>>>To: serusers(a)lists.iptel.org >>>>Subject: [Serusers] I need to alter and duplicate REGISTER saves >>>> >>>> >>>>Hello everyone, >>>> >>>>After looking everywhere in the docs and ML archives, I couldn't find a >>>>way to solve my problem, so I would appreciate any help. >>>> >>>>We have several iPBX servers sending REGISTERs to a SER registrar. Some >>>>of those servers send us the numbers to register as aor in the form >>>>0XXXXXXXXX (local numbering plan), some other in the form 33XXXXXXXXX >>>>(local country code prefix). For various reasons, we need to handle >>>>those different REGISTERs simultaneously, and be able to lookup both >>>>formats in the location database. >>>> >>>>What I'm looking for is a way to "duplicate" the REGISTER entries, i.e. >>>>when ser receives a REGISTER for 33XXXXXXXXX, I'd like it to save() the >>>>33XXXXXXXXX, but also create an entry for the corresponding 0XXXXXXXXX. >>>> >>>>Example : SER receives a REGISTER request for 33122334455. I'd like to >>>>have two aors in the location database, so that lookup("33122334455") >>>>and lookup("0123344556") would both return the same thing. >>>> >>>>What I have in mind is something like this : >>>> >>>>if (method=="REGISTER") { >>>> # Always save the original aor >>>> save("location"); >>>> >>>> # If the number starts with 33, also save a duplicate aor in the >>>>0XXXXXXXXX format >>>> if (search("^From.*sip:33.*")) { >>>> >>>> # Insert some code to alter the received SIP message and >>>> >>>> >>change the >> >> >>>> # number in order to save the 0XXXXXXXXX aor >>>> # ... >>>> # ... >>>> # ... >>>> >>>> save("location"); >>>> break; >>>> } >>>> break; >>>>}; >>>> >>>>Can anyone help ? >>>> >>>>Best Regards, >>>>Jerome Martin >>>> >>>>_______________________________________________ >>>>Serusers mailing list >>>>serusers(a)lists.iptel.org >>>>http://lists.iptel.org/mailman/listinfo/serusers >>>> >>>> >>>> >>>> >>>----------------------------------------------------------------- >>> >>> >>---------------------------- >> >> >>>This email, and any files transmitted with it, is copyright and >>> >>> >>may contain confidential information. >> >> >>>The contents are intended for the use of the addressee(s) only. >>>Unauthorized use may be unlawful. >>>If you receive this email by mistake, please advise sender immediately. >>>The views of the author may not necessarily constitute the views >>> >>> >>of the company. >> >> >>>Nothing in this mail shall bind the company in any contract or >>> >>> >>obligation. >> >> >>>Tel +44 (0) 20 8002 6000 >>>Fax +44 (0) 20 8002 6060 >>> >>>______________________________________________________________________ >>>This email has been scanned by the MessageLabs Email Security System. >>>For more information please visit http://www.messagelabs.com/email >>>______________________________________________________________________ >>> >>> >>> >>> > >--------------------------------------------------------------------------------------------- >This email, and any files transmitted with it, is copyright and may contain confidential information. >The contents are intended for the use of the addressee(s) only. >Unauthorized use may be unlawful. >If you receive this email by mistake, please advise sender immediately. >The views of the author may not necessarily constitute the views of the company. >Nothing in this mail shall bind the company in any contract or obligation. > >Tel +44 (0) 20 8002 6000 >Fax +44 (0) 20 8002 6060 > >______________________________________________________________________ >This email has been scanned by the MessageLabs Email Security System. >For more information please visit http://www.messagelabs.com/email >______________________________________________________________________ > >

1 0

[Serusers] Bad Default Config file
by Deadly Earnest 06 May '05

06 May '05

Hell all, Firstly I'm new here so forgive a perhaps fairly basic question. I've just compiled and installed ser on this Linux PC: $ ser -V version: 0.8.14 (i386/linux) When I try to run the Ser Sip Server I get an error message to say that there's errors in the Config file. I thought it must be picking up the wrong file so I used -f option to force it to the default config file and it gives the same error. My problem is in the Config file provided. $ ser -f /usr/local/etc/ser/ser.cfg ERROR: bad config file (3 errors) I thought I'd check the log files but I can't find mention of them in the install documentation that I'm looking at: http://cvs.berlios.de/cgi-bin/viewcvs.cgi/*checkout*/ser/sip_router/INSTALL Can anybody tell me where the log files are and if there is any obvious way of getting rid of the errors in the default ser.cfg?

1 0

[Serusers] RTPProxy Remote mode - startup command?
by Alex Mack 06 May '05

06 May '05

Hi! I want to use rtpproxy in remote mode, i.e. rtpproxy runs on another machine as ser. I've tried to start rtpproxy accordingly to the README.remote with: ./rtpproxy -s udp:213.10.10.10 But I only get this error response: rtpproxy: explicit binding address has to be specified in UDP command mode What am I doing wrong? Alex Mack

3 4

[Serusers] can't login to serweb
by Dhanuka S K 06 May '05

06 May '05

hi, I installed serweb, but i can't login to it using default uaser name password it says bad password and username... Dhanuka Kaluarachchi Head of production - Web & E-Business Lanka Internet Services Ltd.

1 0

[Serusers] CDR problem
by yy 06 May '05

06 May '05

Hi guys, I'm currently trying out CDRTool with ser for generating call detail records.Currently, I getting a problem in a single call session whereby when a user calls a certain destination and an invite is sent; if the called party does not reply in time, a reinvite is sent. However, both records are recorded in CDRTool, each having the same SIP Session. Why it this so? Shouldn't only one session be recorded? Session start time SIP caller In SIP destination Out Dur Price KBIn KBOut Status Codecs 4N 2005-05-05 18:32:22 1001(a)lab.test.com 1002(a)lab.test.com 00.07 Ok (200) Signalling information SIP Session: 000ded22-eeb20005-306b5b03-43a91caf(a)192.168.10.2 SIP Method: 1 from : SIP Status: Ok (200) DelayTime: (s) SIP From: sip:1001@lab.test.com SIP To: sip:1002@lab.test.com Start time (caller): 2005-05-05 18:32:22 Asia Start time (proxy): 2005-05-05 18:32:22 Asia Stop time (proxy): 2005-05-05 18:32:29 Asia Session duration: 00:07 SIP Proxy: 192.168.1.2 Next SIP hop: Billing Party: 1001(a)lab.test.com 5N 2005-05-05 18:32:21 1001(a)lab.test.com 1002(a)lab.test.com 00:08 Ok (200) Signalling information SIP Session: 000ded22-eeb20005-306b5b03-43a91caf(a)192.168.10.2 SIP Method: 1 from : SIP Status: Ok (200) DelayTime: (s) SIP From: sip:1001@lab.test.com SIP To: sip:1002@lab.test.com Start time (caller): 2005-05-05 18:32:21 Asia Start time (proxy): 2005-05-05 18:32:21 Asia Stop time (proxy): 2005-05-05 18:32:29 Asia Session duration: 00:08 SIP Proxy: 192.168.1.2 Next SIP hop: Billing Party: 1001(a)lab.test.com Kindly advise, Regards, YY

1 0

[Serusers] How to submit patch/script?
by Paul Belanger 05 May '05

05 May '05

I wrote a script last night to start/stop/restart SER for FreeBSD as I was unable to see one in the src. I'm happy to submit it into SER, but unsure how to do this. PB

2 1

[Serusers] setflag...max number
by Iqbal 05 May '05

05 May '05

Hi Is there a max number, I set one at 51, and got an error, is this a feature.. Iqbal

2 1

[Serusers] Forware cancel to remote
by Leon Sun 05 May '05

05 May '05

Hi, I forward a call to a remote softswitch from my SER (sip.xyz.com) to (sip.abc.com). For example, if (method=="INVITE" ) { if (uri=~"sip:011"|| uri=~"sip:1") { forward(sip.abc.com,5060);break;}; }; After I hang up call from my UA , my SER can receive "CANCEL' but far end softswitch is still trying this call so that PSDN keep ringing. How can I let that softswitch get 'CANCEL' from my SER? Thanks Leon Sun

1 0

[Serusers] HF replace
by Mihaly Zachar 05 May '05

05 May '05

Hi everybody, I'm a newbie here... I'd like to change the "From:" HF ... here is my input: From: User Name <sip:aaa123456\@1.1.1.1>;tag=426f34e337ec2855o my regexp would be: s/^From:(.*)aaa(\d{6})(.*)/From:$1$2$3/ so, I would like to remove the "aaa" prefix from the number: the result should be: From: User Name <sip:123456@1.1.1.1>;tag=426f34e337ec2855o How can I use textops' replace() or subst_user() ?? Thanks, Misi

2 4

RE: [Serusers] Nat+SER
by Ricardo Martinez 05 May '05

05 May '05

Hello. There was an interesting discussion about the same issue. Check by Subject : [Serusers] STUN server on April 4. (you can check the mailing list) Regards, Ricardo.- > -----Mensaje original----- > De: info(a)beeplove.com [mailto:info@beeplove.com] > Enviado el: Jueves, 05 de Mayo de 2005 10:41 > Para: serusers(a)lists.iptel.org > Asunto: RE: [Serusers] Nat+SER > > > > > > I have a simple question, if i am using stun server if there any need > to use mediaproxy or rtpproxy, for users sitting behind routers ?? > and if yes which one is the better choise to do that (mediaproxy or > rtpproxy)? > > Thanks for help. > > > Stun server takes care of your clients who are behind > Assymetric NAT. It > also depends on client. Like, your cleints may not be forced > to use STUN > server. > Also, if your client use STUN, you need to use > [Media/RTP]Proxy to cover > users who are from Symetric NAT. > >From my personal experience, I found MediaProxy easy to > configure and have > some very good features. It doesn't mean RTPProxy is not good. I just > couldn't make RTPProxy worked. Maybe I was not that familiar with > RTPProxy/SER when I tried it. > Well, after MediaProxy worked, I didn't try RTPProxy again. > > MOhammad > > > -------------------------------------------------------------------- > mail2web - Check your email from the web at > http://mail2web.com/ . > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

1 0

RE: [Serusers] Nat+SER
by info＠beeplove.com 05 May '05

05 May '05

I have a simple question, if i am using stun server if there any need to use mediaproxy or rtpproxy, for users sitting behind routers ?? and if yes which one is the better choise to do that (mediaproxy or rtpproxy)? Thanks for help. Stun server takes care of your clients who are behind Assymetric NAT. It also depends on client. Like, your cleints may not be forced to use STUN server. Also, if your client use STUN, you need to use [Media/RTP]Proxy to cover users who are from Symetric NAT. >From my personal experience, I found MediaProxy easy to configure and have some very good features. It doesn't mean RTPProxy is not good. I just couldn't make RTPProxy worked. Maybe I was not that familiar with RTPProxy/SER when I tried it. Well, after MediaProxy worked, I didn't try RTPProxy again. MOhammad -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

[Serusers] Nat+SER
by Alex 05 May '05

05 May '05

I have a simple question, if i am using stun server if there any need to use mediaproxy or rtpproxy, for users sitting behind routers ?? and if yes which one is the better choise to do that (mediaproxy or rtpproxy)? Thanks for help.

2 1

Re: [Serusers] Re: [Serdev] Patched free-TLS implementation
by Alex Mack 05 May '05

05 May '05

Hi Cesc! I tried your previuos suggestions on changing cleint certificate check. I'm now running SSL_VERIFY_NONE. MS Messenger works again. But the snom still fails. Ethereal tells me the server doesn't ask for a client certificate any more. Ethereal also shows that "Cipher Suite: TLS_RSA_WITH_RC4_128_SHA" was selected. So far so good, but the snom still rejects the Server Hello with an Alert. What else have you changed? The original version worked with the snoms. BTW patch throws some warnings: # patch -i patch.core.cfg.files.diff patching file cfg.y Hunk #1 FAILED at 1. 1 out of 6 hunks FAILED -- saving rejects to file cfg.y.rej patching file cfg.lex Hunk #1 FAILED at 1. 1 out of 5 hunks FAILED -- saving rejects to file cfg.lex.rej cfg.y.rej reads: *************** *** 1,5 **** /* - * $Id: cfg.y,v 1.2 2005/01/06 14:35:10 sam Exp $ * * cfg grammar * --- 1,5 ---- /* + * $Id: cfg.y,v 1.4 2005/05/03 08:16:35 cesc Exp $ * * cfg grammar * cfg.lex.rej reads: *************** *** 1,5 **** /* - * $Id: cfg.lex,v 1.2 2005/01/06 14:35:10 sam Exp $ * * scanner for cfg files * --- 1,5 ---- /* + * $Id: cfg.lex,v 1.3 2005/04/11 08:18:31 cesc Exp $ * * scanner for cfg files * Seems to be a minor mismatch, it compiles well anyway. Alex Mack Cesc Santasusana schrieb: >Hi, > >Yeah ... I send it with my default config which is using client and server authentication. >I use this settings with minisip client (supports client side certs) and for tls between ser proxies. It works perfect. > >To turn client authentication off, check: >tls/tls_init.c file >init_ssl_ctx_behavior function > >the line >SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); > >means that the server will request a certificate from the client and if it doesn't get one, it will fail. > >Try changing it with: >SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, 0); >this way the server will request a cert, the client will not provide, but on the following renegotiation, the server (ser) will not ask for a cert. > >And if you want to turn verification off ... completely ... >SSL_CTX_set_verify( _ctx, SSL_VERIFY_NONE, 0); >this will also work for you if only using tls for ser2phone ... it will not work if you want tls between proxies ... as the ser client will accept ANY certificate from the ser server. >And then, from the prompt: > > >>make TLS=1 all && make TLS=1 install ;) >> >> > >This whole verification thing needs to be improved and probably the parameters should be changeable directly from the config file. This and many other parameters should be exchangeable without the need to recompile. > >Any volunteer for a ser-tls.README? :D > >Can you provide me with some extra info from the snom phones and the messenger? Do it offline, so you can send me some ethereal captures and ser logs ... > > >Regards, > >Cesc > > > > >>>>Alex Mack <amack(a)fhm.edu> 05/04/05 02:01PM >>> >>>> >>>> >Hi Cesc! > >I compiled in your patch. > >Now I'm facing a new problem: SER wants a client certificate from the >UA. Snom phones immediately reply with an ALERT and break up connection >upon the certificate requests. MS Messenger on the other hand sends at >least a reply - without certificate - and SER rejects the Client Hello >because of the missing client certificate: > >tls_accept: Error in SSL: >tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer >did not return a certificate > >Could you please provide some more documentation about the new TLS >options you added? It seems you've implemented support for client >certificates for a two-way certificate authorization - which would be a >good thing if supported by the UAs, which don't right now. So how can I >turn it off again and get back to server side certification? > >Alex Mack > >Cesc Santasusana schrieb: > > > >>Hi everybody, >> >>The last i sent is a replacement as a whole for the original code sent by P. Griffiths. Sorry i forgot to mention that. >> >>The patches for cfg.y and cfg.lex are both in the same file (patch.core.cfg..files.diff) within the zip. I was lazy :) >>I resent it as a whole, and not as a diff, because i indented all the code with tabs, instead of spaces (so a diff would be bigger than just sending all the files). >> >>As for the CVS thing ... i agree with Juha. Either gets into the "official" cvs or we do something about it. The code i think is rather stable as it is (i only tested on my debian linux box, soon i will try on an ARM linux and i will report back on that too). For me, as long as it gets into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use 0.9.0 .... so all my patches are against it). >> >>On a more philosophical level, i understand the "quietness" on iptel's side ... they have their own version, and make money on it. But the thing is that this free version is here to stay ... it is the "problem" of opensource. >>Another option would be for them to release their proprietary implementation if they feel that it is a better, more tested one. >>In any case, i think that this whole thing needs to be decided fast. >> >>Regards! >> >>Cesc >> >> >> >> >> >> >>>>>Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> >>>>> >>>>> >>>>> >>Hi Cesc! >> >>Nice to have those fixes in a package. >> >>Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or >>*instead* of cfg.y.patch? >> >>Or is your version a patched one which replaces the original >>implementation as a whole? In that case where's cfg.lex.patch? >> >>Alex Mack >> >>Cesc Santasusana schrieb: >> >> >> >> >>>Hi, >>> >>>I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). >>> >>>Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). >>> >>>Enjoy! >>> >>>Cesc >>> >>> >>> >>> >Unclassified > > >>>------------------------------------------------------------------------ >>> >>>_______________________________________________ >>>Serdev mailing list >>>serdev(a)lists.iptel.org >>>http://lists.iptel.org/mailman/listinfo/serdev >>> >>> >>> >>> >>> >>_______________________________________________ >>Serusers mailing list >>serusers(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serusers >> >>_______________________________________________ >>Serusers mailing list >>serusers(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serusers >> >> >> >> >> > > > > >

2 1

RE: [Serusers] RE: Ser Crashes
by Elton Machado 05 May '05

05 May '05

There is a missing line in your ser.cfg file at least the db_url parameter ... or are you using the default permissions? Is not a bad idea to have the line anyway, here it goes... modparam("auth_db|usrloc", "db_url", "mysql://ser:heslo@localhost/ser") Regards, -----Original Message----- From: harry gaillac [mailto:gaillacharry@yahoo.fr] Sent: quinta-feira, 5 de Maio de 2005 10:38 To: Elton Machado Subject: RE: [Serusers] RE: Ser Crashes Look at my ser.cfg do you add users in db with serctl ? Harry --- Elton Machado <elton.machado(a)gmail.com> a écrit : > And did you confirm if your mysql accept local connection with user > name and password you are using? > > What do you mean by your authentication is working? > Can you provide us a > snip of your code? > > > > Regards, > > > > > > > > > > > > _____ > > From: Edgardo O. Gonzales II > [mailto:edgardo.g@pacific.net.ph] > Sent: sexta-feira, 29 de Abril de 2005 5:36 > To: Elton Machado; 'IpTel List'; 'Iptel Mailing list' > Subject: RE: [Serusers] RE: Ser Crashes > > > > > I already did.. Im sure my username and password is correct because my > authentication is working.. > any other suggestion .. > > At 06:17 AM 4/29/2005, Elton Machado wrote: > > > > Did you checked out well your configuration? > > You have to have something like... > > loadmodule "/usr/local/lib/ser/modules/mysql.so" > loadmodule "/usr/local/lib/ser/modules/usrloc.so" > loadmodule "/usr/local/lib/ser/modules/auth.so" > loadmodule "/usr/local/lib/ser/modules/auth_db.so" > > #...... > modparam("auth_db|usrloc", "db_url", > "mysql://ser:heslo@localhost/ser") > modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", > "password_column", "password") modparam("usrloc", "db_mode", 2) > > to ser load things up from database, check if you have the right > username and password, and if your mysql database is running. > > > > Regards, > > > > > > _____ > > From: serusers-bounces(a)lists.iptel.org [ > mailto:serusers-bounces@lists.iptel.org > <mailto:serusers-bounces@lists.iptel.org> ] On Behalf Of IpTel List > Sent: quinta-feira, 21 de Abril de 2005 8:19 > To: Iptel Mailing list > Subject: [Serusers] RE: Ser Crashes > > Hi! > > Thanx for help. It writes that he can't connect to MYSQL DB now ... > Output is the following ... > > root@ignosya:/usr/local/etc/ser# ser -E -d Listening on > 127.0.0.1 [127.0.0.1]:5060 > 84.230.194.213 [84.230.194.213]:5060 > 192.168.1.1 [192.168.1.1]:5060 > Aliases: 1.1.168.192.in-addr.arpa:5060 > a84-230-194-213.elisa-laajakaista.fi:5060 > localhost:5060 > root@ignosya:/usr/local/etc/ser# stateless - initializing Maxfwd > module- initializing > 0(15143) connect_db(): Can't connect to local MySQL server through > socket '/var/run/mysql/mysql.sock' (2) > 0(15143) db_init(): Error while trying to connect database > 0(15143) mod_init(): Error while connecting database > 0(15143) init_mod(): Error while initializing module usrloc > ERROR: error while initializing modules > > root@ignosya:/usr/local/etc/ser# > > So, it seams for me, that it's like MYSQL problem. > So, i have to reconfigure > it ... or check it up ... > But, are there any methods selecting mysql host adres? For example, if > mysql is not on local machine ... is it enough to set SQL_HOST var? > > Best wishes, > Alexandro. > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -----Original Message----- From: harry gaillac [mailto:gaillacharry@yahoo.fr] Sent: quinta-feira, 5 de Maio de 2005 10:38 To: Elton Machado Subject: RE: [Serusers] RE: Ser Crashes Look at my ser.cfg do you add users in db with serctl ? Harry --- Elton Machado <elton.machado(a)gmail.com> a écrit : > And did you confirm if your mysql accept local > connection with user name and > password you are using? > > What do you mean by your authentication is working? > Can you provide us a > snip of your code? > > > > Regards, > > > > > > > > > > > > _____ > > From: Edgardo O. Gonzales II > [mailto:edgardo.g@pacific.net.ph] > Sent: sexta-feira, 29 de Abril de 2005 5:36 > To: Elton Machado; 'IpTel List'; 'Iptel Mailing > list' > Subject: RE: [Serusers] RE: Ser Crashes > > > > > I already did.. Im sure my username and password is > correct because my > authentication is working.. > any other suggestion .. > > At 06:17 AM 4/29/2005, Elton Machado wrote: > > > > Did you checked out well your configuration? > > You have to have something like... > > loadmodule "/usr/local/lib/ser/modules/mysql.so" > loadmodule "/usr/local/lib/ser/modules/usrloc.so" > loadmodule "/usr/local/lib/ser/modules/auth.so" > loadmodule "/usr/local/lib/ser/modules/auth_db.so" > > #...... > modparam("auth_db|usrloc", "db_url", > "mysql://ser:heslo@localhost/ser") > modparam("auth_db", "calculate_ha1", 1) > modparam("auth_db", "password_column", "password") > modparam("usrloc", "db_mode", 2) > > to ser load things up from database, check if you > have the right username > and password, and if your mysql database is running. > > > > Regards, > > > > > > _____ > > From: serusers-bounces(a)lists.iptel.org [ > mailto:serusers-bounces@lists.iptel.org > <mailto:serusers-bounces@lists.iptel.org> ] On Behalf Of > IpTel List > Sent: quinta-feira, 21 de Abril de 2005 8:19 > To: Iptel Mailing list > Subject: [Serusers] RE: Ser Crashes > > Hi! > > Thanx for help. It writes that he can't connect to > MYSQL DB now ... Output > is the following ... > > root@ignosya:/usr/local/etc/ser# ser -E -d > Listening on > 127.0.0.1 [127.0.0.1]:5060 > 84.230.194.213 [84.230.194.213]:5060 > 192.168.1.1 [192.168.1.1]:5060 > Aliases: 1.1.168.192.in-addr.arpa:5060 > a84-230-194-213.elisa-laajakaista.fi:5060 > localhost:5060 > root@ignosya:/usr/local/etc/ser# stateless - > initializing > Maxfwd module- initializing > 0(15143) connect_db(): Can't connect to local MySQL > server through socket > '/var/run/mysql/mysql.sock' (2) > 0(15143) db_init(): Error while trying to connect > database > 0(15143) mod_init(): Error while connecting > database > 0(15143) init_mod(): Error while initializing > module usrloc > ERROR: error while initializing modules > > root@ignosya:/usr/local/etc/ser# > > So, it seams for me, that it's like MYSQL problem. > So, i have to reconfigure > it ... or check it up ... > But, are there any methods selecting mysql host > adres? For example, if mysql > is not on local machine ... is it enough to set > SQL_HOST var? > > Best wishes, > Alexandro. > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

[Serusers] RE: Ser Crashes
by IpTel List 05 May '05

05 May '05

Hi! Thanx for help. It writes that he can't connect to MYSQL DB now ... Output is the following ... root@ignosya:/usr/local/etc/ser# ser -E -d Listening on 127.0.0.1 [127.0.0.1]:5060 84.230.194.213 [84.230.194.213]:5060 192.168.1.1 [192.168.1.1]:5060 Aliases: 1.1.168.192.in-addr.arpa:5060 a84-230-194-213.elisa-laajakaista.fi:5060 localhost:5060 root@ignosya:/usr/local/etc/ser# stateless - initializing Maxfwd module- initializing 0(15143) connect_db(): Can't connect to local MySQL server through socket '/var/run/mysql/mysql.sock' (2) 0(15143) db_init(): Error while trying to connect database 0(15143) mod_init(): Error while connecting database 0(15143) init_mod(): Error while initializing module usrloc ERROR: error while initializing modules root@ignosya:/usr/local/etc/ser# So, it seams for me, that it's like MYSQL problem. So, i have to reconfigure it ... or check it up ... But, are there any methods selecting mysql host adres? For example, if mysql is not on local machine ... is it enough to set SQL_HOST var? Best wishes, Alexandro.

3 3

[Serusers] How to ensure accounting always
by Deepak Singhal 05 May '05

05 May '05

Is there a way to ensure that accounting information is written always. What I mean is if for example due to some reason accounting server is non contactable then the call should not mature. How can I achieve this ? Thanxs Deepak Singhal

1 0

[Serusers] accounting through MySQL
by Victor Huertas Garcia 05 May '05

05 May '05

Hi all again, I am executing the SER 0.8.14 for Linux (SuSE 8.2). I am generating some accouting through a syslog server and it works fine. However, I want to change it to MySQL. According to the user manual, I am supposed to edit a Makefile located in the acc file. The problem is that I cannot find this Makefile at all. I have downloaded all the SW package of SER and there is no acc file with the Makefile inside. It is weird... Any idea? Thanks in advance Victor Victor

2 3

[Serusers] SIP Testing
by Edgardo O. Gonzales II 05 May '05

05 May '05

Hi Guys! My location is Philippines and Im trying to make a gateway to gateway connection for my voip. We have a direct DS3 link going to US. Can somebody help me with the said testing .. Send me the details if ever you are interested . thanks, ed

1 0

[Serusers] serweb and php
by "Sebastian Kühner" 05 May '05

05 May '05

Hello, I have installed serweb and I made all the settings which are required (there are two different ways to install it, because the instructions on the iptel-Server are different from the instructions in the INSTALL file). When I want to load the index.php-File there appears an empty site. To make a test I put "phpinfo()" to the command lines of index.php... without result. A test.php-File in the same directory works fine. Has anyone an idea? Thanks! Sebastian -- +++ Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS +++ GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail

2 1

[Serusers] DDos
by Iqbal 04 May '05

04 May '05

Hi Hypothetically I guess random INVITE, REGISTER requests can be sent to SER (or any proxy for that matter). If this is detected or alot of false requests, does anyone know if they can be filtered within SER itself, i.e /dev/null all REGISTER requests which match xyz pattern. Iqbal

2 1

[Serusers] audiocodes and NO REGISTER
by Iqbal 04 May '05

04 May '05

Hi IS it possible in SER to accept calls which just auth from a particular IP address, if so what is the downside, in terms of doing billing etc. Iqbal

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users