- sr-users - kamailio.org

[Users] Commercial support
by Brandon Price 25 Oct '05

25 Oct '05

Where does one get commercial level, priority support for openser. We are a voip provider looking towards basing the second revision of our network on openser. I have been able to get most things working but some applications like using serial forking for call hunt, a custom cnam module, and getting some modules (avpops, and uac_redirect) to perform as documented are beyond my experience with the software. We do however have time constraints so I ask simply, where can I get priority per incident support for openser as my e-mails to voice- sistem.ro have been unanswered. Any help is greatly appreciated. Also congratulations to the developers on the 1.0 release you are the guys that give guys like me hope. Thank you very much for openser, I hope I get the chance to work with you in the future.

2 2

[Serusers] Ser stop responding requests when scanned with SiVuS
by Hoa Thai Duy 25 Oct '05

25 Oct '05

Hi all Yesterday, I downloaded and scanned my stable SER system (production), and it stoped responding to Subscriber requests. The Tool is at http://vopsecurity.org/sivus-1.09.exe, remember to have JRE installed on Windows. I deployed the configuration guideline at onsip, OpenSER 0.9.5 Anyone have tested the Security Scanner, pls. help Brgds Hoa

2 6

[Serusers] Install problems
by Philip Jones 25 Oct '05

25 Oct '05

I have downloaded and untar'd SER on a hosted server. According to install doc's I should be able to use ser start from /etc/rc.d/init.d under Fedora but, nothing. Does anyone have a more detailed install guide? I'm quite new to Linux, sorry. I'm not sure whether I need to build the program either, the guide appears tobe a little vague.

2 1

[Serusers] CDRTool auth_user table
by Adrian Georgescu 24 Oct '05

24 Oct '05

The archive was incorrect pl download again, I have rebuilt it and now the create_tables.mysql script has all the tables. Adrian

1 0

[Users] fix_nated_contact()
by Alexander Ph. Lintenhofer 24 Oct '05

24 Oct '05

Hi everybody, Is there a reason why fix_nated_contact() only works for UDP? My problem is that in the case of TCP and tcp-aliases only the port is taken from the via-header. The IP-addr is taken from the source of the packet. This leads to the fact that in case of NAT and TCP no alias-mapping is found.... If I comment the lines in nathelper.c which exclude the use of TCP all works fine - so what is the reason for fix_nated_contact() to be only processed with UDP? Any reasons for this? regards, Philipp

1 0

[Serusers] CDRTool auth_user table
by Josh Horton 24 Oct '05

24 Oct '05

Can someone send me the structure of the auth_user table for CDRTool. I just downloaded CDRTool-3.3.5 and followed the install instructions. When I run "./setup_mysql.sh password localhost" I get the following error: ERROR 1146 (42S02) at line 1: Table 'cdrtool.auth_user' doesn't exist Thanks, Josh I can not find a single reference to a table creation in any files. see below: [root@localhost CDRTool]# pwd /var/www/CDRTool [root@localhost CDRTool]# grep -R auth_user * accounts_lib.phtml: $query="select * from auth_user"; accounts.phtml: $query="delete from auth_user"; accounts.phtml: $query="update auth_user set accounts.phtml: $query="select * from auth_user"; accounts.phtml: $query="insert into auth_user log.phtml: $query="select * from auth_user where perms like '%admin%'"; phplib/local.inc: var $database_table = "auth_user"; phplib/local.inc: $this->db->query("select * from auth_user where phplib/local.inc: $update="update auth_user setup/mysql/alter_tables.mysql:alter table auth_user change column only_customer domainFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_cscode codeFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_cli aNumberFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user change column only_after_date afterDateFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user drop column only_cardservice; setup/mysql/alter_tables.mysql:alter table auth_user drop column only_cardclass; setup/mysql/alter_tables.mysql:alter table auth_user change column display_card compidFilter varchar(255) not null; setup/mysql/alter_tables.mysql:alter table auth_user add column serviceFilter varchar(255) not null after codeFilter; setup/mysql/alter_tables.mysql:alter table auth_user change column codeFilter cscodeFilter varchar(255) not null; setup/mysql/create_data.mysql:INSERT INTO auth_user VALUES ('c14cbf141ab1b7cd009356f555b607dc','admin','admin','admin,callsearch,statis tics,sqlquery','2099-01-02','AG Projects','Administrator','+31208005160','support(a)1example.com','1','','','' ,'','','','','ser_radius,cisco,asterisk,ser_acc,ser_missed_calls','0','','20 10-07-11 04:48:00','xj28k'); SOAP/server_lib.php: $query="select * from auth_user

1 0

[Serusers] scope of flags ?
by Ramin Nikaeen 24 Oct '05

24 Oct '05

Valued Colleagues, Can anyone tell me what is scope of the "flags" used in ser.cfg? When I do a "setflag(3)", is it valid throughout a : - Transaction? - Dialogue? - Call? I do a "setflag(3)" when I receive an INVITE and expect the flag 3 to be set when I receive the associated BYE. However, when I do an "isflagset(3)" when I receive the BYE, the flag is not set?! Can someone tell me why?! Thanks ramin

3 2

[Serusers] How to avoid calling route() in a failure_route block?
by Tim Klein 24 Oct '05

24 Oct '05

I have an unusual need: If a contact in the usrloc database is unreachable for any reason, I must immediately delete it from the usrloc database. I know how to do the deletion, but I don't know the right way to write my configuration script. Below is the script that I want to write. But I think it won't work, because I think it's illegal for a failure_route block to call a route() command. (Am I correct about that?) Can anyone tell me what I should do instead of the following? Thank you in advance! Tim ============== route { [...irrelevant stuff omitted...] if (method==INVITE) { route(1); } } route[1] { if (lookup("location")) { t_on_failure("99"); t_relay(); } else { t_reply("404","Not Found"); } } failure_route[99] { delete_location_from_usrloc(); # I will write this function. route(1); } ==============

3 3

RE: [Serusers] Serweb not displaying calls
by John, Paul 24 Oct '05

24 Oct '05

I followed the instructions, still can't get calls logged by the acc. Here is my ser.cfg. What am I doing wrong? Do I need to use db parameters in acc module? I get "not found" when I try to use these. ------------------------------------------------------------ [root@localhost ser]# ser -E 0(11826) set_mod_param_regex: parameter <db_url> not found in module <acc> 0(11826) parse error (82,58-59): Can't set module parameter 0(11826) set_mod_param_regex: parameter <db_missed_flag> not found in module <acc> 0(11826) parse error (83,36-37): Can't set module parameter 0(11826) set_mod_param_regex: parameter <db_flag> not found in module <acc> 0(11826) parse error (84,29-30): Can't set module parameter ERROR: bad config file (3 errors) ------------------------------------------------------------- Ser.cfg file ------------------------------------------------------------ # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=4 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" fifo_mode=0666 alias="10.100.1.79" alias="sip.ipc.com" sip_warning=yes listen="10.100.1.79" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/fork.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! #loadmodule "/usr/local/lib/ser/modules/auth.so" #loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/root/usr/local/lib/ser/modules/acc.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # #modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) modparam("acc", "log_fmt", "fimos") modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "log_missed_flag", 2) modparam("acc", "report_ack", 0) modparam("acc", "failed_transactions", 1) modparam("acc", "early_media", 1) modparam("acc", "db_url", "sql://ser:heslo@localhost/ser") modparam("acc", "db_missed_flag", 2) modparam("acc", "db_flag", 1) modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("usrloc", "db_mode", 2) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; if (method =="INVITE"){ log(1, "INVITE MESSAGE RECEIVED-START ACCOUNTING\n"); setflag(1); }; if (method=="BYE" || method=="CANCEL"){ log(1, "STOP ACCOUNTING\n"); setflag(1); } if (uri=~"^sip:90[0-9][0-9]@") { rewritehost("ns.sip.ipc.com"); forward(uri:host,uri:port); break; } if (uri=~"^sip:95[0-9][0-9]@") { if (method=="REGISTER") { sl_send_reply("488", "Not Acceptable Here"); break; } if (!fork_dset( )) { sl_send_reply("404", "Not Found"); } else { if (!t_relay( )) { sl_reply_error( ); } } break; } # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # if (!www_authorize("iptel.org", "subscriber")) { # www_challenge("iptel.org", "0"); # break; # }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } Paul

1 0

[Users] [Fwd: Accounting with OPENSER]
by Klaus Darilion 24 Oct '05

24 Oct '05

moved discussion to mailing list -------- Original Message -------- Subject: Accounting with OPENSER Date: Mon, 24 Oct 2005 10:22:41 -0200 From: Jeffrey Drago < Reply-To: Jeffrey Drago Hi Klaus.. I saw a lot of your posts trought the mailing lists and I would be glad if you try to help me with a simple one... This is the scenario: * (Asterisk) ----- MYSQL DB -> where I'm going to write the CDR. | | | | * (Asterisk)-------------( OPENSER------- Carrier...(termination) | | | *(Asterisk)------| I Would like to know if its possible to bill only after the ACK until the BYE Signal... Is this a hard thing to do with OPENSER? Thanks for your help. Jeffrey M. Drago ASP Solutions Diretor Rua Cel. Carneiro Júnior, 58 Sl. 14 (35) 3622-0732 37500-018 - Itajubá - MG http://www.aspsolutions.com.br/

2 2

[Serusers] Commercial loadbalancer, NATed clients and src port problems
by George Perantinos 24 Oct '05

24 Oct '05

Hello list. My setup consists of two SER servers behind an F5 Big-IP for load balancing. The servers are "pooled" behind a virtual server (i.e. they present a common IP address to the rest of the world) created at the Big-IP and I'm using call-id persistence. My ser.cfgs are slightly modified mediaproxy examples from onsip.org. Each SER replicates to the other REGISTER messages, so that both servers are the same. So far so good. Suppose that NATed UAC1 is registered at SER1 (SER1 is sending the 4 byte udp packet every 60sec in order to keep its NAT binding open) and UAC2 sends him an INVITE: 1) If the INVITE gets served by SER1 everything is OK. 2) If the INVITE gets served by SER2 then: a) SER2 sends the message from port 5060, b) but the packet arrives at UAC1 with source port 5061 (or 5062 or whatever). This means that for some reason the Big-IP changes the source port it receives from SER2 to something other and, of course, the packet does not pass UAC1's NAT binding. So, the conclusion is that a UAC is only reachable through the SER that keeps it's NAT binding open. In order to solve this problem (and until SER can support path headers) I employed the method and the patch discussed at http://lists.iptel.org/pipermail/serdev/2005-September/005814.html (thanx for the patch Evan). I have to admit that this system was my first experience with a Big-IP, so I'm wondering: Am I doing something wrong at the Big-IP? Or is this Big-IP behavior (altering source ports received from internal servers) typical to every (even commercial) load balancer? Has anyone ever had success with any load balancer, multiple SERs and NATed clients, especially F5s? Regards, George

2 1

[Serusers] problem with ser instalation
by Cadu 24 Oct '05

24 Oct '05

Hi, I try to install in debian with apt but the instaler show this mensage "0(2214) WARNING: fix_socket_list: could not rev. resolve xxx.xxx.xxx.xxx 0(2214) WARNING: fix_socket_list: could not rev. resolve xxx.xxx.xxx.xxx" and when I try to run ser with serctl start show this error: Starting SER : PID file /var/run/ser.pid does not exist -- SER start failed Some one know how I can fix this problems? tanks all. Carlos Eduardo.

2 1

Re: [Serusers] Get alias for user
by Damien Sandras 24 Oct '05

24 Oct '05

Le lundi 24 octobre 2005 à 14:21 +0200, Samuel Osorio Calvo a écrit : > When you process the incoming: > > INVITE dsandras aT gnome.org > > and reaches lookup("aliases");, the Req-URI will be AUTOMATICALLY rewritten to have: > > INVITE 6001 aT gnome.org > > Isn't this what you want???? You don't need rewriteuri for anything, lookup will do the job for you. > I just wanted the reverse. 6001 is the alias, not dsandras :) But I think Jan answered, I need to create a reversealias table. -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

When you process the incoming: INVITE dsandras aT gnome.org and reaches lookup("aliases");, the Req-URI will be AUTOMATICALLY rewritten to have: INVITE 6001 aT gnome.org Isn't this what you want???? You don't need rewriteuri for anything, lookup will do the job for you. Samuel. Unclassified. >>> Damien Sandras <dsandras(a)gnomemeeting.net> 10/24/05 02:12PM >>> Le lundi 24 octobre 2005 à 14:06 +0200, Samuel Osorio Calvo a écrit : > lookup("aliases"); > > will do the job for you if aliases is the name of the table containing the alias bindings (by default it will be). > I had understood this, but the problem here is that I need the reverse: the original request uri contains the username and I need to rewrite it into the user alias. Example, SER receives INVITE dsandras @ gnomemeeting.net, and I want to use rewriteuri to rewrite the INVITE into INVITE 600001 @ gnomemeeting.net. Is that possible? -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

In the lines: # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) you select the mode you want to use the database. If you put 2, the "records" added to SER via serctl will be propagated to the permanent database not immediately but periodically. I think this periodicity can not be set in the config file. If you use 1, all records inserted with serctl will immediately be written also to the database. So I guess you don't see the changes immediately and think that there is a problem....either wait more or put 1 to the dbmode to check if there is a problem with the database. Samuel. Unclassified. >>> ranveer kunal <ranveerkunal(a)gmail.com> 10/24/05 11:17AM >>> Hello Folks, I am trying to use SER with some external database (mysql), which is there on a remote system, no matter what I do, when I add a user via serctl, the user is added to local database server only. I am sending my ser.cfg file, kindly help me thanks . .. . ------------------------------------------------------------------------------------------------------------------- # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=yes # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 # advertised_address is the via header's FQDN advertised_address="ran.test" fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@skywalker/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/options.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("auth_db", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("uri_db", "db_url", "mysql://ser:heslo@skywalker/ser") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol # if U want ip addr for RR just give record_route(); if (!method=="REGISTER") record_route_preset("sip:ran.test"); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # uncomment the 4 lines if U donot authentication. if (!www_authorize("skywalker", "subscriber")) { www_challenge("skywalker", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; if ((method==OPTIONS) && (! uri=~"sip:.*[@]+.*")) { options_reply(); }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP #force_rport(); # if (!(method==ACK | method=="CANCEL" | method=="BYE")) { #comment 4 lines for non suth # if (!proxy_authorize("sip.test", "subscriber")) { # proxy_challenge("sip.test","0"); # break; # }; # }; if (!t_relay()) { sl_reply_error(); }; } _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

Re: [Serusers] Get alias for user
by Samuel Osorio Calvo 24 Oct '05

24 Oct '05

lookup("aliases"); will do the job for you if aliases is the name of the table containing the alias bindings (by default it will be). Samuel Unclassified. >>> Damien Sandras <dsandras(a)gnomemeeting.net> 10/24/05 10:26AM >>> Hello, I plan to deploy a service based on SER and I'm facing a simple problem. All users have both a username (e.g. sip:dsandras AT_ gnomemeeting.net) and one alias (e.g. sip:600001 AT_ gnomemeeting.net). I have another service running in back-end that only supports numerical SIP addresses. So I would like to use "rewriteuri" in ser.cfg to rewrite the user part of the SIP URL. The problem is that I want to rewrite the original username (dsandras) into its numerical alias (600001). My question is thus: how can I get the numerical alias from a username in ser.cfg in order to use it? Thank you, -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] Remote Mysql error
by ranveer kunal 24 Oct '05

24 Oct '05

Hello Folks, I am trying to use SER with some external database (mysql), which is there on a remote system, no matter what I do, when I add a user via serctl, the user is added to local database server only. I am sending my ser.cfg file, kindly help me thanks . .. . ------------------------------------------------------------------------------------------------------------------- # # $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=yes # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 # advertised_address is the via header's FQDN advertised_address="ran.test" fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@skywalker/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/options.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("auth_db", "db_url", "mysql://ser:heslo@skywalker/ser") modparam("uri_db", "db_url", "mysql://ser:heslo@skywalker/ser") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol # if U want ip addr for RR just give record_route(); if (!method=="REGISTER") record_route_preset("sip:ran.test"); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication # uncomment the 4 lines if U donot authentication. if (!www_authorize("skywalker", "subscriber")) { www_challenge("skywalker", "0"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; if ((method==OPTIONS) && (! uri=~"sip:.*[@]+.*")) { options_reply(); }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP #force_rport(); # if (!(method==ACK | method=="CANCEL" | method=="BYE")) { #comment 4 lines for non suth # if (!proxy_authorize("sip.test", "subscriber")) { # proxy_challenge("sip.test","0"); # break; # }; # }; if (!t_relay()) { sl_reply_error(); }; }

2 1

[Users] Call Forwarding using uac_redirect
by Brandon Price 24 Oct '05

24 Oct '05

I am trying to implement call forwarding using the uac_redirect module. My user agents reply with a SIP 302 Moved Temporarily message when the unconditional call forward is set. In the contact field there is something like this... Contact Binding: <sip:13143212222@ser1.manhattan.sipnetwork.net> I need ser to add a plus to that then send the call back out to our pstn carrier. I have tried this... if (t_check_status("302")) get_redirects("6:2","redirect"); prefix("+"); rewritehost("pstn.carriers.ip"); t_relay(); and putting it in a failure route then forcing that route failure_route[2] { get_redirects("6:2","redirect"); prefix("+"); rewritehost("our.pstn.carriers.ip"); t_relay(); I even tried if (t_check_status("302")){ # what to do if device tells us to forward to another number add_diversion("user-forward"); get_redirects("6:2","redirect"); prefix("+"); rewritehost("our.pstn.carriers.ip"); t_relay(); but apparently get_redirects can only be used in a failure_route Has anyone been able to get this working? On a 302 get the redirects from the contact field using get_redirects append with a "+" and rewritehost somewhere else it seemed so simple. Any help is as always greatly appreciated, especially from daniel(a)voice-system.ro cause like me he's too far for norway beer.

2 1

[Serusers] Get alias for user
by Damien Sandras 24 Oct '05

24 Oct '05

Hello, I plan to deploy a service based on SER and I'm facing a simple problem. All users have both a username (e.g. sip:dsandras AT_ gnomemeeting.net) and one alias (e.g. sip:600001 AT_ gnomemeeting.net). I have another service running in back-end that only supports numerical SIP addresses. So I would like to use "rewriteuri" in ser.cfg to rewrite the user part of the SIP URL. The problem is that I want to rewrite the original username (dsandras) into its numerical alias (600001). My question is thus: how can I get the numerical alias from a username in ser.cfg in order to use it? Thank you, -- _ Damien Sandras (o- GnomeMeeting: http://www.gnomemeeting.org/ //\ FOSDEM 2005 : http://www.fosdem.org v_/_ H.323 phone : callto:ils.seconix.com/dsandras@seconix.com

2 1

[Serusers] SERWEB Problem: "DB Error: not found" and "Bad username or password"
by Rafael R. GV 24 Oct '05

24 Oct '05

Hi I am running Ser (0.9.5-pre1 (i386/linux)) and serweb-0.9.3, Mysql 4.1.15 Php 4.4.0 Apache2 realm is configured properly in serweb (it match with domain column in subscriber table), but I have this errors even with default admin/heslo user: DB Error: not found Bad username or password Whats wrong...? rafael

2 1

[Serusers] SERWEB
by gorand＠dvvti.com 24 Oct '05

24 Oct '05

I am trying to configure SerWeb. I downloaded the tarball, extracted it. I installed apache on my linux box, and the apache server is running properly. Now comes the fun part. I looked at the instructions. it is saying that the www is is /var/www/html/htdocs Yet the only place I see that directory is in /usr/local/apache2/htdocs I moved the files as they requested except to that directory. I typed mv html /usr/local/apache2/htdocs/serweb and mv phplib /usr/local/apache2/htdocs/phplib Now this is where I am stuck. Can someone tell me what needs to be done in order for this to work properly. Thanks. Goran D

2 1

[Serusers] presence agent
by Ángel Gómez 24 Oct '05

24 Oct '05

hi,I have installed the pa module for the SER, and now I want to test it. I send a subscrive but SER says than is an invalid request, can some one send me how to send a subscribe via sipsak to SER, and if is posible, how to sen a notify. Thanks in advance.

1 0

[Serusers] RE: SERweb-0.9.4 Errors
by Iddrisu 24 Oct '05

24 Oct '05

Hi, Newbie- pls help. I have redhat 9 server Mysql 4.1.12 Apache 1.3.33 Php-4.1.11 Ser-0.9.4 All working ok. I followed Dan Austin’s Howto. I’m getting following serweb install errors when I try launching : HYPERLINK "http://mydomain.com/serweb/install/dir/admin/index.php/"http://mydomain .com/serweb/install/dir/admin/index.php/ Warning: main(../../config/config_paths.php): failed to open stream: No such file or directory in /var/www/html/serweb/main_prepend.php on line 10 Fatal error: main(): failed opening required ‘../../config/config_paths.php’ (include_path=’ .:/var/www/html/serweb’) in /var/www/html/serweb/main_prepend.php on line 10. Your help will be much appreciated. Idris -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/146 - Release Date: 21/10/2005

3 2

[Serusers] SER and PostgreSQL schema.
by Adam Rybak 24 Oct '05

24 Oct '05

Hello, is there avaiable postgres database schema for ser database? Regards, Adam Rybak

1 0

[Serusers] retry_count
by yserge 24 Oct '05

24 Oct '05

Hi, I do not know how to search through the list.. Surely that question has already been asked.. I can't get the "retry_count" parameter, described in the documentation, to work with Digest Authentication. I also can't find any trace of that parameter when searching through the source code of SER. Do I miss something, or was this feature abandoned, obsoleted, never implemented? Thanks, Sergei

2 1

Re: [Serusers] Radius client connection to remote RADIUS server failure
by zhangshuai 24 Oct '05

24 Oct '05

Alan Baker, Of course radius server can listen to remote radius client. I think one server could be connected to several clients. If you have tried all steps on http://www.iptel.org/ser/doc/ser_radius/ser_radius.html, then there should be no problems. >Can the "radiusclient-ng" client make a remote connection to a RADIUS >server? Does the RADIUS server need to be running on the same box as SER >Router for RADIUS client to work? It seems like the "radiusclient" SER >Router uses can only make a successful connection to the RADIUS server via >Localhost. I have searched around different mailing lists and noticed, I am >faced with the same problem most people are having with the client. Is their >a fix for this madness? Can someone post there working "radiusclient.conf". >Please help. > >Thanks, >Alan > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > = = = = = = = = = = = = = = = = = = = =

1 0

[Serusers] problem with ser install
by Carlos Eduardo 23 Oct '05

23 Oct '05

Hi, I try to install ser 0.9.4 an show this message Warning: fix_socket_list: could not rev. resolve 192.168.200.1 and when i try to run ser, show this error: PID file /var/run/ser.pid does not exist -- SER start failed tanks, Carlos Eduardo Simas Donato.

1 0

[Serusers] USRLOC info in PostgreSQL database.
by Adam Rybak 22 Oct '05

22 Oct '05

Hello, i have succesfully configured retrieving authentication information from Postgres database but i cannot use postgres for USRLOC data. in debug i get: .. 0(0) find_mod_export: <db_use_table> in module mysql not found 0(0) bind_dbmod: Module mysql does not export db_use_table function 0(0) ERROR: mod_init(): Can't bind database module 0(0) init_mod(): Error while initializing module usrloc ERROR: error while initializing modules .. but im not loading Mysql modules! Config: .. loadmodule "/usr/local/ser/lib/ser/modules/postgres.so" loadmodule "/usr/local/ser/modules/auth.so" loadmodule "/usr/local/ser/modules/auth_db.so" .. modparam("auth_db","db_url", "postgres://user:pass@127.0.0.1:5432/dbv") modparam("usrloc", "db_mode", 1) .. what can be a problem? Regards, Adam Rybak

2 1

[Serusers] problems compiling
by dave cra 22 Oct '05

22 Oct '05

I was able to compile the SER source code successfully with gcc after some tweaking. However, when I ran ser restart, I had the following errors in /var/adm/messages: Oct 20 15:50:42 wngds0je ser[556]: [ID 861198 daemon.error] ERROR: load_module: could not open module</usr/local/lib/ser/modules/mysql.so>: ld.so.1: ser: fatal: relocation error: file /usr/local/lib/ser/modules/mysql.so: symbol floor: referenced symbol not found Oct 20 15:50:42 wngds0je ser[556]: [ID 587890 daemon.crit] parse error (28,13-14): failed to load module Anybody have any suggestions why it could not find/load the mysql module? Thanks Dave --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

3 4

[Users] I cannot login
by Ronald Wiplinger 22 Oct '05

22 Oct '05

I tried sipsak: C:\Documents and Settings\user\My Documents\sipsak>sipsak-0.8.8.exe -U -C sip:80 0000(a)vpbx.elmit.com -a rest000 -s sip:800000@vpbx.elmit.com:5062 -Hvpbx.elmit.com warning: redirects are not expected in USRLOC. disableing request: REGISTER sip:vpbx.elmit.com:5062 SIP/2.0 Authorization: Digest username="800000", uri="sip:vpbx.elmit.com:5062", algorith m=MD5, realm="vpbx.elmit.com", nonce="435724cfa071bd7b4ef9bd25c01b4c5dc020aca3", response="62e960c0de81fa17af1e53a78156bb78" Via: SIP/2.0/UDP vpbx.elmit.com:3652;rport From: <sip:800000@vpbx.elmit.com:5062> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 1856953657(a)vpbx.elmit.com CSeq: 2 REGISTER Contact: sip:800000@vpbx.elmit.com Expires: 15 Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre response: SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP vpbx.elmit.com:3652;rport=3652;received=192.168.250.108 From: <sip:800000@vpbx.elmit.com:5062> To: <sip:800000@vpbx.elmit.com:5062>;tag=2560d490c3265ff35995c6bbde62a7c3.9f22 Call-ID: 1856953657(a)vpbx.elmit.com CSeq: 2 REGISTER WWW-Authenticate: Digest realm="vpbx.elmit.com", nonce="435724cfa071bd7b4ef9bd25 c01b4c5dc020aca3" Server: OpenSer (1.0.0-pre0 (x86_64/linux)) Content-Length: 0 Warning: 392 192.168.250.20:5062 "Noisy feedback tells: pid=22704 req_src_ip=19 2.168.250.108 req_src_port=3652 in_uri=sip:vpbx.elmit.com:5062 out_uri=sip:vpbx. elmit.com:5062 via_cnt==1" error: authorization failed request already contains (Proxy-) Authorization, but received 40[1|7], see above Another try without -U but with -vv C:\Documents and Settings\user\My Documents\sipsak>sipsak-0.8.8.exe -C sip:80000 0(a)vpbx.elmit.com -a rest000 -s sip:800000@vpbx.elmit.com:5062 -Hvpbx.elmit.com - vv New message with Via-Line: OPTIONS sip:800000@vpbx.elmit.com:5062 SIP/2.0 Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Contact: <sip:sipsak@vpbx.elmit.com:3731> Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre Accept: text/plain ** request ** OPTIONS sip:800000@vpbx.elmit.com:5062 SIP/2.0 Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062> Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Contact: <sip:sipsak@vpbx.elmit.com:3731> Content-Length: 0 Max-Forwards: 70 User-Agent: sipsak 0.8.9_pre Accept: text/plain message received: SIP/2.0 404 Not Found Via: SIP/2.0/UDP vpbx.elmit.com:3731;rport=3731;received=192.168.250.108 From: <sip:sipsak@vpbx.elmit.com:3731> To: <sip:800000@vpbx.elmit.com:5062>;tag=2560d490c3265ff35995c6bbde62a7c3.e6e1 Call-ID: 763778098(a)vpbx.elmit.com CSeq: 1 OPTIONS Server: OpenSer (1.0.0-pre0 (x86_64/linux)) Content-Length: 0 Warning: 392 192.168.250.20:5062 "Noisy feedback tells: pid=22702 req_src_ip=19 2.168.250.108 req_src_port=3731 in_uri=sip:800000@vpbx.elmit.com:5062 out_uri=si p:800000@vpbx.elmit.com:5062 via_cnt==1" ** reply received after 11.000 ms ** SIP/2.0 404 Not Found final received C:\Documents and Settings\user\My Documents\sipsak> Any ideas? bye Ronald Wiplinger

3 11

[Serusers] RE: PAID SUPPORT REQUIRED FOR SERWEB INSTALLATION
by Iddrisu 22 Oct '05

22 Oct '05

Paid support urgently required for serweb installation. Get back to me via my email address or phone Idris Ph : +61 893411156 Fx : +61 893411156 Mob:+61419822692 Email: iabdul(a)iinet.net.au -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/143 - Release Date: 19/10/2005

1 0

[Users] Beer on Wednesday 26th
by Atle Samuelsen 21 Oct '05

21 Oct '05

Hi Guys And Girls, Fellow Serusers, Greger and Me where thinking of trying to join the norwegian troops at Beer Palace on Aker Brygge at 5pm, Upcoming Wednesday. Anybody Intrested in Joining for a Beer or 5? Best Regards Atle

2 2

[Serusers] SER + MediaProxy Issues
by Hemant Patel (IP) 21 Oct '05

21 Oct '05

2 1

[Serusers] Radius client connection to remote RADIUS server failure
by Alan Baker 21 Oct '05

21 Oct '05

Can the "radiusclient-ng" client make a remote connection to a RADIUS server? Does the RADIUS server need to be running on the same box as SER Router for RADIUS client to work? It seems like the "radiusclient" SER Router uses can only make a successful connection to the RADIUS server via Localhost. I have searched around different mailing lists and noticed, I am faced with the same problem most people are having with the client. Is their a fix for this madness? Can someone post there working "radiusclient.conf". Please help. Thanks, Alan

1 0

[Serusers] Using the dialed number in a query
by Iqbal 21 Oct '05

21 Oct '05

Hi I cant seem to work out howto use the dialed number in a SQL query, is this possible, I just want the To Part pulled and used in a separate query. tks Iqbal

1 0

[Serusers] SQL Query and Accounting
by John, Paul 21 Oct '05

21 Oct '05

I'm having similar problems that you had. Can I have your ser.cfg and config.php file to see what I'm doing wrong? Paul

1 0

[Serusers] Ser stop responding requests when scanned with SiVuS
by Hoa Thai Duy 21 Oct '05

21 Oct '05

Hi all Yesterday, I downloaded and scanned my stable SER system (production), and it stoped responding to Subscriber requests. The Tool is at http://vopsecurity.org/sivus-1.09.exe, remember to have JRE installed on Windows. I deployed the configuration guideline at onsip, OpenSER 0.9.5 Anyone have tested the Security Scanner, pls. help Brgds Hoa

1 0

[Serusers] Serweb not displaying calls
by John, Paul 21 Oct '05

21 Oct '05

I have setup serweb-0-8-14 and use ser-0-8-12. I can login to the serweb without any problems, but it won't display any call accounting info. No errors are being reported in the logs. Also, my SER is not capturing any calls in the ACC table. I manually entered a call into ACC table to see if SERWEB would display it, but it wouldn't. My ser.cfg is attached. Any suggestions to make these work? Paul

2 1

[Serusers] Open source billing solution for SER (VoIP)
by Jithendranath 21 Oct '05

21 Oct '05

Hello experts, I was trying to set up a VoIP system with SER as my signalling proxy and was able to get lot of useful info from this mailing list. Thank you. I would like to know if there exists an open source billing solution which can fit seemlessly with SER and can handle realtime rating ( in a prepaid scenario). My initial study on this gave me the following link with a list of open source billing solutions. I would also like to know some reivews on these from experts like you. Since I have very less time to bring my project to life. http://www.voip-info.org/wiki/view/Open+Source+Billing+Systems Thanks a lot in advance. Regards, Jithu

2 1

Re: [Serusers] rewriting domain
by Samuel Osorio Calvo 21 Oct '05

21 Oct '05

In fact I would say it's not a stupid hardphone but one of the few that properly set the Contact to a domain name instead of an IP address. This has lots of advantages...I wish all of them use domain names. To solve it there are several approaches: 1) set use_domain to 0 in your SER config file, so only the user part of the URIs will be used to lookup, save, etc This way it does not matter wether the end-point sets in the domain part. This option is only possible if your SER serves only one domain. 2)I don't understand why you have configured SER and DNS to use domain.com and the UA to use sip.domain.com....why don't you change SER and DNS to use sip.domain.com or play with the configuration of the UA to use domain.com??? Hope it helps, Samuel Unclassified. >>> Maciej (B*winiarski <luzik(a)task.gda.pl> 10/21/05 08:21AM >>> i have stupid hardphone, proxy, registrer server is always domain :/ I have configured DNS and ser to use some domain.com as sip domain, but proxy have sip.mydomain.com addres. Registering is no problem because i can tell what domain ser should search but problem is for examplke with aliases i don't want write every time `serctl alias add user(a)domain.com` `serctl alias add user(a)sip.domain.com` if (uri=~".*sip\.my\.domain\.com") { rewritehost("my.somain.com"; } don't work becaus it rewrites requested uri i hope you get my point. Any one know how to solve this problem?

1 0

[Users] SIP Dialer Sending Many BYE Packets
by sagar 21 Oct '05

21 Oct '05

Hi All, I am using SER with Asterisk.Sipdialer works fine but when disconnecting the call dialer sends many BYE messages. Can any body help me please .Here is the SER screen I am getting 3(2544) Trying to register 4(2545) Trying to register 4(2545) Registered 3(2544) Trying to register 3(2544) Registered 4(2545) Trying to register 2(2542) Trying to register 3(2544) Trying to register 4(2545) Registered 2(2542) Registered 3(2544) Registered 1(2541) Trying to register 1(2541) Registered 3(2544) Warning: sl_send_reply: I won't send a reply for ACK!! 3(2544) Warning: sl_send_reply: I won't send a reply for ACK!! 4(2545) Warning: sl_send_reply: I won't send a reply for ACK!! 2(2542) Warning: sl_send_reply: I won't send a reply for ACK!! 4(2545) Warning: sl_send_reply: I won't send a reply for ACK!! 1(2541) Trying to register 3(2544) Trying to register 3(2544) Registered 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 1(2541) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 4(2545) Bye 2(2542) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) Bye 1(2541) ERROR: warning_builder: buffer size exceeded 1(2541) WARNING: warning skipped -- too big 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 2(2542) Bye 3(2544) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 1(2541) Bye 2(2542) Bye 4(2545) Bye 3(2544) Bye 2(2542) Bye Please tell me why it is happening. Thanks in advance. Sagar --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 1

[Serusers] information regarding stun documentation
by Muhammad Asif Fayyaz 21 Oct '05

21 Oct '05

I read that a sample stun server with client is written by iptel.org<http://iptel.org>with the name of mystun. Its written that it is the part of SER. But i could not find mystun on the iptel.org <http://iptel.org>. It is available on berlios site. I have also downloaded the SER from iptel.org<http://iptel.org>but stun was not there as part of SER. I have mystun code but could not find its code documentation. can any one tell me where an i get it. waiting for some guidence.

1 0

[Serusers] rewriting domain
by Maciej Świniarski 21 Oct '05

21 Oct '05

i have stupid hardphone, proxy, registrer server is always domain :/ I have configured DNS and ser to use some domain.com as sip domain, but proxy have sip.mydomain.com addres. Registering is no problem because i can tell what domain ser should search but problem is for examplke with aliases i don't want write every time `serctl alias add user(a)domain.com` `serctl alias add user(a)sip.domain.com` if (uri=~".*sip\.my\.domain\.com") { rewritehost("my.somain.com"; } don't work becaus it rewrites requested uri i hope you get my point. Any one know how to solve this problem?

1 0

[Serusers] acc+nat
by Maciej Świniarski 21 Oct '05

21 Oct '05

hi i have little problem with acc and nat becaus mysql records created with acc module contains ip behind nat. And yes, i use fix_nated_contact befor setting flag for acc module. Any one have some experience with this issue?

1 0

[Serusers] 180 do not forward:
by share phone 21 Oct '05

21 Oct '05

Hi All, when we receive 180 message do not forward any help on this i need to know how to change the received 180 and keep 100 on it. if (status =~"180") { sl_Send_reply("100","is trying") Regards, Karun --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

1 0

[Serusers] ip address instead of domain name in aliases table
by Eric 20 Oct '05

20 Oct '05

Greetings, I am somewhat baffled by a behavior in SER-0.9.4 where it adds records to the aliases table but the domain column contains the IP address instead of the domain name. I spent hours on the web site trying to find any solution on this issue with no success. Any guidance will be appreciated. Thanks Eric. --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 3

[Serusers] MySQL Problem
by gorand＠dvvti.com 20 Oct '05

20 Oct '05

I can not get MYSQL to Work. Can someone shed some light on what I am doing wrong. Thanks [root@testpbx root]# serctl add 17233 1723 xxx(a)abc.com MySql password: ERROR 1045: Access denied for user: 'serro@localhost' (Using password: YES) ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user to the database failed [root@testpbx root]# [root@testpbx root]# [root@testpbx root]# /usr/sbin/ser_mysql.sh create MySql password for root: creating database ser ... ERROR 1045: Access denied for user: 'root@localhost' (Using password: YES) [root@testpbx root]#

4 4

Re: [Serusers] MySQL Problem
by Andreas Granig 20 Oct '05

20 Oct '05

gorand(a)dvvti.com wrote: > root@testpbx root]# flush privileges > -bash: flush: command not found > [root@testpbx root]# > [root@testpbx root]# It's a mysql command. Can you login to mysql as root? Andy

1 0

[Serusers] Which database fields (table subscriber and aliases) are needed by ser?
by Frank Fischer 20 Oct '05

20 Oct '05

Hi all i'm planing to create a simple application interface to administer subscriber and alias data directly in the mysql db backend (i will use Andreas Granig's userloc-cl module). Looking at the mysql database that comes with ser, there seem to be a lot of fields in the subscriber and aliases table that are not needed by ser itself but only by serweb. Do i get this right? If so, is there any specification of the fields that are required by ser (incl. valid value range) so i know which fields i have to administer? Are there any fields needed by ser which i may not touch? If there is no such documentation, maybe someone knows and would be willing to place a few comments to the table listings below? Thanks a lot for your help! Kind regards Frank subscriber ------------------------ phplib_id username domain password first_name last_name phone email_address datetime_created datetime_modified confirmation flag sendnotification greeting ha1 ha1b allow_find timezone rpid domn uuid aliases ------------------------ username domain contact received expires q callid cseq last_modified replicate state flags user_agent

5 5

Re: [Serusers] Third party Registrations in SER proxies
by sandeep kamath 20 Oct '05

20 Oct '05

As a follow up question . Do we have a mechanism by which a SER proxy can get/pull information from another SER proxy about clients registered. Here is a scenario. I have deployed a SER proxy - "PROXY-A" to which a very large number of users are registered. I need to bring down PROXY-A for maintenance and replace it with PROXY-B but donot want the users to register again. Is there some way by which PROXY-B can pull the info out of PROXY-A so that the customers donot see this transition. Is it possible for a SER Proxy to fwd all the learnt registration information to a backend central registrar. If any call needs to be routed (eg: an invite message being received) the proxy can lookup the central registrar and route the call . thanks, sandeep > > On 10/20/05, sandeep kamath <sandyk76(a)gmail.com> wrote: > > > Hi, > > I had posted this query to the SIP implementors mailing list . So for > > those who have not read this let me summarise the problem. > > > > "I wanted to know if there is a mechanism where registration information > > could be shared among SIP proxies.wrt to SER . This is helpful in a farm > > that is being loadbalanced. > > > > The topology is a vserver that has two SER proxies S1 and S2 on UDP. > > > > A client 'A' sends a register request to the loadbalancer vip/vserver > > and the load balancer chooses a service S1 tied on the vip/vserver . The > > client is registered at the server S1. Now a new call comes for this client, > > hits the vip and the call hashes to the other service S2 bound to the vip. > > If S1 and S2 are not sharing the same DB or are not talking to the same > > registrar we will have a problem. " > > > > As a solution Dale R. Worley from pingtel suggested that A SIP registrar > > can actively duplicate its information into another SIP > > registrar by doing third-party REGISTERs to it > > . > > > > So my question is how do I set up this third party Registration > > mechanism in SER so that a client registers with one proxy and inturn the > > proxy transfers this registration info to other participating proxies? > > > > thanks, > > sandeep > > > > > > > > > > _______________________________________________ > > Serusers mailing list > > serusers(a)lists.iptel.org > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > >

1 0

[Serusers] failure_route problem
by Jaroslaw Gawron 20 Oct '05

20 Oct '05

Hello all I am using SER together with Asterisk as a voicemail server. When the user does not pick up the call for 15 s the SER is rewriting the url and forward it to the Asterisk t_on_reply("1"); t_on_failure("1"); if (!t_relay()) { if(isflagset(6)) { unforce_rtp_proxy(); } sl_reply_error(); }; failure_route[1]{ log(1,"!!!!!!!!!!! Timeout!!!!!!!!!!!!!!!!"); revert_uri(); rewritehostport("10.1.3.11:5061"); append_branch(); t_relay(); break(); } But my problem is that SER still rewrites the url and forwards it to asterisk even that the calling person has hung up. Does anyone know how to do it that SER will forward the call only in case of time out and will not forward when the caller hang up. Any help will be welcome. Best regards Jarek

2 1

[Serusers] Ser + Sems + Voicemail dont work
by Antonio Membrives 20 Oct '05

20 Oct '05

2 1

[Serusers] ser fifo
by Müller Thorsten 20 Oct '05

20 Oct '05

Hi all, is it possible to distinguish between messages coming out of a network and messages coming from the ser-fifo? I get SIP-messages from the fifo and I would like to treat them differently from messages of hte network in ser.cfg! Thanks Thorsten

1 0

[Serusers] ser-mysql-problem
by rupesh boyana 20 Oct '05

20 Oct '05

hello ser users, i am trying to insert mysql and authorisation modules in to ser. i want to control the user logins. after refering to the SER getting started document i have loaded mysql and auth etc.. modules in to the ser.cfg. then i tried creating the database 'ser' with 'subscriber' table and "username , domain , password" as fields. but when i used the command "serctl add 1000 password user1@nowhere" it is giving the following error "SER/FIFO not accessible: 2". then when i started SER , i got the following messages in /var/log Oct 20 16:57:30 localhost ser: WARNING: fix_socket_list: could not rev. resolve 192.168.1.247 Oct 20 16:57:30 localhost ser: WARNING: fix_socket_list: could not rev. resolve 192.168.1.247 Oct 20 16:57:30 localhost ser[7006]: Maxfwd module- initializing Oct 20 16:57:30 localhost ser[7007]: WARNING: no fifo_db_url given - fifo DB commands disabled! i am giving my ser.cfg file: #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@192.168.1.247/ser" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line #modparam("usrloc", "db_mode", 2) modparam("auth_db|uri_db|usrloc", "db_url", "mysql://ser:heslo@192.168.1.247/ser") # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") modparam("usrloc", "db_mode", 2) # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) #modparam("pa","default_expires",1800) #modparam("pa","timer_interval",10) #modparam("pa","use_db",0) #modparam("pa","use_place_table",0) #modparam("pa","use_bsearch",0) #modparam("pa","use_location_package",0) #modparam("pa","pa_domain","bigU.edu") # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { #rupesh code start if (method=="INVITE") { route(2); break; } else if (method=="REGISTER") { # Uncomment this if you want to use digest authentication sl_send_reply("100", "Trying"); if (!www_authorize("192.168.1.247", "subscriber")) { www_challenge("192.168.1.247", "0"); break; }; if (!check_to()) { sl_send_reply("401", "Unauthorized"); break; }; consume_credentials(); if(!save("location")) { sl_reply_error(); }; break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } route[2] { if(!proxy_authorize("192.168.1.247","subscriber")) { proxy_challenge("192.168.1.247","0"); break; } else if(!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(): lookup("aliases"); if(uri!=myself) route(1); break; }; if(!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; route(1); } hope some one can give me some guidance regarding the same, thank you, Rupesh

1 0

[Serusers] Does postgresql-8.0.4 compatible with ser-0.9.4?
by Chia Huey Lim 20 Oct '05

20 Oct '05

Hi list, Does postgresql-8.0.4 compatible with ser-0.9.4? Although /lib/ser/modules/postgres.so exists, I have got this error ERROR: load_module: could not open module </lib/ser/modules/postgres.so>: libpq.so.4: cannot open shared object file: No such file or directory Regards, Chia -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.12.4/143 - Release Date: 10/19/2005

2 1

[Users] Problems with ACC
by deviator deviator 20 Oct '05

20 Oct '05

I have Openser 0.9.5, works fine and i want to use acc debug=3 fork=yes log_stderror=no listen=212.XXX.XXX.XXX # This is where OpenSER installed port=5060 children=4 dns=no rev_dns=no fifo="/tmp/openser_fifo" fifo_db_url="mysql://openser:openserrw@localhost/openser" loadmodule "/usr/local/lib/openser/modules/mysql.so" loadmodule "/usr/local/lib/openser/modules/sl.so" loadmodule "/usr/local/lib/openser/modules/tm.so" loadmodule "/usr/local/lib/openser/modules/rr.so" loadmodule "/usr/local/lib/openser/modules/maxfwd.so" loadmodule "/usr/local/lib/openser/modules/usrloc.so" loadmodule "/usr/local/lib/openser/modules/registrar.so" loadmodule "/usr/local/lib/openser/modules/auth.so" loadmodule "/usr/local/lib/openser/modules/auth_db.so" loadmodule "/usr/local/lib/openser/modules/uri.so" loadmodule "/usr/local/lib/openser/modules/uri_db.so" loadmodule "/usr/local/lib/openser/modules/mediaproxy.so" loadmodule "/usr/local/lib/openser/modules/nathelper.so" loadmodule "/usr/local/lib/openser/modules/textops.so" loadmodule "/usr/local/lib/openser/modules/domain.so" loadmodule "/usr/local/lib/openser/modules/acc.so" modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("auth_db", "use_domain", 1) modparam("domain", "db_mode", 1) modparam("nathelper", "rtpproxy_disable", 1) modparam("nathelper", "natping_interval", 180) modparam("mediaproxy","natping_interval", 30) modparam("mediaproxy","mediaproxy_socket", "/var/run/mediaproxy.sock") modparam("mediaproxy","sip_asymmetrics","/usr/local/etc/openser/sip-asymmetric-clients") modparam("mediaproxy","rtp_asymmetrics","/usr/local/etc/openser/rtp-asymmetric-clients") modparam("usrloc", "db_mode", 2) modparam("usrloc", "use_domain", 1) modparam("registrar", "default_expires", 60) modparam("registrar", "min_expires", 30) modparam("registrar", "nat_flag", 6) modparam("registrar", "use_domain", 1) modparam("rr", "enable_full_lr", 1) modparam("acc", "db_url", "mysql://openser:openserrw@localhost/openser") modparam("acc", "failed_transactions", 1) modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "db_flag", 1) --------------------- on starting i receive 2 errors: (15583) set_mod_param_regex: parameter <db_flag> not found in module <acc> (15583) parse error (59,19-20): Can't set module parameter (15583) set_mod_param_regex: parameter <db_url> not found in module <acc> (15583) parse error (60,20-21): Can't set module parameter ERROR: bad config file (2 errors) pls help me, what i'm doing wrong ????

2 1

[Serusers] Third party Registrations in SER proxies
by sandeep kamath 20 Oct '05

20 Oct '05

Hi, I had posted this query to the SIP implementors mailing list . So for those who have not read this let me summarise the problem. "I wanted to know if there is a mechanism where registration information could be shared among SIP proxies.wrt to SER . This is helpful in a farm that is being loadbalanced. The topology is a vserver that has two SER proxies S1 and S2 on UDP. A client 'A' sends a register request to the loadbalancer vip/vserver and the load balancer chooses a service S1 tied on the vip/vserver . The client is registered at the server S1. Now a new call comes for this client, hits the vip and the call hashes to the other service S2 bound to the vip. If S1 and S2 are not sharing the same DB or are not talking to the same registrar we will have a problem. " As a solution Dale R. Worley from pingtel suggested that A SIP registrar can actively duplicate its information into another SIP registrar by doing third-party REGISTERs to it . So my question is how do I set up this third party Registration mechanism in SER so that a client registers with one proxy and inturn the proxy transfers this registration info to other participating proxies? thanks, sandeep

1 0

[Users] Persistently storing headers from onreply_route()?
by Joachim Fabini 20 Oct '05

20 Oct '05

Hi again, Having solved the previous topic using Bogdan's hint I stumbled straight into a new problem. Is there a workaround for not being able to use the avp-ops from onreply_route? Some details on the reason: We implement the Service- Route extension according to RFC 3608. The registrar returns in the 200OK a ServiceRoute header where all proxies on the (return) path register themselves. The last proxy (that forwards the 200 OK to the UA) is supposed to store the ServiceRoute locally. Our plan was straight-forward: to store the header field's content via avp-ops from within the onreply_route. Unfortunately avp-ops are not available in onreply_route - Bogdan explains the reason why in <http://www.archivum.info/serdev%40iptel.org/2005-02/msg00274.html> Is there a specific reason why the access to the avp list is not synchronized? Performance? Basically, provided a good description of the implementation and concept, imho it could be left to users to restrict themselves to have avpops writes in only in their onreply_routes for a specific avp pair. Or, provide synchronized avps? So, does anyone have an idea how we can: - Store an AVP containing header fields extracted from a 200 OK message - Retrieve this AVP on incoming invites in order to place these values into the message (security check and/or Route enforcement). Thanks in advance, best regards --Joachim

2 6

[Users] Newbie
by Glenn MacGregor 20 Oct '05

20 Oct '05

Hi All, I have just installed openser 0.9.5 I have connected in a simple test case. Now I am trying to implement the nathelper an I can no longer login with my sip client. My openser box is not behind a firewall, but the clients I am using are. I copies the config file for nat+rtpproxy from onsip.org. It starts fine and sees rtpproxy, but when I try to login I get check_response(): Our result = '62ae83e04a67107edf9981943597e4c2' 0(8432) check_response(): Authorization is OK 0(8432) check_username(): Digest username and URI username do NOT match 0(8432) parse_headers: flags=-1 I have tried everything I can think of to solve this problem, No luck. Any help would be great! Thanks Glenn Glenn MacGregor HighStreet Networks ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/

2 1

Re: [Serusers] AVPS NEED HELP!
by Pol Novell Balcells 20 Oct '05

20 Oct '05

> What i want to do is to overwrite TO header from his numeric alias, > for example. > if i call to user.user(a)mydomain.com i wannt to forward this call to > asterisk changing to header from his alias -> 12341(a)mydomain.com > because asterisk is expected to read user part from sip call and > check voicemail. > > Is any other way to acomplish it? > Regards. > > >> >> Okay... first things first. While there is a LITTLE flexibility, >> AVPops >> actually relies heavily on the FORMAT of the table you want to >> load/store data >> from. For this reason, the alias table isn't really the best thing >> to grab >> from. You COULD specify the attribute and value columns and such >> manually... >> but it would be a right pain in the ass, I can tell you that. >> >> >> What EXACTLY are you trying to do? Perhaps there's another way to >> go about it. >> >> N. >> >> On Wed, 19 Oct 2005 23:50:10, pol novell balcells wrote >> >> >>> Hi SerUsers! >>> I'm completly crazy tryin' to do the following: >>> I just want to load from DB user alias and rewrite it into "$to >>> $ruri", because these calls shoud go directly to asterisk >>> voicemail >>> and they are numerical not alphanumeric. >>> i tried to do the following: >>> >>> if(avp_db_load($alias/$username,i:alias") >>> avp_pushto("$ruri/$to","alias") >>> just to load from alias table username into an integer called alias >>> and then pushed to new $ruri. >>> >>> I'm new in ser and avps module it's really usefull but a little bit >>> "unreadable", plz this should work for tomorrow :$ any help >>> plz!? >>> be as much especific as can, because i don't know if i have done >>> the >>> proper modparams. >>> these are: >>> >>> modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ >>> ser") >>> modparam("avpops", "avp_table", "usr_preferences") >>> #modparam("avpops", "use_domain", "1") >>> modparam("avpops", "uuid_column", "uuid") >>> modparam("avpops", "username_column", "username") >>> modparam("avpops", "domain_column", "domain") >>> modparam("avpops", "attribute_column", "attribute") >>> modparam("avpops", "value_column", "value") >>> modparam("avpops", "type_column", "type") >>> >>> THX >>> >>> ____________________________________________________________________ >>> _ >>> Mensaje analizado y protegido, tecnologia antivirus >>> www.trendmicro.es >>> >>> _______________________________________________ >>> Serusers mailing list >>> serusers(a)lists.iptel.org >>> http://lists.iptel.org/mailman/listinfo/serusers >>> >>> >> >> >> _____________________________________________________________________ >> Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es >> >> > > _____________________________________________________________________ Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es

1 0

[Serusers] call drops after about 30 seconds
by Fernando Schmitt 20 Oct '05

20 Oct '05

Check if the both endpoints are receiving the packets properly and also, if your billing system is working properly. Some bad formed packets may result in call drop. Fernando Schmitt -----Original Message----- From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of serusers-request(a)lists.iptel.org Sent: quarta-feira, 19 de outubro de 2005 08:00 To: serusers(a)lists.iptel.org Subject: Serusers Digest, Vol 30, Issue 19 Send Serusers mailing list submissions to serusers(a)lists.iptel.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.iptel.org/mailman/listinfo/serusers or, via email, send a message with subject or body 'help' to serusers-request(a)lists.iptel.org You can reach the person managing the list at serusers-owner(a)lists.iptel.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Serusers digest..." Today's Topics: 1. Re: mangling request URI according to To: and userlocation value (Francesco Fondelli) 2. call drops after about 30 seconds (maka) 3. 423 message for Register Expires (share phone) 4. SIP Dialer Sending Many BYE Packets (sagar) 5. Re: [OT] MAX TNT as a Media Gateway (Vamsi Pottangi) 6. Can I send Binary Data through SIP IM? (Abhijit A. Mahajani) 7. How many BHCC? (Matteo Piazza) ---------------------------------------------------------------------- Message: 1 Date: Tue, 18 Oct 2005 14:11:11 +0200 From: Francesco Fondelli <francesco.fondelli(a)gmail.com> Subject: [Serusers] Re: mangling request URI according to To: and userlocation value To: serusers(a)lists.iptel.org Message-ID: <4354E65F.5030601(a)gmail.com> Content-Type: text/plain; charset=us-ascii; format=flowed > and assume that entry in userloc has a "Server: Bar 1.0 PBX" value sorry, here I meant the "User-Agent: 'Bar 1.0 PBX'" entry. thank you very much Ciao FF ------------------------------ Message: 2 Date: Tue, 18 Oct 2005 15:32:30 +0300 From: maka <icokan(a)gmail.com> Subject: [Serusers] call drops after about 30 seconds To: SER <serusers(a)lists.iptel.org> Message-ID: <826761540510180532v4683e151x2a9a6ba209f1061d(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" hello everyone, I am using ser-0.9.0 together wit asterisk-1.0.6. I am testing it with a couple of hardware AT-320 IP phones from Atcom, using a PA168S chip. They seem to be working fine, with stun behind nat, and they can call other user-agents (softphones, asterisk adn the pstn through it), but whenever I make a call between the two phones, everytime the call is dropped after about 34 seconds, even when calling between phones on Public IP addresses. I am actually clueless why this happens, I tried changing the NAT ttl value, bu to no effect, and it is not supposed to be a codec mismatch too since both phones use absolutely the same codecs, in the same order of preference. Appreciate the feedback, cheers -- I'm sick and tired of being sick and tired...

1 0

[Serusers] AVPS NEED HELP!
by pol novell balcells 20 Oct '05

20 Oct '05

Hi SerUsers! I'm completly crazy tryin' to do the following: I just want to load from DB user alias and rewrite it into "$to $ruri", because these calls shoud go directly to asterisk voicemail and they are numerical not alphanumeric. i tried to do the following: if(avp_db_load($alias/$username,i:alias") avp_pushto("$ruri/$to","alias") just to load from alias table username into an integer called alias and then pushed to new $ruri. I'm new in ser and avps module it's really usefull but a little bit "unreadable", plz this should work for tomorrow :$ any help plz!? be as much especific as can, because i don't know if i have done the proper modparams. these are: modparam("avpops", "avp_url", "mysql://ser:heslo@localhost/ ser") modparam("avpops", "avp_table", "usr_preferences") #modparam("avpops", "use_domain", "1") modparam("avpops", "uuid_column", "uuid") modparam("avpops", "username_column", "username") modparam("avpops", "domain_column", "domain") modparam("avpops", "attribute_column", "attribute") modparam("avpops", "value_column", "value") modparam("avpops", "type_column", "type") THX _____________________________________________________________________ Mensaje analizado y protegido, tecnologia antivirus www.trendmicro.es

2 1

[Users] Re: group_radius radius_is_user_in
by Tavis P 19 Oct '05

19 Oct '05

Sorry, i always tend to think more than i write/talk What i meant was that you can pass the necessary information during the authentication using the auth_radius module or during feature request using the avp_radius depending on what you are trying to do with the feature Lenir wrote: >I will try that as a workaround. > >For the SER-DEVEL and OPENSER-DEVEL guys...can any of you comment on this? > >Thanks > >-----Original Message----- >From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >Sent: Wednesday, October 19, 2005 4:40 PM >To: Lenir >Cc: users(a)openser.org; serusers(a)iptel.org >Subject: Re: group_radius radius_is_user_in > >I've never used the group_radius module so i'm not certain what it >expects from the radius server (its not well documented currently) > >Although you may be able to optimize a bit and skip the >radius_is_user_in function call and simply pass the users group back as >an SIP-AVP attribute in the radreply table, and then check for that AVP >in the OpenSER script > >What i've done is commented the group checking SQL from the freeradius >sql.conf file so that when a user authenticates or when an avp_radius >call is made only 2 SQL queries are sent, instead of the 4-5 used when >group check is enabled. > >Try this, it should work and it will save you ~10 sql queries and a >radius request/response > > >Lenir wrote: > > > >>I'm trying to use group_radius module to check if the user is in a >>particular radius group. I'm calling radius_is_user_in function to do this. >>Here is the snippet in my config that calls that function: >> >>route[2] { >> >> # ----------------------------------------------------------------- >> # REGISTER Message Handler >> # ---------------------------------------------------------------- >> sl_send_reply("100", "Trying"); >> >> if (!radius_www_authorize("")) { >> xlog("L_INFO","$ci - $fu - User not authenticated, Radius >>Authenticating...\n"); >> www_challenge("","0"); >> return; >> } else { >> xlog("L_INFO","$ci - $fu - User authenticated...\n"); >> }; >> >> if (radius_is_user_in("From", "Dialin")){ >> xlog("L_INFO","From: User is in Radius Group >> >> >Dialin!!!!\n"); > > >> } else { >> xlog("L_INFO","From: User *IS NOT* Group Dialin!!!!!\n"); >> }; >> >> if (radius_is_user_in("From", "Dialin2")){ >> xlog("L_INFO","From: User is in Radius Group >>Dialin2!!!!\n"); >> } else { >> xlog("L_INFO","From: User *IS NOT* Group Dialin2!!!!!\n"); >> }; >> >> #if (!radius_check_to()) { >> # sl_send_reply("401", "Unauthorized"); >> # return; >> #}; >> >> consume_credentials(); >> >> if (!save("location")) { >> sl_reply_error(); >> }; >>} >> >> >>-----Original Message----- >>From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >>Sent: Wednesday, October 19, 2005 3:59 PM >>To: Lenir >>Cc: users(a)openser.org; serusers(a)iptel.org >>Subject: Re: group_radius radius_is_user_in >> >>Well either way the radius server is going to respond with an >>"Access-Accept" because you have set the auth-type to "none" (which is >>necessary because you are not authenticating and can not provide the >>necessary credentials). >> >>>From the trace you showed me below, i see two radius requests both for >>the user 1000 and both of which respond as i would expect. >> >>I'm not what you are trying to accomplish, are you using the >>group_radius module or just loading the group information using avp_radius? >> >> >>Lenir wrote: >> >> >> >> >> >>>This is my users file: >>> >>>DEFAULT Auth-Type = System >>> Fall-Through = 1 >>> >>>DEFAULT Service-Type == Call-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >>> >>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >>> >>> >>>mysql> select * from radcheck; >>>+----+----------+-----------+----+----------+ >>>| id | UserName | Attribute | op | Value | >>>+----+----------+-----------+----+----------+ >>>| 1 | Jhassell | Password | == | changeme | >>>| 2 | Rneis | Password | == | changeme | >>>| 3 | 1000 | Password | == | 1000 | >>>| 4 | 2000 | Password | == | 2000 | >>>| 5 | 3000 | Password | == | 3000 | >>>+----+----------+-----------+----+----------+ >>>5 rows in set (0.00 sec) >>> >>>mysql> select * from radreply; >>>Empty set (0.00 sec) >>> >>>mysql> select * from usergroup; >>>+----+----------+------------+ >>>| id | UserName | GroupName | >>>+----+----------+------------+ >>>| 1 | Jhassell | Dialin | >>>| 2 | Rneis | Staticdial | >>>| 3 | 1000 | Dialin | >>>| 4 | 2000 | Dialin | >>>| 5 | 3000 | Dialin | >>>| 6 | 3000 | Dialin2 | >>>+----+----------+------------+ >>>6 rows in set (0.00 sec) >>> >>>mysql> select * from radgroupcheck; >>>Empty set (0.00 sec) >>> >>>mysql> select * from radgroupreply; >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>---+ >>>| id | GroupName | Attribute | op | Value | >>>prio | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >>>0 | >>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >>>0 | >>>| 3 | Dialin | SIP-AVP | = | Sip-Group:Dialin | >>>0 | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>3 rows in set (0.00 sec) >>> >>>mysql> select * from radpostauth; >>>Empty set (0.00 sec) >>> >>> >>> >>>Here's the debug, notice how it returns access-accept whether its in the >>>right group or not. Shouldn't it return access-reject for group Dialin2? >>>----------------- >>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=152, >>>length=66 >>> User-Name = "1000(a)xx.xx.xx.xx" >>> Sip-Group = "Dialin" >>> Service-Type = Group-Check >>> NAS-IP-Address = 127.0.0.1 >>> NAS-Port = 0 >>>Processing the authorize section of radiusd.conf >>>modcall: entering group authorize for request 4 >>>modcall[authorize]: module "preprocess" returns ok for request 4 >>>modcall[authorize]: module "chap" returns noop for request 4 >>>modcall[authorize]: module "mschap" returns noop for request 4 >>>modcall[authorize]: module "digest" returns noop for request 4 >>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>"1000(a)xx.xx.xx.xx" >>> rlm_realm: Found realm "xx.xx.xx.xx" >>> rlm_realm: Adding Stripped-User-Name = "1000" >>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>> rlm_realm: Authentication realm is LOCAL. >>>modcall[authorize]: module "suffix" returns noop for request 4 >>>rlm_eap: No EAP-Message, not doing EAP >>>modcall[authorize]: module "eap" returns noop for request 4 >>> users: Matched entry DEFAULT at line 156 >>> users: Matched entry DEFAULT at line 161 >>>modcall[authorize]: module "files" returns ok for request 4 >>>radius_xlat: '1000' >>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radcheck WHERE Username = '1000' ORDER BY id' >>>rlm_sql (sql): Reserving sql socket id: 0 >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radcheck WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radreply WHERE Username = '1000' ORDER BY id' >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radreply WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Checking profile DEFAULT >>>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Released sql socket id: 0 >>>modcall[authorize]: module "sql" returns ok for request 4 >>>modcall: group authorize returns ok for request 4 >>>rad_check_password: Found Auth-Type None >>>rad_check_password: Auth-Type = Accept, accepting the user >>>radius_xlat: 'Authenticated by group Dialin' >>>Sending Access-Accept of id 152 to xx.xx.xx.xx:33167 >>> Reply-Message = "Authenticated by group Dialin" >>> SIP-AVP = "Sip-Group:Dialin" >>>Finished request 4 >>>Going to the next request >>>Waking up in 6 seconds... >>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=153, >>>length=67 >>> User-Name = "1000(a)xx.xx.xx.xx" >>> Sip-Group = "Dialin2" >>> Service-Type = Group-Check >>> NAS-IP-Address = 127.0.0.1 >>> NAS-Port = 0 >>>Processing the authorize section of radiusd.conf >>>modcall: entering group authorize for request 5 >>>modcall[authorize]: module "preprocess" returns ok for request 5 >>>modcall[authorize]: module "chap" returns noop for request 5 >>>modcall[authorize]: module "mschap" returns noop for request 5 >>>modcall[authorize]: module "digest" returns noop for request 5 >>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>"1000(a)xx.xx.xx.xx" >>> rlm_realm: Found realm "xx.xx.xx.xx" >>> rlm_realm: Adding Stripped-User-Name = "1000" >>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>> rlm_realm: Authentication realm is LOCAL. >>>modcall[authorize]: module "suffix" returns noop for request 5 >>>rlm_eap: No EAP-Message, not doing EAP >>>modcall[authorize]: module "eap" returns noop for request 5 >>> users: Matched entry DEFAULT at line 156 >>> users: Matched entry DEFAULT at line 161 >>>modcall[authorize]: module "files" returns ok for request 5 >>>radius_xlat: '1000' >>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radcheck WHERE Username = '1000' ORDER BY id' >>>rlm_sql (sql): Reserving sql socket id: 4 >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radcheck WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>>radreply WHERE Username = '1000' ORDER BY id' >>>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >>> >>> >>> >>> >>>FROM radreply WHERE Username = '1000' ORDER BY id >> >> >> >> >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = '1000' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Checking profile DEFAULT >>>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>>radius_xlat: 'SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupc >>> >>> >h > > >>> >>> >>> >>> >>e >> >> >> >> >>>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>>radius_xlat: 'SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id' >>>rlm_sql_mysql: query: SELECT >>>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupr >>> >>> >e > > >>> >>> >>> >>> >>p >> >> >> >> >>>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>>radgroupreply.GroupName ORDER BY radgroupreply.id >>>rlm_sql (sql): Released sql socket id: 4 >>>modcall[authorize]: module "sql" returns ok for request 5 >>>modcall: group authorize returns ok for request 5 >>>rad_check_password: Found Auth-Type None >>>rad_check_password: Auth-Type = Accept, accepting the user >>>radius_xlat: 'Authenticated by group Dialin' >>>Sending Access-Accept of id 153 to xx.xx.xx.xx:33167 >>> Reply-Message = "Authenticated by group Dialin" >>> SIP-AVP = "Sip-Group:Dialin" >>>Finished request 5 >>> >>>-----Original Message----- >>>From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >>>Sent: Friday, October 14, 2005 7:21 PM >>>To: Lenir >>>Cc: users(a)openser.org; serusers(a)iptel.org >>>Subject: Re: group_radius radius_is_user_in >>> >>>Ugh the subject line is getting really munged up ;P >>> >>>Hmmm, what does the output from "radiusd -X" look like for the exchange? >>> >>> >>>Lenir wrote: >>> >>> >>> >>> >>> >>> >>> >>>>Tavis, >>>> >>>>Thanks for your input, that did fix the problem. I did have the "files" >>>>before "sql" in radiusd.conf. Also I followed your advice about taking >>>> >>>> >out > > >>>>"Auth-Type" out of mysql table and let DEFAULT in users file do the >>>> >>>> >trick. > > >>>> >>>> >>>> >>>> >> >> >> >> >>>>However it's semi-working. >>>> >>>>Accourding to the snippet from my ser.cfg file, now I get the following >>>> >>>> >in > > >>>>stderr: >>>>0(4866) 000d2890-d47f0003-4a230347-53c6189b(a)yy.yy.yy.yy - >>>>sip:1000@xx.xx.xx.xx - User authenticated... >>>>0(4866) Credentials: User is in Radius Group Dialin!!!! >>>>0(4866) Credentials: User is in Radius Group Dialin2!!!! >>>> >>>>No matter which parameter I use for the function radius_is_user_in(), it >>>>always returns TRUE. When in fact it should return FALSE for Group >>>> >>>> >>>> >>>> >>Dialin2. >> >> >> >> >>>>I've tried: >>>> >>>>if (radius_is_user_in("From", "Dialin2")){... >>>>if (radius_is_user_in("Credentials", "Dialin2")){... >>>> >>>> >>>> >>>> >>>> >>>>Here's what I did to fix future problems: >>>> >>>>EFAULT Auth-Type = System >>>> Fall-Through = 1 >>>> >>>>DEFAULT Service-Type == Call-Check, Auth-Type := Digest >>>> >>>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>>> >>>>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >>>> >>>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>>> >>>>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >>>> >>>> >>>>Also, for those of you using the latest version of freeradius, you may >>>> >>>> >>>> >>>> >>have >> >> >> >> >>>>to comment out the following lines as they conflict with dictionary.ser >>>> >>>> >>>> >>>> >>>> >>>> >>>(SER >>> >>> >>> >>> >>> >>> >>>>CVS) and dictionary.sip (comes with radiusclient-NG) >>>> >>>>#VALUE Service-Type Voice 12 >>>>#VALUE Service-Type Fax 13 >>>>#VALUE Service-Type Modem-Relay 14 >>>>#VALUE Service-Type IAPP-Register 15 >>>>#VALUE Service-Type IAPP-AP-Check 16 >>>> >>>> >>>>Thanks, >>>> >>>> >>>>Lenir >>>> >>>> >>>>-----Original Message----- >>>>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On >>>>Behalf Of Tavis P >>>>Sent: Friday, October 14, 2005 1:49 PM >>>>To: lsantiago(a)globalgatewaycom.com >>>>Cc: serdev(a)iptel.org; serusers(a)iptel.org; devel(a)openser.org; >>>>users(a)openser.org >>>>Subject: [Serusers] Re: [Serdev] group_radius radius_is_user_in >>>> >>>>Oops, i spoke too soon >>>> >>>>It looks like you have placed the "files" module before the "sql" module >>>>in your radiusd.conf >>>> >>>>Its matching your DEFAULT entry in files (setting the Auth-Type to none) >>>>but the sql module is later changing the Auth-Type to "digest" >>>> >>>>Changing the order would solve this problem, as you want it to match the >>>>SQL statement first and than the section in the files last (which >>>>changes the Auth-Type) >>>> >>>>Also, you may want to reduce the load on your database by not setting >>>>the Auth-Type in the database and instead setting in the users file with >>>>a DEFAULT statement as (at least in my case) it isn't somthing that need >>>>to be dynamic. >>>> >>>>lenirsantiago(a)yahoo.com wrote: >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>Hello list, >>>>> >>>>>I've been trying my hardest today to get group_radius to work, and its >>>>>function radius_is_user_in(). >>>>>I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>digest >>> >>> >>> >>> >>> >>> >>>>>authentication. >>>>> >>>>>Radius authentication works fine. >>>>>The problem is that when radius_is_user_in() function gets called, it >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>sends >>> >>> >>> >>> >>> >>> >>>>>a radius message but without the User-Password field and freeradius >>>>>complains that it requires it since we are using Digest. >>>>>I've seen a couple of posts here, but they were never answered: >>>>>http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >>>>>http://mail.iptel.org/pipermail/serusers/2005-March/017075.html >>>>> >>>>>----- >>>>>I have a small test in my ser.cfg file: >>>>> if (!radius_www_authorize("")) { >>>>> xlog("L_I","%ci - %fu - User not authenticated, Radius >>>>>Authenticating...\n"); >>>>> www_challenge("","0"); >>>>> break; >>>>> } else { >>>>> xlog("L_I","%ci - %fu - User authenticated...\n"); >>>>> }; >>>>> >>>>> if (radius_is_user_in("From", "Dialin")){ >>>>> xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); >>>>> } else { >>>>> xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); >>>>> }; >>>>> >>>>> if (radius_is_user_in("Credentials", "Dialin2")){ >>>>> xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); >>>>> } else { >>>>> xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); >>>>> }; >>>>> >>>>>----- >>>>>In /etc/raddb/users file I have the following at line 152: >>>>>DEFAULT Auth-Type = System >>>>> Fall-Through = 1 >>>>> >>>>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>>>> >>>>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>>>> >>>>>----- >>>>> >>>>>These are mysql tables: >>>>> >>>>>+----+----------+-----------+----+----------+ >>>>>| id | UserName | Attribute | op | Value | >>>>>+----+----------+-----------+----+----------+ >>>>>| 1 | Jhassell | Password | == | changeme | >>>>>| 2 | Rneis | Password | == | changeme | >>>>>| 3 | 1000 | Password | == | 1000 | >>>>>| 4 | 2000 | Password | == | 2000 | >>>>>| 5 | 3000 | Password | == | 3000 | >>>>>| 8 | 1000 | Auth-Type | := | Digest | >>>>>+----+----------+-----------+----+----------+ >>>>> >>>>>+----+-----------+-----------+----+--------+ >>>>>| id | GroupName | Attribute | op | Value | >>>>>+----+-----------+-----------+----+--------+ >>>>>| 6 | Dialin | Auth-Type | := | Accept | >>>>>+----+-----------+-----------+----+--------+ >>>>> >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>>| id | GroupName | Attribute | op | Value >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>prio | >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>0 | >>>>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" >>>>> >>>>> >>>>> >>>>> >>| >> >> >> >> >>>>>0 | >>>>>+----+-----------+---------------+----+--------------------------------- >>>>> >>>>> >- > > >>>>> >>>>> >>>>> >>>>> >>+ >> >> >> >> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>- >>> >>> >>> >>> >>> >>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>----+ >>>>> >>>>>+----+----------+---------------+----+------------------+ >>>>>| id | UserName | Attribute | op | Value | >>>>>+----+----------+---------------+----+------------------+ >>>>>| 1 | 1000 | Reply-Message | = | "Authenticated" | >>>>>| 2 | 1000 | Sip-Group | = | Dialin | >>>>>| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >>>>>+----+----------+---------------+----+------------------+ >>>>> >>>>>+----+----------+------------+ >>>>>| id | UserName | GroupName | >>>>>+----+----------+------------+ >>>>>| 1 | Jhassell | Dialin | >>>>>| 2 | Rneis | Staticdial | >>>>>| 3 | 1000 | Dialin | >>>>>| 4 | 2000 | Dialin | >>>>>| 5 | 3000 | Dialin | >>>>>| 6 | 3000 | Dialin2 | >>>>>+----+----------+------------+ >>>>> >>>>>------ >>>>> >>>>>This is the debug I get from freeradius for the group check: >>>>> >>>>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >>>>>length=67 >>>>> User-Name = "1000(a)xx.xx.xx.xx" >>>>> Sip-Group = "Dialin2" >>>>> Service-Type = Group-Check >>>>> NAS-IP-Address = 127.0.0.1 >>>>> NAS-Port = 0 >>>>>Processing the authorize section of radiusd.conf >>>>>modcall: entering group authorize for request 74 >>>>>modcall[authorize]: module "preprocess" returns ok for request 74 >>>>>modcall[authorize]: module "chap" returns noop for request 74 >>>>>modcall[authorize]: module "mschap" returns noop for request 74 >>>>>modcall[authorize]: module "digest" returns noop for request 74 >>>>>rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>>>"1000(a)xx.xx.xx.xx" >>>>>rlm_realm: Found realm "xx.xx.xx.xx" >>>>>rlm_realm: Adding Stripped-User-Name = "1000" >>>>>rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>>>>rlm_realm: Adding Realm = "xx.xx.xx.xx" >>>>>rlm_realm: Authentication realm is LOCAL. >>>>>modcall[authorize]: module "suffix" returns noop for request 74 >>>>>rlm_eap: No EAP-Message, not doing EAP >>>>>modcall[authorize]: module "eap" returns noop for request 74 >>>>>users: Matched entry DEFAULT at line 152 >>>>>users: Matched entry DEFAULT at line 158 >>>>>modcall[authorize]: module "files" returns ok for request 74 >>>>>radius_xlat: '1000' >>>>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>>>rlm_sql (sql): Released sql socket id: 0 >>>>>modcall[authorize]: module "sql" returns ok for request 74 >>>>>modcall: group authorize returns ok for request 74 >>>>>rad_check_password: Found Auth-Type Digest >>>>>auth: type "digest" >>>>>Processing the authenticate section of radiusd.conf >>>>>modcall: entering group authenticate for request 74 >>>>>ERROR: No Digest-Nonce: Cannot perform Digest authentication >>>>>modcall[authenticate]: module "digest" returns invalid for request 74 >>>>>modcall: group authenticate returns invalid for request 74 >>>>>auth: Failed to validate the user. >>>>>Delaying request 74 for 1 seconds >>>>>Finished request 74 >>>>>Going to the next request >>>>>--- Walking the entire request list --- >>>>>Waking up in 1 seconds... >>>>>--- Walking the entire request list --- >>>>>Waking up in 1 seconds... >>>>>--- Walking the entire request list --- >>>>>Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 >>>>> Reply-Message = "Authenticated" >>>>>Waking up in 4 seconds... >>>>>--- Walking the entire request list --- >>>>>Cleaning up request 74 ID 15 with timestamp 434f1121 >>>>>Nothing to do. Sleeping until we see a request. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>Any help in this matter would be deeply appreciated, >>>>> >>>>> >>>>> >>>>> >>>>>Lenir >>>>> >>>>> >>>>> >>>>> >>>>>_______________________________________________ >>>>>Serdev mailing list >>>>>Serdev(a)iptel.org >>>>>http://mail.iptel.org/mailman/listinfo/serdev >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>_______________________________________________ >>>>Serusers mailing list >>>>Serusers(a)iptel.org >>>>http://mail.iptel.org/mailman/listinfo/serusers >>>> >>>> >>>>_______________________________________________ >>>>Serdev mailing list >>>>Serdev(a)iptel.org >>>>http://mail.iptel.org/mailman/listinfo/serdev >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >>> >>> >>> >> >> >> >> >> >> > > > > > >

1 0

[Users] Re: group_radius radius_is_user_in
by Tavis P 19 Oct '05

19 Oct '05

I've never used the group_radius module so i'm not certain what it expects from the radius server (its not well documented currently) Although you may be able to optimize a bit and skip the radius_is_user_in function call and simply pass the users group back as an SIP-AVP attribute in the radreply table, and then check for that AVP in the OpenSER script What i've done is commented the group checking SQL from the freeradius sql.conf file so that when a user authenticates or when an avp_radius call is made only 2 SQL queries are sent, instead of the 4-5 used when group check is enabled. Try this, it should work and it will save you ~10 sql queries and a radius request/response Lenir wrote: >I'm trying to use group_radius module to check if the user is in a >particular radius group. I'm calling radius_is_user_in function to do this. >Here is the snippet in my config that calls that function: > >route[2] { > > # ----------------------------------------------------------------- > # REGISTER Message Handler > # ---------------------------------------------------------------- > sl_send_reply("100", "Trying"); > > if (!radius_www_authorize("")) { > xlog("L_INFO","$ci - $fu - User not authenticated, Radius >Authenticating...\n"); > www_challenge("","0"); > return; > } else { > xlog("L_INFO","$ci - $fu - User authenticated...\n"); > }; > > if (radius_is_user_in("From", "Dialin")){ > xlog("L_INFO","From: User is in Radius Group Dialin!!!!\n"); > } else { > xlog("L_INFO","From: User *IS NOT* Group Dialin!!!!!\n"); > }; > > if (radius_is_user_in("From", "Dialin2")){ > xlog("L_INFO","From: User is in Radius Group >Dialin2!!!!\n"); > } else { > xlog("L_INFO","From: User *IS NOT* Group Dialin2!!!!!\n"); > }; > > #if (!radius_check_to()) { > # sl_send_reply("401", "Unauthorized"); > # return; > #}; > > consume_credentials(); > > if (!save("location")) { > sl_reply_error(); > }; >} > > >-----Original Message----- >From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >Sent: Wednesday, October 19, 2005 3:59 PM >To: Lenir >Cc: users(a)openser.org; serusers(a)iptel.org >Subject: Re: group_radius radius_is_user_in > >Well either way the radius server is going to respond with an >"Access-Accept" because you have set the auth-type to "none" (which is >necessary because you are not authenticating and can not provide the >necessary credentials). > >>From the trace you showed me below, i see two radius requests both for >the user 1000 and both of which respond as i would expect. > >I'm not what you are trying to accomplish, are you using the >group_radius module or just loading the group information using avp_radius? > > >Lenir wrote: > > > >>This is my users file: >> >>DEFAULT Auth-Type = System >> Fall-Through = 1 >> >>DEFAULT Service-Type == Call-Check, Auth-Type := None >> >>DEFAULT Service-Type == Group-Check, Auth-Type := None >> >>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >> >>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >> >>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >> >> >>mysql> select * from radcheck; >>+----+----------+-----------+----+----------+ >>| id | UserName | Attribute | op | Value | >>+----+----------+-----------+----+----------+ >>| 1 | Jhassell | Password | == | changeme | >>| 2 | Rneis | Password | == | changeme | >>| 3 | 1000 | Password | == | 1000 | >>| 4 | 2000 | Password | == | 2000 | >>| 5 | 3000 | Password | == | 3000 | >>+----+----------+-----------+----+----------+ >>5 rows in set (0.00 sec) >> >>mysql> select * from radreply; >>Empty set (0.00 sec) >> >>mysql> select * from usergroup; >>+----+----------+------------+ >>| id | UserName | GroupName | >>+----+----------+------------+ >>| 1 | Jhassell | Dialin | >>| 2 | Rneis | Staticdial | >>| 3 | 1000 | Dialin | >>| 4 | 2000 | Dialin | >>| 5 | 3000 | Dialin | >>| 6 | 3000 | Dialin2 | >>+----+----------+------------+ >>6 rows in set (0.00 sec) >> >>mysql> select * from radgroupcheck; >>Empty set (0.00 sec) >> >>mysql> select * from radgroupreply; >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>---+ >>| id | GroupName | Attribute | op | Value | >>prio | >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>----+ >>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >>0 | >>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >>0 | >>| 3 | Dialin | SIP-AVP | = | Sip-Group:Dialin | >>0 | >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>----+ >>3 rows in set (0.00 sec) >> >>mysql> select * from radpostauth; >>Empty set (0.00 sec) >> >> >> >>Here's the debug, notice how it returns access-accept whether its in the >>right group or not. Shouldn't it return access-reject for group Dialin2? >>----------------- >>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=152, >>length=66 >> User-Name = "1000(a)xx.xx.xx.xx" >> Sip-Group = "Dialin" >> Service-Type = Group-Check >> NAS-IP-Address = 127.0.0.1 >> NAS-Port = 0 >> Processing the authorize section of radiusd.conf >>modcall: entering group authorize for request 4 >> modcall[authorize]: module "preprocess" returns ok for request 4 >> modcall[authorize]: module "chap" returns noop for request 4 >> modcall[authorize]: module "mschap" returns noop for request 4 >> modcall[authorize]: module "digest" returns noop for request 4 >> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>"1000(a)xx.xx.xx.xx" >> rlm_realm: Found realm "xx.xx.xx.xx" >> rlm_realm: Adding Stripped-User-Name = "1000" >> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >> rlm_realm: Adding Realm = "xx.xx.xx.xx" >> rlm_realm: Authentication realm is LOCAL. >> modcall[authorize]: module "suffix" returns noop for request 4 >> rlm_eap: No EAP-Message, not doing EAP >> modcall[authorize]: module "eap" returns noop for request 4 >> users: Matched entry DEFAULT at line 156 >> users: Matched entry DEFAULT at line 161 >> modcall[authorize]: module "files" returns ok for request 4 >>radius_xlat: '1000' >>rlm_sql (sql): sql_set_user escaped user --> '1000' >>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>radcheck WHERE Username = '1000' ORDER BY id' >>rlm_sql (sql): Reserving sql socket id: 0 >>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >> >> >>FROM radcheck WHERE Username = '1000' ORDER BY id > > >>radius_xlat: 'SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>rlm_sql_mysql: query: SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>radreply WHERE Username = '1000' ORDER BY id' >>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >> >> >>FROM radreply WHERE Username = '1000' ORDER BY id > > >>radius_xlat: 'SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id' >>rlm_sql_mysql: query: SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id >>rlm_sql (sql): Checking profile DEFAULT >>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>radius_xlat: 'SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>rlm_sql_mysql: query: SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>radius_xlat: 'SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id' >>rlm_sql_mysql: query: SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id >>rlm_sql (sql): Released sql socket id: 0 >> modcall[authorize]: module "sql" returns ok for request 4 >>modcall: group authorize returns ok for request 4 >> rad_check_password: Found Auth-Type None >> rad_check_password: Auth-Type = Accept, accepting the user >>radius_xlat: 'Authenticated by group Dialin' >>Sending Access-Accept of id 152 to xx.xx.xx.xx:33167 >> Reply-Message = "Authenticated by group Dialin" >> SIP-AVP = "Sip-Group:Dialin" >>Finished request 4 >>Going to the next request >>Waking up in 6 seconds... >>rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=153, >>length=67 >> User-Name = "1000(a)xx.xx.xx.xx" >> Sip-Group = "Dialin2" >> Service-Type = Group-Check >> NAS-IP-Address = 127.0.0.1 >> NAS-Port = 0 >> Processing the authorize section of radiusd.conf >>modcall: entering group authorize for request 5 >> modcall[authorize]: module "preprocess" returns ok for request 5 >> modcall[authorize]: module "chap" returns noop for request 5 >> modcall[authorize]: module "mschap" returns noop for request 5 >> modcall[authorize]: module "digest" returns noop for request 5 >> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>"1000(a)xx.xx.xx.xx" >> rlm_realm: Found realm "xx.xx.xx.xx" >> rlm_realm: Adding Stripped-User-Name = "1000" >> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >> rlm_realm: Adding Realm = "xx.xx.xx.xx" >> rlm_realm: Authentication realm is LOCAL. >> modcall[authorize]: module "suffix" returns noop for request 5 >> rlm_eap: No EAP-Message, not doing EAP >> modcall[authorize]: module "eap" returns noop for request 5 >> users: Matched entry DEFAULT at line 156 >> users: Matched entry DEFAULT at line 161 >> modcall[authorize]: module "files" returns ok for request 5 >>radius_xlat: '1000' >>rlm_sql (sql): sql_set_user escaped user --> '1000' >>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>radcheck WHERE Username = '1000' ORDER BY id' >>rlm_sql (sql): Reserving sql socket id: 4 >>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >> >> >>FROM radcheck WHERE Username = '1000' ORDER BY id > > >>radius_xlat: 'SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>rlm_sql_mysql: query: SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >>radreply WHERE Username = '1000' ORDER BY id' >>rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >> >> >>FROM radreply WHERE Username = '1000' ORDER BY id > > >>radius_xlat: 'SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id' >>rlm_sql_mysql: query: SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = '1000' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id >>rlm_sql (sql): Checking profile DEFAULT >>rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >>radius_xlat: 'SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id' >>rlm_sql_mysql: query: SELECT >>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch >> >> >e > > >>ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupcheck.GroupName ORDER BY radgroupcheck.id >>radius_xlat: 'SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id' >>rlm_sql_mysql: query: SELECT >>radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupre >> >> >p > > >>ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >>usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >>radgroupreply.GroupName ORDER BY radgroupreply.id >>rlm_sql (sql): Released sql socket id: 4 >> modcall[authorize]: module "sql" returns ok for request 5 >>modcall: group authorize returns ok for request 5 >> rad_check_password: Found Auth-Type None >> rad_check_password: Auth-Type = Accept, accepting the user >>radius_xlat: 'Authenticated by group Dialin' >>Sending Access-Accept of id 153 to xx.xx.xx.xx:33167 >> Reply-Message = "Authenticated by group Dialin" >> SIP-AVP = "Sip-Group:Dialin" >>Finished request 5 >> >>-----Original Message----- >>From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >>Sent: Friday, October 14, 2005 7:21 PM >>To: Lenir >>Cc: users(a)openser.org; serusers(a)iptel.org >>Subject: Re: group_radius radius_is_user_in >> >>Ugh the subject line is getting really munged up ;P >> >>Hmmm, what does the output from "radiusd -X" look like for the exchange? >> >> >>Lenir wrote: >> >> >> >> >> >>>Tavis, >>> >>>Thanks for your input, that did fix the problem. I did have the "files" >>>before "sql" in radiusd.conf. Also I followed your advice about taking out >>>"Auth-Type" out of mysql table and let DEFAULT in users file do the trick. >>> >>> > > > >>>However it's semi-working. >>> >>>Accourding to the snippet from my ser.cfg file, now I get the following in >>>stderr: >>>0(4866) 000d2890-d47f0003-4a230347-53c6189b(a)yy.yy.yy.yy - >>>sip:1000@xx.xx.xx.xx - User authenticated... >>>0(4866) Credentials: User is in Radius Group Dialin!!!! >>>0(4866) Credentials: User is in Radius Group Dialin2!!!! >>> >>>No matter which parameter I use for the function radius_is_user_in(), it >>>always returns TRUE. When in fact it should return FALSE for Group >>> >>> >Dialin2. > > >>>I've tried: >>> >>>if (radius_is_user_in("From", "Dialin2")){... >>>if (radius_is_user_in("Credentials", "Dialin2")){... >>> >>> >>> >>> >>> >>>Here's what I did to fix future problems: >>> >>>EFAULT Auth-Type = System >>> Fall-Through = 1 >>> >>>DEFAULT Service-Type == Call-Check, Auth-Type := Digest >>> >>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >>> >>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >>> >>> >>>Also, for those of you using the latest version of freeradius, you may >>> >>> >have > > >>>to comment out the following lines as they conflict with dictionary.ser >>> >>> >>> >>> >>(SER >> >> >> >> >>>CVS) and dictionary.sip (comes with radiusclient-NG) >>> >>>#VALUE Service-Type Voice 12 >>>#VALUE Service-Type Fax 13 >>>#VALUE Service-Type Modem-Relay 14 >>>#VALUE Service-Type IAPP-Register 15 >>>#VALUE Service-Type IAPP-AP-Check 16 >>> >>> >>>Thanks, >>> >>> >>>Lenir >>> >>> >>>-----Original Message----- >>>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On >>>Behalf Of Tavis P >>>Sent: Friday, October 14, 2005 1:49 PM >>>To: lsantiago(a)globalgatewaycom.com >>>Cc: serdev(a)iptel.org; serusers(a)iptel.org; devel(a)openser.org; >>>users(a)openser.org >>>Subject: [Serusers] Re: [Serdev] group_radius radius_is_user_in >>> >>>Oops, i spoke too soon >>> >>>It looks like you have placed the "files" module before the "sql" module >>>in your radiusd.conf >>> >>>Its matching your DEFAULT entry in files (setting the Auth-Type to none) >>>but the sql module is later changing the Auth-Type to "digest" >>> >>>Changing the order would solve this problem, as you want it to match the >>>SQL statement first and than the section in the files last (which >>>changes the Auth-Type) >>> >>>Also, you may want to reduce the load on your database by not setting >>>the Auth-Type in the database and instead setting in the users file with >>>a DEFAULT statement as (at least in my case) it isn't somthing that need >>>to be dynamic. >>> >>>lenirsantiago(a)yahoo.com wrote: >>> >>> >>> >>> >>> >>> >>> >>>>Hello list, >>>> >>>>I've been trying my hardest today to get group_radius to work, and its >>>>function radius_is_user_in(). >>>>I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and >>>> >>>> >>>> >>>> >>digest >> >> >> >> >>>>authentication. >>>> >>>>Radius authentication works fine. >>>>The problem is that when radius_is_user_in() function gets called, it >>>> >>>> >>>> >>>> >>sends >> >> >> >> >>>>a radius message but without the User-Password field and freeradius >>>>complains that it requires it since we are using Digest. >>>>I've seen a couple of posts here, but they were never answered: >>>>http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >>>>http://mail.iptel.org/pipermail/serusers/2005-March/017075.html >>>> >>>>----- >>>>I have a small test in my ser.cfg file: >>>> if (!radius_www_authorize("")) { >>>> xlog("L_I","%ci - %fu - User not authenticated, Radius >>>>Authenticating...\n"); >>>> www_challenge("","0"); >>>> break; >>>> } else { >>>> xlog("L_I","%ci - %fu - User authenticated...\n"); >>>> }; >>>> >>>> if (radius_is_user_in("From", "Dialin")){ >>>> xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); >>>> } else { >>>> xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); >>>> }; >>>> >>>> if (radius_is_user_in("Credentials", "Dialin2")){ >>>> xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); >>>> } else { >>>> xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); >>>> }; >>>> >>>>----- >>>>In /etc/raddb/users file I have the following at line 152: >>>>DEFAULT Auth-Type = System >>>> Fall-Through = 1 >>>> >>>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>>> >>>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>>> >>>>----- >>>> >>>>These are mysql tables: >>>> >>>>+----+----------+-----------+----+----------+ >>>>| id | UserName | Attribute | op | Value | >>>>+----+----------+-----------+----+----------+ >>>>| 1 | Jhassell | Password | == | changeme | >>>>| 2 | Rneis | Password | == | changeme | >>>>| 3 | 1000 | Password | == | 1000 | >>>>| 4 | 2000 | Password | == | 2000 | >>>>| 5 | 3000 | Password | == | 3000 | >>>>| 8 | 1000 | Auth-Type | := | Digest | >>>>+----+----------+-----------+----+----------+ >>>> >>>>+----+-----------+-----------+----+--------+ >>>>| id | GroupName | Attribute | op | Value | >>>>+----+-----------+-----------+----+--------+ >>>>| 6 | Dialin | Auth-Type | := | Accept | >>>>+----+-----------+-----------+----+--------+ >>>> >>>>+----+-----------+---------------+----+---------------------------------- >>>> >>>> >+ > > >>>> >>>> >>>> >>>> >>- >> >> >> >> >>>> >>>> >>>> >>>> >>>> >>>> >>>- >>> >>> >>> >>> >>> >>> >>>>----+ >>>>| id | GroupName | Attribute | op | Value >>>> >>>> >| > > >>>>prio | >>>>+----+-----------+---------------+----+---------------------------------- >>>> >>>> >+ > > >>>> >>>> >>>> >>>> >>- >> >> >> >> >>>> >>>> >>>> >>>> >>>> >>>> >>>- >>> >>> >>> >>> >>> >>> >>>>----+ >>>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" >>>> >>>> >| > > >>>>0 | >>>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" >>>> >>>> >| > > >>>>0 | >>>>+----+-----------+---------------+----+---------------------------------- >>>> >>>> >+ > > >>>> >>>> >>>> >>>> >>- >> >> >> >> >>>> >>>> >>>> >>>> >>>> >>>> >>>- >>> >>> >>> >>> >>> >>> >>>>----+ >>>> >>>>+----+----------+---------------+----+------------------+ >>>>| id | UserName | Attribute | op | Value | >>>>+----+----------+---------------+----+------------------+ >>>>| 1 | 1000 | Reply-Message | = | "Authenticated" | >>>>| 2 | 1000 | Sip-Group | = | Dialin | >>>>| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >>>>+----+----------+---------------+----+------------------+ >>>> >>>>+----+----------+------------+ >>>>| id | UserName | GroupName | >>>>+----+----------+------------+ >>>>| 1 | Jhassell | Dialin | >>>>| 2 | Rneis | Staticdial | >>>>| 3 | 1000 | Dialin | >>>>| 4 | 2000 | Dialin | >>>>| 5 | 3000 | Dialin | >>>>| 6 | 3000 | Dialin2 | >>>>+----+----------+------------+ >>>> >>>>------ >>>> >>>>This is the debug I get from freeradius for the group check: >>>> >>>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >>>>length=67 >>>> User-Name = "1000(a)xx.xx.xx.xx" >>>> Sip-Group = "Dialin2" >>>> Service-Type = Group-Check >>>> NAS-IP-Address = 127.0.0.1 >>>> NAS-Port = 0 >>>>Processing the authorize section of radiusd.conf >>>>modcall: entering group authorize for request 74 >>>>modcall[authorize]: module "preprocess" returns ok for request 74 >>>>modcall[authorize]: module "chap" returns noop for request 74 >>>>modcall[authorize]: module "mschap" returns noop for request 74 >>>>modcall[authorize]: module "digest" returns noop for request 74 >>>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>>"1000(a)xx.xx.xx.xx" >>>> rlm_realm: Found realm "xx.xx.xx.xx" >>>> rlm_realm: Adding Stripped-User-Name = "1000" >>>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>>> rlm_realm: Authentication realm is LOCAL. >>>>modcall[authorize]: module "suffix" returns noop for request 74 >>>>rlm_eap: No EAP-Message, not doing EAP >>>>modcall[authorize]: module "eap" returns noop for request 74 >>>> users: Matched entry DEFAULT at line 152 >>>> users: Matched entry DEFAULT at line 158 >>>>modcall[authorize]: module "files" returns ok for request 74 >>>>radius_xlat: '1000' >>>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>>rlm_sql (sql): Released sql socket id: 0 >>>>modcall[authorize]: module "sql" returns ok for request 74 >>>>modcall: group authorize returns ok for request 74 >>>>rad_check_password: Found Auth-Type Digest >>>>auth: type "digest" >>>>Processing the authenticate section of radiusd.conf >>>>modcall: entering group authenticate for request 74 >>>>ERROR: No Digest-Nonce: Cannot perform Digest authentication >>>>modcall[authenticate]: module "digest" returns invalid for request 74 >>>>modcall: group authenticate returns invalid for request 74 >>>>auth: Failed to validate the user. >>>>Delaying request 74 for 1 seconds >>>>Finished request 74 >>>>Going to the next request >>>>--- Walking the entire request list --- >>>>Waking up in 1 seconds... >>>>--- Walking the entire request list --- >>>>Waking up in 1 seconds... >>>>--- Walking the entire request list --- >>>>Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 >>>> Reply-Message = "Authenticated" >>>>Waking up in 4 seconds... >>>>--- Walking the entire request list --- >>>>Cleaning up request 74 ID 15 with timestamp 434f1121 >>>>Nothing to do. Sleeping until we see a request. >>>> >>>> >>>> >>>> >>>> >>>>Any help in this matter would be deeply appreciated, >>>> >>>> >>>> >>>> >>>>Lenir >>>> >>>> >>>> >>>> >>>>_______________________________________________ >>>>Serdev mailing list >>>>Serdev(a)iptel.org >>>>http://mail.iptel.org/mailman/listinfo/serdev >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>_______________________________________________ >>>Serusers mailing list >>>Serusers(a)iptel.org >>>http://mail.iptel.org/mailman/listinfo/serusers >>> >>> >>>_______________________________________________ >>>Serdev mailing list >>>Serdev(a)iptel.org >>>http://mail.iptel.org/mailman/listinfo/serdev >>> >>> >>> >>> >>> >>> >>> >>> >> >> >> >> >> >> > > > > > >

2 2

[Serusers] RTP proxy between two subnetworks with private @s
by Jose Soler 19 Oct '05

19 Oct '05

Hi, I am trying to figure out how to solve the follwoing problem. I have two subnetworks, A and B, with different private ip adressing schemes (IP@A <mailto:IP@A> ) and (IP@B <mailto:IP@B> ). SER is installed in a computer with network interfaces towards both subnetworks. SER's SIP signalling proxying operation works properly within the subnetworks and when trying to set up a communication between users in A and B. But in that last case, obviously there is no media at all circulating among the subnetworks. Portaone's RTP proxy has been installed and configured in the computer with interfaces towards both subnetworks where SER is installed. I am trying to configure SER so that, based on the nathelper module, when communication between both subnetworks occurs, the RTP proxy is involved and the communication (also media and not only signalling) is possible. BUT I am making something wrong, becouse it does not work ... Can anyone give me a hand /hint? Thanks a lot in advance / in any case. My SER config file is the following: # # ----------- global configuration parameters ------------------------ /* Uncomment these lines to enter debugging mode debug=7 fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) fifo="/tmp/ser_fifo" fifo_mode=0662 alias=wirelessip.x.x.x alias=sip..x.x.x alias=x.x.x log_stderror=no debug=3 children=3 mhomed=1 # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/lib/ser/modules/mysql.so" loadmodule "/lib/ser/modules/sl.so" loadmodule "/lib/ser/modules/tm.so" loadmodule "/lib/ser/modules/rr.so" loadmodule "/lib/ser/modules/maxfwd.so" loadmodule "/lib/ser/modules/usrloc.so" loadmodule "/lib/ser/modules/textops.so" loadmodule "/lib/ser/modules/registrar.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/lib/ser/modules/auth.so" loadmodule "/lib/ser/modules/auth_db.so" # For NAT support / media proxying loadmodule "/lib/ser/modules/nathelper.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module modparam("auth_db", "calculate_ha1", yes) # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # For NAT # We will use flag 6 to mark NATed contacts modparam("registrar", "nat_flag", 6) # Enable NAT pinging modparam("nathelper", "natping_interval", 60) # Ping only contacts that are known to be # behind NAT modparam("nathelper", "ping_nated_only", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); break; }; # special handling for NATed clients; first, nat test is # executed: it looks for via!=received and RFC1918 addresses # in Contact (may fail if line-folding used); also, # the received test should, if complete, should check all # vias for presence of received if (nat_uac_test("3")) { # allow RR-ed requests, as these may indicate that # a NAT-enabled proxy takes care of it; unless it is # a REGISTER if (method == "REGISTER" || ! search("^Record-Route:")) { log("LOG: Someone trying to register from private IP, rewriting\n"); # This will work only for user agents that support symmetric # communication. We tested quite many of them and majority is # smart smart enough to be symmetric. In some phones, like # it takes a configuration option. With Cisco 7960, it is # called NAT_Enable=Yes, with kphone it is called # "symmetric media" and "symmetric signaling". (The latter # not part of public released yet.) fix_nated_contact(); # Rewrite contact with source IP of signalling if (method == "INVITE") { fix_nated_sdp("1"); # Add direction=active to SDP }; force_rport(); # Add rport parameter to topmost Via setflag(6); # Mark as NATed }; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol record_route(); # loose-route processing if (loose_route()) { t_relay(); break; }; lookup("aliases"); # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!www_authorize("com.dtu.dk", "subscriber")) { www_challenge("com.dtu.dk", "0"); break; }; save("location"); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; # forward to current uri now; use stateful forwarding; that # works reliably even if we forward from TCP to UDP if (!t_relay()) { sl_reply_error(); }; } # # Forcing media relay if necessary # route[1] { #if (uri=~"[@:](192\.168\.|10\.|172\.16)" && !search("^Route:")){ # sl_send_reply("479", "We don't forward to private IP addresses"); # break; #}; #if (isflagset(6)) { force_rtp_proxy(); # I force everything through the proxy t_on_reply("1"); append_hf("P-Behind-NAT: Yes\r\n"); #}; if (!t_relay()) { sl_reply_error(); break; }; } onreply_route[1] { if (status =~ "(183)|2[0-9][0-9]") { fix_nated_contact(); force_rtp_proxy(); }; }

4 5

[Users] Re: group_radius radius_is_user_in
by Tavis P 19 Oct '05

19 Oct '05

Well either way the radius server is going to respond with an "Access-Accept" because you have set the auth-type to "none" (which is necessary because you are not authenticating and can not provide the necessary credentials). >From the trace you showed me below, i see two radius requests both for the user 1000 and both of which respond as i would expect. I'm not what you are trying to accomplish, are you using the group_radius module or just loading the group information using avp_radius? Lenir wrote: >This is my users file: > >DEFAULT Auth-Type = System > Fall-Through = 1 > >DEFAULT Service-Type == Call-Check, Auth-Type := None > >DEFAULT Service-Type == Group-Check, Auth-Type := None > >DEFAULT Service-Type == SIP-Session, Auth-Type := Digest > >DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None > >DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None > > >mysql> select * from radcheck; >+----+----------+-----------+----+----------+ >| id | UserName | Attribute | op | Value | >+----+----------+-----------+----+----------+ >| 1 | Jhassell | Password | == | changeme | >| 2 | Rneis | Password | == | changeme | >| 3 | 1000 | Password | == | 1000 | >| 4 | 2000 | Password | == | 2000 | >| 5 | 3000 | Password | == | 3000 | >+----+----------+-----------+----+----------+ >5 rows in set (0.00 sec) > >mysql> select * from radreply; >Empty set (0.00 sec) > >mysql> select * from usergroup; >+----+----------+------------+ >| id | UserName | GroupName | >+----+----------+------------+ >| 1 | Jhassell | Dialin | >| 2 | Rneis | Staticdial | >| 3 | 1000 | Dialin | >| 4 | 2000 | Dialin | >| 5 | 3000 | Dialin | >| 6 | 3000 | Dialin2 | >+----+----------+------------+ >6 rows in set (0.00 sec) > >mysql> select * from radgroupcheck; >Empty set (0.00 sec) > >mysql> select * from radgroupreply; >+----+-----------+---------------+----+----------------------------------+-- >---+ >| id | GroupName | Attribute | op | Value | >prio | >+----+-----------+---------------+----+----------------------------------+-- >----+ >| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >0 | >| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >0 | >| 3 | Dialin | SIP-AVP | = | Sip-Group:Dialin | >0 | >+----+-----------+---------------+----+----------------------------------+-- >----+ >3 rows in set (0.00 sec) > >mysql> select * from radpostauth; >Empty set (0.00 sec) > > > >Here's the debug, notice how it returns access-accept whether its in the >right group or not. Shouldn't it return access-reject for group Dialin2? >----------------- >rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=152, >length=66 > User-Name = "1000(a)xx.xx.xx.xx" > Sip-Group = "Dialin" > Service-Type = Group-Check > NAS-IP-Address = 127.0.0.1 > NAS-Port = 0 > Processing the authorize section of radiusd.conf >modcall: entering group authorize for request 4 > modcall[authorize]: module "preprocess" returns ok for request 4 > modcall[authorize]: module "chap" returns noop for request 4 > modcall[authorize]: module "mschap" returns noop for request 4 > modcall[authorize]: module "digest" returns noop for request 4 > rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >"1000(a)xx.xx.xx.xx" > rlm_realm: Found realm "xx.xx.xx.xx" > rlm_realm: Adding Stripped-User-Name = "1000" > rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx > rlm_realm: Adding Realm = "xx.xx.xx.xx" > rlm_realm: Authentication realm is LOCAL. > modcall[authorize]: module "suffix" returns noop for request 4 > rlm_eap: No EAP-Message, not doing EAP > modcall[authorize]: module "eap" returns noop for request 4 > users: Matched entry DEFAULT at line 156 > users: Matched entry DEFAULT at line 161 > modcall[authorize]: module "files" returns ok for request 4 >radius_xlat: '1000' >rlm_sql (sql): sql_set_user escaped user --> '1000' >radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >radcheck WHERE Username = '1000' ORDER BY id' >rlm_sql (sql): Reserving sql socket id: 0 >rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >FROM radcheck WHERE Username = '1000' ORDER BY id >radius_xlat: 'SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id' >rlm_sql_mysql: query: SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id >radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >radreply WHERE Username = '1000' ORDER BY id' >rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >FROM radreply WHERE Username = '1000' ORDER BY id >radius_xlat: 'SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id' >rlm_sql_mysql: query: SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id >rlm_sql (sql): Checking profile DEFAULT >rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >radius_xlat: 'SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id' >rlm_sql_mysql: query: SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id >radius_xlat: 'SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id' >rlm_sql_mysql: query: SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id >rlm_sql (sql): Released sql socket id: 0 > modcall[authorize]: module "sql" returns ok for request 4 >modcall: group authorize returns ok for request 4 > rad_check_password: Found Auth-Type None > rad_check_password: Auth-Type = Accept, accepting the user >radius_xlat: 'Authenticated by group Dialin' >Sending Access-Accept of id 152 to xx.xx.xx.xx:33167 > Reply-Message = "Authenticated by group Dialin" > SIP-AVP = "Sip-Group:Dialin" >Finished request 4 >Going to the next request >Waking up in 6 seconds... >rad_recv: Access-Request packet from host xx.xx.xx.xx:33167, id=153, >length=67 > User-Name = "1000(a)xx.xx.xx.xx" > Sip-Group = "Dialin2" > Service-Type = Group-Check > NAS-IP-Address = 127.0.0.1 > NAS-Port = 0 > Processing the authorize section of radiusd.conf >modcall: entering group authorize for request 5 > modcall[authorize]: module "preprocess" returns ok for request 5 > modcall[authorize]: module "chap" returns noop for request 5 > modcall[authorize]: module "mschap" returns noop for request 5 > modcall[authorize]: module "digest" returns noop for request 5 > rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >"1000(a)xx.xx.xx.xx" > rlm_realm: Found realm "xx.xx.xx.xx" > rlm_realm: Adding Stripped-User-Name = "1000" > rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx > rlm_realm: Adding Realm = "xx.xx.xx.xx" > rlm_realm: Authentication realm is LOCAL. > modcall[authorize]: module "suffix" returns noop for request 5 > rlm_eap: No EAP-Message, not doing EAP > modcall[authorize]: module "eap" returns noop for request 5 > users: Matched entry DEFAULT at line 156 > users: Matched entry DEFAULT at line 161 > modcall[authorize]: module "files" returns ok for request 5 >radius_xlat: '1000' >rlm_sql (sql): sql_set_user escaped user --> '1000' >radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >radcheck WHERE Username = '1000' ORDER BY id' >rlm_sql (sql): Reserving sql socket id: 4 >rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >FROM radcheck WHERE Username = '1000' ORDER BY id >radius_xlat: 'SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id' >rlm_sql_mysql: query: SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id >radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM >radreply WHERE Username = '1000' ORDER BY id' >rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op >FROM radreply WHERE Username = '1000' ORDER BY id >radius_xlat: 'SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id' >rlm_sql_mysql: query: SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = '1000' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id >rlm_sql (sql): Checking profile DEFAULT >rlm_sql (sql): sql_set_user escaped user --> 'DEFAULT' >radius_xlat: 'SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id' >rlm_sql_mysql: query: SELECT >radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche >ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupcheck.GroupName ORDER BY radgroupcheck.id >radius_xlat: 'SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id' >rlm_sql_mysql: query: SELECT >radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep >ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE >usergroup.Username = 'DEFAULT' AND usergroup.GroupName = >radgroupreply.GroupName ORDER BY radgroupreply.id >rlm_sql (sql): Released sql socket id: 4 > modcall[authorize]: module "sql" returns ok for request 5 >modcall: group authorize returns ok for request 5 > rad_check_password: Found Auth-Type None > rad_check_password: Auth-Type = Accept, accepting the user >radius_xlat: 'Authenticated by group Dialin' >Sending Access-Accept of id 153 to xx.xx.xx.xx:33167 > Reply-Message = "Authenticated by group Dialin" > SIP-AVP = "Sip-Group:Dialin" >Finished request 5 > >-----Original Message----- >From: Tavis P [mailto:tavis.lists@galaxytelecom.net] >Sent: Friday, October 14, 2005 7:21 PM >To: Lenir >Cc: users(a)openser.org; serusers(a)iptel.org >Subject: Re: group_radius radius_is_user_in > >Ugh the subject line is getting really munged up ;P > >Hmmm, what does the output from "radiusd -X" look like for the exchange? > > >Lenir wrote: > > > >>Tavis, >> >>Thanks for your input, that did fix the problem. I did have the "files" >>before "sql" in radiusd.conf. Also I followed your advice about taking out >>"Auth-Type" out of mysql table and let DEFAULT in users file do the trick. >> >>However it's semi-working. >> >>Accourding to the snippet from my ser.cfg file, now I get the following in >>stderr: >>0(4866) 000d2890-d47f0003-4a230347-53c6189b(a)yy.yy.yy.yy - >>sip:1000@xx.xx.xx.xx - User authenticated... >>0(4866) Credentials: User is in Radius Group Dialin!!!! >>0(4866) Credentials: User is in Radius Group Dialin2!!!! >> >>No matter which parameter I use for the function radius_is_user_in(), it >>always returns TRUE. When in fact it should return FALSE for Group Dialin2. >>I've tried: >> >>if (radius_is_user_in("From", "Dialin2")){... >>if (radius_is_user_in("Credentials", "Dialin2")){... >> >> >> >> >> >>Here's what I did to fix future problems: >> >>EFAULT Auth-Type = System >> Fall-Through = 1 >> >>DEFAULT Service-Type == Call-Check, Auth-Type := Digest >> >>DEFAULT Service-Type == Group-Check, Auth-Type := None >> >>DEFAULT Service-Type == SIP-Session, Auth-Type := Digest >> >>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >> >>DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None >> >> >>Also, for those of you using the latest version of freeradius, you may have >>to comment out the following lines as they conflict with dictionary.ser >> >> >(SER > > >>CVS) and dictionary.sip (comes with radiusclient-NG) >> >>#VALUE Service-Type Voice 12 >>#VALUE Service-Type Fax 13 >>#VALUE Service-Type Modem-Relay 14 >>#VALUE Service-Type IAPP-Register 15 >>#VALUE Service-Type IAPP-AP-Check 16 >> >> >>Thanks, >> >> >>Lenir >> >> >>-----Original Message----- >>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On >>Behalf Of Tavis P >>Sent: Friday, October 14, 2005 1:49 PM >>To: lsantiago(a)globalgatewaycom.com >>Cc: serdev(a)iptel.org; serusers(a)iptel.org; devel(a)openser.org; >>users(a)openser.org >>Subject: [Serusers] Re: [Serdev] group_radius radius_is_user_in >> >>Oops, i spoke too soon >> >>It looks like you have placed the "files" module before the "sql" module >>in your radiusd.conf >> >>Its matching your DEFAULT entry in files (setting the Auth-Type to none) >>but the sql module is later changing the Auth-Type to "digest" >> >>Changing the order would solve this problem, as you want it to match the >>SQL statement first and than the section in the files last (which >>changes the Auth-Type) >> >>Also, you may want to reduce the load on your database by not setting >>the Auth-Type in the database and instead setting in the users file with >>a DEFAULT statement as (at least in my case) it isn't somthing that need >>to be dynamic. >> >>lenirsantiago(a)yahoo.com wrote: >> >> >> >> >> >>>Hello list, >>> >>>I've been trying my hardest today to get group_radius to work, and its >>>function radius_is_user_in(). >>>I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and >>> >>> >digest > > >>>authentication. >>> >>>Radius authentication works fine. >>>The problem is that when radius_is_user_in() function gets called, it >>> >>> >sends > > >>>a radius message but without the User-Password field and freeradius >>>complains that it requires it since we are using Digest. >>>I've seen a couple of posts here, but they were never answered: >>>http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >>>http://mail.iptel.org/pipermail/serusers/2005-March/017075.html >>> >>>----- >>>I have a small test in my ser.cfg file: >>> if (!radius_www_authorize("")) { >>> xlog("L_I","%ci - %fu - User not authenticated, Radius >>>Authenticating...\n"); >>> www_challenge("","0"); >>> break; >>> } else { >>> xlog("L_I","%ci - %fu - User authenticated...\n"); >>> }; >>> >>> if (radius_is_user_in("From", "Dialin")){ >>> xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); >>> } else { >>> xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); >>> }; >>> >>> if (radius_is_user_in("Credentials", "Dialin2")){ >>> xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); >>> } else { >>> xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); >>> }; >>> >>>----- >>>In /etc/raddb/users file I have the following at line 152: >>>DEFAULT Auth-Type = System >>> Fall-Through = 1 >>> >>>DEFAULT Service-Type == Group-Check, Auth-Type := None >>> >>>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >>> >>>----- >>> >>>These are mysql tables: >>> >>>+----+----------+-----------+----+----------+ >>>| id | UserName | Attribute | op | Value | >>>+----+----------+-----------+----+----------+ >>>| 1 | Jhassell | Password | == | changeme | >>>| 2 | Rneis | Password | == | changeme | >>>| 3 | 1000 | Password | == | 1000 | >>>| 4 | 2000 | Password | == | 2000 | >>>| 5 | 3000 | Password | == | 3000 | >>>| 8 | 1000 | Auth-Type | := | Digest | >>>+----+----------+-----------+----+----------+ >>> >>>+----+-----------+-----------+----+--------+ >>>| id | GroupName | Attribute | op | Value | >>>+----+-----------+-----------+----+--------+ >>>| 6 | Dialin | Auth-Type | := | Accept | >>>+----+-----------+-----------+----+--------+ >>> >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>| id | GroupName | Attribute | op | Value | >>>prio | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >>>0 | >>>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >>>0 | >>>+----+-----------+---------------+----+----------------------------------+ >>> >>> >- > > >>> >>> >>> >>> >>- >> >> >> >> >>>----+ >>> >>>+----+----------+---------------+----+------------------+ >>>| id | UserName | Attribute | op | Value | >>>+----+----------+---------------+----+------------------+ >>>| 1 | 1000 | Reply-Message | = | "Authenticated" | >>>| 2 | 1000 | Sip-Group | = | Dialin | >>>| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >>>+----+----------+---------------+----+------------------+ >>> >>>+----+----------+------------+ >>>| id | UserName | GroupName | >>>+----+----------+------------+ >>>| 1 | Jhassell | Dialin | >>>| 2 | Rneis | Staticdial | >>>| 3 | 1000 | Dialin | >>>| 4 | 2000 | Dialin | >>>| 5 | 3000 | Dialin | >>>| 6 | 3000 | Dialin2 | >>>+----+----------+------------+ >>> >>>------ >>> >>>This is the debug I get from freeradius for the group check: >>> >>>rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >>>length=67 >>> User-Name = "1000(a)xx.xx.xx.xx" >>> Sip-Group = "Dialin2" >>> Service-Type = Group-Check >>> NAS-IP-Address = 127.0.0.1 >>> NAS-Port = 0 >>>Processing the authorize section of radiusd.conf >>>modcall: entering group authorize for request 74 >>>modcall[authorize]: module "preprocess" returns ok for request 74 >>>modcall[authorize]: module "chap" returns noop for request 74 >>>modcall[authorize]: module "mschap" returns noop for request 74 >>>modcall[authorize]: module "digest" returns noop for request 74 >>> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>>"1000(a)xx.xx.xx.xx" >>> rlm_realm: Found realm "xx.xx.xx.xx" >>> rlm_realm: Adding Stripped-User-Name = "1000" >>> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >>> rlm_realm: Adding Realm = "xx.xx.xx.xx" >>> rlm_realm: Authentication realm is LOCAL. >>>modcall[authorize]: module "suffix" returns noop for request 74 >>>rlm_eap: No EAP-Message, not doing EAP >>>modcall[authorize]: module "eap" returns noop for request 74 >>> users: Matched entry DEFAULT at line 152 >>> users: Matched entry DEFAULT at line 158 >>>modcall[authorize]: module "files" returns ok for request 74 >>>radius_xlat: '1000' >>>rlm_sql (sql): sql_set_user escaped user --> '1000' >>>rlm_sql (sql): Released sql socket id: 0 >>>modcall[authorize]: module "sql" returns ok for request 74 >>>modcall: group authorize returns ok for request 74 >>>rad_check_password: Found Auth-Type Digest >>>auth: type "digest" >>>Processing the authenticate section of radiusd.conf >>>modcall: entering group authenticate for request 74 >>>ERROR: No Digest-Nonce: Cannot perform Digest authentication >>>modcall[authenticate]: module "digest" returns invalid for request 74 >>>modcall: group authenticate returns invalid for request 74 >>>auth: Failed to validate the user. >>>Delaying request 74 for 1 seconds >>>Finished request 74 >>>Going to the next request >>>--- Walking the entire request list --- >>>Waking up in 1 seconds... >>>--- Walking the entire request list --- >>>Waking up in 1 seconds... >>>--- Walking the entire request list --- >>>Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 >>> Reply-Message = "Authenticated" >>>Waking up in 4 seconds... >>>--- Walking the entire request list --- >>>Cleaning up request 74 ID 15 with timestamp 434f1121 >>>Nothing to do. Sleeping until we see a request. >>> >>> >>> >>> >>> >>>Any help in this matter would be deeply appreciated, >>> >>> >>> >>> >>>Lenir >>> >>> >>> >>> >>>_______________________________________________ >>>Serdev mailing list >>>Serdev(a)iptel.org >>>http://mail.iptel.org/mailman/listinfo/serdev >>> >>> >>> >>> >>> >>> >>> >>> >>_______________________________________________ >>Serusers mailing list >>Serusers(a)iptel.org >>http://mail.iptel.org/mailman/listinfo/serusers >> >> >>_______________________________________________ >>Serdev mailing list >>Serdev(a)iptel.org >>http://mail.iptel.org/mailman/listinfo/serdev >> >> >> >> >> >> > > > > > >

2 2

Re: [Users] Openser as non root
by Tavis P 19 Oct '05

19 Oct '05

I set the username and password in the config file with: # User and Group To Run SER As user=openser group=openser Although i'm sure you can use the command line switches as well Besides the usual checking for adequate permissions (use "strace -fF" can be useful for this in some situations) i've not done anything special Chrooting is similar, use strace to find which libraries, dev nodes and support files it needs and create the chroot environment using that information What problem are you having? Nelson Silva wrote: > Tavis: want to share how you did it ? > > thk > > Nelson Silva > ----------------- > email: nelson.silva(a)neuvex.com > website: http://www.neuvex.com > > > Date: Mon, 17 Oct 2005 11:05:21 -0700 > From: Tavis P <tavis.lists(a)galaxytelecom.net > <javascript:top.opencompose('tavis.lists(a)galaxytelecom.net','','','1')>> > Subject: Re: [Users] Openser as non root > To: Users(a)openser.org > <javascript:top.opencompose('Users(a)openser.org','','','1')> > Message-ID: <4353E7E1.2020109(a)galaxytelecom.net > <javascript:top.opencompose('4353E7E1.2020109(a)galaxytelecom.net','','','1')>> > Content-Type: text/plain; charset=ISO-8859-1 > > I'm currently running OpenSER both as non root and also chrooted without > issue > > Nelson Silva wrote: > > > Anyone got a info how to make openser for non root ? > > > > for example, openser -U openser -G openser ? > > > > > > > > thk > > > > Nelson Silva > > ----------------- > > email: nelson.silva(a)neuvex.com > <javascript:top.opencompose('nelson.silva(a)neuvex.com','','','1')> > > website: http://www.neuvex.com > <http://webmail.neuvex.comparse.pl?redirect=http%3A%2F%2Fwww.neuvex.com> > > > > > >------------------------------------------------------------------------ > > > >_______________________________________________ > >Users mailing list > >Users(a)openser.org > <javascript:top.opencompose('Users(a)openser.org','','','1')> > >http://openser.org/cgi-bin/mailman/listinfo/users > <http://webmail.neuvex.comparse.pl?redirect=http%3A%2F%2Fopenser.org%2Fcgi-b…> > > > > > > > >------------------------------------------------------------------------ > >_______________________________________________ >Users mailing list >Users(a)openser.org >http://openser.org/cgi-bin/mailman/listinfo/users > >

1 0

[Users] is_method problem in reply_route
by Klaus Darilion 19 Oct '05

19 Oct '05

Hi! I have a problem with is_method in reply route: is_method("INVITE|UPDATE") does not trigger on a reply to an INVITE, whereas is_method("INVITE") works. in request route blocks, is_method("INVITE|UPDATE") works fine. is there a knwon issue? I can't find the cause :-( regards klaus

2 1

[Users] Bug reports
by Bogdan-Andrei Iancu 19 Oct '05

19 Oct '05

Hi everybody, in term of days, we will start the work of preparing the next release - docs, compilation warnings, version setting, packages,etc. to speed the things up and to end the bug fixing period, please everybody report if there are any remaining known bugs or problems - just to know about them and fix them ASAP. critical ones are fixed (the ones in TM). there are still couple of crashes reported in uac_redirect and uac (from mangling part) modules - we are working on it. thanks and regards, bogdan

1 0

RE: [Users] BYE method accompanied by error
by Sam Lee 19 Oct '05

19 Oct '05

Any help I can get on this one ? Sam -----Original Message----- From: users-bounces(a)openser.org [mailto:users-bounces@openser.org] On Behalf Of Sam Lee Sent: Wednesday, October 12, 2005 3:27 PM To: Iqbal; users(a)openser.org Subject: RE: [Users] BYE method accompanied by error I have checked that the phones have not received a prior BYE. Any other idea what is wrong ? Here's a more detailed situation :- Caller (PSTN) --> Voice Gateway --> OPENSER --> Callee (UA) When Callee (UA) tried to end the call , OPENSER will forward a copy of the BYE to Voice Gateway to inform him of the BYE. The Gateway , somehow , replied with a 'Call Leg/Transaction Does Not Exist' . The strange thing is, the Caller (PSTN) was somehow informed of the BYE method and terminate the session . Anyone has any idea how to handle these errors ? I will be glad to provide a ngrep for more reference. Regards, Sam -----Original Message----- From: users-bounces(a)openser.org [mailto:users-bounces@openser.org] On Behalf Of Iqbal Sent: Tuesday, October 11, 2005 7:35 PM To: Sam Lee Cc: users(a)openser.org Subject: Re: [Users] BYE method accompanied by error Can you check to see if you have already received a BYE for that call, some phones I had were sending there own Bye's after the GW had Iqbal Sam Lee wrote: > Hi all, > > I would like to know why does my BYE method are always replied with a > 'Call Leg/Transaction does not exist' . How do they compare whether > the transaction in the BYE method exist or not ? ( tag? ftag ? ) Are > there any thing in the config that might cause this kind of problem ? > Just want to highlight that all the calls are made in a good > condition, everything except when the call is ending. > > Please let me know if you dont understand. > > Regards, > Sam > >----------------------------------------------------------------------- >- > >_______________________________________________ >Users mailing list >Users(a)openser.org >http://openser.org/cgi-bin/mailman/listinfo/users > > _______________________________________________ Users mailing list Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users _______________________________________________ Users mailing list Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users

4 3

[Users] Makefile problem
by Klaus Darilion 19 Oct '05

19 Oct '05

Hi! There is still a problem with gen_ha1 (conflicting with ser packages). in the deb package is still gen_ha1 with file size 0. I guess it is caused by the "touch" command. $(INSTALL-TOUCH) $(bin-prefix)/$(bin-dir)/gen_ha1 $(INSTALL-BIN) utils/gen_ha1/gen_ha1 \ $(bin-prefix)/$(bin-dir)/$(NAME)_gen_ha1 What is the purpose of the "touch"? Just remove it? regards klaus

2 1

[Users] what is the in_network table for
by Brandon Price 19 Oct '05

19 Oct '05

We have 1 asterisk and 1openser installation, with 1/2 of our users registering to one and 1/2 to the other. What I wanted to do for in network calling is add a column to in_network table thats called ip. In that column I want to put the ip address of the asterisk machine that the calls for those in network users that are registered to it should go. Then somehow set up openser to do a (lookup) then failing that look up the number in this database, if its rewritehost the call to ip in the ip column, else forward to our pstn gateway. Has anyone done this before, how would one handle multiple openser installations with 1/2 of the end users registering to one and the other 1/2 registering to the other barring a shared userloc database? What was the in_network table made for? As always any help greatly appreciated. Thank you.

2 1

[Serusers] RTPproxy between two non routables networks
by Joao Pereira 19 Oct '05

19 Oct '05

Hi, I have SER connected to two non-routable networks: My machine has two IP addresses: 193.136.2.2 and 10.0.0.135 And I want the clients in these two networks o speak each other. I started RTPproxy with "-l 10.0.0.135/193.136.2.2" option. And I tried the configuration example that´s in: /ser-0.9.0/modules/nathelper/examples/alg.cfg Thats my network configuration: client A |-------| client B 193.136.7.13- ------------- 193.136.2.2--| SER |-- 10.0.0.135---------10.0.11.243 public IP client SERs public IP |-------| SERs private IP private IP client But even with RTPproxy and NAThelper it isnt working, because when I call from client A to client B, this happens: INVITE: 193.136.7.13 --> 193.136.2.2 (thats OK) INVITE: 193.136.2.2 --> 10.0.11.243 (ERROR:this cant happen because the networks are non routable) It should be 10.0.0.135 to contact client B. From client B to client A the same happens: INVITE: 10.0.11.243 --> 10.0.0.135 INVITE: 10.0.0.135 --> 193.136.7.13 ERROR: non routable networks Can someone tell me what changes must be done to implement the proxying of the calls between the two SER IP addresses? Thanks Joao Pereira www.fccn.pt

1 0

[Users] Re: group_radius radius_is_user_in
by Tavis P 19 Oct '05

19 Oct '05

Ugh the subject line is getting really munged up ;P Hmmm, what does the output from "radiusd -X" look like for the exchange? Lenir wrote: >Tavis, > >Thanks for your input, that did fix the problem. I did have the "files" >before "sql" in radiusd.conf. Also I followed your advice about taking out >"Auth-Type" out of mysql table and let DEFAULT in users file do the trick. > >However it's semi-working. > >Accourding to the snippet from my ser.cfg file, now I get the following in >stderr: >0(4866) 000d2890-d47f0003-4a230347-53c6189b(a)yy.yy.yy.yy - >sip:1000@xx.xx.xx.xx - User authenticated... > 0(4866) Credentials: User is in Radius Group Dialin!!!! > 0(4866) Credentials: User is in Radius Group Dialin2!!!! > >No matter which parameter I use for the function radius_is_user_in(), it >always returns TRUE. When in fact it should return FALSE for Group Dialin2. >I've tried: > >if (radius_is_user_in("From", "Dialin2")){... >if (radius_is_user_in("Credentials", "Dialin2")){... > > > > > >Here's what I did to fix future problems: > >EFAULT Auth-Type = System > Fall-Through = 1 > >DEFAULT Service-Type == Call-Check, Auth-Type := Digest > >DEFAULT Service-Type == Group-Check, Auth-Type := None > >DEFAULT Service-Type == SIP-Session, Auth-Type := Digest > >DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None > >DEFAULT Service-Type == SIP-Caller-AVPs, Auth-Type := None > > >Also, for those of you using the latest version of freeradius, you may have >to comment out the following lines as they conflict with dictionary.ser (SER >CVS) and dictionary.sip (comes with radiusclient-NG) > >#VALUE Service-Type Voice 12 >#VALUE Service-Type Fax 13 >#VALUE Service-Type Modem-Relay 14 >#VALUE Service-Type IAPP-Register 15 >#VALUE Service-Type IAPP-AP-Check 16 > > >Thanks, > > >Lenir > > >-----Original Message----- >From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On >Behalf Of Tavis P >Sent: Friday, October 14, 2005 1:49 PM >To: lsantiago(a)globalgatewaycom.com >Cc: serdev(a)iptel.org; serusers(a)iptel.org; devel(a)openser.org; >users(a)openser.org >Subject: [Serusers] Re: [Serdev] group_radius radius_is_user_in > >Oops, i spoke too soon > >It looks like you have placed the "files" module before the "sql" module >in your radiusd.conf > >Its matching your DEFAULT entry in files (setting the Auth-Type to none) >but the sql module is later changing the Auth-Type to "digest" > >Changing the order would solve this problem, as you want it to match the >SQL statement first and than the section in the files last (which >changes the Auth-Type) > >Also, you may want to reduce the load on your database by not setting >the Auth-Type in the database and instead setting in the users file with >a DEFAULT statement as (at least in my case) it isn't somthing that need >to be dynamic. > >lenirsantiago(a)yahoo.com wrote: > > > >>Hello list, >> >>I've been trying my hardest today to get group_radius to work, and its >>function radius_is_user_in(). >>I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest >>authentication. >> >>Radius authentication works fine. >>The problem is that when radius_is_user_in() function gets called, it sends >>a radius message but without the User-Password field and freeradius >>complains that it requires it since we are using Digest. >>I've seen a couple of posts here, but they were never answered: >>http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >>http://mail.iptel.org/pipermail/serusers/2005-March/017075.html >> >>----- >>I have a small test in my ser.cfg file: >> if (!radius_www_authorize("")) { >> xlog("L_I","%ci - %fu - User not authenticated, Radius >>Authenticating...\n"); >> www_challenge("","0"); >> break; >> } else { >> xlog("L_I","%ci - %fu - User authenticated...\n"); >> }; >> >> if (radius_is_user_in("From", "Dialin")){ >> xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); >> } else { >> xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); >> }; >> >> if (radius_is_user_in("Credentials", "Dialin2")){ >> xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); >> } else { >> xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); >> }; >> >>----- >>In /etc/raddb/users file I have the following at line 152: >>DEFAULT Auth-Type = System >> Fall-Through = 1 >> >>DEFAULT Service-Type == Group-Check, Auth-Type := None >> >>DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None >> >>----- >> >>These are mysql tables: >> >>+----+----------+-----------+----+----------+ >>| id | UserName | Attribute | op | Value | >>+----+----------+-----------+----+----------+ >>| 1 | Jhassell | Password | == | changeme | >>| 2 | Rneis | Password | == | changeme | >>| 3 | 1000 | Password | == | 1000 | >>| 4 | 2000 | Password | == | 2000 | >>| 5 | 3000 | Password | == | 3000 | >>| 8 | 1000 | Auth-Type | := | Digest | >>+----+----------+-----------+----+----------+ >> >>+----+-----------+-----------+----+--------+ >>| id | GroupName | Attribute | op | Value | >>+----+-----------+-----------+----+--------+ >>| 6 | Dialin | Auth-Type | := | Accept | >>+----+-----------+-----------+----+--------+ >> >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>----+ >>| id | GroupName | Attribute | op | Value | >>prio | >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>----+ >>| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >>0 | >>| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >>0 | >>+----+-----------+---------------+----+----------------------------------+- >> >> >- > > >>----+ >> >>+----+----------+---------------+----+------------------+ >>| id | UserName | Attribute | op | Value | >>+----+----------+---------------+----+------------------+ >>| 1 | 1000 | Reply-Message | = | "Authenticated" | >>| 2 | 1000 | Sip-Group | = | Dialin | >>| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >>+----+----------+---------------+----+------------------+ >> >>+----+----------+------------+ >>| id | UserName | GroupName | >>+----+----------+------------+ >>| 1 | Jhassell | Dialin | >>| 2 | Rneis | Staticdial | >>| 3 | 1000 | Dialin | >>| 4 | 2000 | Dialin | >>| 5 | 3000 | Dialin | >>| 6 | 3000 | Dialin2 | >>+----+----------+------------+ >> >>------ >> >>This is the debug I get from freeradius for the group check: >> >>rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >>length=67 >> User-Name = "1000(a)xx.xx.xx.xx" >> Sip-Group = "Dialin2" >> Service-Type = Group-Check >> NAS-IP-Address = 127.0.0.1 >> NAS-Port = 0 >> Processing the authorize section of radiusd.conf >>modcall: entering group authorize for request 74 >> modcall[authorize]: module "preprocess" returns ok for request 74 >> modcall[authorize]: module "chap" returns noop for request 74 >> modcall[authorize]: module "mschap" returns noop for request 74 >> modcall[authorize]: module "digest" returns noop for request 74 >> rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >>"1000(a)xx.xx.xx.xx" >> rlm_realm: Found realm "xx.xx.xx.xx" >> rlm_realm: Adding Stripped-User-Name = "1000" >> rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx >> rlm_realm: Adding Realm = "xx.xx.xx.xx" >> rlm_realm: Authentication realm is LOCAL. >> modcall[authorize]: module "suffix" returns noop for request 74 >> rlm_eap: No EAP-Message, not doing EAP >> modcall[authorize]: module "eap" returns noop for request 74 >> users: Matched entry DEFAULT at line 152 >> users: Matched entry DEFAULT at line 158 >> modcall[authorize]: module "files" returns ok for request 74 >>radius_xlat: '1000' >>rlm_sql (sql): sql_set_user escaped user --> '1000' >>rlm_sql (sql): Released sql socket id: 0 >> modcall[authorize]: module "sql" returns ok for request 74 >>modcall: group authorize returns ok for request 74 >> rad_check_password: Found Auth-Type Digest >>auth: type "digest" >> Processing the authenticate section of radiusd.conf >>modcall: entering group authenticate for request 74 >>ERROR: No Digest-Nonce: Cannot perform Digest authentication >> modcall[authenticate]: module "digest" returns invalid for request 74 >>modcall: group authenticate returns invalid for request 74 >>auth: Failed to validate the user. >>Delaying request 74 for 1 seconds >>Finished request 74 >>Going to the next request >>--- Walking the entire request list --- >>Waking up in 1 seconds... >>--- Walking the entire request list --- >>Waking up in 1 seconds... >>--- Walking the entire request list --- >>Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 >> Reply-Message = "Authenticated" >>Waking up in 4 seconds... >>--- Walking the entire request list --- >>Cleaning up request 74 ID 15 with timestamp 434f1121 >>Nothing to do. Sleeping until we see a request. >> >> >> >> >> >>Any help in this matter would be deeply appreciated, >> >> >> >> >>Lenir >> >> >> >> >>_______________________________________________ >>Serdev mailing list >>Serdev(a)iptel.org >>http://mail.iptel.org/mailman/listinfo/serdev >> >> >> >> >> >> > >_______________________________________________ >Serusers mailing list >Serusers(a)iptel.org >http://mail.iptel.org/mailman/listinfo/serusers > > >_______________________________________________ >Serdev mailing list >Serdev(a)iptel.org >http://mail.iptel.org/mailman/listinfo/serdev > > > >

2 2

[Users] Integrating openser auth with other application
by Barry Flanagan 19 Oct '05

19 Oct '05

Hi, I would like to have openser use an existing database and table for auth_db in order to use the same credentials for both openser and email Is it possible to have just the auth_db module use a specific database and table, and all the other modules to use the standard openser tables? When I try this my setting modparam("auth_db", "db_url", "mysql://user:pass@db1/mail") modparam("userloc", "db_url", "mysql://user:pass@db1/openser") Openser complains that the version table cannot be found. Do all tables have to be in the same database, or is it possible to split out just the username/password/domain for auth_db to use a different database? Thanks in advance. -- -Barry Flanagan

3 3

[Serusers] How many BHCC?
by Matteo Piazza 19 Oct '05

19 Oct '05

How many BHCC (busy hour call completions) SER can support? Matteo -------------------------------------- Matteo Piazza, Junior Researcher Create-Net http://www.create-net.it --------------------------------------

2 1

[Serusers] Hot to get call length for billing with mysql accounting
by administrator 19 Oct '05

19 Oct '05

Hello Jiri and everybody I set up ser with accounting and used record_route to force BYEs to visit my server. The problem now is that I do not know how to correlate INVITEs and BYEs to get call duration for billing purposes. Any ideas? Thank you Yiannis Marios

1 0

Re: [Serusers] [OT] MAX TNT as a Media Gateway
by bruno＠openline.com.br 19 Oct '05

19 Oct '05

--- Vamsi Pottangi <vamsipottangi(a)gmail.com> escreveu: > Lucent's MAX TNT works perfect as PSTN/Media gateway ! I din't find any > problems as of now. > I used 8E1 cards with madd2,madd3 cards for SIP. Yes, it supports most > codecs including g729. > It doesn't have any problem with interoperating with SER. Hello which OS version are you using on your TNT? Cheers !3runo

1 0

[Serusers] Problem with CANCEL and call redirection
by Xavier TRENTIN 19 Oct '05

19 Oct '05

Hi all, I'm trying to do a serial call forwarding if callees don't answer. I've added a field in a table which is the number the users want to forward the call if they don't answer. I've a shell script (myScript.sh) which works like that: If the forward mode is activated for the user, then the address is overwritten and the script returns 0, else it returns 1. My main route ends by "t_on_failure("1");" in my ser.cfg, and I've write these lines after the main route: /failure_route[1] { if (exec_dset("/path/to/myscript/myScript.sh \"$SIP_HF_TO\"")); { route(2); } break; } route[2] { sl_send_reply("300","Redirect"); break; } / I also use the tm module and I've set the fr_inv_timer and the fr_timer to the values I wanted. In my configuration : User 1 wants to forward the call to User 2. User 2 wants to forward the call to User 3. User 3 wants to forward the call to User 1. When User 4 calls User 1, who doesn't answer, the call is well forwarded to User 2 after 5 ringings. User 2 doesn't answer and the call is well forwarded to User 3 . Etc. So it works fine, if at least one of the callee answers. But if the caller hangs up (sending a CANCEL to the callee), the phones are always ringing and forwarding the call in the same order. Does anybody have an idea to solve this problem? Thanks. B.R. Xavier.

1 0

[Serusers] Can I send Binary Data through SIP IM?
by Abhijit A. Mahajani 19 Oct '05

19 Oct '05

Hi, Can I send Binary Data thorough SIP IM? Does The SIP IM has an option to set the data as Binary? As far as i know, SIP IM genarally process text data. Thanks and regards. Abhijit

1 0

[Serusers] [OT] MAX TNT as a Media Gateway
by Rodrigo P. Telles 19 Oct '05

19 Oct '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Folks, I used MAX TNT for dial-up users in the past and now I have a choice to update that equipment to support SIP and act as a PSTN/Media Gateway. I have some doubts about it: 1 - Is there some one using it? (what hardware configuration?) 2 - Does it support all CODEC's? 3 - Does it 'speak' SIP well with SER/OpenSER? (any reference about supported RFC's?) 4 - Any other additional information is welcome! Thanks in advance. - -- ============================================ Rodrigo P. Telles <telles(a)devel.it> TI Manager Devel-IT - http://www.devel.it IVOZ # 1029 +55 14 3324-1200 Bestcom Group ============================================ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVBViiLK8unYgEMQRAtUYAJ9b8c5CAMd+Exxdcc/mtEvP927zIwCff6ZE ajusWOEWVjxGEVzo+SSQyZg= =FHXs -----END PGP SIGNATURE-----

2 1

[Serusers] WM Contact problem
by Geovany Andres Gonzalez Ruiz 18 Oct '05

18 Oct '05

Hello, I am using SER + MySQL, and I had a problem. When I used the WM software to register against the SER in the Location table only had in the contact field the domain of WM, I meant The first message was: 192.168.0.138:5060 -> 192.168.0.184:12469 SIP/2.0 200 OK..Via: SIP/2.0/UDP 192.168.0.184:12469.. From:<sip:gagonzal@cursovoip.com>;tag=09c07cd1-f595-4fff-bcf9-7b12e6721bf5.. To:<sip:gagonzal@cursovoip.com>;tag=b27e1a1d33761e85846fc98f5f3a7e58.7529..Call-ID: 1ee7bb57-9c25-4e65-b4ac-4264317ebe7d(a)192.168.0.184.. CSeq: 2 REGISTER.. Contact:<sip:192.168.0.184:12469>;expires=1200..Server: Sip EXpress router (0.9.3(i386/linux)).. Content-Length: 0..Warning: 392 192.168.0.138:5060 "Noisy feedback tells: pid=9156 req_src_ip=192.168.0.184 req_src_port=1083 in_uri=sip:cursovoip.com out_uri=sip:cursovoip.com via_cnt==1" serctl ul show ...Record(0xb5ebff88)... domain: 'location' aor : 'gagonzal' ~~~Contact(0xb5ec01f8)~~~ domain : 'location' aor : 'gagonzal' Contact : 'sip:192.168.0.184:12469' Expires : 1157 q : Call-ID : '1ee7bb57-9c25-4e65-b4ac-4264317ebe7d(a)192.168.0.184' CSeq : 2 User-Agent: 'Windows RTC/1.0' received : '' State : CS_SYNC Flags : 0 next : (nil) prev : (nil) Someone knows how could I change the behavior of windows messanger to send the contact field like that (<sip:192.168.0.184:12469>) without specific information of the user? or Someone knows how could I prepare SER to manipulate the REGISTER message and put in the contact field in the location table the information from URI ?? Thanks in advance. Atentamente, Geovany Andrés González Ruiz Curriculum Lead (CL) CATC (Cisco Academy Trainig Center) Colombia-Ecuador Universidad Nacional de Colombia http://cnap.unalmed.edu.co

1 0

[Serusers] 423 message for Register Expires
by share phone 18 Oct '05

18 Oct '05

Hi All, The default_expires is 600 and my min is 300 and max expires is 600 when i send the REGISTER message with 3600 it should send me 423 with 600 the openser.cfg do not do it. openser.cfg modparam("registrar","default_expires",600) modparam("registrar","min_expires",600) modparam("registrar","max_expires",1200) Is there any settings that need to be done. Regards, sunil. --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

1 0

Re: [Users] Openser as non root
by Daniel-Constantin Mierla 18 Oct '05

18 Oct '05

apart of the command line options (see openser -h) you can set some parameters in the configuration file in order to switch the user and group. Check the dokuwiki: http://openser.org/dokuwiki/doku.php?id=openser_core_cookbook#group_gid http://openser.org/dokuwiki/doku.php?id=openser_core_cookbook#user_uid Cheers, Daniel On 10/18/05 11:40, Nelson Silva wrote: > > Tavis: want to share how you did it ? > > thk > > Nelson Silva > ----------------- > email: nelson.silva(a)neuvex.com > website: http://www.neuvex.com > > > Date: Mon, 17 Oct 2005 11:05:21 -0700 > From: Tavis P <tavis.lists(a)galaxytelecom.net > <javascript:top.opencompose('tavis.lists(a)galaxytelecom.net','','','1')>> > Subject: Re: [Users] Openser as non root > To: Users(a)openser.org > <javascript:top.opencompose('Users(a)openser.org','','','1')> > Message-ID: <4353E7E1.2020109(a)galaxytelecom.net > <javascript:top.opencompose('4353E7E1.2020109(a)galaxytelecom.net','','','1')>> > Content-Type: text/plain; charset=ISO-8859-1 > > I'm currently running OpenSER both as non root and also chrooted without > issue > > Nelson Silva wrote: > > > Anyone got a info how to make openser for non root ? > > > > for example, openser -U openser -G openser ? > > > > > > > > thk > > > > Nelson Silva > > ----------------- > > email: nelson.silva(a)neuvex.com > <javascript:top.opencompose('nelson.silva(a)neuvex.com','','','1')> > > website: http://www.neuvex.com > <http://webmail.neuvex.comparse.pl?redirect=http%3A%2F%2Fwww.neuvex.com> > > > > > >------------------------------------------------------------------------ > > > >_______________________________________________ > >Users mailing list > >Users(a)openser.org > <javascript:top.opencompose('Users(a)openser.org','','','1')> > >http://openser.org/cgi-bin/mailman/listinfo/users > <http://webmail.neuvex.comparse.pl?redirect=http%3A%2F%2Fopenser.org%2Fcgi-b…> > > > > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users >

1 0

[Serusers] call drops after about 30 seconds
by maka 18 Oct '05

18 Oct '05

hello everyone, I am using ser-0.9.0 together wit asterisk-1.0.6. I am testing it with a couple of hardware AT-320 IP phones from Atcom, using a PA168S chip. They seem to be working fine, with stun behind nat, and they can call other user-agents (softphones, asterisk adn the pstn through it), but whenever I make a call between the two phones, everytime the call is dropped after about 34 seconds, even when calling between phones on Public IP addresses. I am actually clueless why this happens, I tried changing the NAT ttl value, bu to no effect, and it is not supposed to be a codec mismatch too since both phones use absolutely the same codecs, in the same order of preference. Appreciate the feedback, cheers -- I'm sick and tired of being sick and tired...

1 0

[Serusers] mangling request URI according to To: and userlocation value
by Francesco Fondelli 18 Oct '05

18 Oct '05

Hi all, let's say SER receives this invite: INVITE sip:foopbx@ip.com SIP/2.0 Via: ... To: "058633345880101" <058633345880101(a)ip.com> [cut] and assume that there is an entry in the user location table for ''foopbx(a)ip.com" (ie it registered with SER) and assume that entry in userloc has a "Server: Bar 1.0 PBX" value I'm wondering if is possible to do something like that: if (!lookup("location")) { log(1, "User not in user database...\n"); route(whatever); break; }; if(get_server_string_from_userloc() =~ "Bar 1.0 PBX") { take the number from the "To:" header and write it in the request uri. So the forwarded msg will look like: INVITE sip:058633345880101@ip.com SIP/2.0 Via: ... To: "058633345880101" <058633345880101(a)ip.com> [cut] }; thank you very much, I really need your help Ciao FF

1 1

[Serusers] Billing System Asterisk works
by Mr Greg Plater 18 Oct '05

18 Oct '05

AstBill http://astbill.com/whatis This billing system I have implemented and tested to work for both prepaid and post paid billing Simple to setup with asterisk and easy to manage. Uses: AstBill Drupal Mysql Apache Calls pass to Asterisk from ser for termination to PSTN. They are rated and billed. I have edited SERWEB to display account records and current prepaid balances from Astbill database Check it out it works

1 0

Re: [Users] Openser as non root
by Nelson Silva 18 Oct '05

18 Oct '05

1 0

[Users] Multiple media proxy
by Fernando Rodriguez 18 Oct '05

18 Oct '05

Hello, Im trying tos et up media Proxy to listen to various ip y changed the mediaporxy.ini and started various mediaproxyX.py on my box I wondering how to tell openser to use the socks. Now I have this in my openser.cfg modparam("mediaproxy", "mediaproxy_socket", "/var/run/mediaproxy.sock") modparam("mediaproxy", "natping_interval", 20) modparam("mediaproxy", "mediaproxy_socket", "/var/run/proxydispatcher.sock") can I set up multiple lines regarding mediaproxy.sock ?? modparam("mediaproxy", "mediaproxy_socket", "/var/run/mediaproxy.sock") modparam("mediaproxy", "mediaproxy_socket", "/var/run/mediaproxy1.sock") modparam("mediaproxy", "mediaproxy_socket", "/var/run/mediaproxy2.sock") what about proxydispatcher.py do I also have to set up multiple instances of it ?? please any information regarding this will be appreciated Thanks a lot

3 2

[Serusers] iptel AA
by tcchan 18 Oct '05

18 Oct '05

Hello, Does anybody know the status of iptel AA module? If you go to the web site www.iptel.org/aa/, you can see that the product is available under iptel's commercial license and the contact is info(a)iptel.org. Problems is I tried twice to contact them and there is no response. What happen? Regards, TC Chan

2 1

[Serusers] no login to openser
by Ronald Wiplinger 18 Oct '05

18 Oct '05

(It is my first try, .... I am sure I make something wrong) I have installed openser and it is now running for a while, ... today I have added two users by: export SIP_DOMAIN=voip.mydomain.com openserctl add 800000 secret0 me(a)mydomain.com openserctl add 800001 secret1 me(a)mydomain.com first test: openserctl ul show Dumping all contacts may take long: are you sure you want to proceed? [Y|N] y ===Domain list=== ---Domain--- name : 'aliases' size : 512 table: 0x2a96f6d120 d_ll { n : 0 first: (nil) last : (nil) } ---/Domain--- ---Domain--- name : 'location' size : 512 table: 0x2a96f68f38 d_ll { n : 1 first: 0x2a96f71180 last : 0x2a96f71180 } ...Record(0x2a96f71180)... domain: 'location' aor : 'admin' ~~~Contact(0x2a96f71298)~~~ domain : 'location' aor : 'admin' Contact : 'sip:601@vpbx.elmit.com' Expires : Permanent q : 1 Call-ID : 'The-Answer-To-The-Ultimate-Question-Of-Life-Universe-And-Everything' CSeq : 42 User-Agent: 'SIP Express Router FIFO' received : '' State : CS_SYNC Flags : 128 Sock : none (null) next : (nil) prev : (nil) ~~~/Contact~~~~ .../Record... ---/Domain--- ===/Domain list=== Here it says domain: 'location' that sounds for me not correct, shouldn't it be voip.mydomain.com ?? I use than a hard phone and set it up, but it cannot log on, ... I also do not see anything happen, when I use openserctl moni What have I done wrong? BTW, I checked with serweb, and the user 800000 can login! bye Ronald Wiplinger

2 7

[Serusers] Caller ID revisited....
by sip 17 Oct '05

17 Oct '05

So... I've scoured the archives and can't find quite the answer I'm looking for. I'd like to do caller ID in such a way that the 'Display Name' or, in sip terms, comment portion of the From header, isn't displayed for ALL users (or is displayed in a particular format for ALL users). I know I can use UAC to rewrite a particular From tag in a particular way, but I haven't figured out how to make those changes heuristically global. For instance, I'd like a way to say that if the From tag looked like: From: "Jimmy the Fish" <sip:11231234567@sip.domain.com>;tag=3905520531 I'd like to rewrite it to be either: From: <sip:11231234567@sip.domain.com>;tag=3905520531 OR From: "1-123-123-4567" <sip:11231234567@sip.domain.com>;tag=3905520531 Or some such. I'd like to have heuristic control, in that I'd rather not have to have a UAC rewrite entry for each number. If it has to be done via a db query, fine, but I don't get how to do that, either. Any ideas? N.

1 0

Re: [Serusers] save("location") causing routing errors?
by Patrick Jordan-Smith 17 Oct '05

17 Oct '05

On Sun, 2005-10-16 at 17:57 -0400, sip wrote: > That should be couched in an if(method=="REGISTER") block. > > > In such a way, it would never GET an INVITE > Yes, but then how do we handle a situation where the server has fallen over (happens sometimes) and then come back up, we check them but until the UA sends another REGISTER we don't know where they are and can't get incoming calls to that UA. Maybe I can force the re-register period to be really small (5 seconds?) Thanks for your help, Patrick -- Patrick Jordan-Smith Mercury Telecommunications Ltd voice +64-9-916-0300 paper +64-9-916-0301

2 4

[Serusers] onsip feature fwd script with asterisk voicemail
by Aisling 17 Oct '05

17 Oct '05

Hi, I was wondering if anyone has asterisk voicemail working with the default onsip feature forwarding script?...If so would it be possible to post the relevant snippets? Many thanks. Aisling. -------------------Legal Disclaimer--------------------------------------- The above electronic mail transmission is confidential and intended only for the person to whom it is addressed. Its contents may be protected by legal and/or professional privilege. Should it be received by you in error please contact the sender at the above quoted email address. Any unauthorised form of reproduction of this message is strictly prohibited. The Institute does not guarantee the security of any information electronically transmitted and is not liable if the information contained in this communication is not a proper and complete record of the message as transmitted by the sender nor for any delay in its receipt.

2 1

Re: [Users] Openser as non root
by Tavis P 17 Oct '05

17 Oct '05

I'm currently running OpenSER both as non root and also chrooted without issue Nelson Silva wrote: > Anyone got a info how to make openser for non root ? > > for example, openser -U openser -G openser ? > > > > thk > > Nelson Silva > ----------------- > email: nelson.silva(a)neuvex.com > website: http://www.neuvex.com > > >------------------------------------------------------------------------ > >_______________________________________________ >Users mailing list >Users(a)openser.org >http://openser.org/cgi-bin/mailman/listinfo/users > >

1 0

[Users] Openser as non root
by Nelson Silva 17 Oct '05

17 Oct '05

1 0

[Users] monitor ser
by Richard Z 17 Oct '05

17 Oct '05

Hi, I'd like to use monit to monitor ser. Sometime ser has the pid file, but stops responding to any request. I want to periodically send an OPTIONS message to the udp port 5060 and expects the answer back. However can't make it work with monit. The config is something like this, check process program with pidfile /var/run/ser.pid start program = "/etc/init.d/rc.serstart" stop program = "/etc/init.d/rc.serstop" if failed port 5060 type udp send "OPTIONS sip:test@........" expect "SIP/2.0 200 OK" with timeout 2 seconds then alert I can see the reply with ngrep. But monit still reports "connection failed". Any suggestion? Thanks, Richard

3 4

[Serusers] sending data via message
by Ángel Gómez 17 Oct '05

17 Oct '05

Is posible to send data using the MESSAGE pirmitive? Can i use the content-tipe to set oter content types in the MESSAGE? I need to send data throug a SIP server, not opening a new conexion. Can any one help me?

1 0

[Users] how set timeout when connection is terminate (send BYE command)
by Michal Prorok 17 Oct '05

17 Oct '05

Hello, How can I set timeout for BYE command when connection will be terminated (reset computer eg.). In acc table is only INVITE+ACK, but not BYE command. Failure route is: failure_route[1] { if (t_check_status("487")) { break; }; if (isflagset(26) && t_check_status("486")) { if (avp_pushto("$ruri", "s:fwdbusy")) { avp_delete("s:fwdbusy"); resetflag(26); route(6); break; }; }; if (isflagset(27) && t_check_status("408")) { if (avp_pushto("$ruri", "s:fwdnoanswer")) { avp_delete("s:fwdnoanswer"); resetflag(27); route(6); break; }; }; Regards Michal Prorok

2 1

[Serusers] SER Call forwording with Shell Skript
by Like 17 Oct '05

17 Oct '05

Hello Community, How can I send a reply to a second SIP Uri ? I found this code in the Web: [CODE] cat > /tmp/ser_fifo <<EOF :t_uac_dlg:ser_fifo MESSAGE $SIP_ORUI . From: IMtoSMS(a)192.168.0.16 To: $SIP_ORUI Contact: $SIP_HF_CONTACT Content-Type: text/plain; charset=UTF-8 x:+$SMS . #$SIP_HF_FROM: $text $@ . EOF [/CODE] When I tried to send the Message , Ser show me a lot of errors like this: [ERROR] fifo_server: Command must begin with :: Message or must begin with to: [/ERROR] I become a Call from User A to User B. So User A called test(a)mydomain.de and Ser is routing this call to an Skript which start its work. At the End of these Skript, i will send this INVITE from Caller A to Caller B with forwording or so. How can i do this ? Can i do this , with the Code from the upper Skript ? Thanx for your help, Dirk

1 0

[Serusers] Openser ENUM or Asterisk
by Ronald Wiplinger 17 Oct '05

17 Oct '05

Can anybody give me a hint, please. I want to use Openser to connect in this order: a. SIP phones to SIP phones directly b. ENUM lookup and connect c. forward to Asterisk bye Ronald Wiplinger

3 2

RE: RE: [Serusers] Radius authentication and accounting issues
by deepak.chandrasekaran＠wipro.com 17 Oct '05

17 Oct '05

I followed the instructions in SER_RADIUS how-to but still I am not sure about getting SER work with radius support… I am successful in installing freeradius and radiusclient-ng libraries…the sample tests as given in that doc seems to work fine. I am not very sure about the configuration changes to be done with ser.cfg…can u please tell me the changes required for the same? Thanks & Regards, Deepak ________________________________ From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On Behalf Of zhangshuai Sent: Monday, October 17, 2005 4:35 PM To: serusers Subject: Re: RE: [Serusers] Radius authentication and accounting issues Dear deepak.chandrasekaran, 　　 No need to load auth_db. About how to configure ser and radius, you could check it over here: http://www.iptel.org/ser/doc/ser_radius/ser_radius.html I hv loaded the mysql.so module but am not sure if auth_db is also required… Can you suggest the changes required for SER radius support? Regards, Deepak ________________________________ From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On Behalf Of zhangshuai Sent: Monday, October 17, 2005 2:46 PM To: serusers Subject: Re: RE: [Serusers] Radius authentication and accounting issues Dear deepak.chandrasekaran, Do you load the module "mysql.so"?　　 Hi harry, I don’t find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

[Users] Speeddial module
by Reto.Kortas＠t-systems.com 17 Oct '05

17 Oct '05

Hi, is it possible to use the speeddial module on a per-domain mode. All subscribers, which belong to the same domain, shall be able to use the same speeddial entries. Reto

2 1

Re: RE: [Serusers] Radius authentication and accounting issues
by zhangshuai 17 Oct '05

17 Oct '05

Dear deepak.chandrasekaran, 　　 No need to load auth_db. About how to configure ser and radius, you could check it over here: http://www.iptel.org/ser/doc/ser_radius/ser_radius.html I hv loaded the mysql.so module but am not sure if auth_db is also required… Can you suggest the changes required for SER radius support? Regards, Deepak From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On Behalf Of zhangshuai Sent: Monday, October 17, 2005 2:46 PM To: serusers Subject: Re: RE: [Serusers] Radius authentication and accounting issues Dear deepak.chandrasekaran, Do you load the module "mysql.so"?　　 Hi harry, I don’t find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak

1 0

RE: [Serusers] Radius authentication and accounting issues
by deepak.chandrasekaran＠wipro.com 17 Oct '05

17 Oct '05

I hv loaded the mysql.so module but am not sure if auth_db is also required… Can you suggest the changes required for SER radius support? Regards, Deepak ________________________________ From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On Behalf Of zhangshuai Sent: Monday, October 17, 2005 2:46 PM To: serusers Subject: Re: RE: [Serusers] Radius authentication and accounting issues Dear deepak.chandrasekaran, Do you load the module "mysql.so"?　　 Hi harry, I don’t find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

[Serusers] ser sems, how to
by Abdul Lateef 17 Oct '05

17 Oct '05

Hi all, I am really caught in big trouble. How I can make link SEMS with SER to use SEMS IVR. I was trying using ser_for_ivr configuration file which is shipped with SEMS plug-in. but i found that loadmodule "/usr/local/lib/ser/modules/vm.so" is not working because I cannot see any module name with vm.so. I will be really so appreciated if any one can point me right way. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com

1 0

[Users] acc with radius compilation error
by jayesh nambiar 17 Oct '05

17 Oct '05

hi all, I am using openser 0.9.5. I wanted to radius only accounting. I downloaded radius from freeradius. But while compiling acc with radius support it gives an error. I am running openser on fedora core 4. Anyone faced a similar problem. Any advice will help me. thanks jayesh --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

3 4

RE: RE: [Serusers] Radius authentication and accounting issues
by deepak.chandrasekaran＠wipro.com 17 Oct '05

17 Oct '05

I hv loaded the mysql.so module but am not sure if auth_db is also required… Can you suggest the changes required for SER radius support? Regards, Deepak ________________________________ From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@iptel.org] On Behalf Of zhangshuai Sent: Monday, October 17, 2005 2:46 PM To: serusers Subject: Re: RE: [Serusers] Radius authentication and accounting issues Dear deepak.chandrasekaran, Do you load the module "mysql.so"?　　 Hi harry, I don’t find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak -----Original Message----- From: harry gaillac [mailto:gaillacharry@yahoo.fr] Sent: Monday, October 17, 2005 1:46 PM To: Deepak Chandrasekaran (WT01 - Voice & Next Generation Networks) Subject: RE: [Serusers] Radius authentication and accounting issues hello, Post you error message Harry --- deepak.chandrasekaran(a)wipro.com a 閏rit : > > Hi all, > > > > I am trying to provide radius authentication and > accounting in ser > 0.9.3. > > I am using freeradius 1.0.4. > > > > I have compiled SER successfully and got all .so > files. > > > > Every time I try to start ser, it crashes. > > Can anybody suggest some possible reasons as to why > this happens? > > > > I followed radius how-to doc to configure radius > server and > radiusclient-ng 0.5.1 library. > > > > Can anyone provide with sample ser.cfg file modified > to use radius > authentication and accounting? > > > > Any help would be greatly appreciated. > > > > Thanks in advance. > > > > Regards, > > Deepak > > > > > > > > Confidentiality Notice > > The information contained in this electronic message > and any attachments to this message are intended > for the exclusive use of the addressee(s) and may > contain confidential or privileged information. If > you are not the intended recipient, please notify > the sender at Wipro or Mailadmin(a)wipro.com > immediately > and destroy all copies of this message and any attachments.> _______________________________________________ > Serusers mailing list > Serusers(a)iptel.org > http://mail.iptel.org/mailman/listinfo/serusers > ___________________________________________________________________________ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger T閘閏hargez cette version sur http://fr.messenger.yahoo.com Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

Re: RE: [Serusers] Radius authentication and accounting issues
by zhangshuai 17 Oct '05

17 Oct '05

Dear deepak.chandrasekaran, Do you load the module "mysql.so"?�� Hi harry, I don��t find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak -----Original Message----- From: harry gaillac [mailto:gaillacharry@yahoo.fr] Sent: Monday, October 17, 2005 1:46 PM To: Deepak Chandrasekaran (WT01 - Voice & Next Generation Networks) Subject: RE: [Serusers] Radius authentication and accounting issues hello, Post you error message Harry --- deepak.chandrasekaran(a)wipro.com a �crit : > > Hi all, > > > > I am trying to provide radius authentication and > accounting in ser > 0.9.3. > > I am using freeradius 1.0.4. > > > > I have compiled SER successfully and got all .so > files. > > > > Every time I try to start ser, it crashes. > > Can anybody suggest some possible reasons as to why > this happens? > > > > I followed radius how-to doc to configure radius > server and > radiusclient-ng 0.5.1 library. > > > > Can anyone provide with sample ser.cfg file modified > to use radius > authentication and accounting? > > > > Any help would be greatly appreciated. > > > > Thanks in advance. > > > > Regards, > > Deepak > > > > > > > > Confidentiality Notice > > The information contained in this electronic message > and any attachments to this message are intended > for the exclusive use of the addressee(s) and may > contain confidential or privileged information. If > you are not the intended recipient, please notify > the sender at Wipro or Mailadmin(a)wipro.com > immediately > and destroy all copies of this message and any attachments.> _______________________________________________ > Serusers mailing list > Serusers(a)iptel.org > http://mail.iptel.org/mailman/listinfo/serusers > ___________________________________________________________________________ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger T�l�chargez cette version sur http://fr.messenger.yahoo.com

1 0

RE: [Serusers] Radius authentication and accounting issues
by deepak.chandrasekaran＠wipro.com 17 Oct '05

17 Oct '05

Hi harry, I don't find any error messages. But whenever I try to start SER, it crashes immediately. I am attaching the ser.cfg file herewith. Here is the log message: Nov 16 11:01:01 crond(pam_unix)[29639]: session closed for user root Nov 16 12:01:01 crond(pam_unix)[30131]: session opened for user root by (uid=0) Nov 16 12:01:01 crond(pam_unix)[30131]: session closed for user root Nov 16 13:01:01 crond(pam_unix)[30623]: session opened for user root by (uid=0) Nov 16 13:01:02 crond(pam_unix)[30623]: session closed for user root Nov 16 14:01:01 crond(pam_unix)[31115]: session opened for user root by (uid=0) Nov 16 14:01:02 crond(pam_unix)[31115]: session closed for user root Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ser: WARNING: fix_socket_list: could not rev. resolve 10.200.220.8 Nov 16 14:14:23 ./ser[31240]: Maxfwd module- initializing Am I missing out something? Thanks & Regards, Deepak -----Original Message----- From: harry gaillac [mailto:gaillacharry@yahoo.fr] Sent: Monday, October 17, 2005 1:46 PM To: Deepak Chandrasekaran (WT01 - Voice & Next Generation Networks) Subject: RE: [Serusers] Radius authentication and accounting issues hello, Post you error message Harry --- deepak.chandrasekaran(a)wipro.com a écrit : > > Hi all, > > > > I am trying to provide radius authentication and > accounting in ser > 0.9.3. > > I am using freeradius 1.0.4. > > > > I have compiled SER successfully and got all .so > files. > > > > Every time I try to start ser, it crashes. > > Can anybody suggest some possible reasons as to why > this happens? > > > > I followed radius how-to doc to configure radius > server and > radiusclient-ng 0.5.1 library. > > > > Can anyone provide with sample ser.cfg file modified > to use radius > authentication and accounting? > > > > Any help would be greatly appreciated. > > > > Thanks in advance. > > > > Regards, > > Deepak > > > > > > > > Confidentiality Notice > > The information contained in this electronic message > and any attachments to this message are intended > for the exclusive use of the addressee(s) and may > contain confidential or privileged information. If > you are not the intended recipient, please notify > the sender at Wipro or Mailadmin(a)wipro.com > immediately > and destroy all copies of this message and any attachments.> _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > ___________________________________________________________________________ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

[Serusers] only receive trying,but no ring
by fishman7788 17 Oct '05

17 Oct '05

hi I now work to make a call,receive the tring packet but now ring later,the packet is below,pls help. > Received from udp:10.110.11.9:5060 at 17/10/2005 16:46:47:875 (555 bytes): SIP/2.0 100 trying -- your call is important to us Via: SIP/2.0/UDP 10.110.10.149:1357;branch=z9hG4bK-rkad5409p17a;rport=1357 From: "test1" <sip:1234@10.110.11.9>;tag=b820xr0tze To: <sip:5678@10.110.11.9;user=phone> Call-ID: f56453439fd5-qaod8sww6dpi@snomSoft CSeq: 1 INVITE Server: Sip EXpress router (0.8.12 (i386/linux)) Content-Length: 0 Warning: 392 10.110.11.9:5060 "Noisy feedback tells: pid=24182 req_src_ip=10.110.10.149 req_src_port=1357 in_uri=sip:5678@10.110.11.9;user=phone out_uri=sip:5678@0.0.0.0:1511;line=3tjczupg via_cnt==1" > 　　　　　　　　fishman7788 　　　　　　　　fishman7788(a)163.com 　　　　　　　　　　2005-10-17

1 0

Re: [Serusers] serweb: DB Error: no such field
by Karel Kozlik 17 Oct '05

17 Oct '05

Hi, > Oct 14 18:23:12 serweb [error] file: > /usr/local/serweb/modules/subscribers/method.get_users.php:119: DB > Error: no such field - select s.username from subscriber s where > s.domain = 'vpbx.elmit.com' and true [nativecode=1054 ** Unknown column > 'true' in 'where clause'] Interesting. Which version of mysql are you useing? It seems some older version doesn't know the keyword 'true'. Thanks for report, I will fix it. >> For get latest stable version use this command: >> cvs -d:pserver:anonymous@cvs.berlios.de:/cvsroot/serweb co -P -r >> rel_0_9_2 serweb >> > I will try that, if we cannot get that to work ;-) I guess it is easier way for you :-) > Does 0_9_2 work with cvs of openser? Sorry, I don't know. May be yes, but I never tested it and I don't know details about openser. > I see on you email address iptel.org I read somewhere that there is a > full ser.cfg of iptel in the /etc directory for reference, but I did not > find it. I would like to study it. Although for the moment I just need: > Ser on port 5060. If enum, handle it, if not enum forward all to > asterisk on port 5061. It is in dir etc/obsoleted. But I'm not sure if these files are in released version of ser. If they isn't look at cvs: http://cvs.berlios.de/cgi-bin/viewcvs.cgi/ser/sip_router/etc/obsoleted/ Karel

1 0

[Users] Radius accounting and freeside
by harry gaillac 17 Oct '05

17 Oct '05

Hello, I try to setup ser-0.9.4 for accounting with freeradius-1.0.2 and mysql-4. Here is a part of my ser.cfg file # -- acc params -- modparam("acc", "db_url", "mysql://xxx:xxx@nxs.yi.org/ser") modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") modparam("acc", "log_fmt", "miocfsp") modparam("acc", "failed_transactions", 1) modparam("acc", "db_flag", 2) modparam("acc", "db_missed_flag", 3) modparam("acc", "service_type", 16) modparam("acc", "report_cancels", 1) modparam("acc", "report_ack", 1) modparam("acc", "radius_flag", 4) modparam("acc", "radius_missed_flag", 5) I set "setflag(4);" for INVITE BYE and CANCEL messages. Look at my sql.php.html file (no script) I can't fix Acct-Start-Time and Acct-Stop-Time to calculate Acct-Session-Time with freeside How can I do it ? Thanks for help Regards Harry ___________________________________________________________________________ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com

2 1

[Serusers] Radius authentication and accounting issues
by deepak.chandrasekaran＠wipro.com 17 Oct '05

17 Oct '05

Hi all, I am trying to provide radius authentication and accounting in ser 0.9.3. I am using freeradius 1.0.4. I have compiled SER successfully and got all .so files. Every time I try to start ser, it crashes. Can anybody suggest some possible reasons as to why this happens? I followed radius how-to doc to configure radius server and radiusclient-ng 0.5.1 library. Can anyone provide with sample ser.cfg file modified to use radius authentication and accounting? Any help would be greatly appreciated. Thanks in advance. Regards, Deepak Confidentiality Notice The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. If you are not the intended recipient, please notify the sender at Wipro or Mailadmin(a)wipro.com immediately and destroy all copies of this message and any attachments.

1 0

[Serusers] Username conventions with Asterisk as voicemail ???
by Daryl Sanders 17 Oct '05

17 Oct '05

I'm looking for pointers, best practices or experiences from SER users who are using Asterisk for voicemail-only in their SER setup, especially when it comes to planning username/extension/mailbox naming schemes. This is for a large-scale deployment (10K+ users) so I want to get it right the first time. Many of my users will have DIDs tied to their account while others will not. Are there any advantages/disadvantages to having alpha-numeric SER usernames and using aliases for DID numbers? I'm not sure if it matters, but we will be using a third party PSTN provider and will need to support DIDs from multiple countries. Also, are there any scripts available to automatically create an Asterisk voicemail box when a new user is added to SER? As always, your input is greatly appreciated! - Daryl

4 6

[Serusers] Changeing a number dialed for pstn
by Mr Greg Plater 17 Oct '05

17 Oct '05

Hi Does anyone know how I can make a change in my ser.cfg file to change a number dialed Example: Someone dials 738211234 And I wish to send the number out to pstn as 61738211234 I use the following to send out 61738211234 but I would rather shorten the numbers dialed by a user and have the 61 auto added. if (uri=~"^sip:[0-9]{11}@") { # Domestic PSTN Australia wide route(4); break; }; # ----------------------------------------------------------------- # PSTN Handler # ----------------------------------------------------------------- rewritehost("202.173.179.228"); # PSTN GATEWAY IP ADDRESS Asterisk Bridge avp_write("i:45", "inv_timeout"); route(5); route(1); } route[5] {

2 1

[Serusers] Prepaid Service
by Ryan Pagquil 16 Oct '05

16 Oct '05

Hi Guys, I'm wondering how can I terminate active SIP sessions when they already consumed their credits. Because I want to make a prepaid service for VoIP. Is there any known application that can implement prepaid service for VoIP? Please help on this... Thanks, -- Ryan Pagquil Infodyne Inc. - PhilOnline.com 3603 Antel Global Corporate Center Doña Julia Vargas Ave. Ortigas Center Pasig City Tel: 687-0715 Web: www.philonline.com

4 3

[Serusers] SIPSAK
by Rick Thompson 16 Oct '05

16 Oct '05

Just started to try SIPSAK and I'm getting the following error Sipsak -T -s sip:1079#a.b.c.d:5060 warning: IP extract from warning activated to be more informational error: this FQDN or IP is not valid: rtlaptop does anyone know why? Thanks Richard C. Thompson

4 3

[Serusers] TCP/TLS and NAT. Problem with BYE...
by Alexander Ph. Lintenhofer 16 Oct '05

16 Oct '05

Hi everybody, A short question: alice(a)atlanta.com is behind NAT. She uses TCP to connect her UAC to sip.atlanta.com in the public network. Inviting bob(a)biloxi.com suceeds. But Bob can't terminate the call. His BYE is not routed back, because fix_nated_contact() does only work with UDP. And Bob builds the R-URI with the Infos of Alice's contact header. The route is as follows: alice(a)atlanta.com [172.16.0.4] -> natbox.atlanta.com [172.16.0.1 | 192.168.0.13] -> sip.atlanta.com [192.168.0.14] -> sip.biloxi.com [192.168.1.14] -> bob(a)biloxi.com [192.168.1.1] Possible solutions: - force_tcp_alias() -> but reading the draft draft-ietf-sip-connect-reuse-04.txt yields that this must be supported by the components - so doesn't the snom360 of Alice - commenting some lines in nathelper.c and activate it for TCP -> this works pretty fine and the BYE finds its way from Bob through the NAT-Box to Alice. But this is a dirty solution. So does anybody has a similar problem? My config works fine with UDP but switching to TCP makes life hard... I attached the traces Bob received, his last BYE is finally dropped by sip.atlanta.com, because the network-address 172.16.0.4 can't be found! Thank you for your help! regards, Philipp ========================================================================= Received from tcp:192.168.1.14:5060 at 15/10/2005 19:18:32:250 (1751 bytes): INVITE sip:bob@192.168.1.1:2063;transport=tcp;line=wxqurd1s SIP/2.0 Record-Route: <sip:192.168.1.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.1.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Via: SIP/2.0/TCP 192.168.1.14;branch=z9hG4bKcad9.057cd815.0;i=d Via: SIP/2.0/TLS 192.168.0.14:5061;branch=z9hG4bKcad9.685be3c3.0;i=1 Via: SIP/2.0/TCP 172.16.0.4:2327;received=192.168.0.13;branch=z9hG4bK-y79imu6dlqxs;rport=2327 From: "Alice" <sip:alice@atlanta.com>;tag=5s8qncdbso To: <sip:bob@biloxi.com> Call-ID: 3c2675cac832-ce5ge5sxlx2q@snom360 CSeq: 1 INVITE Max-Forwards: 68 Contact: <sip:alice@172.16.0.4:2327;transport=tcp;line=fyyuh6tl> P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom360/4.3 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO Allow-Events: talk, hold, refer Supported: timer, 100rel, replaces, callerid Session-Expires: 3600 Content-Type: application/sdp Content-Length: 507 P-hint: outbound P-hint: forced TLS relay P-hint: usrloc applied Sent to tcp:192.168.1.14:5060 at 15/10/2005 19:18:32:270 (929 bytes): SIP/2.0 180 Ringing Via: SIP/2.0/TCP 192.168.1.14;branch=z9hG4bKcad9.057cd815.0;i=d Via: SIP/2.0/TLS 192.168.0.14:5061;branch=z9hG4bKcad9.685be3c3.0;i=1 Via: SIP/2.0/TCP 172.16.0.4:2327;received=192.168.0.13;branch=z9hG4bK-y79imu6dlqxs;rport=2327 Record-Route: <sip:192.168.1.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.1.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> From: "Alice" <sip:alice@atlanta.com>;tag=5s8qncdbso To: <sip:bob@biloxi.com>;tag=fxdufnc4xz Call-ID: 3c2675cac832-ce5ge5sxlx2q@snom360 CSeq: 1 INVITE Contact: <sip:bob@192.168.1.1:2063;transport=tcp;line=wxqurd1s> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO Allow-Events: talk, hold, refer Content-Length: 0 Sent to tcp:192.168.1.14:5060 at 15/10/2005 19:18:33:390 (1377 bytes): SIP/2.0 200 Ok Via: SIP/2.0/TCP 192.168.1.14;branch=z9hG4bKcad9.057cd815.0;i=d Via: SIP/2.0/TLS 192.168.0.14:5061;branch=z9hG4bKcad9.685be3c3.0;i=1 Via: SIP/2.0/TCP 172.16.0.4:2327;received=192.168.0.13;branch=z9hG4bK-y79imu6dlqxs;rport=2327 Record-Route: <sip:192.168.1.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.1.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> From: "Alice" <sip:alice@atlanta.com>;tag=5s8qncdbso To: <sip:bob@biloxi.com>;tag=fxdufnc4xz Call-ID: 3c2675cac832-ce5ge5sxlx2q@snom360 CSeq: 1 INVITE Contact: <sip:bob@192.168.1.1:2063;transport=tcp;line=wxqurd1s> Require: timer Session-Expires: 3600;refresher=uac User-Agent: snom360/4.3 Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO Allow-Events: talk, hold, refer Supported: timer, 100rel, replaces, callerid Content-Type: application/sdp Content-Length: 296 ACK sip:bob@192.168.1.1:2063;transport=tcp;line=wxqurd1s SIP/2.0 Record-Route: <sip:192.168.1.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.1.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Record-Route: <sip:192.168.0.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Via: SIP/2.0/TCP 192.168.1.14;branch=0;i=d Via: SIP/2.0/TLS 192.168.0.14:5061;branch=0;i=1 Via: SIP/2.0/TCP 172.16.0.4:2327;received=192.168.0.13;branch=z9hG4bK-o9f1lglhf4pk;rport=2327 From: "Alice" <sip:alice@atlanta.com>;tag=5s8qncdbso To: <sip:bob@biloxi.com>;tag=fxdufnc4xz Call-ID: 3c2675cac832-ce5ge5sxlx2q@snom360 CSeq: 1 ACK Max-Forwards: 68 Contact: <sip:alice@172.16.0.4:2327;transport=tcp;line=fyyuh6tl> Content-Length: 0 P-hint: rr-enforced P-hint: rr-enforced Sent to tcp:192.168.1.14:5060 at 15/10/2005 19:18:34:480 (703 bytes): BYE sip:alice@172.16.0.4:2327;transport=tcp;line=fyyuh6tl SIP/2.0 Via: SIP/2.0/TCP 192.168.1.1:2063;branch=z9hG4bK-gu03sll9uumm;rport Route: <sip:192.168.1.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> Route: <sip:192.168.1.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Route: <sip:192.168.0.14:5061;transport=tls;r2=on;ftag=5s8qncdbso;lr=on> Route: <sip:192.168.0.14;transport=tcp;r2=on;ftag=5s8qncdbso;lr=on> From: <sip:bob@biloxi.com>;tag=fxdufnc4xz To: "Alice" <sip:alice@atlanta.com>;tag=5s8qncdbso Call-ID: 3c2675cac832-ce5ge5sxlx2q@snom360 CSeq: 1 BYE Max-Forwards: 70 Contact: <sip:bob@192.168.1.1:2063;transport=tcp;line=wxqurd1s> User-Agent: snom360/4.3 Content-Length: 0

2 2

[Users] RE: Openser + IVR
by Abdul Lateef 16 Oct '05

16 Oct '05

Hi, I was thinking to try from vm modules, but i am not able from where i can download vm module? I hope using SEMS i can make the ivr proper work. But Please if u have any idea about vm module let me know form where i can download it? -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs

2 1

[Users] Openser + IVR
by Abdul Lateef 16 Oct '05

16 Oct '05

HI all, Does openser support IVR system? if it is supporting from where i can do the configuration? -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com

2 1

[Serusers] round robin routing
by roger leszczynski 16 Oct '05

16 Oct '05

I need a solution that can implement round robin routing.... ive used the gflags module to do this, and it routes my snom phoens two different servers (im using SER as a load balancer) currently just doign a simple redirect server. Here are my problems...phones routed to the same server cannot call each other..... also...when reciveing an incoming call on DID from PSTN.... if the phone registers to one server.... and there are three...how can i have it route to the proper server of where the phone is registered? Finally how would I make calls between servers (they all have the same config) with out going to the PSTN termiantion point and going back in??

1 0

[Serusers] authentication failed when use freeradius to authenticate
by shikun.wang 15 Oct '05

15 Oct '05

hi, I'm using ser-0.9.3+freeradius-0.9.1+radiusclient-ng-0.5.1.When I use "radtest test test localhost 0 testing123" to test the servers,it returns "rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=235, length=45".And the radius prints: rad_recv: Access-Request packet from host 127.0.0.1:34012, id=235, length=56 User-Name = "test" User-Password = "test" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 modcall: entering group authorize modcall[authorize]: module "preprocess" returns ok modcall[authorize]: module "chap" returns noop rlm_eap: EAP-Message not found modcall[authorize]: module "eap" returns noop modcall[authorize]: module "digest" returns noop rlm_realm: No '@' in User-Name = "test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop users: Matched DEFAULT at 152 users: Matched test at 226 modcall[authorize]: module "files" returns ok modcall[authorize]: module "mschap" returns noop modcall: group authorize returns ok rad_check_password: Found Auth-Type Digest auth: type "digest" modcall: entering group authenticate ERROR: No Digest-Nonce: Cannot perform Digest authentication modcall[authenticate]: module "digest" returns invalid modcall: group authenticate returns invalid auth: Failed to validate the user. Who can give me any instructions?Thank you:)

2 1

Fwd: [Serusers] Multi Media Proxy servers install
by Voipers Portugal 15 Oct '05

15 Oct '05

---------- Forwarded message ---------- From: Voipers Portugal <voipers(a)gmail.com> Date: 15/10/2005 11:55 Subject: Re: [Serusers] Multi Media Proxy servers install To: Leon Sun <leon.sun(a)keywestcommunications.com> Check this website: www.voip-info.org/wiki-DNS+SRV Regards, Jose Simoes 2005/10/11, Leon Sun <leon.sun(a)keywestcommunications.com>: > Hi, > > Just wondering if anyone likes to help(instruction only is fine) me build up > few media proxy servers with pay by hours? > > I have built a mediaproxy with SER in same server and like to add few of > them one by one. I can't figure out how to and to where put those DNS SRV. > > If you like to give me a hand, please let me know. We can talk about charge. > > Regards > > Leon Sun > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

1 0

[Serusers] write IP + dst to file
by Tony Baartman 15 Oct '05

15 Oct '05

HI Does anyone know how / if there is a way to write the date, src_ip and dst_called to a file? Thanks in advance

1 0

[Serusers] VoiceMail Module
by Abdul Lateef 15 Oct '05

15 Oct '05

Hi all, I installed ser with SEMS, but i am not able to find the vm.so (voice module) under my /usr/local/lib/ser/modules. Is it third party module, from where i can able to download it? -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Music Unlimited Access over 1 million songs. Try it free. http://music.yahoo.com/unlimited/

2 1

[Users] user authentication with certificate
by Girish Nayak 14 Oct '05

14 Oct '05

i understand, minisip softphone can initiate TLS connection. and it can be authenticated by the openser via digest authentication. is it possible to use certificate instead of digest authentication? -- Girish On Fri, 2005-10-14 at 08:28 +0000, users-request(a)openser.org wrote: > Send Users mailing list submissions to > users(a)openser.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://openser.org/cgi-bin/mailman/listinfo/users > or, via email, send a message with subject or body 'help' to > users-request(a)openser.org > > You can reach the person managing the list at > users-owner(a)openser.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Users digest..." > > > Today's Topics: > > 1. Re: Re: [Serusers] trusting peers (Juha Heinanen) > 2. Re: different tables for acc (Klaus Darilion) > 3. Re: Improving TLS implementation (Cesc) > 4. Re: Improving TLS implementation (Juha Heinanen) > 5. Softphones compatible with Openser/TLS (Joonbum Byun) > 6. Re: Softphones compatible with Openser/TLS (Klaus Darilion) > 7. Re: Softphones compatible with Openser/TLS (Cesc) > 8. Re: BYE method accompanied by error (Daniel-Constantin Mierla) > 9. Re: How to do RADIUS authentication with hashed password (MD5 > or HA1)? (Bogdan-Andrei Iancu) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 13 Oct 2005 13:55:37 +0300 > From: Juha Heinanen <jh(a)tutpro.com> > Subject: Re: [Users] Re: [Serusers] trusting peers > To: Klaus Darilion <klaus.mailinglists(a)pernau.at> > Cc: Nils Ohlmeier <lists(a)ohlmeier.org>, serusers(a)iptel.org, Jan Janak > <jan(a)iptel.org>, "users openser.org" <users(a)openser.org> > Message-ID: <17230.15657.441146.200770(a)rautu.tutpro.com> > Content-Type: text/plain; charset=us-ascii > > Klaus Darilion writes: > > > e.g. simmilar to allow_trusted, but using the domain form the > > certificate instead of using src_ip. > > yes, it would be easy to add such a check to permissions module. > > -- juha > > > > ------------------------------ > > Message: 2 > Date: Thu, 13 Oct 2005 14:30:46 +0200 > From: Klaus Darilion <klaus.mailinglists(a)pernau.at> > Subject: Re: [Users] different tables for acc > To: jayesh nambiar <jayesh_1017(a)yahoo.com> > Cc: SER <users(a)openser.org> > Message-ID: <434E5376.2000902(a)pernau.at> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > No. Only one table for all costumers. > > klaus > > jayesh nambiar wrote: > > hi all, > > I came to kno about the parameter modparam("acc", "db_table_acc", > > "acc_table"). > > Does this mean that I can have different acc tables for my different > > type of customers. Is this possible. > > If yes, then how? If i declare the appropriate flag and then use setflag > > at the places i want to account, will it work. > > Can someone please explain it to me. Any suggestions would help me a lot. > > Thanx > > jayesh > > > > ------------------------------------------------------------------------ > > Yahoo! Music Unlimited - Access over 1 million songs. Try it free. > > <http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=36035/*http://music.yahoo.c…> > > > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Users mailing list > > Users(a)openser.org > > http://openser.org/cgi-bin/mailman/listinfo/users > > > > > ------------------------------ > > Message: 3 > Date: Thu, 13 Oct 2005 14:53:25 +0200 > From: Cesc <cesc.santa(a)gmail.com> > Subject: Re: [Users] Improving TLS implementation > To: Juha Heinanen <jh(a)tutpro.com> > Cc: SER-Users <serusers(a)iptel.org>, OpenSER-users <users(a)openser.org> > Message-ID: > <ce8208420510130553r371591aeib5f43a7674b109b(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hi Juha, > Well, that is true, but what do you propose then? just present a host cert > and nothing else? I would say that if the company trust the hosting for > running the service, a mere certficate should not be the problem, should it? > Cesc > > On 10/13/05, Juha Heinanen <jh(a)tutpro.com> wrote: > > > > cesc, > > > > you made a good summary, but in multi-domain case, it is not just a > > technical problem on how to present or offer a domain specific > > certificate. in order to be able to do that, the domains have to > > surrender their private keying information to a provider that currently > > happens to host their sip service, and to another provider that hosts > > their web service, and to third provider that hosts their e-commerce > > service, etc. > > > > in most cases, this is simply out of question. companies are not going > > to do it. > > > > -- juha > > >

2 2

[Users] Re: [Serdev] group_radius radius_is_user_in
by Tavis P 14 Oct '05

14 Oct '05

Oops, i spoke too soon It looks like you have placed the "files" module before the "sql" module in your radiusd.conf Its matching your DEFAULT entry in files (setting the Auth-Type to none) but the sql module is later changing the Auth-Type to "digest" Changing the order would solve this problem, as you want it to match the SQL statement first and than the section in the files last (which changes the Auth-Type) Also, you may want to reduce the load on your database by not setting the Auth-Type in the database and instead setting in the users file with a DEFAULT statement as (at least in my case) it isn't somthing that need to be dynamic. lenirsantiago(a)yahoo.com wrote: >Hello list, > >I've been trying my hardest today to get group_radius to work, and its >function radius_is_user_in(). >I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest >authentication. > >Radius authentication works fine. >The problem is that when radius_is_user_in() function gets called, it sends >a radius message but without the User-Password field and freeradius >complains that it requires it since we are using Digest. >I've seen a couple of posts here, but they were never answered: >http://mail.iptel.org/pipermail/serusers/2005-March/017342.html >http://mail.iptel.org/pipermail/serusers/2005-March/017075.html > >----- >I have a small test in my ser.cfg file: > if (!radius_www_authorize("")) { > xlog("L_I","%ci - %fu - User not authenticated, Radius >Authenticating...\n"); > www_challenge("","0"); > break; > } else { > xlog("L_I","%ci - %fu - User authenticated...\n"); > }; > > if (radius_is_user_in("From", "Dialin")){ > xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); > } else { > xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); > }; > > if (radius_is_user_in("Credentials", "Dialin2")){ > xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); > } else { > xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); > }; > >----- >In /etc/raddb/users file I have the following at line 152: >DEFAULT Auth-Type = System > Fall-Through = 1 > >DEFAULT Service-Type == Group-Check, Auth-Type := None > >DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None > >----- > >These are mysql tables: > >+----+----------+-----------+----+----------+ >| id | UserName | Attribute | op | Value | >+----+----------+-----------+----+----------+ >| 1 | Jhassell | Password | == | changeme | >| 2 | Rneis | Password | == | changeme | >| 3 | 1000 | Password | == | 1000 | >| 4 | 2000 | Password | == | 2000 | >| 5 | 3000 | Password | == | 3000 | >| 8 | 1000 | Auth-Type | := | Digest | >+----+----------+-----------+----+----------+ > >+----+-----------+-----------+----+--------+ >| id | GroupName | Attribute | op | Value | >+----+-----------+-----------+----+--------+ >| 6 | Dialin | Auth-Type | := | Accept | >+----+-----------+-----------+----+--------+ > >+----+-----------+---------------+----+----------------------------------+-- >----+ >| id | GroupName | Attribute | op | Value | >prio | >+----+-----------+---------------+----+----------------------------------+-- >----+ >| 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | >0 | >| 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | >0 | >+----+-----------+---------------+----+----------------------------------+-- >----+ > >+----+----------+---------------+----+------------------+ >| id | UserName | Attribute | op | Value | >+----+----------+---------------+----+------------------+ >| 1 | 1000 | Reply-Message | = | "Authenticated" | >| 2 | 1000 | Sip-Group | = | Dialin | >| 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | >+----+----------+---------------+----+------------------+ > >+----+----------+------------+ >| id | UserName | GroupName | >+----+----------+------------+ >| 1 | Jhassell | Dialin | >| 2 | Rneis | Staticdial | >| 3 | 1000 | Dialin | >| 4 | 2000 | Dialin | >| 5 | 3000 | Dialin | >| 6 | 3000 | Dialin2 | >+----+----------+------------+ > >------ > >This is the debug I get from freeradius for the group check: > >rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, >length=67 > User-Name = "1000(a)xx.xx.xx.xx" > Sip-Group = "Dialin2" > Service-Type = Group-Check > NAS-IP-Address = 127.0.0.1 > NAS-Port = 0 > Processing the authorize section of radiusd.conf >modcall: entering group authorize for request 74 > modcall[authorize]: module "preprocess" returns ok for request 74 > modcall[authorize]: module "chap" returns noop for request 74 > modcall[authorize]: module "mschap" returns noop for request 74 > modcall[authorize]: module "digest" returns noop for request 74 > rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = >"1000(a)xx.xx.xx.xx" > rlm_realm: Found realm "xx.xx.xx.xx" > rlm_realm: Adding Stripped-User-Name = "1000" > rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx > rlm_realm: Adding Realm = "xx.xx.xx.xx" > rlm_realm: Authentication realm is LOCAL. > modcall[authorize]: module "suffix" returns noop for request 74 > rlm_eap: No EAP-Message, not doing EAP > modcall[authorize]: module "eap" returns noop for request 74 > users: Matched entry DEFAULT at line 152 > users: Matched entry DEFAULT at line 158 > modcall[authorize]: module "files" returns ok for request 74 >radius_xlat: '1000' >rlm_sql (sql): sql_set_user escaped user --> '1000' >rlm_sql (sql): Released sql socket id: 0 > modcall[authorize]: module "sql" returns ok for request 74 >modcall: group authorize returns ok for request 74 > rad_check_password: Found Auth-Type Digest >auth: type "digest" > Processing the authenticate section of radiusd.conf >modcall: entering group authenticate for request 74 >ERROR: No Digest-Nonce: Cannot perform Digest authentication > modcall[authenticate]: module "digest" returns invalid for request 74 >modcall: group authenticate returns invalid for request 74 >auth: Failed to validate the user. >Delaying request 74 for 1 seconds >Finished request 74 >Going to the next request >--- Walking the entire request list --- >Waking up in 1 seconds... >--- Walking the entire request list --- >Waking up in 1 seconds... >--- Walking the entire request list --- >Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 > Reply-Message = "Authenticated" >Waking up in 4 seconds... >--- Walking the entire request list --- >Cleaning up request 74 ID 15 with timestamp 434f1121 >Nothing to do. Sleeping until we see a request. > > > > > >Any help in this matter would be deeply appreciated, > > > > >Lenir > > > > >_______________________________________________ >Serdev mailing list >Serdev(a)iptel.org >http://mail.iptel.org/mailman/listinfo/serdev > > > >

2 2

[Serusers] NAT-Issue in onsip.org's GettingStarted?
by Andreas Granig 14 Oct '05

14 Oct '05

Hi, While experimenting with the example config nat-mediaproxy.5.0.cfg of onsip.org's GettingStarted document I discovered a problem with NAT handling. Don't blame me if I'm completely wrong, but here is what happens and how it is solved: I've two phones behind the same NAT (address of phone A is a:5060 and that of phone B is b:5060, the NAT device has ip c) contacting a SER with a public IP. If A makes a call, it's NATed to c:5060, SER responds with 407 to c:5060, and it's correctly forwarded to a:5060. If B makes a call, it's NATed to c:1025, but SER responds to c:5060 too, so B never gets the reply. The original config looks like this: 181 # ---------------------------------------------------------- 182 # INVITE Message Handler 183 # ---------------------------------------------------------- 184 185 if (!proxy_authorize("","subscriber")) { 186 proxy_challenge("","0"); 187 break; 188 } else if (!check_from()) { 189 sl_send_reply("403", "Use From=ID"); 190 break; 191 }; 192 193 consume_credentials(); 194 195 if (client_nat_test("3")) { 196 setflag(7); 197 force_rport(); 198 fix_nated_contact(); 199 }; So the autorization is done before NAT is handled, and I think this is the problem. Because if I move the lines 195-199 before 185, everything works as expected. Could anyone please be so kind and check that? Andy

3 3

[Serusers] How to do RADIUS authentication with hashed password (MD5 or HA1)?
by Cheng Zhang 14 Oct '05

14 Oct '05

I have setup SER to authenticate via FreeRADIUS with MSSQL DB. The problem is that the user's password is stored as cleartext in the database. I'd like to know is there a way to make such setup using hashed password (just MD5 or HA1)? In module auth_db, there is a mod parameter 'calculate_ha1' being set to 0 can be used for similiar purpose. But there is no such option for auth_radius. Maybe this is about how to configure FreeRADIUS, but I couldn't dig anything up from FreeRADIUS mailing list archive either.

2 2

[Users] How to do RADIUS authentication with hashed password (MD5 or HA1)?
by Cheng Zhang 14 Oct '05

14 Oct '05

I have setup SER to authenticate via FreeRADIUS with MSSQL DB. The problem is that the user's password is stored as cleartext in the database. I'd like to know is there a way to make such setup using hashed password (just MD5 or HA1)? In module auth_db, there is a mod parameter 'calculate_ha1' being set to 0 can be used for similiar purpose. But there is no such option for auth_radius. Maybe this is about how to configure FreeRADIUS, but I couldn't dig anything up from FreeRADIUS mailing list archive either.

2 4

[Users] extra accounting problem
by jayesh nambiar 14 Oct '05

14 Oct '05

hi all, I want to account src_ips in my acc table. While using openser0.9.5 I used the following modparam syntax: modparam("acc", "db_extra", "src= avp/i:10") and when doing setflag(1), I wrote avp_write() syntax to write src_ip in i:10. But now I am using openser 0.10.x and it gives me an error saying the following: Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: ACC - initializing Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: xl_parse_item: error - bad parameters Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: ERROR:acc:parse_acc_extra: parse failed in <src= avp/i:10> around position 5 Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: acc:parse_acc_extra: error Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: ERROR:acc:mod_init: failed to parse db_extra param Oct 14 12:35:43 localhost /usr/local/sbin/openser[19916]: init_mod(): Error while initializing module acc Could someone pls let me know, if the syntax for adding extra column in acc table has changed. I have a column named "src" in the acc table. thank you. jayesh --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 1

[Serusers] group_radius radius_is_user_in
by lenirsantiago＠yahoo.com 14 Oct '05

14 Oct '05

Hello list, I've been trying my hardest today to get group_radius to work, and its function radius_is_user_in(). I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest authentication. Radius authentication works fine. The problem is that when radius_is_user_in() function gets called, it sends a radius message but without the User-Password field and freeradius complains that it requires it since we are using Digest. I've seen a couple of posts here, but they were never answered: http://lists.iptel.org/pipermail/serusers/2005-March/017342.html http://lists.iptel.org/pipermail/serusers/2005-March/017075.html ----- I have a small test in my ser.cfg file: if (!radius_www_authorize("")) { xlog("L_I","%ci - %fu - User not authenticated, Radius Authenticating...\n"); www_challenge("","0"); break; } else { xlog("L_I","%ci - %fu - User authenticated...\n"); }; if (radius_is_user_in("From", "Dialin")){ xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); }; if (radius_is_user_in("Credentials", "Dialin2")){ xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); }; ----- In /etc/raddb/users file I have the following at line 152: DEFAULT Auth-Type = System Fall-Through = 1 DEFAULT Service-Type == Group-Check, Auth-Type := None DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None ----- These are mysql tables: +----+----------+-----------+----+----------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+----------+ | 1 | Jhassell | Password | == | changeme | | 2 | Rneis | Password | == | changeme | | 3 | 1000 | Password | == | 1000 | | 4 | 2000 | Password | == | 2000 | | 5 | 3000 | Password | == | 3000 | | 8 | 1000 | Auth-Type | := | Digest | +----+----------+-----------+----+----------+ +----+-----------+-----------+----+--------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+--------+ | 6 | Dialin | Auth-Type | := | Accept | +----+-----------+-----------+----+--------+ +----+-----------+---------------+----+----------------------------------+-- ----+ | id | GroupName | Attribute | op | Value | prio | +----+-----------+---------------+----+----------------------------------+-- ----+ | 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | 0 | | 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | 0 | +----+-----------+---------------+----+----------------------------------+-- ----+ +----+----------+---------------+----+------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------+ | 1 | 1000 | Reply-Message | = | "Authenticated" | | 2 | 1000 | Sip-Group | = | Dialin | | 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | +----+----------+---------------+----+------------------+ +----+----------+------------+ | id | UserName | GroupName | +----+----------+------------+ | 1 | Jhassell | Dialin | | 2 | Rneis | Staticdial | | 3 | 1000 | Dialin | | 4 | 2000 | Dialin | | 5 | 3000 | Dialin | | 6 | 3000 | Dialin2 | +----+----------+------------+ ------ This is the debug I get from freeradius for the group check: rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, length=67 User-Name = "1000(a)xx.xx.xx.xx" Sip-Group = "Dialin2" Service-Type = Group-Check NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 74 modcall[authorize]: module "preprocess" returns ok for request 74 modcall[authorize]: module "chap" returns noop for request 74 modcall[authorize]: module "mschap" returns noop for request 74 modcall[authorize]: module "digest" returns noop for request 74 rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = "1000(a)xx.xx.xx.xx" rlm_realm: Found realm "xx.xx.xx.xx" rlm_realm: Adding Stripped-User-Name = "1000" rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx rlm_realm: Adding Realm = "xx.xx.xx.xx" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 74 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 74 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 158 modcall[authorize]: module "files" returns ok for request 74 radius_xlat: '1000' rlm_sql (sql): sql_set_user escaped user --> '1000' rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 74 modcall: group authorize returns ok for request 74 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 74 ERROR: No Digest-Nonce: Cannot perform Digest authentication modcall[authenticate]: module "digest" returns invalid for request 74 modcall: group authenticate returns invalid for request 74 auth: Failed to validate the user. Delaying request 74 for 1 seconds Finished request 74 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 Reply-Message = "Authenticated" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 74 ID 15 with timestamp 434f1121 Nothing to do. Sleeping until we see a request. Any help in this matter would be deeply appreciated, Lenir

1 0

[Users] group_radius radius_is_user_in
by lenirsantiago＠yahoo.com 14 Oct '05

14 Oct '05

Hello list, I've been trying my hardest today to get group_radius to work, and its function radius_is_user_in(). I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest authentication. Radius authentication works fine. The problem is that when radius_is_user_in() function gets called, it sends a radius message but without the User-Password field and freeradius complains that it requires it since we are using Digest. I've seen a couple of posts here, but they were never answered: http://mail.iptel.org/pipermail/serusers/2005-March/017342.html http://mail.iptel.org/pipermail/serusers/2005-March/017075.html ----- I have a small test in my ser.cfg file: if (!radius_www_authorize("")) { xlog("L_I","%ci - %fu - User not authenticated, Radius Authenticating...\n"); www_challenge("","0"); break; } else { xlog("L_I","%ci - %fu - User authenticated...\n"); }; if (radius_is_user_in("From", "Dialin")){ xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); }; if (radius_is_user_in("Credentials", "Dialin2")){ xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); }; ----- In /etc/raddb/users file I have the following at line 152: DEFAULT Auth-Type = System Fall-Through = 1 DEFAULT Service-Type == Group-Check, Auth-Type := None DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None ----- These are mysql tables: +----+----------+-----------+----+----------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+----------+ | 1 | Jhassell | Password | == | changeme | | 2 | Rneis | Password | == | changeme | | 3 | 1000 | Password | == | 1000 | | 4 | 2000 | Password | == | 2000 | | 5 | 3000 | Password | == | 3000 | | 8 | 1000 | Auth-Type | := | Digest | +----+----------+-----------+----+----------+ +----+-----------+-----------+----+--------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+--------+ | 6 | Dialin | Auth-Type | := | Accept | +----+-----------+-----------+----+--------+ +----+-----------+---------------+----+----------------------------------+-- ----+ | id | GroupName | Attribute | op | Value | prio | +----+-----------+---------------+----+----------------------------------+-- ----+ | 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | 0 | | 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | 0 | +----+-----------+---------------+----+----------------------------------+-- ----+ +----+----------+---------------+----+------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------+ | 1 | 1000 | Reply-Message | = | "Authenticated" | | 2 | 1000 | Sip-Group | = | Dialin | | 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | +----+----------+---------------+----+------------------+ +----+----------+------------+ | id | UserName | GroupName | +----+----------+------------+ | 1 | Jhassell | Dialin | | 2 | Rneis | Staticdial | | 3 | 1000 | Dialin | | 4 | 2000 | Dialin | | 5 | 3000 | Dialin | | 6 | 3000 | Dialin2 | +----+----------+------------+ ------ This is the debug I get from freeradius for the group check: rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, length=67 User-Name = "1000(a)xx.xx.xx.xx" Sip-Group = "Dialin2" Service-Type = Group-Check NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 74 modcall[authorize]: module "preprocess" returns ok for request 74 modcall[authorize]: module "chap" returns noop for request 74 modcall[authorize]: module "mschap" returns noop for request 74 modcall[authorize]: module "digest" returns noop for request 74 rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = "1000(a)xx.xx.xx.xx" rlm_realm: Found realm "xx.xx.xx.xx" rlm_realm: Adding Stripped-User-Name = "1000" rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx rlm_realm: Adding Realm = "xx.xx.xx.xx" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 74 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 74 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 158 modcall[authorize]: module "files" returns ok for request 74 radius_xlat: '1000' rlm_sql (sql): sql_set_user escaped user --> '1000' rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 74 modcall: group authorize returns ok for request 74 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 74 ERROR: No Digest-Nonce: Cannot perform Digest authentication modcall[authenticate]: module "digest" returns invalid for request 74 modcall: group authenticate returns invalid for request 74 auth: Failed to validate the user. Delaying request 74 for 1 seconds Finished request 74 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 Reply-Message = "Authenticated" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 74 ID 15 with timestamp 434f1121 Nothing to do. Sleeping until we see a request. Any help in this matter would be deeply appreciated, Lenir

1 0

RE: [Serusers] trusting peers
by Dmitry Isakbayev 14 Oct '05

14 Oct '05

Hi Klaus, There is another option. A UAC can present an authorization token issued by a trusted Open Settlement Protocol server. If UAS successfully validates the token, it can presume that the client is trusted. The trusted OSP server can use different policies for authenticating the UAC. OSP is an open standard defined by ETSI - the European Telecommunications Standards Institute. It has been widely deployed by VoIP carriers to enforce secure access control for peer to peer inter-domain VoIP routing and Call Detail Record (CDR) collection. The 'osp' module (http://osp-module.berlios.de or http://developer.berlios.de/projects/osp-module) adds support for the OSP to (Open) SER. We are in the process of moving the project to (Open) SER's CVS. Regards, Dmitry > -----Original Message----- > From: serusers-bounces(a)lists.iptel.org > [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Klaus Darilion > Sent: Tuesday, October 11, 2005 8:56 AM > To: ser users; users openser.org > Subject: [Serusers] trusting peers > > Hi all! > > I want to differ between _incoming_ SIP requests from trusted > peers and from untrused (for different call routing). I came > to the following solutions. All of them has some > disadvantages, and I would like to now which you would prefer: > > 1. src_ip: incoming request are authenticated using the > src_ip (only in TCP mode useful) > +: easy to implement > +: easy to differ authenticated from unauthenticated incoming calls > -: lots of configuration (IP addresses may change, ) This > can be implemented using if src_ip==... blocks in > openser.cfg, which would require the change the script > everytime the IP addresses are changed. Also requires restart > of the proxy. > > Also from_gw() from lcr module can be used. But this would > interfere with the already used lcr tasks and IP addresses. > Maybe copy/paste the code into a new function called from_peer(). > > 2. IPsec: makes it hard to differ trusted from untrusted > incomig requests in the application. Again verification of > the src_ip would be necessary. > -: requires sharing secrets with each peer > +: works also with TCP and TLS unaware proxies > > 3. TLS with certificates signed by me. Then, if my SIP proxy > only uses my root CA, all authenticated TLS connection must > be from my trusted peers. > +: simple, as long as there is only 1 perring-club to authenticate > +: works with current (open)ser > -: can't use public CA roots > -: requires signing of the public key of the peer > > 4. TLS with public signed certificates. (open)ser would > validate the TLS certificate. But after that, I need some > function like > tls_is_from_trusted() which checks the Subject of the > certificate against a list of trusted peers. > +: can use public signed CA roots > +: allows to use TLS for incoming trusted and incoming untrusted peers > -: need some more tls specific functions in (open)ser > -: certificate costs $$$ > > 5. Digest Auth between proxies > -: uac module is not standard conform (CSeq Problem) > -: requires sharing secrets with each peer > > If I have forgotten some possibilities or made some mistakes > please correct me. > > regards > klaus > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > >

2 1

[Users] OT: please help us make the ENUM number range +43 780 a success
by Klaus Darilion 14 Oct '05

14 Oct '05

Hi all! This is a little bit off topic. But people interested in ENUM are sure interested in this. As some of you maybe already know, Austria has a dedicated ENUM driven number range in place since May 2005: +43 780. Reachability of numbers within this range from the PSTN is good within Austria, but still a patchwork from abroad (as with all new number ranges). It is very hard to debug PSTN connectivity from the receiving end - which is why we are asking you to dedicate a few minutes of time and a phone call. To collect the information we've set up a Wiki page: http://www.voip-info.org/wiki/view/43780 To help us make it better, follow these steps: - take a "conventional" phone line of your choice (PSTN, mobile - the more data points, the better) - call the test number "+43 780 004711" - if you hear the word "ENUM" followed by some elevator music, routing from your telco is ok - perfect! - if it doesn't work, take a note of what happened (announcement, error message, error indication etc.) - leave a note about your success or failure to the wiki page indicated above. If possible, add rate information. - repeat this test for any carrier you have access to. If you detect a failure, and happen to know or work for the telco - please notify the relevant person to fix the problem, it is theirs. We're happy to talk to them if you get us in touch. Thanks for your help - we really appreciate it. Feel free to forward this message to people who might contribute more data points. thanks, Klaus Darilion enum.at

1 0

[Serusers] serweb: DB Error: no such field
by Ronald Wiplinger 14 Oct '05

14 Oct '05

# history |grep "cvs -z3" 568 cvs -z3 checkout sip-server 1004 cvs -z3 -d:pserver:anonymous@cvs.serweb.berlios.de:/cvsroot/serweb co serweb I use cvs! /serweb/user/index.php and login as admin gives me on the tab "my account" DB Error: no such field logout /serweb/admin/index.php and login as admin gives me on the tabs "users" "admin privileges" and "user preferences" DB Error: no such field How to fix that? bye Ronald Wiplinger

2 1

[Serusers] DB.php missing in serweb
by Ronald Wiplinger 14 Oct '05

14 Oct '05

My php-error.log shows now: [client 192.168.250.108] PHP Warning: main(DB.php): failed to open stream: No such file or directory in /usr/local/serweb/html/main_prepend.php on line 38 [client 192.168.250.108] PHP Fatal error: main(): Failed opening required 'DB.php' (include_path='.:') in /usr/local/serweb/html/main_prepend.php on line 38 # locate DB.php /usr/share/php/DB.php Where do I set this? bye Ronald Wiplinger

3 3

[Users] trusting peers
by Klaus Darilion 14 Oct '05

14 Oct '05

Hi all! I want to differ between _incoming_ SIP requests from trusted peers and from untrused (for different call routing). I came to the following solutions. All of them has some disadvantages, and I would like to now which you would prefer: 1. src_ip: incoming request are authenticated using the src_ip (only in TCP mode useful) +: easy to implement +: easy to differ authenticated from unauthenticated incoming calls -: lots of configuration (IP addresses may change, ) This can be implemented using if src_ip==... blocks in openser.cfg, which would require the change the script everytime the IP addresses are changed. Also requires restart of the proxy. Also from_gw() from lcr module can be used. But this would interfere with the already used lcr tasks and IP addresses. Maybe copy/paste the code into a new function called from_peer(). 2. IPsec: makes it hard to differ trusted from untrusted incomig requests in the application. Again verification of the src_ip would be necessary. -: requires sharing secrets with each peer +: works also with TCP and TLS unaware proxies 3. TLS with certificates signed by me. Then, if my SIP proxy only uses my root CA, all authenticated TLS connection must be from my trusted peers. +: simple, as long as there is only 1 perring-club to authenticate +: works with current (open)ser -: can't use public CA roots -: requires signing of the public key of the peer 4. TLS with public signed certificates. (open)ser would validate the TLS certificate. But after that, I need some function like tls_is_from_trusted() which checks the Subject of the certificate against a list of trusted peers. +: can use public signed CA roots +: allows to use TLS for incoming trusted and incoming untrusted peers -: need some more tls specific functions in (open)ser -: certificate costs $$$ 5. Digest Auth between proxies -: uac module is not standard conform (CSeq Problem) -: requires sharing secrets with each peer If I have forgotten some possibilities or made some mistakes please correct me. regards klaus

7 25

[Users] TLS and mutliple domains
by Klaus Darilion 14 Oct '05

14 Oct '05

IMO this article is interesting: http://wiki.cacert.org/wiki/VhostTaskForce regards klaus

1 0

[Serusers] logging of SIP dialog
by Iqbal 14 Oct '05

14 Oct '05

Hi Has anyone come up with a scalable method to log the complete SIP trace of ALL calls, i.e to separate files etc Ngrep is greate for a few, but I want to be able to track all calls, for various purposes Iqbal

10 16

[Serusers] group_radius radius_is_user_in
by lenirsantiago＠yahoo.com 14 Oct '05

14 Oct '05

Hello list, I've been trying my hardest today to get group_radius to work, and its function radius_is_user_in(). I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest authentication. Radius authentication works fine. The problem is that when radius_is_user_in() function gets called, it sends a radius message but without the User-Password field and freeradius complains that it requires it since we are using Digest. I've seen a couple of posts here, but they were never answered: http://lists.iptel.org/pipermail/serusers/2005-March/017342.html http://lists.iptel.org/pipermail/serusers/2005-March/017075.html ----- I have a small test in my ser.cfg file: if (!radius_www_authorize("")) { xlog("L_I","%ci - %fu - User not authenticated, Radius Authenticating...\n"); www_challenge("","0"); break; } else { xlog("L_I","%ci - %fu - User authenticated...\n"); }; if (radius_is_user_in("From", "Dialin")){ xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); }; if (radius_is_user_in("Credentials", "Dialin2")){ xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); }; ----- In /etc/raddb/users file I have the following at line 152: DEFAULT Auth-Type = System Fall-Through = 1 DEFAULT Service-Type == Group-Check, Auth-Type := None DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None ----- These are mysql tables: +----+----------+-----------+----+----------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+----------+ | 1 | Jhassell | Password | == | changeme | | 2 | Rneis | Password | == | changeme | | 3 | 1000 | Password | == | 1000 | | 4 | 2000 | Password | == | 2000 | | 5 | 3000 | Password | == | 3000 | | 8 | 1000 | Auth-Type | := | Digest | +----+----------+-----------+----+----------+ +----+-----------+-----------+----+--------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+--------+ | 6 | Dialin | Auth-Type | := | Accept | +----+-----------+-----------+----+--------+ +----+-----------+---------------+----+----------------------------------+-- ----+ | id | GroupName | Attribute | op | Value | prio | +----+-----------+---------------+----+----------------------------------+-- ----+ | 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | 0 | | 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | 0 | +----+-----------+---------------+----+----------------------------------+-- ----+ +----+----------+---------------+----+------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------+ | 1 | 1000 | Reply-Message | = | "Authenticated" | | 2 | 1000 | Sip-Group | = | Dialin | | 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | +----+----------+---------------+----+------------------+ +----+----------+------------+ | id | UserName | GroupName | +----+----------+------------+ | 1 | Jhassell | Dialin | | 2 | Rneis | Staticdial | | 3 | 1000 | Dialin | | 4 | 2000 | Dialin | | 5 | 3000 | Dialin | | 6 | 3000 | Dialin2 | +----+----------+------------+ ------ This is the debug I get from freeradius for the group check: rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, length=67 User-Name = "1000(a)xx.xx.xx.xx" Sip-Group = "Dialin2" Service-Type = Group-Check NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 74 modcall[authorize]: module "preprocess" returns ok for request 74 modcall[authorize]: module "chap" returns noop for request 74 modcall[authorize]: module "mschap" returns noop for request 74 modcall[authorize]: module "digest" returns noop for request 74 rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = "1000(a)xx.xx.xx.xx" rlm_realm: Found realm "xx.xx.xx.xx" rlm_realm: Adding Stripped-User-Name = "1000" rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx rlm_realm: Adding Realm = "xx.xx.xx.xx" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 74 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 74 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 158 modcall[authorize]: module "files" returns ok for request 74 radius_xlat: '1000' rlm_sql (sql): sql_set_user escaped user --> '1000' rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 74 modcall: group authorize returns ok for request 74 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 74 ERROR: No Digest-Nonce: Cannot perform Digest authentication modcall[authenticate]: module "digest" returns invalid for request 74 modcall: group authenticate returns invalid for request 74 auth: Failed to validate the user. Delaying request 74 for 1 seconds Finished request 74 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 Reply-Message = "Authenticated" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 74 ID 15 with timestamp 434f1121 Nothing to do. Sleeping until we see a request. Any help in this matter would be deeply appreciated, Lenir

1 0

[Serusers] group_radius radius_is_user_in
by Lenir Santiago 14 Oct '05

14 Oct '05

Hello list, I've been trying my hardest today to get group_radius to work, and its function radius_is_user_in(). I'm running ser0.9.4 and freeradius 1.0.4 with the mysql backend and digest authentication. Radius authentication works fine. The problem is that when radius_is_user_in() function gets called, it sends a radius message but without the User-Password field and freeradius complains that it requires it since we are using Digest. I've seen a couple of posts here, but they were never answered: http://lists.iptel.org/pipermail/serusers/2005-March/017342.html http://lists.iptel.org/pipermail/serusers/2005-March/017075.html ----- I have a small test in my ser.cfg file: if (!radius_www_authorize("")) { xlog("L_I","%ci - %fu - User not authenticated, Radius Authenticating...\n"); www_challenge("","0"); break; } else { xlog("L_I","%ci - %fu - User authenticated...\n"); }; if (radius_is_user_in("From", "Dialin")){ xlog("L_I","From: User is in Radius Group Dialin!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin!!!!!\n"); }; if (radius_is_user_in("Credentials", "Dialin2")){ xlog("L_I","From: User is in Radius Group Dialin2!!!!\n"); } else { xlog("L_I","From: User *IS NOT* Group Dialin2!!!!!\n"); }; ----- In /etc/raddb/users file I have the following at line 152: DEFAULT Auth-Type = System Fall-Through = 1 DEFAULT Service-Type == Group-Check, Auth-Type := None DEFAULT Service-Type == SIP-Callee-AVPs, Auth-Type := None ----- These are mysql tables: +----+----------+-----------+----+----------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+----------+ | 1 | Jhassell | Password | == | changeme | | 2 | Rneis | Password | == | changeme | | 3 | 1000 | Password | == | 1000 | | 4 | 2000 | Password | == | 2000 | | 5 | 3000 | Password | == | 3000 | | 8 | 1000 | Auth-Type | := | Digest | +----+----------+-----------+----+----------+ +----+-----------+-----------+----+--------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+--------+ | 6 | Dialin | Auth-Type | := | Accept | +----+-----------+-----------+----+--------+ +----+-----------+---------------+----+----------------------------------+-- ----+ | id | GroupName | Attribute | op | Value | prio | +----+-----------+---------------+----+----------------------------------+-- ----+ | 1 | Dialin | Reply-Message | = | "Authenticated by group Dialin" | 0 | | 2 | Dialin2 | Reply-Message | = | "Authenticated by group Dialin2" | 0 | +----+-----------+---------------+----+----------------------------------+-- ----+ +----+----------+---------------+----+------------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------------+ | 1 | 1000 | Reply-Message | = | "Authenticated" | | 2 | 1000 | Sip-Group | = | Dialin | | 3 | 1000 | SIP-AVP | = | Sip-Group:Dialin | +----+----------+---------------+----+------------------+ +----+----------+------------+ | id | UserName | GroupName | +----+----------+------------+ | 1 | Jhassell | Dialin | | 2 | Rneis | Staticdial | | 3 | 1000 | Dialin | | 4 | 2000 | Dialin | | 5 | 3000 | Dialin | | 6 | 3000 | Dialin2 | +----+----------+------------+ ------ This is the debug I get from freeradius for the group check: rad_recv: Access-Request packet from host xx.xx.xx.xx:33025, id=15, length=67 User-Name = "1000(a)xx.xx.xx.xx" Sip-Group = "Dialin2" Service-Type = Group-Check NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 74 modcall[authorize]: module "preprocess" returns ok for request 74 modcall[authorize]: module "chap" returns noop for request 74 modcall[authorize]: module "mschap" returns noop for request 74 modcall[authorize]: module "digest" returns noop for request 74 rlm_realm: Looking up realm "xx.xx.xx.xx" for User-Name = "1000(a)xx.xx.xx.xx" rlm_realm: Found realm "xx.xx.xx.xx" rlm_realm: Adding Stripped-User-Name = "1000" rlm_realm: Proxying request from user 1000 to realm xx.xx.xx.xx rlm_realm: Adding Realm = "xx.xx.xx.xx" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 74 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 74 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 158 modcall[authorize]: module "files" returns ok for request 74 radius_xlat: '1000' rlm_sql (sql): sql_set_user escaped user --> '1000' rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 74 modcall: group authorize returns ok for request 74 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 74 ERROR: No Digest-Nonce: Cannot perform Digest authentication modcall[authenticate]: module "digest" returns invalid for request 74 modcall: group authenticate returns invalid for request 74 auth: Failed to validate the user. Delaying request 74 for 1 seconds Finished request 74 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 15 to xx.xx.xx.xx:33025 Reply-Message = "Authenticated" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 74 ID 15 with timestamp 434f1121 Nothing to do. Sleeping until we see a request. Any help in this matter would be deeply appreciated, Lenir

1 0

[Users] Softphones compatible with Openser/TLS
by Joonbum Byun 13 Oct '05

13 Oct '05

Hi; I'd like to set up a SIP network secured by TLS in my lab. Would anyone please let me know if open source soft-phone is available compatible with TLS enabled Openser? Any suggestions on soft-phones or success stories are greatly appreciated. Thanks, Joon

3 2

[Serusers] Alias still in memory and database after remove
by Downing, David 13 Oct '05

13 Oct '05

Hello, I'm writing a custom program using the serctl interface to manage users (adds, deletes, etc.). One problem that I am having is with the case where I want to reassign an alias to a different user. My assumption was that the command: %serctl alias rm <aliasX> would delete any references to "aliasX" and allow me to reuse "aliasX" for a different user. What I've found is that even after using the aforementioned command, "aliasX" is still in ser's memory cache and in the database's alias table. Thus, if I attempt to reassign this number, it fails. I'm sure I'm not the first to try reassigning extensions through serctl, so either it is broken or I do not understand what is really going on (likely). Any and all help is greatly appreciated. Thanks.

1 0

[Serusers] How to Tell if a SER Child is Blocked
by Andres 13 Oct '05

13 Oct '05

Is there any way to tell if a SER Child is Blocked? Any debug command or log message available? Thanks, -- Andres Network Admin http://www.telesip.net

2 2

[Serusers] Problems with REGISTER
by Ravic Costa 13 Oct '05

13 Oct '05

hi again, I'm having another problem. I can already run ser-0.9.0, but there is a problem when a client tries to register. I edit the method REGISTER so that all the requests could be accepted: if (method=="REGISTER") { log(1, "LOG: Someone registred\n"); if (!save("location")) { sl_reply_error(); }; break; }; However, with the method, if (method=="REGISTER" && nat_uac_test("3")) { fix_nated_contact(); log(1, "LOG: Someone registred\n"); force_rport(); setflag(2); }; the login failed and i got the following errors: 4(6453) qm_free: freeing frag. 0x81588c4 alloc'ed from parser/msg_parser.c: parse_headers(278) 4(6453) qm_free(0x810bba0, 0x815f428), called from receive.c: receive_msg(234) 4(6453) qm_free: freeing frag. 0x815f410 alloc'ed from receive.c: receive_msg(92) 6(6462) qm_malloc(0x810bba0, 8) called from nathelper.c: timer(1539) 6(6462) qm_malloc(0x810bba0, 8) returns address 0x815cf98 frag. 0x815cf80 (size=8) on 1 -th hit 6(6462) qm_free(0x810bba0, 0x815cf98), called from nathelper.c: timer(1594) 6(6462) qm_free: freeing frag. 0x815cf80 alloc'ed from nathelper.c: timer(1539) 3(6452) udp_rcv_loop: probing packet received from 213.22.190.48 50195 6(6462) qm_malloc(0x810bba0, 8) called from nathelper.c: timer(1539) 6(6462) qm_malloc(0x810bba0, 8) returns address 0x815cf98 frag. 0x815cf80 (size=8) on 1 -th hit 6(6462) qm_free(0x810bba0, 0x815cf98), called from nathelper.c: timer(1594) 6(6462) qm_free: freeing frag. 0x815cf80 alloc'ed from nathelper.c: timer(1539) 6(6462) qm_malloc(0x810bba0, 8) called from nathelper.c: timer(1539) 6(6462) qm_malloc(0x810bba0, 8) returns address 0x815cf98 frag. 0x815cf80 (size=8) on 1 -th hit 6(6462) qm_free(0x810bba0, 0x815cf98), called from nathelper.c: timer(1594) 6(6462) qm_free: freeing frag. 0x815cf80 alloc'ed from nathelper.c: timer(1539) 5(6461) udp_rcv_loop: probing packet received from 213.22.190.48 50195 Does anyone know what could be the problem? Best regards, Ravic Costa

1 0

[Serusers] how to make a call with ser
by fishman7788 13 Oct '05

13 Oct '05

hi,I'm new to ser,afer working several days could't figure out how to set up the call.hope get help here. below is how i setup ser rpm -i ser-0.8.12-0.i386.rpm /etc/rc.d/init.d/ser start and after use serctl ps can see ser runing,I use my softphone to make a dial on the pc side,and the ser side using serctl moni can receive 404 reply at server.And right now I can add users by serctl add. So how to make a realy call without authentication,do i need install mysql?and do I need to add user?

2 1

[Serusers] REFER inquiry
by Jason Mohler 13 Oct '05

13 Oct '05

Can someone please help me with REFER? I have a caller that calls in over my SER and then ACKs a calls and when he tries to REFER I send him the 202 but I never send him the NOTIFY. Can someone please help me understand if I am supposed to send the NOTIFY right after the 202? I send hima final NOTIFY when the call is over but not directly after my 202.

1 0

[Serusers] serweb - Access denied
by Ronald Wiplinger 13 Oct '05

13 Oct '05

(new machine, new installation of Openser and serweb) I use serweb-0.9.3.tgz and Openser cvs version. I have not changed any password, just installed as it is. serweb is at /usr/local/serweb httpd.conf includes the line: Alias /serweb "/usr/local/serweb/html" The apache error.log includes: [Fri Oct 14 00:45:58 2005] [error] [client 192.168.250.108] client denied by server configuration: /usr/local/serweb/html 755 is the permission for /usr/local/serweb and below Since a test file in the directory /usr/local/serweb/test.html shows the same error, I am sure it is an apache 2.0 configuration error. What do I miss? bye Ronald Wiplinger

1 0

[Serusers] Can´t make SIP calls between users
by Voipers Portugal 13 Oct '05

13 Oct '05

Hi (sorry for second posting), I have my SER working when i try to talk to other SIP servers. However, i cannot make calls inside my own network. I am using LDAP to authenticate my users, and I have sipldap script that circulates in the web. Everything works fine until there, i get the following output when the user exists: sip:username@host isn´t this what was supposed to happen? When i then try to (!lookup("location")) { if (!exec_dset("/etc/ser/sipldap")) { sl_send_reply("404", "Not Found"); break; } else { log(1," sipldap call"); }; }; #!lookup I get the Not Found message. But if i call the following way: username@username_IP the call works fine.. any ideia? Jose Simoes

1 0

[Serusers] error running ser-0.9.0
by Ravic Costa 13 Oct '05

13 Oct '05

hi, I'm using ser-0.9.0 with Postgres, and i'm working on a virtual machine that have a Fedora Core 3 distribuition installed. I have a problem when I try to run ser. The error is: 8(16991) 1147. N address=0x8160a18 frag=0x8160a00 size=8196 used=1 8(16991) alloc'd from xlog.c: mod_init(98) 8(16991) start check=f0f0f0f0, end check= c0c0c0c0, abcdefed 8(16991) dumping free list stats : 8(16991) hash= 32. fragments no.: 72, unused: 0 bucket size: 128 - 128 (first 128) 8(16991) hash= 1456. fragments no.: 1, unused: 0 bucket size: 5824 - 5824 (first 5824) 8(16991) hash= 4102. fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 692540) 8(16991) ----------------------------- 0(16847) BUG: qm_free: freeing already freed pointer, first free: hash.c: free_hash_table(64) - aborting Thanks, Ravic

1 0

[Users] Improving TLS implementation
by Cesc 13 Oct '05

13 Oct '05

Hi everybody, I create a separate thread for the whole "tls improvement, let's create a module, lets see what to do with it" because for me it was getting a bit messier. Too many threads all talking about the same :) The TLS bussiness, we agree, is ugly and there is no one-fits-all solution, so we must try to be flexible, even if it means more development. Breaking it down, one more summary: 1) TLS transport layer authentication Allow for various levels of verification and peer certificate requirement. That is, request a cert from the peer or not, what to do if the certificate provided by the peer is not signed by one of our CAs (or if there is no peer cert at all), how the verification should be done (just check against our trusted CAs or do some DNS resolution for the provided Subject/CN on the ip we receive the connection from), etc. 2) Lifting the TLS authentication to the SIP layer for SIP authentication and authorization, according to "whatever" local policy I think here a tls_tools module is what we need. Let's think on what functions are needed to cover most needs. Proposals up to now include functions such as: tls_check_from/to( "SubjectName"/"CN"), tls_is_peer_cert_present(), tls_is_peer_cert_valid(), tls_is_peer_domain_trusted() as in white/black list, etc. 3) Incoming requests 3.1) Single domain This does not present much of a problem. Just present whatever certificate the proxy is serving. Use the tls_tools module to further authenticate and authorize the requeset. 3.2) Multi-domain This present a lot of problems, but there are solutions: 3.2.a) Use a different ip:port per domain ... good enough if the domains served are not changing often. 3.2.b) Present the host certificate, not one per domain ... usable as a fall-back scenario if everything else fails. 3.2.c) Use TLS Extensions, so the requesting proxy notifies the receiving proxy of the domain it is requesting. I just found some guys (i think an initial project from stanford, i don't know now) that implemented the TLS Servername Extension (http://www.edelweb.fr/EdelKey/). I am still waiting for more answers on the ssl-users mailing list, hopefully it is already included in the core, otherwise this solution would mean having to compile openssl locally :( 4) Outgoing requests 4.1) Single domain Again, not much of a problem. 4.2) Multiple domain Solution here is simpler. Provided that the domains are internally setup, select the desired one when forwarding the request (either automatically or via some function in tls_tools module). TLS domains can currently only be set up statically in the config file, thus some dynamic mechanism to create new ones has to be found (database, serctl? ). 5) Out-of-the-box setup That is, ser should allow to work using some very simplistic TLS form just by compiling it with TLS=1 and turning the tls_disabled=0 parameter. In this scenario, TLS could work using anonymous ciphers (no need for certificates) and would accept any incoming request (no verification of certs against CAs, or come with a generic root CA, but that would be more complex). In this mode, a huuge warning should be issued. Let's try to focus on specifics, so we can get this working as soon as possible. Regards, Cesc

2 3

[Users] different tables for acc
by jayesh nambiar 13 Oct '05

13 Oct '05

hi all, I came to kno about the parameter modparam("acc", "db_table_acc", "acc_table"). Does this mean that I can have different acc tables for my different type of customers. Is this possible. If yes, then how? If i declare the appropriate flag and then use setflag at the places i want to account, will it work. Can someone please explain it to me. Any suggestions would help me a lot. Thanx jayesh --------------------------------- Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

2 1

[Serusers] Asigning a Subscriber to a Specific rtpproxy
by Adrian Georgescu 13 Oct '05

13 Oct '05

Andres, Mediaproxy does that, it does a DNS lookup to locate the server(s) for each call. Use a dynamic DNS engine (like the geo module of Power DNS) and you can distribute geographically the streams per user. Adrian Hi, Can anybody think of a way to assign a subscriber's call to a specific rtpproxy? The idea is to have one main SER server but multiple rtpproxy servers handling the media stream close to where the subs are. The SER server can be a continent away but the rtpproxy is in the same city as the users. I was thinking of using ACL (groups) somehow but not sure if it is at all possible. Any ideas? Thanks,

7 7

[Serusers] t_on_failure problem
by Victor Stanescu 13 Oct '05

13 Oct '05

Hello All, Sorry that the first post on this list is with a problem, but well, I am using ser for only 2 days. The problem is the following: I have configured ser using t_on_failure to send a call for PSTN towards a secondary gateway if the first one is failed. These two gateway IP addresses were replaced with gateway1 and gateway2 in config and the ngrep dump, in order to make everything more readable. Everything is fine, except for the following scenario: - a user, from the device "ata" calls a PSTN number - during the ringing phase, it closes the call - the normal behavior (i think) should be to close the call in ser - what happens in reality is that (as I see in the ngrep log) the call is sent to the failure_route and altough the ata user closed the call, the pstn user is ringed again. of course, if at the second try it answers, the call is closed as the caller is no longer present in the call. What I want to do was just to send the call to the secondary gateway if the first one does not answer (is dead), but it seems that I got some side effects like the one described there, and probably a few more (like redialing a call that was busy and so on). Is there any way to try the failure route only when the first route timed out, but not for normal errors (like no answer, busy, hang-up from the caller before answer and so on?). If the first answer is yes, can I add behind the timeout some specific failure causes (like the one that will be sent when the ISDN in the gateway is down?), but not all cancel causes (because a busy for example should not be retried over the backup gateway). I have attached my config and a ngrep dump. sip2:/opt/ser/sbin # ser -V version: ser 0.9.4 (i386/linux) flags: STATS: Off, USE_IPV6, USE_TCP, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535 @(#) $Id: main.c,v 1.197.2.1 2005/07/25 16:56:24 andrei Exp $ main.c compiled on 10:24:39 Oct 12 2005 with gcc 3.3.5 -- Victor Stanescu GTS Telecom Romania Senior R&D Engineer [t] +40-31-2200239, +40-31-2200200 [t] +40-21-4025539, +40-21-4100100 [f] +40-31-2200222, +40-21-4103883 [i] http://www.gtstelecom.ro/ # U ata:5060 -> ser:5060 INVITE sip:12345%230312299998@ser:5060 SIP/2.0. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 230. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 INVITE. Route: <sip:ser:5060;lr>. Supported: timer. Min-SE: 1800. Session-Expires: 3600. Allow: INVITE, ACK, BYE, CANCEL, REFER, NOTIFY. Content-Type: application/sdp. Contact: victor-sip-line1 <sip:0330229998@ata:5060>. Supported: replaces. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. . v=0. o=MxSIP 1161439858835651694 777463051104361766 IN IP4 ata. s=-. c=IN IP4 ata. t=0 0. a=sendrecv. m=audio 5004 RTP/AVP 4 8 111. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:111 X-nt-inforeq/8000. # U ser:5060 -> ata:5060 SIP/2.0 100 trying -- your call is important to us. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 INVITE. Server: Sip EXpress router (0.9.4 (i386/linux)). Content-Length: 0. Warning: 392 ser:5060 "Noisy feedback tells: pid=18625 req_src_ip=ata req_src_port=5060 in_uri=sip:12345%230312299998@ser:5060 out_uri=sip:12345%230312299998@gateway1:5060 via_cnt==1". . # U ser2:5060 -> gateway1:5060 INVITE sip:12345%230312299998@gateway1:5060 SIP/2.0. Max-Forwards: 10. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>. Record-Route: <sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 230. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 INVITE. Supported: timer. Min-SE: 1800. Session-Expires: 3600. Allow: INVITE, ACK, BYE, CANCEL, REFER, NOTIFY. Content-Type: application/sdp. Contact: victor-sip-line1 <sip:0330229998@ata:5060>. Supported: replaces. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. P-hint: main PSTN route. . v=0. o=MxSIP 1161439858835651694 777463051104361766 IN IP4 ata. s=-. c=IN IP4 ata. t=0 0. a=sendrecv. m=audio 5004 RTP/AVP 4 8 111. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:111 X-nt-inforeq/8000. # U gateway1:5060 -> ser2:5060 SIP/2.0 100 Trying. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:05 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Content-Length: 0. . # U gateway1:5060 -> ser2:5060 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:05 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway1:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 206. . v=0. o=CiscoSystemsSIP-GW-UserAgent 6300 8439 IN IP4 gateway1. s=SIP Call. c=IN IP4 gateway1. t=0 0. m=audio 19264 RTP/AVP 4. c=IN IP4 gateway1. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. # U ser:5060 -> ata:5060 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:05 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway1:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 206. . v=0. o=CiscoSystemsSIP-GW-UserAgent 6300 8439 IN IP4 gateway1. s=SIP Call. c=IN IP4 gateway1. t=0 0. m=audio 19264 RTP/AVP 4. c=IN IP4 gateway1. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. # U gateway1:5060 -> ser2:5060 SIP/2.0 180 Ringing. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:05 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway1:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Length: 0. . # U ser:5060 -> ata:5060 SIP/2.0 180 Ringing. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:05 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway1:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Length: 0. . # U ata:5060 -> ser:5060 CANCEL sip:12345%230312299998@ser:5060 SIP/2.0. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 0. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 CANCEL. Route: <sip:ser:5060;lr>. Supported: timer. Supported: replaces. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. . # U ser2:5060 -> gateway1:5060 CANCEL sip:12345%230312299998@gateway1:5060 SIP/2.0. Max-Forwards: 10. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>. Record-Route: <sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 0. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 CANCEL. Supported: timer. Supported: replaces. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. P-hint: main PSTN route. . # U ser:5060 -> ata:5060 SIP/2.0 200 canceling. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. To: sip:12345%230312299998@ser:5060;tag=a6a1c5f60faecf035a1ae5b6e96e979a-7882. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 CANCEL. Server: Sip EXpress router (0.9.4 (i386/linux)). Content-Length: 0. Warning: 392 ser:5060 "Noisy feedback tells: pid=18615 req_src_ip=ata req_src_port=5060 in_uri=sip:12345%230312299998@ser:5060 out_uri=sip:12345%230312299998@gateway1:5060 via_cnt==1". . # U gateway1:5060 -> ser2:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Content-Length: 0. CSeq: 613426530 CANCEL. . # U gateway1:5060 -> ser2:5060 SIP/2.0 487 Request Cancelled. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Content-Length: 0. . # U ser2:5060 -> gateway1:5060 ACK sip:12345%230312299998@gateway1:5060 SIP/2.0. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.0. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. To: sip:12345%230312299998@ser:5060;tag=95509674-1ABE. CSeq: 613426530 ACK. Route: <sip:ser:5060;lr>. User-Agent: Sip EXpress router(0.9.4 (i386/linux)). Content-Length: 0. . # U ser2:5060 -> gateway2:5060 INVITE sip:12345%230312299998@gateway2:5060 SIP/2.0. Max-Forwards: 10. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>. Record-Route: <sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 230. To: sip:12345%230312299998@ser:5060. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 INVITE. Supported: timer. Min-SE: 1800. Session-Expires: 3600. Allow: INVITE, ACK, BYE, CANCEL, REFER, NOTIFY. Content-Type: application/sdp. Contact: victor-sip-line1 <sip:0330229998@ata:5060>. Supported: replaces. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. P-hint: main PSTN route. P-hint: backup PSTN route. . v=0. o=MxSIP 1161439858835651694 777463051104361766 IN IP4 ata. s=-. c=IN IP4 ata. t=0 0. a=sendrecv. m=audio 5004 RTP/AVP 4 8 111. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:111 X-nt-inforeq/8000. # U gateway2:5060 -> ser2:5060 SIP/2.0 100 Trying. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Content-Length: 0. . # U gateway2:5060 -> ser2:5060 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway2:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 206. . v=0. o=CiscoSystemsSIP-GW-UserAgent 4972 1735 IN IP4 gateway2. s=SIP Call. c=IN IP4 gateway2. t=0 0. m=audio 17972 RTP/AVP 4. c=IN IP4 gateway2. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. # U ser:5060 -> ata:5060 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway2:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 206. . v=0. o=CiscoSystemsSIP-GW-UserAgent 4972 1735 IN IP4 gateway2. s=SIP Call. c=IN IP4 gateway2. t=0 0. m=audio 17972 RTP/AVP 4. c=IN IP4 gateway2. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=yes. # U gateway2:5060 -> ser2:5060 SIP/2.0 180 Ringing. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway2:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Length: 0. . # U ser:5060 -> ata:5060 SIP/2.0 180 Ringing. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Contact: <sip:12345%230312299998@gateway2:5060>. Record-Route: <sip:ser2;r2=on;ftag=8cd4af6254d7f35;lr=on>,<sip:ser;r2=on;ftag=8cd4af6254d7f35;lr=on>. Content-Length: 0. . # U gateway2:5060 -> ser2:5060 SIP/2.0 486 Busy here. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1,SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Content-Length: 0. . # U ser2:5060 -> gateway2:5060 ACK sip:12345%230312299998@gateway2:5060 SIP/2.0. Via: SIP/2.0/UDP ser2;branch=z9hG4bKd333.8a811104.1. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. CSeq: 613426530 ACK. Route: <sip:ser:5060;lr>. User-Agent: Sip EXpress router(0.9.4 (i386/linux)). Content-Length: 0. . # U ser:5060 -> ata:5060 SIP/2.0 486 Busy here. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. Date: Thu, 13 Oct 2005 08:37:18 GMT. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 613426530 INVITE. Allow-Events: telephone-event. Content-Length: 0. . # U ata:5060 -> ser:5060 ACK sip:12345%230312299998@ser:5060 SIP/2.0. Via: SIP/2.0/UDP ata:5060;branch=z9hG4bK5ff8a4489. Content-Length: 0. To: sip:12345%230312299998@ser:5060;tag=8B304160-442. From: victor-sip-line1 <sip:0330229998@ser:5060>;tag=8cd4af6254d7f35. Call-ID: 82e11618a9116e2353f0e5904525db55@ser. CSeq: 613426530 ACK. Route: <sip:ser:5060;lr>. User-Agent: MxSipApp/5.0.7.59 MxSF/v3.2.7.44. . route{ if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; if (!method=="REGISTER") record_route(); if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if(!src_ip=="other") { if (!www_authorize("gtstelecom.ro", "subscriber")) { www_challenge("gtstelecom.ro", "0"); break; }; save("location"); log("Replicating REGISTER\n"); t_replicate("other", "5060"); } else { save("location"); }; break; }; if (uri=~"^sip:[1-9][0-9]{4}%23[0-9]*" || uri=~"^sip:[1-9][0-9]{4}#[0-9]*") { log("Forwarding to PSTN\n"); rewritehostport("gateway1:5060"); route(2); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # subscribers route setflag(1); if (!t_relay()) { sl_reply_error(); }; } route[2] { # main PSTN route append_hf("P-hint: main PSTN route\r\n"); t_on_failure("1"); if (!t_relay()) { sl_reply_error(); break; }; } failure_route[1] { # backup PSTN route append_hf("P-hint: backup PSTN route\r\n"); rewritehostport("gateway2:5060"); append_branch(); t_relay(); }

1 0

[Serusers] send BYE using FIFO
by Ryan Pagquil 13 Oct '05

13 Oct '05

Hi, I have been searching on how can I terminate an active sessions, and I read in the list that there are some using fifo to disconnect active calls. Does any body can help me about this? I don;t know how to construct a command using fifo, but from the admin guide there is a reference for fifo command, but i don;t know how to use it. Can anybody give me the command to terminate the call using t_uac_dlg command? Thanks, -- Ryan Pagquil Infodyne Inc. - PhilOnline.com 3603 Antel Global Corporate Center Doña Julia Vargas Ave. Ortigas Center Pasig City Tel: 687-0715 Web: www.philonline.com

1 0

RE: [Serusers] SRC-Based Routing?
by Ashish Gilotra 13 Oct '05

13 Oct '05

do u mean user-id remains same when they move across cities ? -----Original Message----- From: Duncan Glendinning [mailto:Duncan.Glendinning@cox.net] Sent: Thursday, October 13, 2005 5:51 AM To: serusers(a)lists.iptel.org Subject: [Serusers] SRC-Based Routing? I am using SER is the primary SIP server in front of four Asterisk PBX's each located in a different city(e.g., City 1: 899xxxx, City 2: 598xxxx, City 3: 356xxxx, City 4: 829xxxx). Users are identified by a 7 digit number based on their home city. For PSTN-bound destinations, I want to be able to direct SIP calls to the appropriate Asterisk server based on who is calling. Using the src IP address isn't sufficient as users move around the network - in one city one day and another city another day. For example, I want a call from user 8991234(a)domain.com <mailto:8991234@domain.com> to 91234567(a)domain.com <mailto:91234567@domain.com> to be sent to the server in City 1 because user 8991234 resides in City 1. I can't use the src ip address because users move around in the network. I have wondered about using a city-based db in addition to a global db. Being a newcomer to this, I'm hoping that there is a simple solution to this problem. Your help and insights would be greatly appreciated, Duncan --- <mailto:Duncan.Glendinning@cox.net> Duncan.Glendinning(a)cox.net

1 0

[Serusers] serweb is empty
by Ronald Wiplinger 13 Oct '05

13 Oct '05

I cannot figure out why the serweb page is empty. if I go to http://host/serweb it redirects me to http://host/serweb/user/index.php The page source code is than just: <html><body></body></html> # pear install log Skipping package "pear/Log", already installed as version 1.9.0 No valid packages found install failed config.php contains: $config->enable_loging = true; $config->log_file = "/var/log/serweb"; $config->log_level = "PEAR_LOG_DEBUG"; /var/log/serweb will not be created! If I touch serweb and give the permission 777 it still remains empty. php.ini includes: register_globals = On I double checked the config files, I checked that the user ser can login to mysql database with the password on localhost. What do I miss? bye Ronald Wiplinger

2 3

[Users] manipulate $from under avops module
by Brandon Price 13 Oct '05

13 Oct '05

I am having some trouble with avpops and the from variable. I am doing something like avp_db_load("$to","$disabled"); which produces a query like select value,attribute,type from usr_preferences where username='+15183207486' AND attribute='50' the problem is I need a query like select value,attribute,type from usr_preferences where username='15183207486' AND attribute='50' ,without the "+" is there any way I can strip the 1st digit from the $from variable? I have already tried using strip(1); As always any help greatly appreciated.

2 4

[Serusers] [HELP]:Failed to use X-Pro to call
by shikun.wang 13 Oct '05

13 Oct '05

Hi, When I use X-pro to do a call test,the radius server debugs: rad_recv: Access-Request packet from host 127.0.0.1:33407, id=111, length=256 User-Name = "<A href="mailto:003@159.226.58.100">003(a)159.226.58.100</A>" Digest-Attributes = 0x0a05303033 Digest-Attributes = 0x01103135392e3232362e35382e313030 Digest-Attributes = 0x022a34333465343837383763373365376536316365356238636663636135333562643837303161633263 Digest-Attributes = 0x04147369703a3135392e3232362e35382e313030 Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x050661757468 Digest-Attributes = 0x090a3030303030303139 Digest-Attributes = 0x08224244303044334532333841363432363341434337414135414643444646454635 Digest-Response = "f4ac6b69ae532a2feb1b8b9e32e0fe86" Service-Type = Sip-Session Sip-Uri-User = "003" NAS-IP-Address = 127.0.0.1 NAS-Port = 5060 modcall: entering group authorize modcall[authorize]: module "preprocess" returns ok modcall[authorize]: module "chap" returns noop rlm_eap: EAP-Message not found modcall[authorize]: module "eap" returns noop rlm_digest: Converting Digest-Attributes to something sane... Digest-User-Name = "003" Digest-Realm = "159.226.58.100" Digest-Nonce = "434e48787c73e7e61ce5b8cfcca535bd8701ac2c" Digest-URI = "sip:159.226.58.100" Digest-Method = "REGISTER" Digest-QOP = "auth" Digest-Nonce-Count = "00000019" Digest-CNonce = "BD00D3E238A64263ACC7AA5AFCDFFEF5" rlm_digest: Adding Auth-Type = DIGEST modcall[authorize]: module "digest" returns ok rlm_realm: Looking up realm "159.226.58.100" for User-Name = "<A href="mailto:003@159.226.58.100">003(a)159.226.58.100</A>" rlm_realm: No such realm "159.226.58.100" modcall[authorize]: module "suffix" returns noop users: Matched DEFAULT at 152 modcall[authorize]: module "files" returns ok modcall[authorize]: module "mschap" returns noop modcall: group authorize returns ok rad_check_password: Found Auth-Type DIGEST auth: type "digest" modcall: entering group authenticate rlm_digest: Configuration item "User-Password" is required for authentication. modcall[authenticate]: module "digest" returns invalid modcall: group authenticate returns invalid auth: Failed to validate the user. Delaying request 34 for 1 seconds Finished request 34 Going to the next request Sending Access-Reject of id 110 to 127.0.0.1:33406 "003" is the user name and I have set the secret in the configure files of both radius server and radius client. Anyone can give me an instruction?Many Thanks.

1 0

[Serusers] Smoothly transition from only Asterisk to Openser plus Asterisk
by Ronald Wiplinger 13 Oct '05

13 Oct '05

The last week__s I tried to insall webser on a machine other than my asterisk box. I cannot make it!!! My next attempt is to use my Asterisk box for openSER and Asterisk. I will install openser and webser first with listening to port 5062 instead of the usually 5060 SIP port. Than I will test openSER and serweb. So far, I believe I can make it, but for the next steps I need some help. What is the easiest way to get the Asterisk users into SER? I want to swap in Asterisk the port 5060 to 5061 and from openSER the port 5062 to 5060 AND forward all calls to Asterisk. What do I need to do for that? If the user is registered in Asterisk AND in SER, than he will get a different context, while if only in SER, than he should only get [from_ser] which means only local calls. In addition I want to allow for SER users ENUM and DUNDI. I found a module ENUM, but I did not find a DUNDI module. Any ideas, suggestions or recommendations for my path? BTW, I read many docs about SER and it mentions iptel.cfg in the etc directory, but I do not have that example. Where can I get this one? bye Ronald Wiplinger

1 0

[Serusers] SRC-Based Routing?
by Duncan Glendinning 13 Oct '05

13 Oct '05

I am using SER is the primary SIP server in front of four Asterisk PBX's each located in a different city(e.g., City 1: 899xxxx, City 2: 598xxxx, City 3: 356xxxx, City 4: 829xxxx). Users are identified by a 7 digit number based on their home city. For PSTN-bound destinations, I want to be able to direct SIP calls to the appropriate Asterisk server based on who is calling. Using the src IP address isn't sufficient as users move around the network - in one city one day and another city another day. For example, I want a call from user 8991234(a)domain.com to 91234567(a)domain.com to be sent to the server in City 1 because user 8991234 resides in City 1. I can't use the src ip address because users move around in the network. I have wondered about using a city-based db in addition to a global db. Being a newcomer to this, I'm hoping that there is a simple solution to this problem. Your help and insights would be greatly appreciated, Duncan --- <mailto:Duncan.Glendinning@cox.net> Duncan.Glendinning(a)cox.net

2 1

[Serusers] failure route
by Jason Mohler 12 Oct '05

12 Oct '05

Is there anyone that can help me with my following syntax? I am basically trying to have all calls come in from an IP and if that IP fails for some reason, it will roll to another IP. if (src_ip== xxx.xxx.xxx.xxx){ t_on_failure("1"); rewritehost("xxx.xxx.xxx.xxx"); }; route[1]{ rewritehost("xxx.xxx.xxx.xxx"); break; t_relay(); };

5 8

[Users] server IP and DNS SRV rewrite
by Helge Waastad 12 Oct '05

12 Oct '05

Hi, I was just thinking..... I have a multi-domain setup and using domain in lookup(). However, some UAC sends the proxy address in INVITE. If all my contacts are registered with <username> and <domain>, lookup ("location") will return false since the domain in request will be <proxy ip address>..... Is there a way of reverse dns handle this or is just textops the way to go? -- mvh/best regards Helge Waastad System Engineer Smartnet

2 2

[Serusers] Missed Call Return
by Aisling 12 Oct '05

12 Oct '05

Hello, I read a previous post by Iqbal (missed caller call back) where a subscriber can ring a pre-defined number which calls back their last missed call... Is my logic correct as follows?: In the missed call section (i.e. when theres a 408/487 message) do: avp_db_store("$ruri", "i:1000"); Then when the caller dials the callback number e.g.1471 this code is invoked: if (uri=~"^sip:1471@x.x.x.x"){ log(1, "in missed call return section"); avp_db_load("$from/username", "i:1000"); avp_pushto("i:1000", "$ruri"); // route as normal }; I am getting an error when restarting SER: ERROR: avops: fixup_pushto_avp: bad param 1; expected : $[ruri|hdr_name|..] Is it correct to push the AVP i:1000 to the ruri? Do I need to define aliases in the modparam perhaps? Any help would be appreciated. Many thanks, Aisling. p.s. In case anyone was following my other post regarding asterisk voicemail - It's now working using avpops, the problem was with my asterisk config. There is still a problem playing back the messages though. -------------------Legal Disclaimer--------------------------------------- The above electronic mail transmission is confidential and intended only for the person to whom it is addressed. Its contents may be protected by legal and/or professional privilege. Should it be received by you in error please contact the sender at the above quoted email address. Any unauthorised form of reproduction of this message is strictly prohibited. The Institute does not guarantee the security of any information electronically transmitted and is not liable if the information contained in this communication is not a proper and complete record of the message as transmitted by the sender nor for any delay in its receipt.

4 9

[Serusers] BYE method not handled properly
by Sam Lee 12 Oct '05

12 Oct '05

I would like to know why does my BYE method are always replied with a 'Call Leg/Transaction does not exist' . How do they compare whether the transaction in the BYE method exist or not ? ( tag? ftag ? ) Are there any thing in the config that might cause this kind of problem ? Just want to highlight that all the calls are made in a good condition, everything except when the call is ending. I have checked that the phones have not received a prior BYE. Any other idea what is wrong ? Here's a more detailed situation :- Caller (PSTN) --> Voice Gateway --> OPENSER --> Callee (UA) When Callee (UA) tried to end the call , OPENSER will forward a copy of the BYE to Voice Gateway to inform him of the BYE. The Gateway , somehow , replied with a 'Call Leg/Transaction Does Not Exist' . The strange thing is, the Caller (PSTN) was somehow informed of the BYE method and terminate the session . Anyone has any idea how to handle these errors ? I will be glad to provide a ngrep for more reference. Please let me know if you dont understand. Regards, Sam

1 0

[Users] Polycom soundpoint ip 500
by Cesc 12 Oct '05

12 Oct '05

Hi, We have a polycom sound point ip 500, sip app ver 1.5 (from voip-info.org<http://voip-info.org>). It turns out that it won't display MESSAGE ... but it does receive them and it replies with a 200 OK. But no message on the screen or anywhere within the phone. The configuration has not been changed, it is pretty much the standard stuff that comes from voip-info.org <http://voip-info.org>. Anyone has ever came across the same problem? Regards, Cesc PS - Getting the sip software from polycom resellers is a mess ... well, i would say almost impossible. Next time we'll go for a costumer frendlier phone manufacturer i guess.

1 0

Re: [Serusers] Have some INVITE problems
by Samuel Osorio Calvo 12 Oct '05

12 Oct '05

I'm sorry but I have never played with these models so I can not help you much..... In order to extend the INVITE retransmission, there must be somewhere in the web interface of these phones (if they have) something like T1 and T2, these values determine the retransmission period. I guess you should check the Internet for information about your phones. Hope somebody else with more experience can help you, Samuel. Unclassified. >>> Alex <alexandergav(a)gmail.com> 10/11/05 05:45PM >>> I am using cisco 7960 and grandstream. 286,486 On 10/11/05, Samuel Osorio Calvo <samuel.osorio(a)nl.thalesgroup.com> wrote: > > Which UA are you using??? It looks like all your issues comes from the > implementation you are using as end-point and has nothing to do with SER. > > Samuel. > > > Unclassified. > >>> Alex <alexandergav(a)gmail.com> 10/11/05 11:06AM >>> > Hi all > I would like to explain some problem. > When my UAC initiates INVITE the server response with 100 trying > After receiving 100 trying the UAC sending again INVITE. ( HERE is the > problem). > RFC - 3261 ("After receiving a 1xx response, any retransmissions cease > altogether "); > Any help on that will be appreciated. > In addition if there any way to extend the timeout between the INVITES. > Thanks > >

1 0

[Users] CDRTool call rating "Cannot instantiate non-existent class"
by Cameron Beattie 12 Oct '05

12 Oct '05

I have been testing CDRTool and get the following message in the log files when browsing to www.example.com/scripts/ratingEngine.php: Cannot instantiate non-existent class: ratingtables in /var/www/CDRTool/scripts/ratingEngine.php Is this because the non commercial version of CDRTool does not provide rating or is it something I have done wrong in the setup? Any advice would be appreciated. Regards Cameron

1 0

[Serusers] rewriting domain
by Maciej Świniarski 12 Oct '05

12 Oct '05

i have stupid hardphone, proxy, registrer server is always domain :/ I have configured DNS and ser to use some domain.com as sip domain, but proxy have sip.mydomain.com addres. Registering is no problem because i can tell what domain ser should search but problem is for examplke with aliases i don't want write every time `serctl alias add user(a)domain.com` `serctl alias add user(a)sip.domain.com` if (uri=~".*sip\.my\.domain\.com") { rewritehost("my.somain.com"; } don't work becaus it rewrites requested uri i hope you get my point. Any one know how to solve this problem?

1 0

[Serusers] acc+nat
by Maciej Świniarski 12 Oct '05

12 Oct '05

hi i have little problem with acc and nat becaus mysql records created with acc module contains ip behind nat. And yes, i use fix_nated_contact befor setting flag for acc module. Any one have some experience with this issue?

1 0

Re: [Users] Constructing sip uri from Dialed number and userloc
by Daniel-Constantin Mierla 12 Oct '05

12 Oct '05

On 10/12/05 02:54, Gene Willingham wrote: > > > > Not sure if I have all of the terminology right, but I would like to > have Asterisk register with openser. Then when a call comes in I > would like to construct the sip uri using the Dialed number and the > user location. The final uri should be: > > > > Sip:240744XXXX@25.25.25.25. Where the IP address is the user location > of the Asterisk box. > You can play with avpops to get this. You have there avp_write() to backup the original dialed number, or avp_subst() to extract parts of the original dialed number. Then use avp_printf() to concatenate the values, after usrloc lookup (see http://www.voice-system.ro/docs/avpops/) and avp_pushto() to rewrite the r-uri. Cheers, Daniel > > > Any suggestions. > > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users >

1 0

[Serusers] BYE method not handled properly
by Sam Lee 12 Oct '05

12 Oct '05

I would like to know why does my BYE method are always replied with a 'Call Leg/Transaction does not exist' . How do they compare whether the transaction in the BYE method exist or not ? ( tag? ftag ? ) Are there any thing in the config that might cause this kind of problem ? Just want to highlight that all the calls are made in a good condition, everything except when the call is ending. I have checked that the phones have not received a prior BYE. Any other idea what is wrong ? Here's a more detailed situation :- Caller (PSTN) --> Voice Gateway --> OPENSER --> Callee (UA) When Callee (UA) tried to end the call , OPENSER will forward a copy of the BYE to Voice Gateway to inform him of the BYE. The Gateway , somehow , replied with a 'Call Leg/Transaction Does Not Exist' . The strange thing is, the Caller (PSTN) was somehow informed of the BYE method and terminate the session . Anyone has any idea how to handle these errors ? I will be glad to provide a ngrep for more reference. Please let me know if you dont understand. Regards, Sam

1 0

RE: [Users] BYE method accompanied by error
by Sam Lee 12 Oct '05

12 Oct '05

I have checked that the phones have not received a prior BYE. Any other idea what is wrong ? Here's a more detailed situation :- Caller (PSTN) --> Voice Gateway --> OPENSER --> Callee (UA) When Callee (UA) tried to end the call , OPENSER will forward a copy of the BYE to Voice Gateway to inform him of the BYE. The Gateway , somehow , replied with a 'Call Leg/Transaction Does Not Exist' . The strange thing is, the Caller (PSTN) was somehow informed of the BYE method and terminate the session . Anyone has any idea how to handle these errors ? I will be glad to provide a ngrep for more reference. Regards, Sam -----Original Message----- From: users-bounces(a)openser.org [mailto:users-bounces@openser.org] On Behalf Of Iqbal Sent: Tuesday, October 11, 2005 7:35 PM To: Sam Lee Cc: users(a)openser.org Subject: Re: [Users] BYE method accompanied by error Can you check to see if you have already received a BYE for that call, some phones I had were sending there own Bye's after the GW had Iqbal Sam Lee wrote: > Hi all, > > I would like to know why does my BYE method are always replied with a > 'Call Leg/Transaction does not exist' . How do they compare whether > the transaction in the BYE method exist or not ? ( tag? ftag ? ) Are > there any thing in the config that might cause this kind of problem ? > Just want to highlight that all the calls are made in a good > condition, everything except when the call is ending. > > Please let me know if you dont understand. > > Regards, > Sam > >----------------------------------------------------------------------- >- > >_______________________________________________ >Users mailing list >Users(a)openser.org >http://openser.org/cgi-bin/mailman/listinfo/users > > _______________________________________________ Users mailing list Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users

1 0

Re: [Users] Constructing sip uri from Dialed number and userloc
by Klaus Darilion 12 Oct '05

12 Oct '05

Check out the admin guide! http://www.iptel.org/ser/doc/seruser/seruser.html#URIREWRITINGEXAMPLES You want to use rewritehostport(). You could also use AVPs and avpops module. klaus Gene Willingham wrote: > > > Not sure if I have all of the terminology right, but I would like to > have Asterisk register with openser. Then when a call comes in I would > like to construct the sip uri using the Dialed number and the user > location. The final uri should be: > > > > Sip:240744XXXX@25.25.25.25. Where the IP address is the user location > of the Asterisk box. > > > > Any suggestions. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users

1 0

[Serusers] Forward to PSTN gateway question
by Alejandro G 12 Oct '05

12 Oct '05

Hi, I have the following configuration: 192.168.0.101 192.168.0.1 Public IP <---> Asterisk <------------------------------> SER <---> Public IP <-----> SIP Phone as PSTN GW I use mediaproxy for dealing with NAT, everything works fine. We have 2 internet connections: one over Asterisk with low bandwith, and the other over SER with more bandwidth. The SIP phone is Sipura 2100. The routing block I use in INVITE is something liske this: route[1] { # ----------------------------------------------------------------- # Default Message Handler # ----------------------------------------------------------------- t_on_reply("1"); if (!t_relay()) { if (method=="INVITE" || method=="ACK") { end_media_session(); }; sl_reply_error(); }; } route[4] { # ----------------------------------------------------------------- # PSTN Handler # ----------------------------------------------------------------- rewritehost("192.168.0.1"); # GATEWAY IP ADDRESS avp_write("i:45", "inv_timeout"); append_hf("P-hint: GATEWAY\r\n"); # ----------------------------------------------------------------- # RTP Proxy Enabler # ----------------------------------------------------------------- if (isflagset(6) || isflagset(7)) { # flags set by client_nat_test() use_media_proxy(); }; route(1); } When the user with the SIP phone terminates in PSTN via Asterisk, SER forwards to Asterisk but Asterisk then * contacts rtp streams directly to SIP phone bypassing SER and using the low bandwidth connection. My knowledge is poor about SER and SIP issues but I believe that * tries to contact to the UA specified in the Contact header. Is this correct? Is anyway SIP phone could terminate in PSTN connecting using SER and private LAN to connect to asterisk instead of using asterisk's public IP? Sorry, I'm not sure that my questions is clear enough. Thanks. Alejandro Ghergherian

1 0

Re: [Serusers] Please help on terminating active sessions!!!
by Ryan Pagquil 12 Oct '05

12 Oct '05

Hi Samuel, I'm getting these (To: From: Call-ID) informations from the database, since I'm accounting those messages in mysql database, will it help? Does this method will terminate active sessions for both side? I mean the caller and the callee will be terminated when I do this? Is there any other way to terminate calls instead of sipsak? I want to try all available option just to do this. Please help.... Thanks, Ryan Samuel Osorio Calvo wrote: >I guess you change To:, From: and Call-ID headers every time you want to tear down a concrete session.....these headers change for every session and you will have to take the values from the message exchange creating the session. (INVITE/OK/ACK). >Moreover, it looks weird that the To,From, and Contact represents the same identity while the req-uri is another...... > >Hope you can use these hints to improve the so-wanted pre-paid stuff for SER ;) > >Samuel. > > >Unclassified. > > >>>><rpagquil(a)philonline.com> 10/11/05 12:52PM >>> >>>> >>>> >Hi guys, >I'm having a big problem on how can I terminate active sessions... I'm currently using sipsak to terminate it but all tests are not successfull. > >Here is what I do: >my bye file is like this: > >BYE sip:rpagquil@202.84.24.126:5060 SIP/2.0 >To: <sip:acjeff@sip.philonline.com>;tag=3986313335 >From: <sip:acjeff@sip.philonline.com>;tag=1362465910 >Contact: <sip:acjeff@202.84.24.126:5060> >Call-ID: 4D161E9C-3A79-11DA-BFB7-00E04CAB4AB4(a)10.0.1.144 >CSeq: 7 BYE >Max-Forwards: 16 >User-Agent: X-Lite release 1103m >Content-Length: 0 > >here im trying to terminate these two calls. >and here is what my command in sipsak: > >sipsak -vv -f byemes -s sip:sip.philonline.com > >But those things aren't working with me... any suggestions or any other methods are applicable with what i'm doing? > >I'm doing this so that those users that have no credits left are disconnected automatically...I'm trying to do a prepaid service for SER. > >Please help on this matter.... > >I really need your help... > >Thanks, > >Ryan Pagquil >Infodyne Inc. (www.philonline.com) >Tel. (632)-6870715 > > > > > -- Ryan Pagquil Infodyne Inc. - PhilOnline.com 3603 Antel Global Corporate Center Doña Julia Vargas Ave. Ortigas Center Pasig City Tel: 687-0715 Web: www.philonline.com

2 1

[Users] Constructing sip uri from Dialed number and userloc
by Gene Willingham 11 Oct '05

11 Oct '05

Not sure if I have all of the terminology right, but I would like to have Asterisk register with openser. Then when a call comes in I would like to construct the sip uri using the Dialed number and the user location. The final uri should be: Sip:240744XXXX@25.25.25.25. Where the IP address is the user location of the Asterisk box. Any suggestions.

1 0

[Users] BYE method accompanied by error
by Sam Lee 11 Oct '05

11 Oct '05

Hi all, I would like to know why does my BYE method are always replied with a 'Call Leg/Transaction does not exist' . How do they compare whether the transaction in the BYE method exist or not ? ( tag? ftag ? ) Are there any thing in the config that might cause this kind of problem ? Just want to highlight that all the calls are made in a good condition, everything except when the call is ending. Please let me know if you dont understand. Regards, Sam

4 6

RE: [Serusers] logging of SIP dialog
by Ricardo Martinez 11 Oct '05

11 Oct '05

ngrep -W byline [calling-number] port 5060 -q It works to me.. Regards, Ricardo Martinez.- > -----Mensaje original----- > De: Iqbal [mailto:iqbal@gigo.co.uk] > Enviado el: Martes, 11 de Octubre de 2005 14:46 > Para: Klaus Darilion > CC: serusers(a)lists.iptel.org > Asunto: Re: [Serusers] logging of SIP dialog > > > Hi > > Is there any easy way of matching all messages belonging to a call in > ngrep, aside from pulling out the call-id and the grepping > for all those > which match that call-id...I am guessing not... > > iqbal > > Klaus Darilion wrote: > > > We use the low-level approach: > > > > > crontab -l > > # purge SIP packet sniffs > > 35 5 * * * find /export/sipsniff -name pack\* -mtime +60 > -exec rm {} \; > > > > > cat /usr/local/bin/sipsniff > > #!/bin/sh > > FILES=/export/sipsniff/packets > > while true; do > > FILESUFFIX=`date +%Y%m%d-%H%M%S` > > /usr/bin/tethereal -i any -a filesize:256 -n -w $FILES.$FILESUFFIX > > port 5060 or port 5061 > > done; > > > > This is not very convenient for daily debugging, but > sufficient I you > > debug once a month. > > > > regards > > klaus > > > > Iqbal wrote: > > > >> Hi > >> > >> Has anyone come up with a scalable method to log the complete SIP > >> trace of ALL calls, i.e to separate files etc > >> Ngrep is greate for a few, but I want to be able to track > all calls, > >> for various purposes > >> > >> Iqbal > >> > >> _______________________________________________ > >> Serusers mailing list > >> serusers(a)lists.iptel.org > >> http://lists.iptel.org/mailman/listinfo/serusers > >> > >> > > > > > > . > > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

1 0

Re: [Serusers] logging of SIP dialog
by Iqbal 11 Oct '05

11 Oct '05

tks, but I need to pull all data for all calls, and then disect them later for graphing (oh I wish). Iqbal Ricardo Martinez wrote: >ngrep -W byline [calling-number] port 5060 -q > >It works to me.. >Regards, > >Ricardo Martinez.- > > > > >>-----Mensaje original----- >>De: Iqbal [mailto:iqbal@gigo.co.uk] >>Enviado el: Martes, 11 de Octubre de 2005 14:46 >>Para: Klaus Darilion >>CC: serusers(a)lists.iptel.org >>Asunto: Re: [Serusers] logging of SIP dialog >> >> >>Hi >> >>Is there any easy way of matching all messages belonging to a call in >>ngrep, aside from pulling out the call-id and the grepping >>for all those >>which match that call-id...I am guessing not... >> >>iqbal >> >>Klaus Darilion wrote: >> >> >> >>>We use the low-level approach: >>> >>> >>> >>>>crontab -l >>>> >>>> >>># purge SIP packet sniffs >>>35 5 * * * find /export/sipsniff -name pack\* -mtime +60 >>> >>> >>-exec rm {} \; >> >> >>>>cat /usr/local/bin/sipsniff >>>> >>>> >>>#!/bin/sh >>>FILES=/export/sipsniff/packets >>>while true; do >>> FILESUFFIX=`date +%Y%m%d-%H%M%S` >>> /usr/bin/tethereal -i any -a filesize:256 -n -w $FILES.$FILESUFFIX >>>port 5060 or port 5061 >>>done; >>> >>>This is not very convenient for daily debugging, but >>> >>> >>sufficient I you >> >> >>>debug once a month. >>> >>>regards >>>klaus >>> >>>Iqbal wrote: >>> >>> >>> >>>>Hi >>>> >>>>Has anyone come up with a scalable method to log the complete SIP >>>>trace of ALL calls, i.e to separate files etc >>>>Ngrep is greate for a few, but I want to be able to track >>>> >>>> >>all calls, >> >> >>>>for various purposes >>>> >>>>Iqbal >>>> >>>>_______________________________________________ >>>>Serusers mailing list >>>>serusers(a)lists.iptel.org >>>>http://lists.iptel.org/mailman/listinfo/serusers >>>> >>>> >>>> >>>> >>>. >>> >>> >>> >>_______________________________________________ >>Serusers mailing list >>serusers(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serusers >> >> >> > >. > > >

1 0

[Users] Question about one tables's layout
by Juan Carlos Castro y Castro 11 Oct '05

11 Oct '05

Why UNIQUE KEY? Wouldn't PRIMARY KEY be better? CREATE TABLE dbaliases ( alias_username varchar(64) default '' NOT NULL, alias_domain varchar(128) default '' NOT NULL, username varchar(64) default '' NOT NULL, domain varchar(128) default '' NOT NULL, UNIQUE KEY alias_key (alias_username,alias_domain), INDEX alias_user (username, domain) );

2 1

[Users] Problem with Radius authentication
by Matthew Williams 11 Oct '05

11 Oct '05

Hello, I'm trying to set up OpenSER to use Radius authentication, but am having problems. I can't get the OpenSER server to actually send any Radius packets out over the network to my Radius server. I've been sniffing the network with Ethereal and no packets are sent out, even though I get messages in the syslog saying; Oct 10 16:59:24 ibwok-2mrt71j /usr/sbin/openser[9057]: rc_send_server: no reply from RADIUS server boxster:1812 Oct 10 16:59:24 ibwok-2mrt71j /usr/sbin/openser[9058]: rc_send_server: no reply from RADIUS server boxster:1812 Oct 10 16:59:25 ibwok-2mrt71j /usr/sbin/openser[9059]: rc_send_server: no reply from RADIUS server boxster:1812 and so on. My openser.cfg file (see below) is pretty much unchanged from the default config file, except adding Radius options as according to this HOWTO http://www.iptel.org/ser/doc/ser_radius/ser_radius.html I've seen this problem both with the pre-complied Debian packages on a Debian Sarge installation and also when compiled by hand on a Sun Solaris 9 server. I must be missing something from my configuration files, but I can't work out what it is. Does anyone have any ideas? Thanks in advance, Matt Williams ------------------------------------------------------------------ openser.cfg ------------------------------------------------------ # # $Id: openser.cfg,v 1.1.1.1 2005/06/13 16:47:30 bogdan_iancu Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/openser_fifo" alias=testdomain # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database #loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/lib/openser/modules/sl.so" loadmodule "/usr/lib/openser/modules/tm.so" loadmodule "/usr/lib/openser/modules/rr.so" loadmodule "/usr/lib/openser/modules/maxfwd.so" loadmodule "/usr/lib/openser/modules/usrloc.so" loadmodule "/usr/lib/openser/modules/registrar.so" loadmodule "/usr/lib/openser/modules/textops.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/lib/openser/modules/auth.so" #loadmodule "/usr/lib/openser/modules/auth_db.so" loadmodule "/usr/lib/openser/modules/auth_radius.so" # ----------------- setting module-specific parameters --------------- modparam("auth_radius", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") # -- usrloc params -- modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line #modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # #modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # #modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!radius_www_authorize("testdomain")) { www_challenge("testdomain", "1"); break; }; save("location"); break; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; } ------------------------------------------------------------------------ radiusclient.conf ------------------------------------------------------------------------ General settings # specify which authentication comes first respectively which # authentication is used. possible values are: "radius" and "local". # if you specify "radius,local" then the RADIUS server is asked # first then the local one. if only one keyword is specified only # this server is asked. auth_order radius # maximum login tries a user has login_tries 4 # timeout for all login tries # if this time is exceeded the user is kicked out login_timeout 60 # name of the nologin file which when it exists disables logins. # it may be extended by the ttyname which will result in # a terminal specific lock (e.g. /etc/nologin.ttyS2 will disable # logins on /dev/ttyS2) nologin /etc/nologin # name of the issue file. it's only display when no username is passed # on the radlogin command line issue /etc/radiusclient-ng/issue # RADIUS settings # RADIUS server to use for authentication requests. this config # item can appear more then one time. if multiple servers are # defined they are tried in a round robin fashion if one # server is not answering. # optionally you can specify a the port number on which is remote # RADIUS listens separated by a colon from the hostname. if # no port is specified /etc/services is consulted of the radius # service. if this fails also a compiled in default is used. authserver boxster # RADIUS server to use for accouting requests. All that I # said for authserver applies, too. # acctserver boxster # file holding shared secrets used for the communication # between the RADIUS client and server servers /etc/radiusclient-ng/servers # dictionary of allowed attributes and values # just like in the normal RADIUS distributions dictionary /etc/radiusclient-ng/dictionary # program to call for a RADIUS authenticated login login_radius /usr/sbin/login.radius # file which holds sequence number for communication with the # RADIUS server seqfile /var/run/radius.seq # file which specifies mapping between ttyname and NAS-Port attribute mapfile /etc/radiusclient-ng/port-id-map # default authentication realm to append to all usernames if no # realm was explicitly specified by the user # the radiusd directly form Livingston doesnt use any realms, so leave # it blank then default_realm # time to wait for a reply from the RADIUS server radius_timeout 10 # resend request this many times before trying the next server radius_retries 3 # local address from which radius packets have to be sent bindaddr localhost # LOCAL settings # program to execute for local login # it must support the -f flag for preauthenticated login login_local /bin/login This e-mail and any attachments are confidential and may also be legally privileged and/or copyright material of Intec Telecom Systems PLC (or its affiliated companies). If you are not an intended or authorised recipient of this e-mail or have received it in error, please delete it immediately and notify the sender by e-mail. In such a case, reading, reproducing, printing or further dissemination of this e-mail or its contents is strictly prohibited and may be unlawful. Intec Telecom Systems PLC does not represent or warrant that an attachment hereto is free from computer viruses or other defects. The opinions expressed in this e-mail and any attachments may be those of the author and are not necessarily those of Intec Telecom Systems PLC.

3 4

Re: [Serusers] Have some INVITE problems
by Alex 11 Oct '05

11 Oct '05

I am using cisco 7960 and grandstream. 286,486 On 10/11/05, Samuel Osorio Calvo <samuel.osorio(a)nl.thalesgroup.com> wrote: > > Which UA are you using??? It looks like all your issues comes from the > implementation you are using as end-point and has nothing to do with SER. > > Samuel. > > > Unclassified. > >>> Alex <alexandergav(a)gmail.com> 10/11/05 11:06AM >>> > Hi all > I would like to explain some problem. > When my UAC initiates INVITE the server response with 100 trying > After receiving 100 trying the UAC sending again INVITE. ( HERE is the > problem). > RFC - 3261 ("After receiving a 1xx response, any retransmissions cease > altogether "); > Any help on that will be appreciated. > In addition if there any way to extend the timeout between the INVITES. > Thanks > >

1 0

Re: [Serusers] Please help on terminating active sessions!!!
by Samuel Osorio Calvo 11 Oct '05

11 Oct '05

I guess you change To:, From: and Call-ID headers every time you want to tear down a concrete session.....these headers change for every session and you will have to take the values from the message exchange creating the session. (INVITE/OK/ACK). Moreover, it looks weird that the To,From, and Contact represents the same identity while the req-uri is another...... Hope you can use these hints to improve the so-wanted pre-paid stuff for SER ;) Samuel. Unclassified. >>> <rpagquil(a)philonline.com> 10/11/05 12:52PM >>> Hi guys, I'm having a big problem on how can I terminate active sessions... I'm currently using sipsak to terminate it but all tests are not successfull. Here is what I do: my bye file is like this: BYE sip:rpagquil@202.84.24.126:5060 SIP/2.0 To: <sip:acjeff@sip.philonline.com>;tag=3986313335 From: <sip:acjeff@sip.philonline.com>;tag=1362465910 Contact: <sip:acjeff@202.84.24.126:5060> Call-ID: 4D161E9C-3A79-11DA-BFB7-00E04CAB4AB4(a)10.0.1.144 CSeq: 7 BYE Max-Forwards: 16 User-Agent: X-Lite release 1103m Content-Length: 0 here im trying to terminate these two calls. and here is what my command in sipsak: sipsak -vv -f byemes -s sip:sip.philonline.com But those things aren't working with me... any suggestions or any other methods are applicable with what i'm doing? I'm doing this so that those users that have no credits left are disconnected automatically...I'm trying to do a prepaid service for SER. Please help on this matter.... I really need your help... Thanks, Ryan Pagquil Infodyne Inc. (www.philonline.com) Tel. (632)-6870715

1 0

Re: [Serusers] Have some INVITE problems
by Samuel Osorio Calvo 11 Oct '05

11 Oct '05

Which UA are you using??? It looks like all your issues comes from the implementation you are using as end-point and has nothing to do with SER. Samuel. Unclassified. >>> Alex <alexandergav(a)gmail.com> 10/11/05 11:06AM >>> Hi all I would like to explain some problem. When my UAC initiates INVITE the server response with 100 trying After receiving 100 trying the UAC sending again INVITE. ( HERE is the problem). RFC - 3261 ("After receiving a 1xx response, any retransmissions cease altogether "); Any help on that will be appreciated. In addition if there any way to extend the timeout between the INVITES. Thanks

1 0

[Serusers] Writing a module
by Alan 11 Oct '05

11 Oct '05

Hi, I'm in the process of writing a module and was wondering if it was possible to perform SQL JOINS with the db query method? So instead of having the one huge table of usernames/domains have the two with username/domain_id and domain_id/domain. This is to perform number lookup and routing functions so will be quite big. If not is it possible to tell the db module what SQL it should execute?? Many Thanks, Alan

2 1

Re: [Users] (no subject)
by Bogdan-Andrei Iancu 11 Oct '05

11 Oct '05

Hi Nelson, try: modparam("acc","db_table_acc","my_acc_table") this param is not documented unfortunately - the docs will be updated on release. regards, bogdan Nelson Silva wrote: > Anyone knows how to change the table for the acc logging ? > > Have been searching the accouting module but can't seem to find a way > to change the table. > > The default table used is 'acc' i would like to change to another one. > > if anyone knows how to, a help would be apreciate it. > > > Nelson Silva > ----------------- > email: nelson.silva(a)neuvex.com > website: http://www.neuvex.com > > >------------------------------------------------------------------------ > >_______________________________________________ >Users mailing list >Users(a)openser.org >http://openser.org/cgi-bin/mailman/listinfo/users > >

1 0

Re: [Users] (no subject)
by Klaus Darilion 11 Oct '05

11 Oct '05

It is not documented. But lookint at the source code (modules/acc/acc_mod.c) shows that the parameter is called "db_table_acc". regards klaus Nelson Silva wrote: > Anyone knows how to change the table for the acc logging ? > > Have been searching the accouting module but can't seem to find a way to > change the table. > > The default table used is 'acc' i would like to change to another one. > > if anyone knows how to, a help would be apreciate it. > > > Nelson Silva > ----------------- > email: nelson.silva(a)neuvex.com > website: http://www.neuvex.com > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users

1 0

[Users] (no subject)
by Nelson Silva 11 Oct '05

11 Oct '05

1 0

[Users] Multiple interfaces and mediaproxy
by Fernando Rodriguez 11 Oct '05

11 Oct '05

Is there any way to run mediaproxy.py an make it listen on various ip adresses of a machine Thanks Fernando Rodriguez V. frod(a)aitelecom.net AITelecom S.A. de C.V. http://www.aitelecom.net

2 2

[Users] Calls where both endpoints are registered users fail.
by Brandon Price 11 Oct '05

11 Oct '05

Can someone explain what is happening here. On the dialing end @216.120.224.171 I get immediate congestion after the INVITE, on the receiving end @216.120.224.16 I get ringing even after I hang up. Relevant tethereal and openser.cfg below... 0.205952 216.120.224.171 -> 8.11.1.7 SIP/SDP Request: INVITE sip:15184782411@ser1.manhattan.ourdomain.net, with session description 0.252619 8.11.1.7 -> 216.120.224.171 SIP Status: 100 trying -- your call is important to us 0.252801 8.11.1.7 -> 216.120.224.163 SIP/SDP Request: INVITE sip:15184782411@216.120.224.163:5060, with session description 0.253078 8.11.1.7 -> 216.120.224.171 SIP Status: 500 I'm terribly sorry, server error occurred (1/SL) 0.279899 216.120.224.171 -> 8.11.1.7 SIP Request: ACK sip: 15184782411(a)ser1.manhattan.ourdomain.net 0.283146 216.120.224.163 -> 8.11.1.7 SIP Status: 100 Trying 0.296137 216.120.224.163 -> 8.11.1.7 SIP Status: 180 Ringing 0.311522 8.11.1.7 -> 216.120.224.171 SIP Status: 180 Ringing 7.032764 216.120.224.163 -> 8.11.1.7 SIP/SDP Status: 200 OK, with session description 7.033527 8.11.1.7 -> 216.120.224.171 SIP/SDP Status: 200 OK, with session description 7.054373 216.120.224.171 -> 8.11.1.7 SIP Request: ACK sip: 15184782411(a)ser1.manhattan.ourdomain.net { if (method=="INVITE" && uri =~ "sip:1[0-9]{10}@.*"){ if (is_user_in("From", "ld")){ if (!www_authorize("", "subscriber")){ www_challenge("", "1"); break; append_rpid_hf(); }; setflag(1); consume_credentials(); if(lookup("location")) { # if found, forward there... t_relay(); } else { prefix("+"); rewritehost("ourpstngateway"); }; };

3 3

Re: Re: [Serusers] help:I can't build auth_radius module
by shikun.wang 11 Oct '05

11 Oct '05

Dear Zhangshuai, I'm sure there is no such file under my path.in fact it seems that it didn't create that file at all. Is it the problem of radiusclient library?I have installed radiusclient-0.4.9 and it has some errors when compling: authrad_mod.c:51:31: radiusclient-ng.h: 没有那个文件或目录(no such file or directory) Maybe I need use radiusclient-ng? -----原始邮件----- 发件人:"zhangshuai" 发送时间:2005-10-11 18:06:35 收件人:"serusers" 抄送:(无) 主题:Re: [Serusers] help:I can't build auth_radius module Dear shikun.wang, There are no such module file under your path: /usr/local/lib/ser/modules/ ?　　 hi, I have install radiusclient-0.3.2,and comment the related exclude modules in the main Makefile.But when I build the whole SER,it outputs something as follows: ... make[1]: Entering directory `/usr/local/src/ser-0.9.3/modules/auth_radius' make[1]: Leaving directory `/usr/local/src/ser-0.9.3/modules/auth_radius' make[1]: Entering directory `/usr/local/src/ser-0.9.3/modules/auth_radius' gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.3"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.2"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/usr/local/include -c authorize.c -o authorize.o gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.3"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.2"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/usr/local/include -c authrad_mod.c -o authrad_mod.o make[1]: Leaving directory `/usr/local/src/ser-0.9.3/modules/auth_radius' ... It does NOT create an auth_radius.so file. Can anyone help me with some instructions?Thank you.

1 0

RE: [Serusers] how to add the auth_radius module into SER
by Ricardo Martinez 11 Oct '05

11 Oct '05

Hi, Did you include the modules into the SER Makefile? Check for : exclude_modules?= and remove the auth_radius, acc_radius from it.. Regards, Ricardo.- -----Mensaje original----- De: shikun.wang [mailto:shikun.wang@163.com] Enviado el: Lunes, 10 de Octubre de 2005 23:55 Para: serusers(a)lists.iptel.org Asunto: [Serusers] how to add the auth_radius module into SER Hi,all I want to make my ser support radius accounting,so I add: loadmodule "/usr/local/lib/ser/modules/auth_radius.so" loadmodule "/usr/local/lib/ser/modules/acc.so" into my ser.cfg,and uncomment DEFS+=-DRAD_ACC LIBS=-L$(LOCALBASE)/lib -lradiusclient in modules/acc/Makefile. But after I make the whole SER and find no auth_radius.so file under /usr/local/lib/ser/modules,neither can I start the SER for it can't load this module. Is there any thing I have not set? Any ideas?Thank you.:) 需要一个 <http://www.126.com> 2000 兆的免费邮箱吗？网易免费邮箱是中国最多人使用的电子邮箱。

1 0

[Serusers] save_memory behavior for NATed clients
by George Perantinos 11 Oct '05

11 Oct '05

Dear list, I'm trying to implement registration replication between 2 SERs (ver. 0.9.4, they are AA behind an F5 BigIP). Both SERs are using the same mysql database and mediaproxy is used for RTP relaying (whenever needed). The basis for my configuration is the mediaproxy config from onsip.org (excellent work, many thanx guys). My servers are 10.21.128.232 and 10.21.128.233. I'm using forward_tcp and save_memory for replication purposes, as can be seen in the following registration route block: route[2] { # ----------------------------------------------------------------- # REGISTER Message Handler # ---------------------------------------------------------------- sl_send_reply("100", "Trying"); if(src_ip==10.21.128.233) { # If it is a forward from our brother then... if (client_nat_test("3")) { # check if the user is NATed setflag(6); fix_nated_register(); force_rport(); }; save_memory("location"); break; } else { if (!search("^Contact:[ ]*\*") && client_nat_test("7")) { setflag(6); fix_nated_register(); force_rport(); }; if (!radius_www_authorize("domain.com")) { www_challenge("domain.com","0"); xlog("L_NOTICE","Could not authorize user %fu, IP %is \n"); break; }; if (!check_to()) { sl_send_reply("401", "Unauthorized"); xlog("L_NOTICE","From: does not match URI:, user %fu, IP %is \n"); break; }; consume_credentials(); if (!save("location")) { xlog("L_WARN","MYSQL down? Could not save location\n"); sl_reply_error(); }; xlog("L_INFO","Updating registration for user %fu, IP %is \n"); add_rcv_param(); if (!forward_tcp("10.21.128.233", 5060)) { xlog("L_WARN","Cannot replicate user %fu at server 10.21.128.233\n"); }; }; } When performing a "serctl ul show" on the servers, the results are as follows: 1) For UAs coming from real IPs, serctl shows identical results on both servers. 2) For NATed UAs there is difference in the "Flags:" field. On the server that initialy proccessed the request, the value of the "Flags" is 1 (OK!), while on the server that the registration was forwarded, the value of the "Flags" field is 257(??). My impression is that the Flags field should be 1 if a UA is NATed and 0 if not. Am I wrong? If I'm right on the above, then shouldn't both servers show the same result in Flags (i.e. 1) for NATed clients? On the other hand, if I restart SER (and the contacts are read from the database), then every "weird" 257 Flag is reset to 1, until the next UA re-registration (where it returns again to 257). Thanx for any help, George.

2 3

Re: [Serusers] msilo configuration
by Teemu Harju 11 Oct '05

11 Oct '05

Hi Nhadie, Yes... you can use it for instant messaging. eyeBeam is in my opinion the best featured SIP client ever. It can do voice, video, instant messaging, presence, conferencing etc... and all standard SIP. Note that the eyeBeam is the commercial version and Xlite is free. And with Xlite you cannot do anything else than voice. - Teemu 2005/10/11, Nhadie <nhadie(a)cbcpworld.com>: > > > Hi Teemu, > > Are you saying you can use eyebeam afor instant messagin? i thought it > was just for calling. > > Regards, > Nhadie > > > Hi, > > > > I've been configuring msilo for offline messaging and I've faced few > > problems. > > > > First... I use Xten (or now Counterpath) Eyebeam and each time user > > starts to type an instant message it sends a SIP MESSAGE with > > Content-Type: application/im-iscomposing+xml and msilo naturally > > stores this message also. I tried to prevent this with the following > > configuration but it didn't work.. > > > > if (search("Content-Type: application/im-iscomposing+xml")) { > > > > # > > # Do not store composing MESSAGEs > > # > > } else { > > > > # > > # Store offline message > > # > > } > > > > Or course this is done only for method=="MESSAGE"... Can you see why > > this is not working? > > > > Second... Is there a way to make the reply to the offline message > > appear to be coming from the user that it was sent to? I mean you can > > configure msilo to reply for example with user > > registrar(a)myserproxy.com <mailto:registrar@myserproxy.com>, but that > > opens a new IM window for the user so it's not that good. > > > > Thanks in advance... > > -- > > Teemu Harju > > http://www.teemuharju.net > > > >------------------------------------------------------------------------ > > > >_______________________________________________ > >Serusers mailing list > >serusers(a)lists.iptel.org > >http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > -- > ---------------------------- ------ | > -- Computers are like Air Conditioners, | > ------ It doesn't work when Windows are open! | > ---------------------------- ------ | > > > -- Teemu Harju http://www.teemuharju.net

2 5

[Serusers] Please help on terminating active sessions!!!
by rpagquil＠philonline.com 11 Oct '05

11 Oct '05

1 0

Re: [Serusers] help:I can't build auth_radius module
by zhangshuai 11 Oct '05

11 Oct '05

Dear shikun.wang, There are no such module file under your path: /usr/local/lib/ser/modules/ ?　　 hi, I have install radiusclient-0.3.2,and comment the related exclude modules in the main Makefile.But when I build the whole SER,it outputs something as follows: ... make[1]: Entering directory `/usr/local/src/ser-0.9.3/modules/auth_radius' make[1]: Leaving directory `/usr/local/src/ser-0.9.3/modules/auth_radius' make[1]: Entering directory `/usr/local/src/ser-0.9.3/modules/auth_radius' gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.3"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.2"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/usr/local/include -c authorize.c -o authorize.o gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.3"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.2"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/usr/local/include -c authrad_mod.c -o authrad_mod.o make[1]: Leaving directory `/usr/local/src/ser-0.9.3/modules/auth_radius' ... It does NOT create an auth_radius.so file. Can anyone help me with some instructions?Thank you.

1 0

[Serusers] Need some help
by Alex 11 Oct '05

11 Oct '05

Hi all I would like to explain some problem. When my UAC initiates INVITE the server response with 100 trying After receiving 100 trying the UAC sending again INVITE. ( HERE is the problem). RFC - 3261 ("After receiving a 1xx response, any retransmissions cease altogether "); Any help on that will be appreciated. In addition if there any way to extend the timeout between the INVITES. Thanks

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users