Telium Support Group

Yes you can! Like your other syncjobs, setup a new syncjob which requires the remotestate be ‘asterisk running’, localstate as ‘asterisk stopped’. Then set the syncjob to sync a single file:

/tmp/secast.state

Your tertiary PBX will always pull the latest security data from the active PBX. And if the tertiary promotes, there is no risk overwriting the local security data because of the localstate requirement.

PBXSync is designed to handle a mix of internal and external hosts. When you setup your pbxsync.conf file, you will notice that the rsync and MySQL IP address entries allow for up to 3 IP addresses. These three addresses represent:

1. Public IP – this is the IP address that PBXSync will publish to other PBXSync hosts not on your local subnet.
2. Private IP – this is the IP address that PBXSync will publish to other PBXSync hosts on your local subnet.
3. Local IP – this is the IP address that PBXSync uses when connecting to itself.

So for the Public IP use the IP address of your firewall, and for your Private IP use the internal (non-routable) IP address of an internal host. The local IP should probably be set to ‘localhostipv4’. Also be sure to set the localsubnets setting to match your internal network(s).

Next, on your firewall setup porting mapping from the public IP address to the internal private IP addresses & port. After that the external host will be able to reach the internal host as well.

In some (particularly recent) Asterisk versions quotes are considered just another character in the value of a setting. So

Quote:
secret=ABC

and

Quote:
secret=”ABC”

are different. Please remove quotes the credential setting values in your Asterisk /etc/asterisk/manager.conf file and restart the HAAst services.

Some additional exit codes and their causes:

255 – Likely a connection problem to the remote host. Check the IP address / fqdn of the remote host
23 – Error during transfer. Check the file/directory being synced really exists on the source.

The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the HAAst detailed installation guide.

I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.haast.secret file has the wrong permissions. Please modify the permissions of this file as follows:

Quote:
chmod 600 /etc/ rsync.haast.secret

After that your sync should work.

At this time HAAst does not have this capability, but a feature request has already been submitted. However, if you are concerned about connectivity between the HAAst node and your SMTP server, or SMTP credentials, then we can help you diagnose this.

From the HAAst node perform the following steps:

1. From a command prompt type “telnet hostname 25”. This connects telnet to port 25 on the server with the name or IP ‘hostname’. Replace ‘hostname’ with the name of the SMTP host you specified in your haast.conf file, and replace 25 with the port you specified in your haast.conf (in the [smtp] stanza)
2. If the TCP connection fails, then you have confirmed a network/routing problem
3. If the TCP connection is established, telnet responds with the message “Connected to SERVERNAME and Escape character is’ ^]’.”
4. Now you can send an e-mail via SMTP protocol. You must use a recipient address for which the connected mail server is responsible (or the message will be refused/discarded)
   
   EHLO test.example.com
   MAIL FROM:
   RCPT TO:
   DATA
   Subject: Testmessage from haast node 1
   (Blank line, press Enter again)
   This is an alert!
   (Blank line, press Enter again)
   .
   QUIT

5. The SMTP server should respond that your message has been accepted. Now wait at the receiving end for your message to appear.

The above assumes that the SMTP server does not require encrypted authentication. If you need help with encrypted SMTP authentication (or session) please contact support@telium.io for further details.

License requests go into the general support queue, which means response time for your license will match our general support response times. Our typical response time is 20 minutes, but during times of high demand it may extend as far as 4 hours. (By hour 4 engineering staff are being moved to support desks – so this doesn’t happen often).

If you are a Telium certified OEM/VAR partner then your requests will move to the head of the support queue. If you need USB Dongles sent in advance we recommend you provide at least 2 weeks notice.

The problem most likely was created by changing the FreePBX database username/password on one node and not the other. Changing the FreePBX database username/password does two things: 1. it updates the /etc/freepbx.conf file, and 2. it updates the ‘users’ table in the MySQL ‘mysql’ database.

So although you may be syncing the ‘freepbx’ database between nodes, you are not syncing the ‘mysql’ database between nodes. And you should not try to synchronize the MySQL ‘mysql’ database (which holds the schema as well as user info), unless you are a DBA and really understand what you are doing!

The solution to this problem is very simple:

• Copy the full MySQL database from the working node to the problem node; or,
• Reset the FreePBX user password on the problem node to match the working node; or,
• Don’t sync the freepbx.conf file and set the two nodes to have different passwords

To avoid this in the future either:

• set the FreePBX MySQL user password identically on both systems; or
• leave the default password; or
• don’t synchronize the freepbx.conf file; or,
• sync the ‘mysql’ database (but you have to be sure you understand the implications before doing so) – we don’t recommend this

So the cause and solution to this problem reside completely within FreePBX (HAAst has not malfunctioned in any way).