Forum Replies Created
-
AuthorPosts
-
in reply to: Run firewalld with HAAst #6843
Assuming your nodes are 192.168.0.10 and 192.168.0.11, then issue the following commands on both nodes:
firewall-cmd –new-zone=haast –permanent
firewall-cmd –reload
firewall-cmd –zone=haast –permanent –add-source=192.168.0.10/32
firewall-cmd –zone=haast –permanent –add-source=192.168.0.11/32
firewall-cmd –zone=haast –permanent –add-port=3001/tcp
firewall-cmd –zone=haast –permanent –add-port=3002/tcp
firewall-cmd –zone=haast –permanent –add-port=873/tcp
firewall-cmd –zone=haast –permanent –add-port=3306/tcp
If you want to know exactly what the above does, here is a line-by-line description:
- Create a new firewall zone called “haast” and make it permanent (survive the next reboot)
- Add the local IP address as a trusted source in zone haast
- Add the remote IP address as a trusted source in zone haast
- Add the port 3001 (HAAst telnet interface) as accessible from the trusted sources
- Add the port 3002 (HAAst peerlinkinterface) as accessible from the trusted sources
- Add the port 873 (sync) as accessible from the trusted sources
- Add the port 3306 (sync) as accessible from the trusted sources
Other users reading this post must consider their network topology and adjust the above to fit their needs. For example, if you setting up a firewall BETWEEN nodes, or IN FRONT of nodes, or ON the nodes.
As well, if you use our subscription service you must ensure TCP port 443 (outbound) is open from each node.
in reply to: AstDB database is locked error #6844The error you are seeing in the Asterisk CLI is due to an app not properly handling concurrent use of the AstDB (SQLite 3 database). When synchronizing the AstDB HAAst will briefly lock the database (with a SQL lock), at which point apps should queue their commands until the lock is released.
Most properly designed apps respect concurrency by checking for the lock, then either blocking or retrying for a period of time, to acquire the lock. An overly simplistic application might not check for a lock, and simply report an error (“database is locked”) following an attempt to write. We have seen this error before with FreePBX and a couple of open source Asterisk add ons.
Although the proper solution involves asking the app developer to correct their code, we realize that some developers have no interest in doing so (or become hostile if you suggest anything is wrong with their code). So until the developer in question fixes their code, we do offer a workaround.
Create an Asterisk pre-start event handler (/usr/local/haast/events/asterisk.start.pre) in HAAst containing the following code:
#!/bin/bash
sqlite3 /var/lib/asterisk/astdb.sqlite3 “PRAGMA journal_mode=wal”;
This will enable the “WAL” feature of SQLite3 – which effectively prevents reader and writer processes from locking each other out of the database. You can also issue this command from any bash prompt and you should see the response “wal”. If you don’t see this respnose, repeat the command every 10 seconds until “wal” is returned. (The command can fail if the database is already locked).
in reply to: VirtualBox with USB Dongle #6842To attach the USB Dongle to the virtual machine running the Telium software:
- Optional: install the free VirtualBox Extension Pack to take advantage of USB 3.0
- Start your virtual machine
- Plug the USB Dongle into a USB port of your host computer
- In VirtualBox click on Devices -> USB, then click on ‘USB device to share’.
Once VirtualBox configures the USB connection, the USB Dongle will appear in your guest OS. Issue the commands ‘lsusb’ from a command prompt to confirm the USB dongle is visible. (Probably reports as ‘Philips Elite’)
If you would prefer to connect to the dongle on a separate/shared device you can read more here
-
This reply was modified 5 years, 3 months ago by
WebMaster.
in reply to: How do I get my license? #6840You can download the products directly from our website (without the need for a key/link). The “Free” edition you can download directly actually turns into the “Commercial” edition once you add a license file.
You can request your license files at any time, after you have installed the product. Once the product is installed and running, you must telnet to the built-in telnet server and there you must enter the command “license request”.
Answer the questions presented on screen, and then send the resulting license request file to support@telium.io (you will see more instructions on the telnet screen). In response you will get a license file (and optionally a USB dongle depending on the activation options you chose onscreen) from the Telium support team.
For more information on activation options see
in reply to: How do I get my license? #6841You can download the products directly from our website (without the need for a key/link). The “Free” edition you can download directly actually turns into the “Commercial” edition once you add a license file.
You can request your license files at any time, after you have installed the product. Once the product is installed and running, you must telnet to the built-in telnet server and there you must enter the command “license request”.
Answer the questions presented on screen, and then send the resulting license request file to support@telium.io (you will see more instructions on the telnet screen). In response you will get a license file (and optionally a USB dongle depending on the activation options you chose onscreen) from the Telium support team.
For more information on activation options see
Yes you can! Like your other syncjobs, setup a new syncjob which requires the remotestate be ‘asterisk running’, localstate as ‘asterisk stopped’. Then set the syncjob to sync a single file:
/tmp/secast.state
Your tertiary PBX will always pull the latest security data from the active PBX. And if the tertiary promotes, there is no risk overwriting the local security data because of the localstate requirement.
in reply to: Sync not working after upgrade #6811HAAst version 2.5.0 contains a number of significant changes, including changes to config files. For example:
- Sync job config files have been renamed XXX.syncjob.conf
- Event handlers have been renamed SYNCJOBID.EVENT.TIMING (eg: asterisk.start.post, or mysyncjob.stop.post)
- Main config file keys have been renamed (eg: friendlyhostname)
You need to rename your event handlers accordingly, and check the sample haast.conf file to ensure you are using new key names.
PBXSync is designed to handle a mix of internal and external hosts. When you setup your pbxsync.conf file, you will notice that the rsync and MySQL IP address entries allow for up to 3 IP addresses. These three addresses represent:
- Public IP – this is the IP address that PBXSync will publish to other PBXSync hosts not on your local subnet.
- Private IP – this is the IP address that PBXSync will publish to other PBXSync hosts on your local subnet.
- Local IP – this is the IP address that PBXSync uses when connecting to itself.
So for the Public IP use the IP address of your firewall, and for your Private IP use the internal (non-routable) IP address of an internal host. The local IP should probably be set to ‘localhostipv4’. Also be sure to set the localsubnets setting to match your internal network(s).
Next, on your firewall setup porting mapping from the public IP address to the internal private IP addresses & port. After that the external host will be able to reach the internal host as well.
in reply to: Selecting a configuration generator #14148HAAst sits between the OS and Asterisk, while the configuration generator (the pretty GUI that creates config files) sits above Asterisk. For that reason HAAst is compatible with a wide range of configuration generators.
One noteworthy difference between configuration generators is the database they use to hold their configuration data. While HAAst can sync many different database management systems, from our experience MySQL is most popular in critical/commercial implementations of Asterisk.
The demand for supporting other database is so low that we have already begun deprecating support for other databases. If you are purchasing a large number of licenses (e.g. under the OEM or ITSP program) we are happy to re-institute support for a particular database – but please contact our sales or support group to discuss your needs.
If you aren’t sure which configuration generator is right for you, have a look at some feedback from customers: Configuration Generator Comparison
in reply to: HAAst can’t login to Asterisk #6827In some (particularly recent) Asterisk versions quotes are considered just another character in the value of a setting. So
Quote:
secret=ABCand
Quote:
secret=”ABC”are different. Please remove quotes the credential setting values in your Asterisk /etc/asterisk/manager.conf file and restart the HAAst services.
in reply to: Errors / warnings after sync #6834Some additional exit codes and their causes:
255 – Likely a connection problem to the remote host. Check the IP address / fqdn of the remote host
23 – Error during transfer. Check the file/directory being synced really exists on the source.in reply to: Errors / warnings after sync #6826A summary of common exit codes and their causes:
- 255 – Likely a connection problem to the remote host. You should be able to resolve this by checking the IP address / fqdn of the remote host.
- 107 – Protocol error or unexpected response. You may have to work with Telium support to trace the cause (if this is intermittent then diagnosing can require many steps)
- 23 – Error during transfer. You should be able to resolve this by checking the file/directory being synced really exists on the source.
- 10 – RSync server unreachable. You should check the ensure the RSync service is running on the remote host, and that the remote host is reachable.
- 5 – RSync file permissions error. You should check to ensure rsync config files holding passwords are mode 600.
The HAAst installation guide provides guidance on how to enable debugging to capture more information. The specific settings, and location of log files, varies by HAAst version. If you need further help capturing and understanding debug information please contact Telium support (you will need an active maintenance agreement for the support team to assist you)
in reply to: Errors / warnings after sync #6833The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the PBXSync detailed installation guide.
I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.pbxsync.secret file has the wrong permissions. Please modify the permissions of this file as follows:
Quote:
chmod 600 /etc/ rsync.pbxsync.secretAfter that your sync should work.
in reply to: Errors / warnings after sync #6824The first error means that the rsync process is not running. Please ensure rsync is installed, running, enabled, and configured as per the HAAst detailed installation guide.
I suspect that you actually solved the first error, since the second error means that rsync is running! But, the second error means that the rsync.haast.secret file has the wrong permissions. Please modify the permissions of this file as follows:
Quote:
chmod 600 /etc/ rsync.haast.secret
After that your sync should work.
in reply to: Thank you! What a team #6823I’ve passed along your thanks to the entire account team. We think we have a pretty exceptional group of people here, and its great to hear our customers feel the same way.
BTW Steve is our CTO, and he really knows his stuff. Steve is personally involved in every large project, and also does quality reviews of smaller projects as well. Given the size of your project Steve (and lots of behind the scenes team members) gave the project lots of attention.
The account manager will follow up by phone as well, we’d appreciate a testimonial for the Telium website.
-
AuthorPosts