I'm running OpenSER 0.10.x and SEMS HEAD. A few questions:
1. What permissions to the fifo's normally need and how does that affect the uid/gid you run openser & sems as?
2. Will those versions work together?
Thanks,
A.
Hi Adam,
1) the fifo file will be created by OpenSER using the specified uid and gid an with given permission mask.
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
if you run SEMS as user XX, you can add XX to group voip, which will allow sems to write to OpenSER's fifo.
Just be sure the user used by SEMS has write permissions (as owner or via group) to the OpenSER's fifo.
2) both OpenSER 0.9.x and 0.10.x work with SEMS head.
regards, bogdan
Adam Sherman wrote:
I'm running OpenSER 0.10.x and SEMS HEAD. A few questions:
- What permissions to the fifo's normally need and how does that
affect the uid/gid you run openser & sems as?
- Will those versions work together?
Thanks,
A.
On 7/6/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
So, I've got the -u/-g part. How do I set umask, should I do it manually prior to starting the daemons?
- both OpenSER 0.9.x and 0.10.x work with SEMS head.
Perfect.
Thanks for the quick reply,
A.
On 7/6/05, Adam Sherman carbon60@gmail.com wrote:
On 7/6/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
So, I've got the -u/-g part. How do I set umask, should I do it manually prior to starting the daemons?
I'm running openser with -u openser and -g openser, but the fifo is still root:root. Any ideas why? (I'm using debs, BTW.)
Thanks,
A.
On 7/6/05, Adam Sherman carbon60@gmail.com wrote:
On 7/6/05, Adam Sherman carbon60@gmail.com wrote:
On 7/6/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
So, I've got the -u/-g part. How do I set umask, should I do it manually prior to starting the daemons?
I'm running openser with -u openser and -g openser, but the fifo is still root:root. Any ideas why? (I'm using debs, BTW.)
This have something to do with it:
/* initialize fifo server -- we need to open the fifo before * do_suid() and start the fifo server after all the socket * are initialized, to inherit them*/
Guess the fifo is created before the switch to the unpriviledged user/group?
Thanks,
A.
On 7/6/05, Adam Sherman carbon60@gmail.com wrote:
On 7/6/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
So, I've got the -u/-g part. How do I set umask, should I do it manually prior to starting the daemons?
I'm running openser with -u openser and -g openser, but the fifo is still root:root. Any ideas why? (I'm using debs, BTW.)
I found this info in the changelog:
sock_user="openser" sock_group="openser"
This fixes the problem.
Thanks,
A.
Hi Adam,
for the future it will be a good idea to document this. For the beginning , the openser wiki will be a good start.
regards, bogdan
Adam Sherman wrote:
On 7/6/05, Adam Sherman carbon60@gmail.com wrote:
On 7/6/05, Bogdan-Andrei Iancu bogdan@voice-system.ro wrote:
if you do uid=openser, gid=voip, mask=0660, only user root, openser and users belonging to voip group will be able to read/write to the fifo file.
So, I've got the -u/-g part. How do I set umask, should I do it manually prior to starting the daemons?
I'm running openser with -u openser and -g openser, but the fifo is still root:root. Any ideas why? (I'm using debs, BTW.)
I found this info in the changelog:
sock_user="openser" sock_group="openser"
This fixes the problem.
Thanks,
A.
-
Adam Sherman -
Bogdan-Andrei Iancu