Beeton, Carolyn (Carolyn) wrote:
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of
Laurentiu Ceausescu
I'm working on http://track.sipfoundry.org/browse/XX-7845 "HA
Alarms: Unable to get Alarms from distributed till it is rebooted".
I made a patch
(http://track.sipfoundry.org/secure/attachment/25143/0001-XX-7
845-HA-Alarms-Unable-to-get-Alarms-from-distr.patch)
how Carolyn suggested ("reloadAlarms must be sent to all the
systems to which alarm files were replicated"), but I have a
problem when this command is sent to the secondary server ...
Looks like a certificate issue.
Looking in sipxsupervisor.log from secondary I have ...
"2010-03-25T08:14:48.796964Z":10778:XMLRPC:INFO:toor.itcnetwor
ks.ro:HttpServer-3:B74DEB90:Supervisor:"XmlRpcDispatch::proces
sRequest requestBody = \n<?xml
version=\"1.0\"?><methodCall><methodName>Alarm.reloadAlarms</m
ethodName><params><param><value>laurentiu.itcnetworks.ro</valu
e></param></params></methodCall>"
"2010-03-25T08:14:48.797064Z":10779:ALARM:ERR:toor.itcnetworks
.ro:HttpServer-3:B74DEB90:Supervisor:"Alarm.reloadAlarms
failed: 'laurentiu.itcnetworks.ro' failed SSL authentication"
and in sipxconfig.log ...
"2010-03-25T08:14:48.746000Z":2137:JAVA:INFO:toor.itcnetworks.
ro:background:00000000:XmlRpcClientInterceptor:"XML/RPC
Alarm.reloadAlarms with [toor.itcnetworks.ro] on
https://toor.itcnetworks.ro:8092/RPC2";
"2010-03-25T08:14:48.780000Z":2138:JAVA:INFO:toor.itcnetworks.
ro:background:00000000:XmlRpcClientInterceptor:"XML/RPC
Alarm.reloadAlarms with [laurentiu.itcnetworks.ro] on
https://toor.itcnetworks.ro:8092/RPC2";
"2010-03-25T08:14:48.797000Z":2139:JAVA:ERR:toor.itcnetworks.r
o:pool-939-thread-1:00000000:XmlRpcClientInterceptor:"XML/RPC error: "
org.apache.xmlrpc.XmlRpcException: TLS Peer Authentication Failure
at
org.apache.xmlrpc.XmlRpcClientResponseProcessor.decodeExceptio
n(XmlRpcClientResponseProcessor.java:102)
Note that 'toor' is the master and 'laurentiu' is the
secondary server.
My question is if there is something wrong with my HA
configuration or it's a problem with my patch.
Any suggestion is welcome.
Thanks,
Laurentiu
It does look like a certificate problem.
sipXconfig uses xmlrpc to do a lot of things via the supervisor. Do these other things work on the secondary server? (e.g. restart a service on the secondary box, retrieve alarms from the secondary box, etc)
Yes ... I can restart any service on the secondary server, except SIP
Proxy which is in 'Configuration test failed' state with the following
error:
* SIP route to SIPXCHANGE_DOMAIN_NAME 'toor.itcnetworks.ro' is not
to my IP address: 11.126.12.16
* See the installation guide on setting the DNS SRV records and
domain names
Please note that in my configuration, the primary server is
'toor.itcnetworks.ro' (11.126.12.10) and secondary server is
'laurentiu.itcnetworks.ro' (11.126.12.16).
Also I can successfully use the Snapshot page (this page uses xmlrpc).
The secondary server should have the CA of the master in /etc/sipxpbx/ssl/authorities. Does it (at the point that reloadAlarms is called...)?
Carolyn
I have this directory which contains master's certificate.
Thanks,
Laurentiu
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
