Re: [asterisk-users] Asterisk Server Down
Thanks everyone it is working now. -- Original message -- From: Tzafrir Cohen <[EMAIL PROTECTED]> > On Sun, Sep 17, 2006 at 10:40:16AM -0400, Steve Totaro wrote: > > > >you're right, one should proof, under which user asterisk runs... > > >Besides security reasons, running asterisk as root, doesn't it allow a > > >higher prioritization of asterisk processes? > > This is why we let asterisk setuid itself to user asterisk, and don't > let the wrappr script handle that. Asterisk sets scheduling priority > before running setuid/setgid . > > > I can see a problem with security issues but is it a bad thing to allow > > higher priority of the asterisk process? Not sure that it does anyways, > > but I don't see how that is a bad thing? > > It can help the qu ality of Audio. On the downside, it means that a 100% > CPU loop in asterisk is a pain to recover from. Security implications: > if someone can inject you one line to the dialpan, they can (under the > right circumstances) get your system stuck very badly . Unless you have > a manager connection availble. > > -- > Tzafrir Cohen sip:[EMAIL PROTECTED] > icq#16849755 iax:[EMAIL PROTECTED] > +972-50-7952406 jabber:[EMAIL PROTECTED] > [EMAIL PROTECTED] http://www.xorcom.com > ___ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Asterisk Server Down
On Sun, Sep 17, 2006 at 10:40:16AM -0400, Steve Totaro wrote: > >you're right, one should proof, under which user asterisk runs... > >Besides security reasons, running asterisk as root, doesn't it allow a > >higher prioritization of asterisk processes? This is why we let asterisk setuid itself to user asterisk, and don't let the wrappr script handle that. Asterisk sets scheduling priority before running setuid/setgid . > I can see a problem with security issues but is it a bad thing to allow > higher priority of the asterisk process? Not sure that it does anyways, > but I don't see how that is a bad thing? It can help the quality of Audio. On the downside, it means that a 100% CPU loop in asterisk is a pain to recover from. Security implications: if someone can inject you one line to the dialpan, they can (under the right circumstances) get your system stuck very badly . Unless you have a manager connection availble. -- Tzafrir Cohen sip:[EMAIL PROTECTED] icq#16849755 iax:[EMAIL PROTECTED] +972-50-7952406 jabber:[EMAIL PROTECTED] [EMAIL PROTECTED] http://www.xorcom.com ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Asterisk Server Down
Guido Hecken wrote: -Ursprüngliche Nachricht- Von: Tzafrir Cohen [mailto:[EMAIL PROTECTED] Gesendet: Sonntag, 17. September 2006 15:56 An: asterisk-users@lists.digium.com Betreff: Re: [asterisk-users] Asterisk Server Down On Sun, Sep 17, 2006 at 03:54:46PM +0200, Guido Hecken wrote: Hi, obviously asterisk doesn't start with the installed(?) start script. Try to start it manually and watch the cli for informations with asterisk -vvvc One warning: if your system is normally configured to run as non-root, this may cause it to write some fiels as root, and not start properly next time you start it with the standard script. With the Debian packages, use: /etc/init.d/asterisk debug Which is normally just a glorified: asterisk -U asterisk -vv Tzafrir, you're right, one should proof, under which user asterisk runs... Besides security reasons, running asterisk as root, doesn't it allow a higher prioritization of asterisk processes? Guido I can see a problem with security issues but is it a bad thing to allow higher priority of the asterisk process? Not sure that it does anyways, but I don't see how that is a bad thing? ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [asterisk-users] Asterisk Server Down
> -Ursprüngliche Nachricht- > Von: Tzafrir Cohen [mailto:[EMAIL PROTECTED] > Gesendet: Sonntag, 17. September 2006 15:56 > An: asterisk-users@lists.digium.com > Betreff: Re: [asterisk-users] Asterisk Server Down > > On Sun, Sep 17, 2006 at 03:54:46PM +0200, Guido Hecken wrote: > > Hi, > > > > obviously asterisk doesn't start with the installed(?) start script. > > Try to start it manually and watch the cli for informations with > > asterisk -vvvc > > One warning: if your system is normally configured to run as non-root, > this may cause it to write some fiels as root, and not start properly > next time you start it with the standard script. > > With the Debian packages, use: > > /etc/init.d/asterisk debug > > Which is normally just a glorified: > > asterisk -U asterisk -vv Tzafrir, you're right, one should proof, under which user asterisk runs... Besides security reasons, running asterisk as root, doesn't it allow a higher prioritization of asterisk processes? Guido ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Asterisk Server Down
On Sun, Sep 17, 2006 at 03:54:46PM +0200, Guido Hecken wrote: > Hi, > > obviously asterisk doesn't start with the installed(?) start script. > Try to start it manually and watch the cli for informations with > asterisk -vvvc One warning: if your system is normally configured to run as non-root, this may cause it to write some fiels as root, and not start properly next time you start it with the standard script. With the Debian packages, use: /etc/init.d/asterisk debug Which is normally just a glorified: asterisk -U asterisk -vv -- Tzafrir Cohen sip:[EMAIL PROTECTED] icq#16849755 iax:[EMAIL PROTECTED] +972-50-7952406 jabber:[EMAIL PROTECTED] [EMAIL PROTECTED] http://www.xorcom.com ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
RE: [asterisk-users] Asterisk Server Down
Hi, obviously asterisk doesn't start with the installed(?) start script. Try to start it manually and watch the cli for informations with asterisk -vvvc AFAIK a make config in the asterisk source should install the start script for your system. Hope it helps... Guido Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Gesendet: Sonntag, 17. September 2006 15:27 An: asterisk-users@lists.digium.com Betreff: [asterisk-users] Asterisk Server Down I rebooted the server on which the Asterisk is hosted on. The * did not come back up and I get this message when I attempt to use CLI [EMAIL PROTECTED] ~]# asterisk -r Unable to connect to remote asterisk (does /var/run/asterisk.ctl exist?) ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Asterisk Server Down
[EMAIL PROTECTED] schrieb: I rebooted the server on which the Asterisk is hosted on. The * did not come back up and I get this message when I attempt to use CLI [EMAIL PROTECTED] ~]# asterisk -r Unable to connect to remote asterisk (does /var/run/asterisk.ctl exist?) Did you configure your server in /etc/rc?.d/, that it sould start after reboot? Tools: rcconf (debian) chkconfig (fedora,redhat) What does /var/log/asterisk say? ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
