Topic: [Anounce] smeserver-trixbox-fws-beta2

[Daniel B.]

Hello everyone!
I've just finished the first beta of smeserver-trixbox so I'd need some testers to see what's working and what is not.

It's based on trixbox 1.2.3 but the install script is totally rewrite and brought some new features:

 - the biggest one is that you can edit, before the installation, all the default passwords
 - you can choose which componant you want to install (crm, meetme, maint etc...)
 - you can install and remove independently every features (crm, meetme, maint etc...)
 - each time you remove something, all the needed files and databases are saved for a future reinstall
 - you can choose for the CRM between sugarCRM or vtiger, even if for now, there's no real integration between vtiger and asterisk, I'm working on it and some others are too, I think some interesting features will be soon available.
 - tftpd has been replace with smeserver-tftp-server from trevorb
 - phpmyadmin has been replace with smserver-phpmyadmin-multiusers from mastersleepy
 - meetme has been replace with the latest version

There's some others changes but this is the biggest part.

Zaptel seems to work, at least for a TDM400P digium card.

[edit] I forgot to tell, it's working for en and fr, you just have to edit a script before the installation and all will be configured[/edit]

Some features are not working for now, it's explain in the how-to.

Do NOT install it yet in a prod evironnement, it hasn't been tested enaugh. (well, it shouldn't be too dangerous, I use it on 2 production servers but maybe there're still some problems

You can find the how-to and the contrib here:

http://sme.firewall-services.com/spip.php?article7

Please, try it and send me your comment:

daniel@firewall-services.com

Good weekend everyone.

[fpausp]

Hi,

Got this after installation when i try to use the asterisk management portal:

[nativecode=Access denied for user 'asteriskuser'@'localhost' (using password: NO)] ** mysql://asteriskuser:@/asterisk


regards
fpausp

[Daniel B.]

First, thanks for testing it !

Does the error occures when you try to access https://yourserver/amp or https://yourserver/admin, or another page ?
I think it comes from /opt/asterisk/html/maint/libs/trixbox.php.
Can you post here the line 54 of this file please.
Did you edit the header of the install script, especially ASTERISK_DB_PASS ?

Does the installation went ok ?
I'll do my best to find out where the error comes from.

Cheers, daniel

[fpausp]

Does the error occures when you try to access https://yourserver/amp or https://yourserver/admin, or another page ?

https://server/amp
- [nativecode=Access denied for user 'asteriskuser'@'localhost' (using password: NO)] ** mysql://asteriskuser:@/asterisk

https://server/amp
- Is working

trixbox.php
- $db = DB::connect('mysql://asteriskuser:password@localhost/'.$database);

ASTERISK_DB_PASS ?
- each *_PASS has the same password

Does the installation went ok ?
- Yes, first i have done it with vtiger then i removed it and after that i installed it with sugarcrm (dont know the default pass, vtiger has admin/admin)


hope i can help you
thanks for your work

fpausp

[Daniel B.]

https://server/amp
- [nativecode=Access denied for user 'asteriskuser'@'localhost' (using password: NO)] ** mysql://asteriskuser:@/asterisk

https://server/amp
- Is working

Euh, I think one of this two pages is /admin but you wrote /amp for the two.

Maybe you could uninstall it and reinstall with the defaults passwords to see if it's working this way. If it does, I need to review my script. It's quite strange because I've tested several times with differents passwords and I didn't get an error like that.
Can you post also your /etc/amportal.conf file ?

[fpausp]

Ups, i am sorry,

https://server/admin/
[nativecode=Access denied for user 'asteriskuser'@'localhost' (using password: NO)] ** mysql://asteriskuser:@/asterisk

https://server/amp
- Is working

/etc/amportal.conf

# This file contains settings for components of the Asterisk Management Portal
# Spaces are not allowed!
# Run /usr/src/AMP/apply_conf.sh after making changes to this file

# AMPDBUSER: the user to connect to the 'asterisk' mysql database
AMPDBUSER=asteriskuser

# AMPDBPASS: the password for AMPDBUSER
AMPDBPASS=password

# AMPMGRUSER: the user to access the Asterisk manager interface
AMPMGRUSER=admin

# AMPMGRPASS: the password for AMPMGRUSER
AMPMGRPASS=password

# AMPWEBROOT: the path to Apache's webroot (leave off trailing slash)
AMPWEBROOT=/opt/asterisk/html
AMPBIN=/var/lib/asterisk/bin

# AMPCGIBIN: the path to Apache's cgi-bin dir (leave off trailing slash)
AMPCGIBIN=/opt/asterisk/cgi-bin
 

# AMPWEBADDRESS: the IP address or host name used to access the AMP web admin
AMPWEBADDRESS=192.168.1.246

# FOPPASSWORD: the secred code for performing transfers and hangups in the Flash Operator Panel
FOPPASSWORD=password

# FOPSORT: FOP should sort extensions by Last Name [lastname] or by Extension [extension]
FOPSORT=extension
FOPWEBROOT=/opt/asterisk/html/panel

# AUTHTYPE: authentication type to use for web admin
# If type set to 'database', the primary AMP admin credentials will be the AMPDBUSER/AMPDBPASS above
# valid: none, database
AUTHTYPE=none

# AMPADMINLOGO: Defines the logo that is to be displayed at the TOP LEFT of the admin screen.
#           This enables you to customize the look of the administration screen.
# NOTE: images need to be saved in the ..../admin/images directory of your AMP install
# This image should be 55px in height
AMPADMINLOGO=amp.png

# AMPFOOTERLOGO: Defines the logo that is to be displayed at the BOTTOM RIGHT of the admin screen.
#           This enables you to customize the look of the administration screen.
# NOTE: images need to be saved in the ..../admin/images directory of your AMP install
# This image should be 40px in height
AMPFOOTERLOGO=blank.gif

# AMPADMINHREF: Defines the where a user is taken if they click on the footer logo
#           This enables you to customize the look of the administration screen.
AMPADMINHREF=amp.coalescentsystems.ca

# AMPEXTENSIONS: the type of view for extensions admin
# If set to 'deviceanduser' Devices and Users will be administered seperately, and Users will be able to "login" to devices.
# If set to 'extensions' Devices and Users will me administered in a single screen.
AMPEXTENSIONS=extensions
AMPSBIN=/usr/sbin
ASTETCDIR=/etc/asterisk
ASTMODDIR=/usr/lib/asterisk/modules
ASTVARLIBDIR=/var/lib/asterisk
ASTAGIDIR=/var/lib/asterisk/agi-bin
ASTSPOOLDIR=/var/spool/asterisk
ASTRUNDIR=/var/run/asterisk
ASTLOGDIR=/var/log/asterisk

fpausp

[Daniel B.]

Ok, so your amportal.conf seems to be good, it was just to be sure the passwords were correctly reflected during the install process. I realy don't know what's the matter, could you try to re-install it? I'm uploading an new archive which is based on trixbox 1.2.3, maybe you could try it. It'll be available tomorow.

[Daniel B.]

ok, smeserver-trixbox-1.2.3 is available
http://dedibox.firewall-services.com/downloads/smeserver/smeserver-trixbox

[fpausp]

ok, smeserver-trixbox-1.2.3 is installed

https://server/admin/
[nativecode=Access denied for user 'asteriskuser'@'localhost' (using password: NO)] ** mysql://asteriskuser:@/asterisk

https://server/amp
- Is working

I used the phpmyadmin to change the user asteriskuser to use no password, after that i was able to use https://server/admin/, but there are some other errors ...

I changed the user asteriskuser back to use a password


fpausp

[Daniel B.]

can you please post the return of
tail /var/log/messages
after trying to access https://server/admin ? I think the number of the line which generate the error will be indicated, so I may find why the password isn't set correctly

thanks, daniel

[Daniel B.]

I had a problem with freePBX with another install. I could access to /admin but the configuration was not reflected in the conf file, I looked into the logs and I saw that mysql passwords was not the same that I've set. It was beacause I put a '@' in the passwords. Your problem seems different but I post that for others if they want to try, do not put any special caracters in the passwords.

[Daniel B.]

Well, nobody else is interested in testing trixbox? I'd be great if I have some other feedback to see if the problem of fpausp comes from his server's config or the package.
fpausp, what's installed on your server? Is it a fresh SME 7 ?

ps: sorry, I forgot to answer, default login for sugarCRM is admin:password

[fpausp]

Hi,

Monday i will install it on another box.

regards
fpausp

[jester]

I'm freeing up a box, but this is a bit tricky. Once i got it i was planning on giving it a spin.

[girkers]

How is trixbox different to SAIL?

I am looking at adding Asterisk to my home SME box and am wondering what is the difference.

[Daniel B.]

Well, the biggest difference is in the configuration interface. With Sail, the configuration is done through pages in the server-manager whereas in trixbox, there's a php front end (called freepbx). I've also integrate it in the server-manager. Another difference is that trixbox comes with many others applications like meetme (Web GUI for managing conferences), maint (phpMyadmin, phpConfigEdit, EndPoints manager etc...), xpl, a2billing, sugarCRM (or vtiger CRM) etc....
With smeserver-trixbox, you can choose or not to install all the others stuff

[floco]

smeserver-trixbox-1.2.3-beta1.tar.gz works very well for me apart from the problems already mentionned in the PDF. Thanks !

May I ask what are your plans regarding the new trixbox-2.0.0 ? Do you plan to release a package for sme server as well ?

To avoid creating a new script each time trixbox release a new version, do you think it would be feasable to use the original package and provide fixes for sme server and security during pre/post-installation ?

Thanks again for your work on that !

[Daniel B.]

I'll download trixbox 2 beta this afternoon. I think I will upgrade my archive to trixbox 2 when it will be stable (in a month according to trixbox.org). I'll try to make an upgrade script but I'm not sure.

Using the original package with just some fixes isn't feasable because the privided script just breaks the server (changing mysql root password, giving permissions to all databases etc...). I hope I'll be able to tweak my install script to make it working with trixbox 2 wihtout having to rewrite it again from scratch.

Thanks for your interest and please, repport any problem.

[Daniel B.]

In fact trixbox 2 beta is only available as iso and not tar.gz. I hope they will release the archive when it'll be stable. In wait, I continue the developpement on 1.2.3

[floco]

The trixbox.tar.gz is available in the ISO file for 2.0

[Daniel B.]

I've downloaded the ISO and you're right, the archive is there but I think I won't upgrade to 2.0 because there nothing realy interesting. All the rpms are the same,  there's just some new php pages (mainly a sort of yum front-end) and I think it's not usefull.

[floco]

I thought the 2.0 brought much more added value compared to 1.2.3 but you are right, after playing with both, it seems to provide only this new admin frontend and package management (and this one is quite buggy for the moment ).

I will post some comments as soon as I finish testing your beta version.

Thanks again for bringing trixbox to SME.

[soprom]

Version 2 brings a GUI with a top frame acting as a main menu. it's not very userfull once you've got used to it.

But ! V2 has an updating feature that allows you to select which package-s you want to update. This is cool for people wanting to test, try and tune...

In my experience, upgrading asterisk should be done carefully making sure the required kernel is the same as the one on your box. So this updating feature might not be that usefull after all, although it is very nice.

I'm using V2 but sticking with V1 is quite okay.

I'm also using (prod) FreePBX 2.2.0beta2 which is really something else. That's more impressive than Trixbox V2. Updating is easier.

[Daniel B.]

I'm about to release smeserver-trixbox-1.2.3_beta2 which will fix a lot of little problems from beta1, I'll have a look at freepbx 2.2 beta3 and see if I can integrate it

[soprom]

Merci pour cet excellent travail!

There is a problem with a2billing installation. Might be caused by mysql5.

-------------------------------------------
Installing a2billing
-------------------------------------------
ERROR 1067 (42000) at line 6: Invalid default value for 'creationdate'
ERROR 1146 (42S02) at line 1: Table 'mya2billing.ui_authen' doesn't exist
Restarting httpd-e-smith                                   [  OK  ]

The line
creationdate TIMESTAMP DEFAULT 'now()' NOT NULL
is rejected. When removing <'>, it produces this:

-------------------------------------------
Installing a2billing
-------------------------------------------
ERROR 1293 (HY000) at line 23: Incorrect table definition; there can be only one TIMESTAMP column with CURRENT_TIMESTAMP in DEFAULT or ON UPDATE clause
ERROR 1146 (42S02) at line 1: Table 'mya2billing.ui_authen' doesn't exist
Restarting httpd-e-smith                                   [  OK  ]

[Daniel B.]

Oh, maybe the problem is comming from mysql5, I haven't tested. I'll try to do some more tests. In fact, I haven't tested to much a2billing because I don't use it but I loged in as admin, create a user, and it was working.

[soprom]

I imported the database from a previously installed Trixbox and then i worked. Suspecting mysql5 to be the problem in the install script.

[soprom]

I get some errors when I try to update modules from FreePBX with the link "Check for updates online"...

Dec 23 14:55:44 roamer httpd: PHP Warning:  file_get_contents(): URL file-access is disabled in the server configuration in /opt/asterisk/html/admin/functions.inc.php on line 1099
Dec 23 14:55:44 roamer httpd: PHP Warning:  file_get_contents(http://mirror.freepbx.org/modules-2.2.xml): failed to open stream: no suitable wrapper could be found in /opt/asterisk/html/admin/functions.inc.php on line 1099
Dec 23 14:55:44 roamer httpd: PHP Warning:  array_keys(): The first argument should be an array in /opt/asterisk/html/admin/page.modules.php on line 120
Dec 23 14:55:44 roamer httpd: PHP Warning:  Invalid argument supplied for foreach() in /opt/asterisk/html/admin/page.modules.php on line 120
Dec 23 14:55:44 roamer httpd: PHP Fatal error

Is this "URL file-access is disabled " by design?

[Daniel B.]

No, i'll try to investigate this further next week, I didn't test to update the modules.

[soprom]

It would be nice to be able to use the script to update FreePBX indepently.

The usual procedure is:

Code: [Select]


cd /usr/src/
wget http://mirror.freepbx.org/freepbx-2.2.0rc3.tar.gz
tar zxvf freepbx-2.2.0rc3.tar.gz
cd freepbx-2.2.0rc3
./install_amp


Would it be usable as is?

Merci!

[soprom]

Trixbox 2 final est disponible!

[Daniel B.]

Ok, thanks for the info. Sorry, I didn't test the upgrade of freePBX yet, I'm on holyday. Next week I will have a look at the changes in trixbox2 final.

[Daniel B.]

It would be nice to be able to use the script to update FreePBX indepently.

The usual procedure is:

Code: [Select]


cd /usr/src/
wget http://mirror.freepbx.org/freepbx-2.2.0rc3.tar.gz
tar zxvf freepbx-2.2.0rc3.tar.gz
cd freepbx-2.2.0rc3
./install_amp


Would it be usable as is?

Merci!

Tested on one server, it's working. During the install, it asks you to override or not the config file, choose no for every file. Then go to the page https://yourserver/admin, then module admin and update the module you want.

Beta3 is about to be ready, it's based on trixbox 2 (some rpm updated, asterisk support speex codec, freePBX upgraded to 2.2RC3).
For the same reasons as beta1 to beta2, I won't provide any upgrade script from beta2 to beta3, you should be able to do this with the automatic backup procedure during the uninstall.

[jazbokes]

It appears that freepbx 2.2 is out  and check trixbox fork at  
http://www.elastix.org

[Daniel B.]

Ok, thanks for the info, I replaced freePBX2.2rc3 with the stable one 2.2. For elastix, I just looked at their site, but I don't think it brings anything interesting for SME compared to trixbox. As I already spent a lot of time in the integration of trixbox (smeserver-trixbox is quite different from the original trixbox, even if it's based on the same applications), I won't start from scratch for something which is almost the same.

[svangool]

Hi VIP-ire,

My compliments for your work!

I purchased some cards from Digium to try your setup, but before doing that I want to go to SME 7.1 (from 7.0) but there seem to be problems with Spamassassin under Fetchmail and Dynamic DNS, I first want to be sure that I can apply fixes.

Meanwhile I see a lot of messages about the combination of Asterisk and different kernel versions not working very well.

Did you or anyone else using Trixbox have problems like that with SME 7.1?

I have my SME 7.0 system running in "normal" server/gateway mode.

Best regards, Sjef.

[soprom]

The zaptel package will be sensitive to the kernel version. So updating the kernel must be done when there is a know working version of zaptel for that specific kernel.

Going into production with SME/Trixbox/Digium would be complicated if you use a lot of add-ons. My suggestion is to give it a good try to make sure your setup survives a couple of updating cycles.

[Daniel B.]

As far as I've tested the zaptel modules (I only have a TDM400 card from digium), they work with all the kernels, from the oldest one of 7.0 (2.6.9-34) to the last one (2.6.9-42.0.3) for both EL and ELsmp. All you have to do is to install smeserver-trixbox after the upgrade to 7.1. If you have allready installed smeserver-trixbox and then want to upgrade to 7.1 (with the new kernel) you'll need to manually copy the module in the correct directory:

Code: [Select]

mkdir -p /lib/modules/2.6.9-42.0.3.EL/extra/
cp -aR /lib/modules/2.6.9-34.EL/extra/* /lib/modules/2.6.9-42.0.3.EL/extra/
depmod -ea
genzaptelconf


replace EL with ELsmp if needed

[svangool]

I installed two digium 400 cards and the latest version of Trixbox from here on to my SME server.
I have a SME 7.1 system upgraded from SME 7.0.

Observations when I configure 2 zap extensions and 1 sip extension:

1 None of the extension*.conf files are changing in /etc/asterisk but the UI remembers the settings.
2 None of the sip*.conf files are changing
3 Only the vm*.conf (voice-mail) files are changing in /etc/asterisk
4 Yes, I do push the red bar to enable changes
5 Whatever I try with X-lite (V2, V3, nat, no-nat etc.) I keep getting 404 error (not registering).
6 I can dial voicemail and the internal weather engine (611) with the zap-phones.
7 None of the extensions can dial each other.

I have the feeling that the first two point are causing the last three points.

Has anyone tried this?

[svangool]

BTW,

I did change the file Trixbox by entering new passwords.
But I can only enter mydomain.tld/admin by my SME system admin user and password and also in there I can only enter the flashpanel by the SME system admin user and password again.
I did not enter any settings in the trixbox section of server-manager.

I'm showing this because there might be a mismatch with the mysql settings.

[Daniel B.]

Hi. I would need some error messages from the logs. Just have a look at /var/log/httpd/error_log when you try to configure something thru freePBX. You can also have some information in /var/log/messages and /var/log/asterisk/full.

When you say, I did change the file trixbox by entering new paswords, have you changed it before the installation?

[svangool]

Asterisk-full while changing a display-name of an extension and selecting the "submit" button:

Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'login'
Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Parsing '/etc/asterisk/manager.conf': Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Parsing '/etc/asterisk/manager.conf': Found
Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Found
Feb  3 14:39:28 DEBUG[9989] acl.c: 0.0.0.0/0.0.0.0/0.0.0.0 appended to acl for peer
Feb  3 14:39:28 DEBUG[9989] acl.c: 127.0.0.1/255.255.255.0/255.255.255.0 appended to acl for peer
Feb  3 14:39:28 DEBUG[9989] acl.c: ##### Testing 127.0.0.1 with 0.0.0.0
Feb  3 14:39:28 DEBUG[9989] acl.c: ##### Testing 127.0.0.1 with 127.0.0.0
Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Manager 'admin' logged on from 127.0.0.1
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] db.c: Unable to find key '113/password' in family 'AMPUSER'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] db.c: Unable to find key '113/ringtimer' in family 'AMPUSER'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] db.c: Unable to find key '113/noanswer' in family 'AMPUSER'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
............................
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] db.c: Unable to find key '113/emergency_cid' in family 'DEVICE'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
.............................
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 DEBUG[9989] db.c: Unable to find key '113/device' in family 'AMPUSER'
Feb  3 14:39:28 DEBUG[9989] manager.c: Manager received command 'Command'
Feb  3 14:39:28 VERBOSE[9989] logger.c:   == Manager 'admin' logged off from 127.0.0.1
Feb  3 14:39:28 DEBUG[9993] manager.c: Manager received command 'login'
Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Parsing '/etc/asterisk/manager.conf': Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Parsing '/etc/asterisk/manager.conf': Found
Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Found
Feb  3 14:39:28 DEBUG[9993] acl.c: 0.0.0.0/0.0.0.0/0.0.0.0 appended to acl for peer
Feb  3 14:39:28 DEBUG[9993] acl.c: 127.0.0.1/255.255.255.0/255.255.255.0 appended to acl for peer
Feb  3 14:39:28 DEBUG[9993] acl.c: ##### Testing 127.0.0.1 with 0.0.0.0
Feb  3 14:39:28 DEBUG[9993] acl.c: ##### Testing 127.0.0.1 with 127.0.0.0
Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Manager 'admin' logged on from 127.0.0.1
Feb  3 14:39:28 VERBOSE[9993] logger.c:   == Manager 'admin' logged off from 127.0.0.1

Asterisk-full now applying changes after the previous submit:

Feb  3 14:44:49 DEBUG[10492] manager.c: Manager received command 'login'
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/manager.conf': Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/manager.conf': Found
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Found
Feb  3 14:44:49 DEBUG[10492] acl.c: 0.0.0.0/0.0.0.0/0.0.0.0 appended to acl for peer
Feb  3 14:44:49 DEBUG[10492] acl.c: 127.0.0.1/255.255.255.0/255.255.255.0 appended to acl for peer
Feb  3 14:44:49 DEBUG[10492] acl.c: ##### Testing 127.0.0.1 with 0.0.0.0
Feb  3 14:44:49 DEBUG[10492] acl.c: ##### Testing 127.0.0.1 with 127.0.0.0
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Manager 'admin' logged on from 127.0.0.1
Feb  3 14:44:49 DEBUG[10492] manager.c: Manager received command 'Command'
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Destroying musiconhold processes
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/musiconhold.conf': Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/musiconhold.conf': Found
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/musiconhold_additional.conf': Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Parsing '/etc/asterisk/musiconhold_additional.conf': Found
Feb  3 14:44:49 DEBUG[10492] manager.c: Manager received command 'Command'
Feb  3 14:44:49 VERBOSE[10492] logger.c: The previous reload command didn't finish yet
Feb  3 14:44:49 VERBOSE[10492] logger.c:   == Manager 'admin' logged off from 127.0.0.1
Feb  3 14:44:49 DEBUG[10499] manager.c: Manager received command 'login'
Feb  3 14:44:49 VERBOSE[10499] logger.c:   == Parsing '/etc/asterisk/manager.conf': Feb  3 14:44:49 VERBOSE[10499] logger.c:   == Parsing '/etc/asterisk/manager.conf': Found
Feb  3 14:44:49 VERBOSE[10499] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Feb  3 14:44:49 VERBOSE[10499] logger.c:   == Parsing '/etc/asterisk/manager_custom.conf': Found
Feb  3 14:44:49 DEBUG[10499] acl.c: 0.0.0.0/0.0.0.0/0.0.0.0 appended to acl for peer
Feb  3 14:44:49 DEBUG[10499] acl.c: 127.0.0.1/255.255.255.0/255.255.255.0 appended to acl for peer
Feb  3 14:44:49 DEBUG[10499] acl.c: ##### Testing 127.0.0.1 with 0.0.0.0
Feb  3 14:44:49 DEBUG[10499] acl.c: ##### Testing 127.0.0.1 with 127.0.0.0
Feb  3 14:44:49 VERBOSE[10499] logger.c:   == Manager 'admin' logged on from 127.0.0.1
Feb  3 14:44:50 VERBOSE[10499] logger.c:   == Manager 'admin' logged off from 127.0.0.1
Feb  3 14:45:36 DEBUG[28930] manager.c: Manager received command 'Command'

Httpd-error_log while doing all of the above:

[Sat Feb 03 14:26:35 2007] [error] [client 192.168.207.1] File does not exist: /home/e-smith/files/ibays/Primary/html/css, referer: https://www.mydomain.nl/admin/cdr/cdr.php?s=1&posted=1
[Sat Feb 03 14:26:35 2007] [error] [client 192.168.207.1] File does not exist: /opt/asterisk/html/admin/cdr/images/clear.gif, referer: https://www.mydomain.nl/admin/cdr/cdr.php?s=1&posted=1
[Sat Feb 03 14:26:35 2007] [error] [client 192.168.207.1] File does not exist: /opt/asterisk/html/admin/cdr/images/corner-br.png
[Sat Feb 03 14:26:35 2007] [error] [client 192.168.207.1] File does not exist: /opt/asterisk/html/admin/cdr/images/corner-bl.png
sh: /var/log/asterisk/freepbx-retrieve.log: Permission denied
sh: /var/log/asterisk/freepbx-bounce_op.log: Permission denied

I also see a packet denied each 5 minutes in iptables/current:
2007-02-03 14:59:16.262745500 Feb  3 14:59:16 mydomain denylog, don't know if it is related: IN=ppp0 OUT= MAC= SRC=XX.XX.XX.XX DST=255.255.255.255 LEN=142 TOS=00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=57129 DPT=3865 LEN=122
Where xx. etc is my own external IP-address.

No related messages in /var/log/messages, freepbx-retrieve and bounce_op logs are empty.

Yes, I did change the passwords before the installation.

[Daniel B.]

Well, first, it seems that you have a permission problem for the log. Verify that the user www is in the group asterisk

Code: [Select]

cat /etc/group | grep asterisk, then try a

Code: [Select]

chown -R asterisk:asterisk /var/log/asterisk

But I don't think it's the only problem.
The packet which is reject seems de be related to XPL (port 3865), have you install this module? I never tested it, I've just verified that the install was ok and that the process were running, but I don't know how we can use it. maybe you could remove it if you don't need it with this command

Code: [Select]

sh trixbox remove_xpl
from the trixbox directory.

For the configuration which is not reflected in the configuration file (extension*.conf), I don't understand, have you put special caracteres in the password when you have modified it? I already had problem with some caracters, I don't remember which ones, I usually just put alphanumeric caracters.

The fact that the UI remembers the settings means that the mysql part works (the configuration is stored in a mysql db, then with some scripts, it's reflected in the ocnfiguration files). The problem could come from permissions on scripts. Check the scripts in /var/lib/asterisk/bin/, they should belong to asterisk:asterisk with execution permission.

Can you tell me also if you had any error message during the install.
Maybe you could try to remove everything

Code: [Select]

sh trixbox remove
then try to restart the install. First just install the base and see if it's working, then you can install all the other modules one by one.

[svangool]

Permissions are correct.
I removed Trixbox and only installed the base.

Then I saw this one:

Feb  4 12:14:37 WARNING[7859] res_config_mysql.c: MySQL RealTime: No database port found, using 3306 as default.
Feb  4 12:14:37 WARNING[7859] res_config_mysql.c: MySQL RealTime: No database socket found, using '/tmp/mysql.sock' as default.
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime Host: 127.0.0.1
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime Port: 3306
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime User: asteriskuser
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime Password: password
Feb  4 12:14:37 ERROR[7859] res_config_mysql.c: MySQL RealTime: Failed to connect database server asteriskrealtime on 127.0.0.1 (err 2003). Check debug for more info.
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime: Cannot Connect (2003): Can't connect to MySQL server on '127.0.0.1' (111)
Feb  4 12:14:37 WARNING[7859] res_config_mysql.c: MySQL RealTime: Couldn't establish connection. Check debug.
Feb  4 12:14:37 DEBUG[7859] res_config_mysql.c: MySQL RealTime: Cannot Connect: Can't connect to MySQL server on '127.0.0.1' (111)
Feb  4 12:14:37 NOTICE[7859] config.c: Registered Config Engine mysql
Feb  4 12:14:37 VERBOSE[7859] logger.c: MySQL RealTime driver loaded.

I checked, these lines were also there in previous installations, I missed them.

Got it working (the 127.0.0.1 doesn't work and the /tmp socket was not there) by changing res_mysql.conf in /etc/asterisk into:

Code: [Select]

[general]
dbhost = localhost
dbname = asteriskrealtime
dbuser = asteriskuser
dbpass = password
dbport = 3306
dbsock = /var/lib/mysql/mysql.sock

And don't forget (as I did) to change the password for your own.
The extensions files and others are being updated now, now I'm checking the rest.

[iam]

I get some errors when I try to update modules from FreePBX with the link "Check for updates online"...

Dec 23 14:55:44 roamer httpd: PHP Warning:  file_get_contents(): URL file-access is disabled in the server configuration in /opt/asterisk/html/admin/functions.inc.php on line 1099
Dec 23 14:55:44 roamer httpd: PHP Warning:  file_get_contents(http://mirror.freepbx.org/modules-2.2.xml): failed to open stream: no suitable wrapper could be found in /opt/asterisk/html/admin/functions.inc.php on line 1099
Dec 23 14:55:44 roamer httpd: PHP Warning:  array_keys(): The first argument should be an array in /opt/asterisk/html/admin/page.modules.php on line 120
Dec 23 14:55:44 roamer httpd: PHP Warning:  Invalid argument supplied for foreach() in /opt/asterisk/html/admin/page.modules.php on line 120
Dec 23 14:55:44 roamer httpd: PHP Fatal error

Is this "URL file-access is disabled " by design?

Hello just installed beta3. Still can't update modules in free bpx:

Module Administration

Warning: Cannot connect to online repository (mirror.freepbx.org). Online modules are not available.

Is there any possibility to switch this feature on.

Sincerely
Kirill

[Daniel B.]

Well, I don't know for now where this error comes from. I think it's a parameter in php.ini which prevent the connexion to the online repo. As I'm very busy for the moment I cant search for this but I'll try to solve that issue.
Cheers, Daniel

[iam]

Hello!

You were absolutely right.

parametre allow_url_fopen in php.ini file was Off
it should be On

So
vi  /etc/e-smith/db/configuration/defaults/php/AllowUrlFopen
and change it to On

After that modules appear to be downloadable but I've discovered another problem ....

Please wait while module actions are performed
Downloading announcement Error(s) downloading announcement:
Error opening /opt/asterisk/html/admin/modules/_cache/announcement-0.7.0.tgz for writing


I've checked permissions on a native TB2.0.. there were some differences...

So running the next command solved the situation
 chmod -R  a+rw  /opt/asterisk/html/admin/modules/*

I understand that permissions demand more precisely work but anyway it helps....

Sincerely
Kirill

[Daniel B.]

Well, I don't know what are the impacts on the security if we set allow_url_fopen to on. I think we are more exposed to cross scripting attacks, so set it at your own risks. For the permissions, I think it can also be dangerous to give write permissions for everyone. I don't understand why you have to set others to have access, because apache runs under www, and www should be in the group asterisk. The default permissions on the directory /opt/asterisk/html/admin/modules/* are asterisk:asterisk 770 so ww should be able to write. can you verify that www is in the group asterisk (cat /etc/group| grep asterisk should return one line like this asterisk:x:455:www)

Cheers, Daniel

[iam]

Its test server at the moment certainly...
By the way what do you think about using smeserver-trixbox addon in production environment&?  Any success stories?

[root@gate ~]# cat /etc/group| grep asteris
asterisk:x:454:www
[root@gate ~]#

[Daniel B.]

Well, I'm using smeserver-trixbox on a prod environnement, and I'm planning to install it on 3 others production servers. But I only use the base, so I'm not sure everything is ok (maint, meetme, xpl, a2biling). For the base, I'm quit happy with it, even if I don't use it extensivly (up to 4 users, one pstn line, one sip line). But there's still some problems, I've just see that sonferences do not work anymore with the last release (it was working on previous) so I need to find out the problem. In fact, I would recommend anyone who'd like to use it in production to test everything they need before the installation. If all the features you need are working, then, no problems.

[iam]

Thank you for reply. I am thinking about 15 -20 employee office and the most important question is if e-mail correspondense with anti-spam and anti-virus checking will affect quality of voice service  ... (Or may be another services make harm for voice)

Do you use prioritisation of processes like 'nice --19 ' command or may be some other  stuff?

Kirill

[Daniel B.]

No, I don't use any process prioritisation, because with the actual cpus (I have cheap celeron on all my servers), asterisk doesn't take too much cpu. But you can easily have quality problem because of bandwidth usage, you should estimate how many communications you will have at the same time, and estimate the needed bandwith (it also depends on the codec you use, but if you use ulaw/alaw, count 70-80 kbps per call)

[iam]

Sorry ...

To switch AllowUrlFopen to On

instead of editing vi /etc/e-smith/db/configuration/defaults/php/AllowUrlFopen

the next command should be issued..

config setprop php AllowUrlFopen On

[svangool]

Update on my Trixbox installation (after changing /etc/asterisk/res_mysql.conf, see earlier):

- Got extensions analog + sip softphone working
- Got sip inbound working (Budgetphone)
- Got sip outbound working (Voipbuster)
- Phonebook and phonebook CID lookup do not seem to work
- Flash Operator Panel doesn't show all the defined extensions, trunks etc.
- Module updates don't work (solved, see earlier)
- Pressing the red bar keeps it moving forever the first time
- asterisk -r from command line, allways comes back with: previous reload not finished (after 15 minutes)
- /etc/init.d/asterisk -restart: immediate configuration update
- So, somehow the webpanel configuration update doesn't work (which caused a lot of puzzling before I understood why my settings were not working)

[svangool]

To IAM:

After the "setprop" don't forget to mention to:

- expand-template /etc/php.ini
- /etc/init.d/httpd restart (will give an error, but ignore)
- Close Freepbx and re-open and clear cache (ctrl-F5 with explorer)

And yes, the rights thing is a mess. I used your line of code and had to manually create a _cache directory. Then (after the update) I moved all the tars one dir up and untarred them manually again, which resulted in a full update.

After that I changed the "setprop" to "Off" again and followed above steps again to resecure everything.

VIP-Ire, are you planning on solving this?
I do appreciate a lot the work you already did.

[iam]

Hello everybody!

There is question appears again during testing of sme-trixbox addon...

Yesterday I've got cisco 7970 for tests and tried to check if xmlservices works well. It appears that cisco and xmlservices aliases doesn't added to apache httpd.conf by any reasons.

I dont know how to work with sme server precisely since I first installed it in late december but to open xmlservices and cisco dirs for tests of ciscophones  I've done the next:

vi /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/90e-smithAccess30cisco

{
my $externalSSLAccess = '';
my $validFrom = db_get_prop($confref, "httpd-admin", "ValidFrom") || 'none';

$validFrom =~ s/,/ /g;
$validFrom =~ s:/255.255.255.255::g;

unless ($validFrom eq 'none')
{
$externalSSLAccess = $validFrom;
}

$OUT .= <<HERE;
#-----------------------------------------------------------------------------
# IAM generated xmlservices and cisco directory
#-----------------------------------------------------------------------------

Alias /cisco /opt/asterisk/html/cisco
<Directory /opt/asterisk/html/cisco>
AddType application/x-httpd-php .php
AllowOverride None
Options +Indexes
order deny,allow
deny from all
allow from $localAccess $externalSSLAccess
AuthName "SME Server Manager"
AuthType Basic
AuthExternal pwauth
require user admin
</Directory>

Alias /xmlservices /opt/asterisk/html/xmlservices
<Directory /opt/asterisk/html/xmlservices>
AddType application/x-httpd-php .php
AllowOverride None
Options +Indexes
order deny,allow
deny from all
allow from $localAccess $externalSSLAccess
AuthName "SME Server Manager"
AuthType Basic
AuthExternal pwauth
require user admin
</Directory>

#-----------------------------------------------------------------------------
#End of  IAM generated xmlservices and cisco directory
#-----------------------------------------------------------------------------
HERE
}


Sincerely
Kirill

[iam]

Sorry

Password authentication should be removed ...

So something like that:

Alias /xmlservices /opt/asterisk/html/xmlservices
<Directory /opt/asterisk/html/xmlservices>
AddType application/x-httpd-php .php
AllowOverride None
Options +Indexes
order deny,allow
deny from all
allow from $localAccess
</Directory>

May be some more options should be added or removed ... or there is another better way to provide xmlservices to ciscophones, but it is guru's call...

[iam]

Trying to use system recordings module in FreePBX. When trying to save recording in a step 2 'Name' an error occurs:

mv: cannot move `/tmp/501-ivrrecording.wav' to `/var/lib/asterisk/sounds/custom/Rec_Test.wav': Operation not permitted

When /tmp/501-ivrrecording.wav created it becoms read-only permission for group (asterisk) so apache can not move it as it runs as www...

Cant find right way to solve this problem ... Any ideas?

Sincerely
Kirill

[iam]

There is one more question.

Dialed 666 but didn't heard fax answer.  Asterisk says that app_rxfax is missed. Does this function absent by design or just waited its hour to be added?

If someone needs it quickly:

wget http://yum.trixbox.org/centos/4/RPMS/asterfax-1.0-free.i386.rpm
wget http://yum.trixbox.org/centos/4/RPMS/ghostscript-8.15.1-7.i386.rpm
wget http://yum.trixbox.org/centos/4/RPMS/ghostscript-fonts-5.50-13.1.noarch.rpm
wget wget http://yum.trixbox.org/centos/4/RPMS/jre-1_5_0_07-linux-i586.rpm

yum localinstall ./*.rpm --enablerepo=base

/usr/lib/asterisk/modules/app_rxfax.so Could be copied from stanalone Trixbox with same asterisk ver. to not to deal with whole asterisk package.

Sincerely
Kirill

[svangool]

There is a security problem with older asterisk versions.

I took the opportunity to update trixbox 2.0 by updating both freepbx to 2.2.1 and asterisk to 1.2.16 (the latest versions) and it works on SME 7.1.2 (as far as I tested).

Following steps after backing up your conf-files (/etc/zaptel.conf, /etc/amportal.conf and /etc/asterisk/*.*):

preparation:

Code: [Select]

yum install gcc (oh, oh, do not forget to remove this when finished)
yum install openssl-devel
freepbx 2.2.1:

Code: [Select]

cd /usr/src
wget http://downloads.sourceforge.net/amportal/freepbx-2.2.1-withmodules.tar.gz (indeed, gives you the latest modules!)
tar xzf freepbx-2.2.1-withmodules.tar.gz
cd freepbx-2.2.1
./install_amp

asterisk 1.2.16:
follow http://nerdvittles.com/index.php?p=171 but replace kernel references with 2.6.9-42.0.10 (for SME 7.1.2)

If you are ready:

Code: [Select]

yum remove gcc

That is all!

[iam]

To svangool:

Thank you for posting new recommendations.

There is a question:
Don't you stay with kernel 2.6.9-34 as recommended. Don't you expirience any problems with a new one?

Kirill

[Daniel B.]

Hi everyone. Thanks for your interest and your contribution in this project. I've just looked at the security hole in asterisk, and I don't think smeserver-trixbox is concerned. The main reason is that asterisk (UDPPort 5060) is NOT open the the Internet. Your server can open a connexion to your VOIP provider, but nobody can open a connexion to your asterisk from the outside. I think it's more risky to install gcc and openssl-devel on a prod environnement. If you have a test server, then you can compile the latest asterisk on it, and copy all the compiled files to your prod server.
Anyway, if you realy want to install gcc and openssl-devel on your prod server, here are all the dependencies that you should remove after:

gcc
openssl-devel
cpp
e2fsprogs-devel
glibc-devel
glibc-headers
glibc-kernheaders
krb5-devel
zlib-devel
libgcc

I'll soon release a new version of the contrib, with freePBX 2.2.1, and the latest rpms from trixbox repo (asterisk 1.2.14). The new version will only contains asterisk, freePBX (the base of the old package). I wont maintain anymore the others modules (maint, meetme, a2billing, xpl, crm) because it's too much work and I don't use it.

[svangool]

To iam:

No, I don't have any problems with the new kernel.  I don't use ISDN, I have a TDM400 FXS/FXO analog card.

To VIP-ire:

If you want to use a (soft-)phone outside your local net you have to open that port and the the security hole becomes a fact.

As I showed in my explanation just remove gcc after you are done.
If you do what I described you don't have to bother about the dependencies, everything will be there. I agree, I wouldn't do this on the school server.

I would not spend too much time on packaging the current TB, There is almost a new one with selectable asterisk 1.2.16 or 1.4.1.

[Daniel B.]

To acces asterisk from the outside, I strongly recommend to use a VPN. That's why I've also developped the contrib smeserver-openvpn-bridge-fws. I'll see if the new TB come soon. I'd like to use asterisk 1.4.1 (especially for the jabber server) but I don't know when freePBX will support 1.4.x serie