Hi Matt, The solution to re-provision a pool works and I get correct domain name in SIP URIs. Thanks a lot.
BR, Le From: Matt Williams <[email protected]> Date: Thursday 28 January 2016 at 22:01 To: Le Wang <[email protected]> Cc: "[email protected]" <[email protected]> Subject: RE: [Clearwater] [Homestead]No cached av found in impi Le, A colleague has just pointed out that you might have hit this scenario without ever having configured cw-ngv.com - https://github.com/Metaswitch/ellis/issues/155 covers a bug where you could create numbers before the correct configuration has been applied. Either way, following the process below should resolve the problem - please let me know how you get on! Thanks, Matt -- Matt Williams Lead Architect, Project Clearwater +44 (0) 20 8366 1177 From: Matt Williams Sent: 28 January 2016 17:56 To: 'Le Wang L' <[email protected]> Cc: [email protected] Subject: RE: [Clearwater] [Homestead]No cached av found in impi Le, Is there a chance you'd previously configured Clearwater with a home_domain of cw-ngv.com? As part of installing Ellis, you create a pool of SIP URIs for it to allocate. These SIP URIs include the home_domain that was configured at the time. To change this, · using the Ellis UI, delete any subscribers you've already created · on the Ellis command line, run 'echo "DELETE FROM ellis.numbers WHERE owner_id IS NULL ;" | sudo mysql' to delete all numbers from the pool · follow http://clearwater.readthedocs.org/en/stable/Manual_Install/index.html#provis ion-telephone-numbers-in-ellis to provision a new pool. You can run 'echo "SELECT number FROM ellis.numbers ; " | sudo mysql' on the Ellis command line to list all the SIP URIs in the pool, and check that they are in the correct home domain. I hope that helps - please let me know. Thanks, Matt -- Matt Williams Lead Architect, Project Clearwater +44 (0) 20 8366 1177 From: Le Wang L [mailto:[email protected]] Sent: 28 January 2016 17:48 To: Matt Williams <[email protected]> Cc: [email protected] Subject: Re: [Clearwater] [Homestead]No cached av found in impi Hi Matt, I have Clearwater installed on different nodes, not All-In-One. The home_domain name is set to ³example.com² in /etc/clearwater/share_config. ³ # Deployment definitions home_domain=example.com sprout_hostname=sprout.example.com hs_hostname=hs.example.com:8888 hs_provisioning_hostname=hs.example.com:8889 ralf_hostname=ralf.example.com:10888 xdms_hostname=homer.example.com:7888 # Email server configuration smtp_smarthost=localhost smtp_username=username smtp_password=password [email protected] # Keys signup_key=secret turn_workaround=secret ellis_api_key=secret ellis_cookie_key=secret ² I also run the sudo service clearwater-infrastructure restart¹ then sudo service ellis stop¹ commands. However, Ellis is still using cw-ngv.com¹ as the default value for the domain. But, somehow, Ellis still sends cw-ngv.com to Homestead, as you can see in this log. And Ellis GUI generates Private Identity like ³[email protected]² not ³[email protected]². It feels the setting does not apply to Ellis for some reasons. 28-01-2016 17:13:47.230 UTC INFO base.py:269: Sending 200 response to localhost for PUT http://http_homestead_prov/irs/b736051d-b518-4f5b-8875-28aa6037d2a0/service_ profiles/3a82d92e-3fab-44de-ab32-14a29896b22b/public_ids/sip%3A6505550111%40 cw-ngv.com BR, Le From: Matt Williams <[email protected]> Date: Thursday 28 January 2016 at 18:49 To: Le Wang <[email protected]> Cc: "[email protected]" <[email protected]> Subject: RE: [Clearwater] [Homestead]No cached av found in impi Le, Thanks for your email. What do you have home_domain set to in /etc/clearwater/shared_config? This determines the domain name of the SIP URIs (IMPUs) and authentication usernames (IMPIs) that we'd expect to see. (If you installed from an all-in-one image, this defaults to example.com. If you created your own deployment, you'd have set it during install.) Please let me know. Thanks, Matt -- Matt Williams Lead Architect, Project Clearwater +44 (0) 20 8366 1177 From: Clearwater [mailto:[email protected]] On Behalf Of Le Wang L Sent: 28 January 2016 16:12 To: [email protected] Subject: [Clearwater] [Homestead]No cached av found in impi Hi, I am having issues with manual Clearwater installation. The log on Homestead node shows that > > 28-01-2016 14:00:05.612 UTC Warning (Net-SNMP): Warning: Failed to connect to > the agentx master agent ([NIL]): > 28-01-2016 14:00:12.138 UTC Verbose httpstack.cpp:286: Process request for URL > /impi/6505550009%40example.com/av, args impu=sip%3A6505550009%40example.com > 28-01-2016 14:00:12.138 UTC Debug handlers.cpp:148: Parsed HTTP request: > private ID [email protected], public ID sip:[email protected], > scheme Unknown, authorization > 28-01-2016 14:00:12.138 UTC Debug handlers.cpp:174: Querying cache for > authentication vector for [email protected]/sip:[email protected] > 28-01-2016 14:00:12.138 UTC Debug cassandra_store.cpp:284: Getting > thread-local Client > 28-01-2016 14:00:12.138 UTC Debug cassandra_store.cpp:289: No thread-local > Client - creating one > 28-01-2016 14:00:12.139 UTC Debug cache.cpp:673: Looking for authentication > vector for [email protected] > 28-01-2016 14:00:12.139 UTC Debug cache.cpp:686: Checking public ID > sip:[email protected] > 28-01-2016 14:00:12.139 UTC Debug cache.cpp:696: Issuing cache query > 28-01-2016 14:00:12.140 UTC Debug cassandra_store.cpp:724: Failed TWO read for > get_columns. Try ONE > 28-01-2016 14:00:12.142 UTC Debug communicationmonitor.cpp:82: Checking > communication changes - successful attempts 2, failures 0 > 28-01-2016 14:00:12.142 UTC Debug cassandra_store.cpp:437: Cassandra request > failed: rc=2, Row [email protected] not present in > column_family impi > 28-01-2016 14:00:12.142 UTC Debug handlers.cpp:203: Cache query failed - > reject request > 28-01-2016 14:00:12.142 UTC Debug handlers.cpp:208: No cached av found for > private ID [email protected], public ID sip:[email protected] - > reject > 28-01-2016 14:00:12.142 UTC Verbose httpstack.cpp:69: Sending response 404 to > request for URL /impi/6505550009%40example.com/av, args > impu=sip%3A6505550009%40example.com >From the database, I can see that there is no ** [email protected]** entry but only ** [email protected]** entry there. This basically causes the authentication failed and returns me 403 Forbidden when my SIP client tries to register. `cqlsh:homestead_cache> select * from impi; private_id | digest_ha1 | digest_qop | digest_realm | known_preferred ------------------------+----------------------------------+------------+--- -----------+----------------- [email protected] | 94f3913dcd98b380d3eed0e684a6b070 | auth | cw-ngv.com | True Could someone help to point out where I did wrong or there is an issue? Is there any solution/work-around, e.g adding entries into database manually? Which table I need to update besides impi? Thanks. BR, Le
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Clearwater mailing list [email protected] http://lists.projectclearwater.org/mailman/listinfo/clearwater_lists.projectclearwater.org
