Forum Replies Created
-
AuthorPosts
-
Yes you can! Like your other syncjobs, setup a new syncjob which requires the remotestate be ‘asterisk running’, localstate as ‘asterisk stopped’. Then set the syncjob to sync a single file:
/tmp/secast.state
Your tertiary PBX will always pull the latest security data from the active PBX. And if the tertiary promotes, there is no risk overwriting the local security data because of the localstate requirement.
in reply to: Sync not working after upgrade #6811HAAst version 2.5.0 contains a number of significant changes, including changes to config files. For example:
- Sync job config files have been renamed XXX.syncjob.conf
- Event handlers have been renamed SYNCJOBID.EVENT.TIMING (eg: asterisk.start.post, or mysyncjob.stop.post)
- Main config file keys have been renamed (eg: friendlyhostname)
You need to rename your event handlers accordingly, and check the sample haast.conf file to ensure you are using new key names.
PBXSync is designed to handle a mix of internal and external hosts. When you setup your pbxsync.conf file, you will notice that the rsync and MySQL IP address entries allow for up to 3 IP addresses. These three addresses represent:
- Public IP – this is the IP address that PBXSync will publish to other PBXSync hosts not on your local subnet.
- Private IP – this is the IP address that PBXSync will publish to other PBXSync hosts on your local subnet.
- Local IP – this is the IP address that PBXSync uses when connecting to itself.
So for the Public IP use the IP address of your firewall, and for your Private IP use the internal (non-routable) IP address of an internal host. The local IP should probably be set to ‘localhostipv4’. Also be sure to set the localsubnets setting to match your internal network(s).
Next, on your firewall setup porting mapping from the public IP address to the internal private IP addresses & port. After that the external host will be able to reach the internal host as well.
in reply to: Selecting a configuration generator #14148HAAst sits between the OS and Asterisk, while the configuration generator (the pretty GUI that creates config files) sits above Asterisk. For that reason HAAst is compatible with a wide range of configuration generators.
One noteworthy difference between configuration generators is the database they use to hold their configuration data. While HAAst can sync many different database management systems, from our experience MySQL is most popular in critical/commercial implementations of Asterisk.
The demand for supporting other database is so low that we have already begun deprecating support for other databases. If you are purchasing a large number of licenses (e.g. under the OEM or ITSP program) we are happy to re-institute support for a particular database – but please contact our sales or support group to discuss your needs.
If you aren’t sure which configuration generator is right for you, have a look at some feedback from customers: Configuration Generator Comparison
in reply to: HAAst can’t login to Asterisk #6827In some (particularly recent) Asterisk versions quotes are considered just another character in the value of a setting. So
Quote:
secret=ABCand
Quote:
secret=”ABC”are different. Please remove quotes the credential setting values in your Asterisk /etc/asterisk/manager.conf file and restart the HAAst services.
in reply to: Errors / warnings after sync #6834Some additional exit codes and their causes:
255 – Likely a connection problem to the remote host. Check the IP address / fqdn of the remote host
23 – Error during transfer. Check the file/directory being synced really exists on the source.in reply to: Errors / warnings after sync #6826A summary of common exit codes and their causes:
- 255 – Likely a connection problem to the remote host. You should be able to resolve this by checking the IP address / fqdn of the remote host.
- 107 – Protocol error or unexpected response. You may have to work with Telium support to trace the cause (if this is intermittent then diagnosing can require many steps)
- 23 – Error during transfer. You should be able to resolve this by checking the file/directory being synced really exists on the source.
- 10 – RSync server unreachable. You should check the ensure the RSync service is running on the remote host, and that the remote host is reachable.
- 5 – RSync file permissions error. You should check to ensure rsync config files holding passwords are mode 600.
The HAAst installation guide provides guidance on how to enable debugging to capture more information. The specific settings, and location of log files, varies by HAAst version. If you need further help capturing and understanding debug information please contact Telium support (you will need an active maintenance agreement for the support team to assist you)
in reply to: Errors / warnings after sync #6833The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the PBXSync detailed installation guide.
I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.pbxsync.secret file has the wrong permissions. Please modify the permissions of this file as follows:
Quote:
chmod 600 /etc/ rsync.pbxsync.secretAfter that your sync should work.
in reply to: Errors / warnings after sync #6824The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the HAAst detailed installation guide.
I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.haast.secret file has the wrong permissions. Please modify the permissions of this file as follows:
Quote:
chmod 600 /etc/ rsync.haast.secret
After that your sync should work.
in reply to: Thank you! What a team #6823I’ve passed along your thanks to the entire account team. We think we have a pretty exceptional group of people here, and its great to hear our customers feel the same way.
BTW Steve is our CTO, and he really knows his stuff. Steve is personally involved in every large project, and also does quality reviews of smaller projects as well. Given the size of your project Steve (and lots of behind the scenes team members) gave the project lots of attention.
The account manager will follow up by phone as well, we’d appreciate a testimonial for the Telium website.
in reply to: Test email alert from node #6822At this time HAAst does not have this capability, but a feature request has already been submitted. However, if you are concerned about connectivity between the HAAst node and your SMTP server, or SMTP credentials, then we can help you diagnose this.
From the HAAst node perform the following steps:
- From a command prompt type “telnet hostname 25”. This connects telnet to port 25 on the server with the name or IP ‘hostname’. Replace ‘hostname’ with the name of the SMTP host you specified in your haast.conf file, and replace 25 with the port you specified in your haast.conf (in the [smtp] stanza)
- If the TCP connection fails, then you have confirmed a network/routing problem
- If the TCP connection is established, telnet responds with the message “Connected to SERVERNAME and Escape character is’ ^]’.”
- Now you can send an e-mail via SMTP protocol. You must use a recipient address for which the connected mail server is responsible (or the message will be refused/discarded)
EHLO test.example.com
MAIL FROM:
RCPT TO:
DATA
Subject: Testmessage from haast node 1
(Blank line, press Enter again)
This is an alert!
(Blank line, press Enter again)
.
QUIT - The SMTP server should respond that your message has been accepted. Now wait at the receiving end for your message to appear.
The above assumes that the SMTP server does not require encrypted authentication. If you need help with encrypted SMTP authentication (or session) please contact support@telium.io for further details.
in reply to: Can HAAst monitor proprietary hardware / software? #6818Yes! The Commercial Unlimited edition of HAAst has the ability to use custom sensors that you (or we) can create. So if you already have a command line tool that reads the hardware or software health then a simple BASH script will allow you to feed that health data into HAAst. HAAst can then consider that data within its node monitoring and failover (or take other actions) based on the health of your proprietary hardware/software.
If you prefer, Telium can create a high performance sensor (written in C/C++) which connects to any API’s you make available. If you prefer that we would develop those sensors through Telium Professional Services.
in reply to: How long to get a license #6821License requests go into the general support queue, which means response time for your license will match our general support response times. Our typical response time is 20 minutes, but during times of high demand it may extend as far as 4 hours. (By hour 4 engineering staff are being moved to support desks – so this doesn’t happen often).
If you are a Telium certified OEM/VAR partner then your requests will move to the head of the support queue. If you need USB Dongles sent in advance we recommend you provide at least 2 weeks notice.
in reply to: How long to get a license #6828License requests go into the general support queue, which means response time for your license will match our general support response times. Our typical response time is 20 minutes, but during times of high demand it may extend as far as 4 hours. (By hour 4 engineering staff are being moved to support desks – so this doesn’t happen often).
If you are a Telium certified OEM/VAR partner then your requests will move to the head of the support queue. If you need USB Dongles sent in advance we recommend you provide at least 2 weeks notice.
in reply to: FreePBX access denied to SQL error on one node #6820The problem most likely was created by changing the FreePBX database username/password on one node and not the other. Changing the FreePBX database username/password does two things: 1. it updates the /etc/freepbx.conf file, and 2. it updates the ‘users’ table in the MySQL ‘mysql’ database.
So although you may be syncing the ‘freepbx’ database between nodes, you are not syncing the ‘mysql’ database between nodes. And you should not try to synchronize the MySQL ‘mysql’ database (which holds the schema as well as user info), unless you are a DBA and really understand what you are doing!
The solution to this problem is very simple:
- Copy the full MySQL database from the working node to the problem node; or,
- Reset the FreePBX user password on the problem node to match the working node; or,
- Don’t sync the freepbx.conf file and set the two nodes to have different passwords
To avoid this in the future either:
- set the FreePBX MySQL user password identically on both systems; or
- leave the default password; or
- don’t synchronize the freepbx.conf file; or,
- sync the ‘mysql’ database (but you have to be sure you understand the implications before doing so) – we don’t recommend this
So the cause and solution to this problem reside completely within FreePBX (HAAst has not malfunctioned in any way).
-
AuthorPosts