On Fri, Aug 17, 2012 at 1:15 PM, <[email protected]> wrote:
> Hi George,
>
> I'm still struggling. The sipxecs-setup on the secondary still can't load
> the initialisation file.
> This is of course (when you look at it for the 6th time) just an https
> connection.
> I pasted
> https://10.12.48.43:8443/sipxconfig/initial-config/th.internal.epo.org.tar.gz
> in a browser and then I get a login box saying "the server 10.12.48.43:8443
> requires a username and password. The server says: th.internal.epo.org."
>
> Do you know what the userid and password should be (the password is probably
> the password from the "Add Server" menu?)
Right, the password is the one from Server page assigned to that
location, the username is fqdn of the location
> and why this transfer just won't start?
There is a problem with running initial-config script, please edit
/etc/sipxpbx/log4j.properties and change
log4j.logger.org.sipfoundry.sipxconfig=info
to
log4j.logger.org.sipfoundry.sipxconfig=debug
then restart config and try again. Then in sipxconfig.log the command
issued for generating archive will be displayed, something like:
Executing: initial-config {locationName}
George
>
> Invalid configuration returned from
> https://10.12.48.43:8443/sipxconfig/initial-config/th.internal.epo.org
> exception tarfile.ReadError
> file could not be opened successfully
> headers
> Date: Thu, 16 Aug 2012 23:46:38 GMT
> Server: Jetty/5.1.4 (Linux/2.6.18-238.19.1.el5 i386
> java/1.6.0_19^M
> Expires: 0^M
> Set-Cookie: JSESSIONID=2efdq0f0031sd;Path=/sipxconfig^M
> Cache-Control: must-revalidate, post-check=0, pre-check=0^M
> Pragma: public^M
> Content-Disposition: attachment;
> filename="th.internal.epo.org.tar.gz"^M
> Content-Type: text/html^M
> Content-Length: 1282^M
> Connection: close^M
>
>
> Best regards / Mit freundlichen Grüßen / Sincères salutations
>
> Paul Scheepens
> Administrator Network Engineering | Dir. 2.7.3.2
> European Patent Office
> Patentlaan 3-9 | 2288 EE Rijswijk | The Netherlands
> Tel. +31 (0)70 340 3331
> Mobile +31 (0)642724894
> [email protected]
> http://www.epo.org
>
>
> [email protected] wrote on 17-08-2012 10:29:19:
>
>> From:
>>
>> George Niculae <[email protected]>
>>
>> To:
>>
>> Discussion list for users of sipXecs software
>> <[email protected]>
>>
>> Date:
>>
>> 17-08-2012 10:29
>>
>> Subject:
>>
>> Re: [sipx-users] SipX not starting anymore.
>>
>> Sent by:
>>
>> [email protected]
>>
>> On Fri, Aug 17, 2012 at 11:06 AM, <[email protected]> wrote:
>> > Hi George, here it is.
>> >
>> > Seems OK but I don't know whether it needs/puts the (new or old) keys
>> > from
>> > the primary in the tar as well.
>> > In the /var/sipxdata/certdb are still the old primary keys that expired
>> > (gssipx02.internal.epo.org.crt).
>>
>> Ah, this seems to be the issue, how did you regenerate keys on
>> primary? That should be the correct procedure (noticed on step 2
>> deleting certdb as well):
>>
>> 1. stop all sipXecs services
>> 2. delete all files in
>> /etc/sipxpbx/ssl
>> /etc/sipxpbx/ssl/authorities
>> /var/sipxdata/certdb
>> 3. In directory /var/sipxdata/certdb
>> /usr/bin/ssl-cert/gen-ssl-keys.sh
>> chown sipxchange:sipxchange *
>> /usr/bin/ssl-cert/install-cert.sh
>> 4. start sipXecs services
>>
>> > In the /etc/sipxpbx/ssl directory is the new ssl.crt that is valid.
>> > If it packs gssipx02.internal.epo.org then it packs old stuff........
>> > .........checked the file, there are only valid certs for the ca and the
>> > box
>> > itself, file attached.
>> >
>> >
>> > Paul
>> >
>> > George Niculae <[email protected]> wrote on 17-08-2012 09:12:45:
>> >
>> >
>> >> > Hi George, still not ok...
>> >> >
>> >> > I deleted the contents of the first 2 directories on the secondaries.
>> >> > The /var/sipxdata/certdb only exists on the master.
>> >> > First I only deleted the certs of the secondaries there, no success,
>> >> > still
>> >> > error when sending profiles.
>> >> > Then I deleted (backed up) also the rest of the files, no success.
>> >> > The secondary could no longer download the tar.
>> >> > Then I copied the new ca files (found in the directory where the keys
>> >> > for
>> >> > the secondary were generated by me) into the certdb directory
>> >> > I had only 4 files instead of 5, the .der file was missing (crt, csr,
>> >> > ser
>> >> > and key are the others)
>> >> > Again tar not downloadable:
>> >> > Invalid configuration returned from
>> >> >
>> > https://10.12.48.43:8443/sipxconfig/initial-config/th.internal.epo.org
>> >
>> >> > exception tarfile.ReadError
>> >> > file could not be opened successfully
>> >> > headers
>> >> > Date: Thu, 16 Aug 2012 23:46:38 GMT
>> >> > Server: Jetty/5.1.4 (Linux/2.6.18-238.19.1.el5 i386
>> >> > java/1.6.0_19^M
>> >> > Expires: 0^M
>> >> > Set-Cookie: JSESSIONID=2efdq0f0031sd;Path=/sipxconfig^M
>> >> > Cache-Control: must-revalidate, post-check=0, pre-check=0^M
>> >> > Pragma: public^M
>> >> > Content-Disposition: attachment;
>> >> > filename="th.internal.epo.org.tar.gz"^M
>> >> > Content-Type: text/html^M
>> >> > Content-Length: 1282^M
>> >> > Connection: close^M
>> >> >
>> >> > #OK#
>> >> >
>> >> > Contact gssipx02.internal.epo.org
>> >> >
>> >> > I added sipxconfig.log again.
>> >> > If you have a suggestion then I would be happy.
>> >> >
>> >>
>> >> That's a problem with initial archive configuration could you manually
>> >> run
>> >>
>> >> /usr/libexec/sipXecs/initial-config {location.fqdn}
>> >>
>> >> and check output? (make sure that you don't have any space in
>> >> hostnames after re adding servers, you could hit
>> >> http://track.sipfoundry.org/browse/XX-10183
>> > )
>> >>
>> >> George
>> >
>> >> _______________________________________________
>> >> sipx-users mailing list
>> >> [email protected]
>> >> List Archive:
>> > http://list.sipfoundry.org/archive/sipx-users/
>> >
>> > _______________________________________________
>> > sipx-users mailing list
>> > [email protected]
>> > List Archive: http://list.sipfoundry.org/archive/sipx-users/
>> _______________________________________________
>> sipx-users mailing list
>> [email protected]
>> List Archive: http://list.sipfoundry.org/archive/sipx-users/
>
> _______________________________________________
> sipx-users mailing list
> [email protected]
> List Archive: http://list.sipfoundry.org/archive/sipx-users/
_______________________________________________
sipx-users mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users/
