Im trying to use kamailio with websocket and tls. It will be use as registrar for websocket clients. I'm using default config with additional websocket, https and tls modules. I created some certs for it and everething looks like good. But when I started kamailio via (systemctl start kamailio) I get some errors
июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) INFO: <core> [core/udp_server.c:205]: probe_max_receive_buffer(): SO_RCVBUF is finally 425984 июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) DEBUG: <core> [core/tcp_main.c:2753]: tcp_init(): added 37.143.9.210:443 июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) ERROR: <core> [core/tcp_main.c:2855]: tcp_init(): bind(9, 0x7fb6ef026f84, 16) on 37.143.9.210:443 : Permission denied июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) ERROR: tls [tls_init.c:342]: tls_h_init_si(): Error while initializing TCP part of TLS socket 37.143.9.210:443 июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) DEBUG: rtpengine [rtpengine.c:1986]: mod_destroy(): rtpengine_hash_table_destroy() success!
If I start it via /usr/sbin/kamailio - all work.
What I do wrong?
Hi,
Starting via cli works and via systemctl not. That's an sign for some permissions that systemctl what's to set (group for example or user) are not there.
Also included files like tls.cfg and certificates are not readable for the user:group systemctl what's to start Kamailio.
Cheers Karsten
Daniel-Constantin Mierla miconda@gmail.com schrieb am Di., 4. Juni 2019, 15:16:
Hi,
I'm using Centos7
I checked the kamailio.servirse file
It looks like
[root@p534507 ~]# cat /usr/lib/systemd/system/kamailio.service [Unit] Description=Kamailio (OpenSER) - the Open Source SIP Server Wants=network-online.target After=network-online.target ange[Service] Type=simple User=kamailio Group=kamailio Environment='CFGFILE=/etc/kamailio/kamailio.cfg' Environment='SHM_MEMORY=64' Environment='PKG_MEMORY=4' EnvironmentFile=-/etc/sysconfig/kamailio ExecStart=/usr/sbin/kamailio -DD -P /var/run/kamailio/kamailio.pid -f $CFGFILE -m $SHM_MEMORY -M $PKG_MEMORY Restart=on-failure [Install] WantedBy=multi-user.target [root@p534507 ~]#
I changed User and Group....... to root..... and kamailio.service is working now. But it looks like strange for me. Why dint't it work with kamailio user?
Hi,
Check if group or user Kamailio is still available.
I had the same issue on upgrade from 5.0.x to 5.2.3.
In my case group Kamailio was gone.
Олег Подгуйко podguiko@mail.ru schrieb am Di., 4. Juni 2019, 21:22:
Hello! Try to set in the service file: User=kamailio Group=daemon
ср, 5 июн. 2019 г. в 08:25, Karsten Horsmann khorsmann@gmail.com:
When User and Group = kamailio I can't start kamailio.service at all. I get errors ()
июн 04 15:00:52 p534507.kvmvps kamailio[23502]: 0(23502) ERROR: <core> [core/tcp_main.c:2855]: tcp_init(): bind(9, 0x7fb6ef026f84, 16) on 37.143.9.210:443 : Permission denied
The question is why? If am using User and Group = root it works.
Group Kamailio exist and user too.
I suppose Linux does not allow kamailio to bind to 443 port.
Hi List,
Port 443 is an privileged port. In my test lab we have the issue that voip user is not allowed to bind to that under 1024 privileged port. Which is the normal behavior I think. I overlooked that detail.
Daniel Tryba d.tryba@pocos.nl schrieb am Mi., 5. Juni 2019, 13:40:
-
Daniel Tryba -
Daniel-Constantin Mierla -
Denys Pozniak -
Karsten Horsmann -
Олег Подгуйко