Le,

Is there a chance you'd previously configured Clearwater with a home_domain of 
cw-ngv.com?

As part of installing Ellis, you create a pool of SIP URIs for it to allocate.  
These SIP URIs include the home_domain that was configured at the time.  To 
change this,

*         using the Ellis UI, delete any subscribers you've already created

*         on the Ellis command line, run 'echo "DELETE FROM ellis.numbers WHERE 
owner_id IS NULL ;" | sudo mysql' to delete all numbers from the pool

*         follow 
http://clearwater.readthedocs.org/en/stable/Manual_Install/index.html#provision-telephone-numbers-in-ellis
 to provision a new pool.
You can run 'echo "SELECT number FROM ellis.numbers ; " | sudo mysql' on the 
Ellis command line to list all the SIP URIs in the pool, and check that they 
are in the correct home domain.

I hope that helps - please let me know.

Thanks,

Matt

--

Matt Williams
Lead Architect, Project Clearwater
+44 (0) 20 8366 1177

From: Le Wang L [mailto:[email protected]]
Sent: 28 January 2016 17:48
To: Matt Williams <[email protected]>
Cc: [email protected]
Subject: Re: [Clearwater] [Homestead]No cached av found in impi

Hi Matt,

I have Clearwater installed on different nodes, not All-In-One.

The home_domain name is set to "example.com" in /etc/clearwater/share_config.
"
# Deployment definitions

home_domain=example.com

sprout_hostname=sprout.example.com

hs_hostname=hs.example.com:8888

hs_provisioning_hostname=hs.example.com:8889

ralf_hostname=ralf.example.com:10888

xdms_hostname=homer.example.com:7888



# Email server configuration

smtp_smarthost=localhost

smtp_username=username

smtp_password=password

[email protected]<mailto:[email protected]>



# Keys

signup_key=secret

turn_workaround=secret

ellis_api_key=secret
ellis_cookie_key=secret
"

I also run  the 'sudo service clearwater-infrastructure restart' then 'sudo 
service ellis stop' commands. However, Ellis is still using 'cw-ngv.com' as the 
default value for the domain.

But, somehow, Ellis still sends cw-ngv.com to Homestead, as you can see in this 
log. And Ellis GUI generates Private Identity like 
"[email protected]<mailto:[email protected]>" not 
"[email protected]<mailto:[email protected]>". It feels the setting 
does not apply to Ellis for some reasons.


28-01-2016 17:13:47.230 UTC INFO base.py:269: Sending 200 response to localhost 
for PUT 
http://http_homestead_prov/irs/b736051d-b518-4f5b-8875-28aa6037d2a0/service_profiles/3a82d92e-3fab-44de-ab32-14a29896b22b/public_ids/sip%3A6505550111%40cw-ngv.com


BR,
Le

From: Matt Williams 
<[email protected]<mailto:[email protected]>>
Date: Thursday 28 January 2016 at 18:49
To: Le Wang <[email protected]<mailto:[email protected]>>
Cc: 
"[email protected]<mailto:[email protected]>"
 
<[email protected]<mailto:[email protected]>>
Subject: RE: [Clearwater] [Homestead]No cached av found in impi

Le,

Thanks for your email.

What do you have home_domain set to in /etc/clearwater/shared_config?  This 
determines the domain name of the SIP URIs (IMPUs) and authentication usernames 
(IMPIs) that we'd expect to see.

(If you installed from an all-in-one image, this defaults to example.com.  If 
you created your own deployment, you'd have set it during install.)

Please let me know.

Thanks,

Matt

--

Matt Williams
Lead Architect, Project Clearwater
+44 (0) 20 8366 1177

From: Clearwater [mailto:[email protected]] On 
Behalf Of Le Wang L
Sent: 28 January 2016 16:12
To: 
[email protected]<mailto:[email protected]>
Subject: [Clearwater] [Homestead]No cached av found in impi


Hi,

I am having issues with manual Clearwater installation.

The log on Homestead node shows that

28-01-2016 14:00:05.612 UTC Warning (Net-SNMP): Warning: Failed to connect to 
the agentx master agent ([NIL]):
28-01-2016 14:00:12.138 UTC Verbose httpstack.cpp:286: Process request for URL 
/impi/6505550009%40example.com/av, args impu=sip%3A6505550009%40example.com
28-01-2016 14:00:12.138 UTC Debug handlers.cpp:148: Parsed HTTP request: 
private ID [email protected]<mailto:[email protected]>, public ID 
sip:[email protected]<mailto:[email protected]>, scheme Unknown, 
authorization
28-01-2016 14:00:12.138 UTC Debug handlers.cpp:174: Querying cache for 
authentication vector for 
[email protected]<mailto:[email protected]>/sip:[email protected]<mailto:[email protected]>
28-01-2016 14:00:12.138 UTC Debug cassandra_store.cpp:284: Getting thread-local 
Client
28-01-2016 14:00:12.138 UTC Debug cassandra_store.cpp:289: No thread-local 
Client - creating one
28-01-2016 14:00:12.139 UTC Debug cache.cpp:673: Looking for authentication 
vector for [email protected]<mailto:[email protected]>
28-01-2016 14:00:12.139 UTC Debug cache.cpp:686: Checking public ID 
sip:[email protected]<mailto:[email protected]>
28-01-2016 14:00:12.139 UTC Debug cache.cpp:696: Issuing cache query
28-01-2016 14:00:12.140 UTC Debug cassandra_store.cpp:724: Failed TWO read for 
get_columns. Try ONE
28-01-2016 14:00:12.142 UTC Debug communicationmonitor.cpp:82: Checking 
communication changes - successful attempts 2, failures 0
28-01-2016 14:00:12.142 UTC Debug cassandra_store.cpp:437: Cassandra request 
failed: rc=2, Row [email protected]<mailto:[email protected]> not 
present in
column_family impi
28-01-2016 14:00:12.142 UTC Debug handlers.cpp:203: Cache query failed - reject 
request
28-01-2016 14:00:12.142 UTC Debug handlers.cpp:208: No cached av found for 
private ID [email protected]<mailto:[email protected]>, public ID 
sip:[email protected]<mailto:[email protected]> - reject
28-01-2016 14:00:12.142 UTC Verbose httpstack.cpp:69: Sending response 404 to 
request for URL /impi/6505550009%40example.com/av, args 
impu=sip%3A6505550009%40example.com

>From the database, I can see that there is no ** 
>[email protected]<mailto:[email protected]>** entry but only ** 
>[email protected]<mailto:[email protected]>** entry there. This 
>basically causes the authentication failed and returns me 403 Forbidden when 
>my SIP client tries to register.

`cqlsh:homestead_cache> select * from impi;

private_id | digest_ha1 | digest_qop | digest_realm | known_preferred
------------------------+----------------------------------+------------+--------------+-----------------
[email protected]<mailto:[email protected]> | 
94f3913dcd98b380d3eed0e684a6b070 | auth | cw-ngv.com | True

Could someone help to point out where I did wrong or there is an issue? Is 
there any solution/work-around, e.g adding entries into database manually? 
Which table I need to update besides impi?

Thanks.
BR,
Le
_______________________________________________
Clearwater mailing list
[email protected]
http://lists.projectclearwater.org/mailman/listinfo/clearwater_lists.projectclearwater.org

Reply via email to