[OpenSIPS-Users] Fwd: opensips 1.11.5 error opening new ssl connections with postgres
Iñigo Belamendia
ibelamendia at enigmedia.es
Mon Sep 21 14:23:17 CEST 2015
Sorry by resending messages, but they still reach empty or with few
lines....
Hi,
I sent this mail last week but for some reason I see it reached as an
empty message.... so I will add some new information here.
Last monday (Sep 14) our OpenSIPS (1.11.5) went done after a restart.
The process starts but after few seconds (10") it goes down. That day we
did an apt-get update & apt-get upgrade and libpq5 package was upgraded.
A downgrade to previous version fixes the issue. All other apps against
Postgres in our organization work correctly. We have open a bug report
in Debian's bur reporting system [1].
In log we can see some access to database (Postgres), but after some
queries it refuses new queries execution. An error message appears in
log saying there's no authorization line in pg_hba.conf:
Sep 15 12:03:27 server01 opensips[17471]:
ERROR:db_postgres:db_postgres_new_connection: SSL error: called a
function you should not call#012FATAL: no hay una l?nea en
pg_hba.conf para <<192.168.1.119>>, usuario <<username>>, base de
datos <<opensips>>, SSL inactivo#012
And it's true, theres no SSL-inactive auth line, but it is for SSL
(ip, username and password have been double checked). In attached log
file completed queries can be seen.
This issue happened in two different environments after a system
update (apt-get update && apt-get upgrade) and a service restart
(service opensips restart). Before each upgrade a disk snapshot is
taken but a restore from these snapshots (opensips and postgres)
doesn't fix the issue.
Queries executed [with psql] from console in OpenSIPS machine run ok.
Adding no-ssl auth into pg_hba.conf OpenSIPS starts ok.
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=799663
-------------- next part --------------
A non-text attachment was scrubbed...
Name: opensips.log.tgz
Type: application/x-compressed-tar
Size: 16213 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20150921/ca78dae7/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postgres.log.tgz
Type: application/x-compressed-tar
Size: 1112 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20150921/ca78dae7/attachment-0003.bin>
-------------- next part --------------
root at server01:~# uname -a
Linux server01 3.2.0-4-amd64 #1 SMP Debian 3.2.68-1+deb7u3 x86_64 GNU/Linux
root at server01:~# dpkg --list 'opensips*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre Versión Arquitectura Descripción
+++-======================================================================-========================================-========================================-=====================================================================
ii opensips 1.11.5-1 amd64 very fast and configurable SIP server
un opensips-b2bua-module <ninguna> (no hay ninguna descripción disponible)
un opensips-berkeley-module <ninguna> (no hay ninguna descripción disponible)
un opensips-carrierroute-module <ninguna> (no hay ninguna descripción disponible)
un opensips-console <ninguna> (no hay ninguna descripción disponible)
un opensips-cpl-module <ninguna> (no hay ninguna descripción disponible)
un opensips-dbhttp-module <ninguna> (no hay ninguna descripción disponible)
un opensips-dialplan-module <ninguna> (no hay ninguna descripción disponible)
un opensips-geoip-module <ninguna> (no hay ninguna descripción disponible)
un opensips-http-modules <ninguna> (no hay ninguna descripción disponible)
un opensips-identity-module <ninguna> (no hay ninguna descripción disponible)
un opensips-jabber-module <ninguna> (no hay ninguna descripción disponible)
un opensips-json-module <ninguna> (no hay ninguna descripción disponible)
ii opensips-ldap-modules 1.11.5-1 amd64 LDAP modules for OpenSIPS
un opensips-lua-module <ninguna> (no hay ninguna descripción disponible)
un opensips-memcached-module <ninguna> (no hay ninguna descripción disponible)
un opensips-mysql-module <ninguna> (no hay ninguna descripción disponible)
un opensips-perl-modules <ninguna> (no hay ninguna descripción disponible)
ii opensips-postgres-module 1.11.5-1 amd64 PostgreSQL database connectivity module for OpenSIPS
ii opensips-presence-modules 1.11.5-1 amd64 SIMPLE presence modules for OpenSIPS
un opensips-rabbitmq-module <ninguna> (no hay ninguna descripción disponible)
un opensips-radius-modules <ninguna> (no hay ninguna descripción disponible)
un opensips-redis-module <ninguna> (no hay ninguna descripción disponible)
ii opensips-regex-module 1.11.5-1 amd64 PCRE regexp modules for OpenSIPS
un opensips-snmpstats-module <ninguna> (no hay ninguna descripción disponible)
un opensips-unixodbc-module <ninguna> (no hay ninguna descripción disponible)
un opensips-xmlrpc-module <ninguna> (no hay ninguna descripción disponible)
un opensips-xmpp-module <ninguna> (no hay ninguna descripción disponible)
root at server01:~# dpkg --list 'postgres*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre Versión Arquitectura Descripción
+++-======================================================================-========================================-========================================-===============================================================================
un postgresql <ninguna> (no hay ninguna descripción disponible)
un postgresql-9.1 <ninguna> (no hay ninguna descripción disponible)
ii postgresql-client 9.1+134wheezy4 all front-end programs for PostgreSQL (supported version)
ii postgresql-client-9.1 9.1.18-0+deb7u1 amd64 front-end programs for PostgreSQL 9.1
ii postgresql-client-common 134wheezy4 all manager for multiple PostgreSQL client versions
un postgresql-common <ninguna> (no hay ninguna descripción disponible)
un postgresql-doc-9.1 <ninguna> (no hay ninguna descripción disponible)
# dpkg --list 'libpq*'
Deseado=Desconocido/Instalar/Eliminar/Purgar/Retener
| Estado=No/Instalado/Config-files/Desempaquetado/Medio-conf/Medio-inst/espera-disparo/pendiente-disparo
|/ Err?=(ninguno)/Requiere-reinst (Estado,Err: mayúsc.=malo)
||/ Nombre Versión Arquitectura Descripción
+++-==============================================-============================-============================-==================================================================================================
ii libpq5 9.1.18-0+deb7u1 amd64 PostgreSQL C client library
More information about the Users
mailing list