Hi,
I tried to turn on authetication in SER. I was able to add a new user to the subscriber table using serctl utility, but when I restarted the server, after adding the user, I am getting the following error:
======================================================================== ========================== SERVER LOG AND THE SERVER WONT START ======================================================================== ========================== 0(0) get_connection(): Connection not found in the pool 0(0) new_connection(): Access denied for user: 'ser@localhost' (Using password: YES) 0(0) db_init(): Could not create a connection 0(0) register_udomain(): Can not open database connection 0(0) domain_fixup(): Error while registering domain ERROR: error ffffffff while trying to fix configuration 0(0) DEBUG: tm_shutdown : start 0(0) DEBUG: unlink_timer_lists : emptying DELETE list 0(0) DEBUG: tm_shutdown : emptying hash table 0(0) DEBUG: tm_shutdown : releasing timers 0(0) DEBUG: tm_shutdown : removing semaphores 0(0) DEBUG: tm_shutdown : destroying tmcb lists 0(0) DEBUG: tm_shutdown : done 0(5165) shm_mem_destroy 0(5165) destroying the shared memory lock
when I connect to the database directly using mysql, I can connect without any hassle. Now, I am not sure, whether it is the domain_fixup() which is causing problems or the error where it cannot connect to the database. But SER did start the first time I tried, and I was able to add a user. Can someone point me out, what is going wrong and needs to be fixed?
======================================================================== ========================== ADDED A USER BEFORE ======================================================================== ========================== [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user to the database failed ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user into uri table failed [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: new user added new user into uri table added [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: user already exists [root@sip-ex-rtr root]# serctl add root2 root2 root2@ser.com MySql password:
[root@sip-ex-rtr root]# /usr/local/sbin/serctl: line 333: /tmp/ser_fifo: Interrupted system call ======================================================================== ========================== CONFIGURATION FILE ======================================================================== ========================== # # $Id: ser.cfg,v 1.24 2003/11/11 15:32:36 andrei Exp $ # # simple quick-start config script #
# ----------- global configuration parameters ------------------------
debug=10 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E)
# Uncomment these lines to enter debugging mode #fork=no log_stderror=yes
check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 #children=4 fifo="/tmp/ser_fifo"
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/pa.so"
/*loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" */
# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)
# -- auth params -- # Uncomment if you are using auth module # #modparam("auth", "db_url","sql://ser:ser@localhost/ser") modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password")
# -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1)
#modparam("pa", "new_tuple_on_publish", 1) #modparam("pa", "pa_domain", "orka.dhs.org")
# ------------------------- request routing logic -------------------
# main routing logic
route{
# initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= max_len ) { sl_send_reply("513", "Message too big"); break; };
# we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route();
# subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; };
if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; };
# if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest authentication if (!www_authorize("ser.com", "subscriber")) { www_challenge("ser.com", "0"); break; };
save("location"); break; };
if (method=="SUBSCRIBE") { if (t_newtran()) { handle_subscription("registrar"); }; break; }; # if (method=="PUBLISH") { # if (t_newtran()) { # handle_publish("registrar"); # }; # break; # };
lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; };
# native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); }
route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; }
_____________________________________________________________________ This e-mail has been scanned for viruses by MCI's Internet Managed Scanning Services - powered by MessageLabs. For further information visit http://www.mci.com
Are you runnign database on the same host with the standard username and password (ser and heslo) ? If not then you need to configure domain module to point to the right database. Domain module has db_url parameter like other modules that use database.
Jan.
On 13-07-2005 13:42, Singh, Amit wrote:
Hi,
I tried to turn on authetication in SER. I was able to add a new user to the subscriber table using serctl utility, but when I restarted the server, after adding the user, I am getting the following error:
========================================================================
SERVER LOG AND THE SERVER WONT START
========================== 0(0) get_connection(): Connection not found in the pool 0(0) new_connection(): Access denied for user: 'ser@localhost' (Using password: YES) 0(0) db_init(): Could not create a connection 0(0) register_udomain(): Can not open database connection 0(0) domain_fixup(): Error while registering domain ERROR: error ffffffff while trying to fix configuration 0(0) DEBUG: tm_shutdown : start 0(0) DEBUG: unlink_timer_lists : emptying DELETE list 0(0) DEBUG: tm_shutdown : emptying hash table 0(0) DEBUG: tm_shutdown : releasing timers 0(0) DEBUG: tm_shutdown : removing semaphores 0(0) DEBUG: tm_shutdown : destroying tmcb lists 0(0) DEBUG: tm_shutdown : done 0(5165) shm_mem_destroy 0(5165) destroying the shared memory lock
when I connect to the database directly using mysql, I can connect without any hassle. Now, I am not sure, whether it is the domain_fixup() which is causing problems or the error where it cannot connect to the database. But SER did start the first time I tried, and I was able to add a user. Can someone point me out, what is going wrong and needs to be fixed?
========================================================================
ADDED A USER BEFORE
========================== [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user to the database failed ERROR 1045: Access denied for user: 'ser@localhost' (Using password: YES) introducing a new user into uri table failed [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: new user added new user into uri table added [root@sip-ex-rtr root]# serctl add root root root@ser.com MySql password: user already exists [root@sip-ex-rtr root]# serctl add root2 root2 root2@ser.com MySql password:
[root@sip-ex-rtr root]# /usr/local/sbin/serctl: line 333: /tmp/ser_fifo: Interrupted system call ======================================================================== ========================== CONFIGURATION FILE ======================================================================== ========================== # # $Id: ser.cfg,v 1.24 2003/11/11 15:32:36 andrei Exp $ # # simple quick-start config script #
# ----------- global configuration parameters ------------------------
debug=10 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E)
# Uncomment these lines to enter debugging mode #fork=no log_stderror=yes
check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 #children=4 fifo="/tmp/ser_fifo"
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/pa.so"
/*loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/textops.so" */
# Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
# Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2)
# -- auth params -- # Uncomment if you are using auth module # #modparam("auth", "db_url","sql://ser:ser@localhost/ser") modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password")
# -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1)
#modparam("pa", "new_tuple_on_publish", 1) #modparam("pa", "pa_domain", "orka.dhs.org")
# ------------------------- request routing logic -------------------
# main routing logic
route{
# initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (msg:len >= max_len ) { sl_send_reply("513", "Message too big"); break; };
# we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route();
# subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); break; };
if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); break; };
# if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest authentication if (!www_authorize("ser.com", "subscriber")) { www_challenge("ser.com", "0"); break; };
save("location"); break; }; if (method=="SUBSCRIBE") { if (t_newtran()) { handle_subscription("registrar"); }; break; };
# if (method=="PUBLISH") { # if (t_newtran()) { # handle_publish("registrar"); # }; # break; # };
lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); break; }; # native SIP destinations are handled using our USRLOC
DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); }
route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; }
This e-mail has been scanned for viruses by MCI's Internet Managed Scanning Services - powered by MessageLabs. For further information visit http://www.mci.com _______________________________________________ Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers