Forum Replies Created

Viewing 15 posts - 46 through 60 (of 259 total)
  • Author
    Posts
  • Avatar photoTelium Support Group
    Participant
    Post count: 265

    Yes you can! Like your other syncjobs, setup a new syncjob which requires the remotestate be ‘asterisk running’, localstate as ‘asterisk stopped’. Then set the syncjob to sync a single file:

    /tmp/secast.state

    Your tertiary PBX will always pull the latest security data from the active PBX. And if the tertiary promotes, there is no risk overwriting the local security data because of the localstate requirement.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    HAAst version 2.5.0 contains a number of significant changes, including changes to config files. For example:

    • Sync job config files have been renamed XXX.syncjob.conf
    • Event handlers have been renamed SYNCJOBID.EVENT.TIMING (eg: asterisk.start.post, or mysyncjob.stop.post)
    • Main config file keys have been renamed (eg: friendlyhostname)

    You need to rename your event handlers accordingly, and check the sample haast.conf file to ensure you are using new key names.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    PBXSync is designed to handle a mix of internal and external hosts. When you setup your pbxsync.conf file, you will notice that the rsync and MySQL IP address entries allow for up to 3 IP addresses. These three addresses represent:

    1. Public IP – this is the IP address that PBXSync will publish to other PBXSync hosts not on your local subnet.
    2. Private IP – this is the IP address that PBXSync will publish to other PBXSync hosts on your local subnet.
    3. Local IP – this is the IP address that PBXSync uses when connecting to itself.

    So for the Public IP use the IP address of your firewall, and for your Private IP use the internal (non-routable) IP address of an internal host. The local IP should probably be set to ‘localhostipv4’. Also be sure to set the localsubnets setting to match your internal network(s).

    Next, on your firewall setup porting mapping from the public IP address to the internal private IP addresses & port. After that the external host will be able to reach the internal host as well.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    HAAst sits between the OS and Asterisk, while the configuration generator (the pretty GUI that creates config files) sits above Asterisk. For that reason HAAst is compatible with a wide range of configuration generators.

    One noteworthy difference between configuration generators is the database they use to hold their configuration data. While HAAst can sync many different database management systems, from our experience MySQL is most popular in critical/commercial implementations of Asterisk.

    The demand for supporting other database is so low that we have already begun deprecating support for other databases. If you are purchasing a large number of licenses (e.g. under the OEM or ITSP program) we are happy to re-institute support for a particular database – but please contact our sales or support group to discuss your needs.

    If you aren’t sure which configuration generator is right for you, have a look at some feedback from customers: Configuration Generator Comparison

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    In some (particularly recent) Asterisk versions quotes are considered just another character in the value of a setting. So

    Quote:
    secret=ABC

    and

    Quote:
    secret=”ABC”

    are different. Please remove quotes the credential setting values in your Asterisk /etc/asterisk/manager.conf file and restart the HAAst services.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    Some additional exit codes and their causes:

    255 – Likely a connection problem to the remote host. Check the IP address / fqdn of the remote host
    23 – Error during transfer. Check the file/directory being synced really exists on the source.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    A summary of common exit codes and their causes:

    • 255 – Likely a connection problem to the remote host. You should be able to resolve this by checking the IP address / fqdn of the remote host.
    • 107 – Protocol error or unexpected response. You may have to work with Telium support to trace the cause (if this is intermittent then diagnosing can require many steps)
    • 23 – Error during transfer. You should be able to resolve this by checking the file/directory being synced really exists on the source.
    • 10 – RSync server unreachable. You should check the ensure the RSync service is running on the remote host, and that the remote host is reachable.
    • 5 – RSync file permissions error. You should check to ensure rsync config files holding passwords are mode 600.

    The HAAst installation guide provides guidance on how to enable debugging to capture more information. The specific settings, and location of log files, varies by HAAst version. If you need further help capturing and understanding debug information please contact Telium support (you will need an active maintenance agreement for the support team to assist you)

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the PBXSync detailed installation guide.

    I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.pbxsync.secret file has the wrong permissions. Please modify the permissions of this file as follows:

    Quote:
    chmod 600 /etc/ rsync.pbxsync.secret

    After that your sync should work.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the HAAst detailed installation guide.

    I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.haast.secret file has the wrong permissions. Please modify the permissions of this file as follows:

    Quote:
    chmod 600 /etc/ rsync.haast.secret

    After that your sync should work.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    I’ve passed along your thanks to the entire account team. We think we have a pretty exceptional group of people here, and its great to hear our customers feel the same way.

    BTW Steve is our CTO, and he really knows his stuff. Steve is personally involved in every large project, and also does quality reviews of smaller projects as well. Given the size of your project Steve (and lots of behind the scenes team members) gave the project lots of attention.

    The account manager will follow up by phone as well, we’d appreciate a testimonial for the Telium website.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    At this time HAAst does not have this capability, but a feature request has already been submitted. However, if you are concerned about connectivity between the HAAst node and your SMTP server, or SMTP credentials, then we can help you diagnose this.

    From the HAAst node perform the following steps:

    1. From a command prompt type “telnet hostname 25”. This connects telnet to port 25 on the server with the name or IP ‘hostname’. Replace ‘hostname’ with the name of the SMTP host you specified in your haast.conf file, and replace 25 with the port you specified in your haast.conf (in the [smtp] stanza)
    2. If the TCP connection fails, then you have confirmed a network/routing problem
    3. If the TCP connection is established, telnet responds with the message “Connected to SERVERNAME and Escape character is’ ^]’.”
    4. Now you can send an e-mail via SMTP protocol. You must use a recipient address for which the connected mail server is responsible (or the message will be refused/discarded)

      EHLO test.example.com
      MAIL FROM:
      RCPT TO:
      DATA
      Subject: Testmessage from haast node 1
      (Blank line, press Enter again)
      This is an alert!
      (Blank line, press Enter again)
      .
      QUIT

    5. The SMTP server should respond that your message has been accepted. Now wait at the receiving end for your message to appear.

    The above assumes that the SMTP server does not require encrypted authentication. If you need help with encrypted SMTP authentication (or session) please contact support@telium.io for further details.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    Yes! The Commercial Unlimited edition of HAAst has the ability to use custom sensors that you (or we) can create. So if you already have a command line tool that reads the hardware or software health then a simple BASH script will allow you to feed that health data into HAAst. HAAst can then consider that data within its node monitoring and failover (or take other actions) based on the health of your proprietary hardware/software.

    If you prefer, Telium can create a high performance sensor (written in C/C++) which connects to any API’s you make available. If you prefer that we would develop those sensors through Telium Professional Services.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    License requests go into the general support queue, which means response time for your license will match our general support response times. Our typical response time is 20 minutes, but during times of high demand it may extend as far as 4 hours. (By hour 4 engineering staff are being moved to support desks – so this doesn’t happen often).

    If you are a Telium certified OEM/VAR partner then your requests will move to the head of the support queue. If you need USB Dongles sent in advance we recommend you provide at least 2 weeks notice.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    License requests go into the general support queue, which means response time for your license will match our general support response times. Our typical response time is 20 minutes, but during times of high demand it may extend as far as 4 hours. (By hour 4 engineering staff are being moved to support desks – so this doesn’t happen often).

    If you are a Telium certified OEM/VAR partner then your requests will move to the head of the support queue. If you need USB Dongles sent in advance we recommend you provide at least 2 weeks notice.

    Avatar photoTelium Support Group
    Participant
    Post count: 265

    The problem most likely was created by changing the FreePBX database username/password on one node and not the other. Changing the FreePBX database username/password does two things: 1. it updates the /etc/freepbx.conf file, and 2. it updates the ‘users’ table in the MySQL ‘mysql’ database.

    So although you may be syncing the ‘freepbx’ database between nodes, you are not syncing the ‘mysql’ database between nodes. And you should not try to synchronize the MySQL ‘mysql’ database (which holds the schema as well as user info), unless you are a DBA and really understand what you are doing!

    The solution to this problem is very simple:

    • Copy the full MySQL database from the working node to the problem node; or,
    • Reset the FreePBX user password on the problem node to match the working node; or,
    • Don’t sync the freepbx.conf file and set the two nodes to have different passwords

    To avoid this in the future either:

    • set the FreePBX MySQL user password identically on both systems; or
    • leave the default password; or
    • don’t synchronize the freepbx.conf file; or,
    • sync the ‘mysql’ database (but you have to be sure you understand the implications before doing so) – we don’t recommend this

    So the cause and solution to this problem reside completely within FreePBX (HAAst has not malfunctioned in any way).

Viewing 15 posts - 46 through 60 (of 259 total)