Hi Daniel,<br>thank you very much for your quick reply. Yes I can connect to ldap and make search from kamailio if I start the kamailio with command line in a terminal ("# kamctl start" or "#kamailio") as root.It fail to connect to ldap only when I start it as service from the boot or I run the command "service kamailio start".<br>
<br>Best Regards,<br>Peng<br><br><br><br><div class="gmail_quote">On Tue, Jun 21, 2011 at 11:48 AM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com">miconda@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
the first error I could spot related to ldap is:<br>
<span lang="EN-US"><div class="im"><br>
Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8786]: ERROR: ldap
[ldap_connect.c:166]: [sipaccounts]: ldap bind failed: Can't
contact LDAP
server<br>
<br></div>
suggesting connectivity problem to ldap server. Is it running? Can
you connect to ldap server from a terminal?<br>
<br>
Cheers,<br>
Daniel<br>
<br>
</span><div><div></div><div class="h5"><br>
On 6/21/11 11:39 AM, laura testi wrote:
</div></div><blockquote type="cite"><div><div></div><div class="h5">Hi,<br>
we try to use LDAP module in kamailio, first we try only load the
ldap.so only to see if it can be loaded. When we start from the
command line with either "kamctl start" or directly "kamilio", the
kamailio is started normally with different children. When I try
to start as service with "service kamailio start" or
"/etc/init.d/kamailio start". It fails with the following error in
the /var/log/messages:<br>
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 kamailio: INFO: <core>
[tcp_main.c:4716]: init_tcp:
using epoll_lt as the io watch method (auto detected)</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: usrloc
[hslot.c:53]: locks
array size 512</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: auth
[auth_mod.c:312]:
auth: qop set, but nonce-count (nc_enabled) support disabled</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
permissions
[parse_config.c:251]: file not found:
//etc/kamailio/permissions.allow</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
permissions
[permissions.c:606]: default allow file
(//etc/kamailio/permissions.allow) not
found => empty rule set</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
permissions
[parse_config.c:251]: file not found:
//etc/kamailio/permissions.deny</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
permissions
[permissions.c:615]: default deny file
(//etc/kamailio/permissions.deny) not
found => empty rule set</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: ldap
[ldap_mod.c:246]:
OpenLDAP - 20343</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_init.c:511]: tls:
_init_tls_h:<span> </span>compiled<span> </span>with<span>
</span>openssl<span> </span>version
"OpenSSL
0.9.8e-fips-rhel5 01 Jul 2008" (0x0090802f), kerberos support:
on,
compression: on</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_init.c:519]: tls:
init_tls_h: installed openssl library version "OpenSSL
0.9.8e-fips-rhel5
01 Jul 2008" (0x0090802f), kerberos support: on,<span> </span>zlib compression: on<span> </span>compiler: gcc -fPIC
-DOPENSSL_PIC -DZLIB
-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-DKRB5_MIT
-I/usr/kerberos/include -DL_ENDIAN -DTERMIO -Wall
-DMD32_REG_T=int -O2 -g -pipe
-Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
--param=ssp-buffer-size=4 -m64 -mtune=generic
-Wa,--noexecstack
-DOPENSSL_USE_NEW_FUNCTIONS -fno-strict-aliasing
-DOPENSSL_BN_ASM_MONT
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_init.c:373]: tls:
init_tls: disabling compression...</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: WARNING: tls
[tls_init.c:564]:
tls: init_tls_h: openssl kerberos malloc bug detected,<span> </span>kerberos support will be
disabled...</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: WARNING: tls
[tls_init.c:587]:
tls: openssl bug #1491 (crash/mem leaks on low memory)
workaround enabled (on
low memory tls operations will fail preemptively) with free
memory thresholds
9961472 and 4980736 bytes</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[cfg/cfg_ctx.c:411]: INFO: cfg_set_now():
tls.low_mem_threshold1 has been
changed to 9961472</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:39 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[cfg/cfg_ctx.c:411]: INFO: cfg_set_now():
tls.low_mem_threshold2 has been
changed to 4980736</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[udp_server.c:178]: INFO: udp_init: SO_RCVBUF is initially
129024</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[udp_server.c:229]: INFO: udp_init: SO_RCVBUF is finally
262142</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[udp_server.c:178]: INFO: udp_init: SO_RCVBUF is initially
129024</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core>
[udp_server.c:229]: INFO: udp_init: SO_RCVBUF is finally
262142</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:176]:
TLSs<default>: tls_method=9</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:188]:
TLSs<default>:
certificate='//etc/kamailio/FBCIDS01V01.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:195]:
TLSs<default>: ca_list='//etc/kamailio/tiglobalca.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:202]:
TLSs<default>: crl='(null)'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:206]:
TLSs<default>: require_certificate=0</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:213]:
TLSs<default>: cipher_list='(null)'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:220]:
TLSs<default>:
private_key='//etc/kamailio/FBCIDS01V01KEY.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:224]:
TLSs<default>: verify_certificate=0</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:227]:
TLSs<default>: verify_depth=9</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:544]:
TLSs<default>: No client certificate required and no
checks performed</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:597]:
tls: set_ssl_options: detected openssl version (90802f)<span> </span>has the
SSL_OP_TLS_BLOCK_PADDING bug, but
compression<span> </span>is
disabled so no workaround
is needed</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:176]:
TLSc<default>: tls_method=9</span></p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:188]: TLSc<default>:
certificate='(null)'</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:195]: TLSc<default>: ca_list='(null)'</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:202]: TLSc<default>: crl='(null)'</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:206]: TLSc<default>:
require_certificate=0</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:213]: TLSc<default>:
cipher_list='(null)'</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:220]: TLSc<default>:
private_key='(null)'</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:224]: TLSc<default>:
verify_certificate=0</p>
<p class="MsoNormal">Jun 21 10:28:40 kamailio3p1
/usr/sbin/kamailio[8774]: INFO:
tls [tls_domain.c:227]: TLSc<default>: verify_depth=9</p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:547]:
TLSc<default>: Server MAY present invalid certificate</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:597]:
tls: set_ssl_options: detected openssl version (90802f)<span> </span>has the
SSL_OP_TLS_BLOCK_PADDING bug, but
compression<span> </span>is
disabled so no workaround
is needed</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:176]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
tls_method=12</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:188]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
certificate='//etc/kamailio/FBCIDS01V01.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:195]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
ca_list='//etc/kamailio/tiglobalca.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:202]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
crl='(null)'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:206]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
require_certificate=0</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:213]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
cipher_list='(null)'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:220]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
private_key='//etc/kamailio/FBCIDS01V01KEY.pem'</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:224]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
verify_certificate=0</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:40 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:227]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>:
verify_depth=9</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:544]:
TLSs<<a href="http://10.10.5.214:5061" target="_blank">10.10.5.214:5061</a>>: No
client certificate required and no checks
performed</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8774]: INFO: tls
[tls_domain.c:597]:
tls: set_ssl_options: detected openssl version (90802f)<span> </span>has the
SSL_OP_TLS_BLOCK_PADDING bug, but
compression<span> </span>is
disabled so no workaround
is needed</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8786]: ERROR: ldap
[ldap_connect.c:166]: [sipaccounts]: ldap bind failed: Can't
contact LDAP
server</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21 10:28:41
kamailio3p1 /usr/sbin/kamailio[8786]: ERROR: ldap
[ldap_mod.c:182]:
[sipaccounts]: failed to connect to LDAP host(s)</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8786]: ERROR:
<core>
[sr_module.c:832]: init_mod_child(): Error while initializing
module ldap
(/usr/lib64/kamailio/modules_k/ldap.so)</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8786]: ERROR:
<core> [pt.c:337]:
ERROR: fork_process(): init_child failed for<span>
</span>process 1, pid 8786, "udp receiver child=0
sock=<a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a>"</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8786]: : <core>
[main.c:1546]:
main_loop: Cannot fork</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8788]: ERROR: ldap
[ldap_connect.c:166]: [sipaccounts]: ldap bind failed: Can't
contact LDAP
server</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21 10:28:41
kamailio3p1 /usr/sbin/kamailio[8788]: ERROR: ldap
[ldap_mod.c:182]:
[sipaccounts]: failed to connect to LDAP host(s)</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8788]: ERROR:
<core>
[sr_module.c:832]: init_mod_child(): Error while initializing
module ldap
(/usr/lib64/kamailio/modules_k/ldap.so)</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8788]: ERROR:
<core> [pt.c:337]:
ERROR: fork_process(): init_child failed for<span>
</span>process 2, pid 8788, "udp receiver child=1
sock=<a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a>"</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8788]: : <core>
[main.c:1546]:
main_loop: Cannot fork</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8774]: ALERT:
<core>
[main.c:738]: child process 8786 exited normally, status=255</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8774]: ALERT:
<core>
[main.c:738]: child process 8788 exited normally, status=255</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8774]: INFO:
<core> [main.c:756]:
INFO: terminating due to SIGCHLD</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8801]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8799]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8797]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8795]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8793]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8790]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal"><span lang="EN-US">Jun 21
10:28:41 kamailio3p1 /usr/sbin/kamailio[8812]: INFO:
<core> [main.c:807]:
INFO: signal 15 received</span></p>
<p class="MsoNormal">Jun 21 10:28:41 kamailio3p1
/usr/sbin/kamailio[8808]: INFO:
<core> [main.c:807]: INFO: signal 15 received</p>
<p class="MsoNormal">Jun 21 10:28:41 kamailio3p1
/usr/sbin/kamailio[8810]: INFO:
<core> [main.c:807]: INFO: signal 15 received</p>
<p class="MsoNormal">Jun 21 10:28:41 kamailio3p1
/usr/sbin/kamailio[8814]: INFO:
<core> [main.c:807]: INFO: signal 15 received</p>
<p class="MsoNormal">Jun 21 10:28:41 kamailio3p1
/usr/sbin/kamailio[8816]: INFO:
<core> [main.c:807]: INFO: signal 15 received</p>
...<br>
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
<br>
Without ldap.so loaded, we can start the kamailio as a service
normally with "service kamailio start".<br>
The platform running kamailio is: RHEL5.6_X64<br>
<br>
<br>
Can you help us please? Because we want to start the kamailio as a
service from the boot <br>
<br>
<br>
Thanks a lot in advanced!<br>
<br>
<br>
Best Regards,<br>
Laura<br>
<br>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
sr-dev mailing list
<a href="mailto:sr-dev@lists.sip-router.org" target="_blank">sr-dev@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev</a>
</pre>
</blockquote>
<br>
<pre cols="72">--
Daniel-Constantin Mierla -- <a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a>
<a href="http://linkedin.com/in/miconda" target="_blank">http://linkedin.com/in/miconda</a> -- <a href="http://twitter.com/miconda" target="_blank">http://twitter.com/miconda</a></pre>
</div>
</blockquote></div><br>