Cannot download recordings

[Nelius]

Hi there.

I'm also a newbie here but I'll try to give more details as much as possible. We have two archive servers which are setup exactly the same (192.168.0.237 and 192.168.0.238). Our primary archive server which is 192.168.0.237 recently had issues booting up so we had to use our secondary archive server as primary till the other machine is sorted out. So we just changed 192.168.0.238 to 192.168.0.237. Recordings are writing just fine to the other server but users cannot download recordings. When trying to download recordings, users get :
"Object not found!
The requested URL was not found on this server. The link on the referring page seems to be wrong or outdated. Please inform the author of that page about the error.
If you think this is a server error, please contact the webmaster.
Error 404
192.168.0.237
Wed May 29 12:00:41 2013
Apache/2.2.21 (Linux/SUSE)

However, when using SCP clients to get to the server we can see all the recordings are there but we just cant play or download them.
Please help.

Thanks.

[williamconley]

scp uses the ssh protocol and ssh daemon to locate files. web servers use http protocol and the apache2 daemon (ie: web server) to locate files.

is apache running on the 2nd server? Is the web configuration the same as it was on the primary server? Are the files actually in the same place (you did not specify this, you just said you can see them ... not that they are in the same location).

[Nelius]

Hi William, thanks for replying.

Yes, the web configuration is the same as it was on the primary server and Apache is also enabled and running fine on the second machine. Please see below:

Service │Enabled│Description
│apache2 │Yes │Apache 2.2 HTTP Server
-------------------------------------------------------------
archive1:~ # rcapache2 status
redirecting to systemctl
apache2.service - apache
Loaded: loaded (/lib/systemd/system/apache2.service; enabled)
Active: active (running)

Recordings are all still in the same directory as they were on the primary server. As mentioned, the two machines were exactly identical. I really cannot understand why we are failing to just download or play them.

Thanks.

[okli]

How do you access recordings? Using direct links or links via ViciDial admin page?
How did you duplicate the files? Have you checked ownership and permissions to the recordings, are they the same?
Have you checked Apache log files for clues?

[DomeDan]

Whats your settings for:
Admin -> Servers -> "telephony server" ->
- Recording Web Link
- Alternate Recording Server IP
- External Server IP
- Active Twin Server IP

and

Admin -> System Settings ->
- Central Sound Control Active
- Sounds Web Server

also look around for other settings regarding sound/recording

[Nelius]

Hi there.

We access recordings via the Vicidial admin page. Our crons run every night so all files are copied over from the main archive server (192.168.0.237) to the backup archive server (192.168.0.238) Ownership and permissions are all the same. I have checked the apache logs for clues but can’t see anything weird that should be causing it. No changes were made on the admin pages. We had 2 archive servers working fine, one crashed and we just switched ip’s.

Thanks.

[okli]

We access recordings via the Vicidial admin page

Does the link there point to 192.168.0.237 or to 192.168.0.238?
Does the same happen if you try to access the file directly on the web server on 192.168.0.238?

[Nelius]

Hi.

The link points directly to 192.168.0.237. The other server (192.168.0.238) is only supposed to backup whatever is on 192.168.0.237. So what I don't understand is, while a recording is still on the dialers, it's playable and downloadable but as soon as it gets moved to the archive server, then it shows:

"Object not found!
The requested URL was not found on this server. The link on the referring page seems to be wrong or outdated. Please inform the author of that page about the error.
If you think this is a server error, please contact the webmaster.
Error 404
192.168.0.237
Tue Jun 4 12:18:34 2013
Apache/2.2.21 (Linux/SUSE)"

Thanks.

[DomeDan]

how do you move them to the archive server?
also post the data I asked about in a previous post

[Nelius]

Hi Domedan.

Please see below:

Recording web link = Server_IP
Alternate Recording Server IP = Nothing
External Server IP = Nothing
Active Twin Server IP = Nothing
Central Sound Control Active = 1
Sounds Web Server = 192.168.0.240

Recordings are sent to the first archive using crontab /usr/share/astguiclient/AST_CRON_audio_3_ftp.pl --MP3. Then they are also sent from the dialers to the second archive with crontab /usr/share/astguiclient/AST_CRON_audio_4_ftp2.pl --ftp-server=192.168.0.238 --ftp-login=cron --ftp-pass=test --ftp-dir=/home/archive/RECORDINGS

Thanks.

[DomeDan]

Ok, well I'm not very familiure with those scripts unfortiunally, but took a fast look into the scripts and found that AST_CRON_audio_4_ftp2.pl is not updating the location in the database.
so try to only use AST_CRON_audio_3_ftp.pl to move the files to the different archive server and look in the scripts and/or read about the archive process.

[Nelius]

Hi there.

We decided to re-install the backup archive server(192.168.0.238). Everything is writing fine to it but when trying to download or listen to recordings we get:

"Access forbidden!
You don't have permission to access the requested object. It is either read-protected or not readable by the server.
If you think this is a server error, please contact the webmaster.
Error 403
192.168.0.238
Thu Jun 6 15:32:05 2013
Apache/2.2.21 (Linux/SUSE)"

We can access everything just fine via an ftp client but not through the web server. We did try some of the suggestions like editing the .conf file etc but unfortunately the same "Access forbidden" message still comes up.

Thanks.

[DomeDan]

look in the error_log for the webserver you connect to, there might be more info there.

and we need more technical details.
post the exact link to a recording you can access, and the same with a recording you can not access.
post the content of /etc/apache2/conf.d/viciarchive.conf and /etc/apache2/conf.d/viciarchive.conf for both archive servers
post the directory structure for the directories that viciarchive.conf and viciarchive.conf points to.
post the directory structure for the directories you can access with ftp.

[Nelius]

Hi there.

Sorry for the delay, been trying everything we can think of and we are still not winning at all. 2 archive servers setup exactly the same but giving different issues.

Ok the following link points to our main archive. Clicking on the link just brings a "object not found" message but as mentioned earlier on this post , when following the exact path through scp clients the recordings are playable.
Below is an example of the link which points to our main archive (192.168.0.237)

http://192.168.0.237/archive/RECORDINGS ... xx-all.mp3.

Below is an example of the link which points to our backup archive (192.168.0.238)

http://192.168.0.238/archive/RECORDINGS ... xx-all.mp3

So 192.168.0.238 gives the following message:
"Access forbidden!
You don't have permission to access the requested object. It is either read-protected or not readable by the server".

Below is 192.168.0.237's "viciarchive.conf file".

Alias /archive/ "/home/archive/"
<Directory "/home/archive">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
<files *.mp3>
Forcetype application/forcedownload
</files>
</Directory>
.....................................................
Below is 192.168.0.238 "viciarchive.conf file"

Alias /archive/ "/home/archive/"

<Directory "/home/archive">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
<files *.mp3>
Forcetype application/forcedownload
</files>
</Directory>

Thanks.

[okli]

So 192.168.0.238 gives the following message:
"Access forbidden!
You don't have permission to access the requested object. It is either read-protected or not readable by the server".

Seems like time to check and fix permissions on those files/directories.

[DomeDan]

"Access forbidden!
You don't have permission to access the requested object. It is either read-protected or not readable by the server".

Good! progress!
do a "ls -l" on the archive directories and files, and compare with the first archive server
* ls -l /home/
* ls -l /home/archive
* ls -l /home/archive/2013-06-05/

might only need to change the permission on the directory,
if not then look at the ftp server settings (/etc/vsftpd.conf), the umask setting sets the file permission when it is ftp:ed, does it differ from the second server config?

[franklinsj]

Hi I had the same issue and what i set up a cron job in the archive server that changes permissions of folders and files every minute:
* * * * * /bin/chmod -R 775 /home/archive
it works for the time being but i'm pretty sure there is something else going on. Also i just realized that my db server, web server and archive server don't have anything in screen -list and crontab for those 3 servers is empty which might be causing keepalives from astguiclient.conf not to be activated in start up. I will be making changes on that tonight to see if that fixes my issue with recordings and some other stuff. Hope this helps though.

[Nelius]

"Access forbidden!
You don't have permission to access the requested object. It is either read-protected or not readable by the server".

Good! progress!
do a "ls -l" on the archive directories and files, and compare with the first archive server
* ls -l /home/
* ls -l /home/archive
* ls -l /home/archive/2013-06-05/

might only need to change the permission on the directory,
if not then look at the ftp server settings (/etc/vsftpd.conf), the umask setting sets the file permission when it is ftp:ed, does it differ from the second server config?

Hi there.

We have changed permissions on the directory and the recordings are now downloadable. Challenge is, new recordings still bring the "Access Forbidden" message and weird enough, they are all under the same directory. We are investigating further.

Thanks.

[Nelius]

Hi there.

We managed to sort out the "Access forbidden" message by changing permissions on the date directory. All is well now but our concern is as new calls are made, new recordings still bring the "Access forbidden" message and we therefore have to go to that directory and give it permissions again. Please help.

Thanks.

[okli]

Add a cron job which changes permissions as often as you need- every 1, 10, 60 minutes...

[DomeDan]

Instead of yet an other ugly hack, lets try to fix this.

look at the umask settings in /etc/vsftpd.conf

Code: Select all

# Default umask for local users is 077. You may wish to change this to 022,
local_umask=022
# Default umask for anonymus users is 077. You may wish to change this to 022,
#anon_umask=022


you might want to look at the file_open_mode setting too, but that one was not in my config file (the default value is 0666)

with this settings you should get
drwxr-xr-x for directories created (755)
-rw-r--r-- for files created (644)

but if you anonymously upload the files then the files will get permisson drwx------ (700) and -rw------- (600)
then you should make the script login with cron or something to upload the files, or uncomment the anon_umask setting

[Nelius]

Hi there.

The umask settings are exactly the same as the ones above. Please see below.

# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
#local_umask=022
Default umask for anonymus users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
#anon_umask=022

With the current settings we only get
-rwx------ for directories created (0700)
-rw------ for files created (0600)

Thanks.

[DomeDan]

its not the same, yours show that local_umask is commented (the # symbol infront) remove that and restart the service

[Nelius]

Yey!!!!!!!!!!!!!!!!

Working fine now!!!!.

Thanks a lot guys, thank you very much.

[DomeDan]

Nice you had it solved!

[scopor]

Hi All. I have the same problem. I setup vicibox5 from ISO CD. This is a base install. No additional software downloaded or install. VERSION: 2.8-417a
BUILD: 131019-0849. When trying to download agent recordings I am presented with the following message after clicking on the link.

Access forbidden!

You don't have permission to access the requested object. It is either read-protected or not readable by the server.

If you think this is a server error, please contact the webmaster.

Error 403

172.16.50.57
Thu Dec 19 13:26:45 2013
Apache/2.2.22 (Linux/SUSE)

I have followed this previous post and don't know what else to do to solve this. Any assistance would be greatly appreciated.

[williamconley]

Hi All. I have the same problem. I setup vicibox5 from ISO CD. This is a base install. No additional software downloaded or install. VERSION: 2.8-417a
BUILD: 131019-0849. When trying to download agent recordings I am presented with the following message after clicking on the link.

Access forbidden!

You don't have permission to access the requested object. It is either read-protected or not readable by the server.

If you think this is a server error, please contact the webmaster.

Error 403

172.16.50.57
Thu Dec 19 13:26:45 2013
Apache/2.2.22 (Linux/SUSE)

I have followed this previous post and don't know what else to do to solve this. Any assistance would be greatly appreciated.

1) Welcome to the Party!

2) As you are obviously new here, I have some suggestions to help us all help you:

When you post, please post your entire configuration including (but not limited to) your installation method and vicidial version with build.

This IS a requirement for posting along with reading the stickies (at the top of each forum) and the manager's manual (available on EFLO.net, both free and paid versions)

You should also post: Asterisk version, telephony hardware (model number is helpful here), cluster information if you have one, and whether any other software is installed in the box. If your installation method is "from scratch" you must post your operating system and should also post the .iso version from which you installed your original operating system. If your installation is "Hosted" list the site name of the host.

If this is a "Cloud" or "Virtual" server, please note the technology involved along with the version of that techology (ie: VMware Server Version 2.0.2). If it is not, merely stating the Motherboard model # and CPU would be helpful.

Similar to This:

Vicibox X.X from .iso | Vicidial X.X.X-XXX Build XXXXXX-XXXX | Asterisk X.X.X | Single Server | No Digium/Sangoma Hardware | No Extra Software After Installation | Intel DG35EC | Core2Quad Q6600

3) I note you included the Vicidial version, but not the ISO version. This is very possibly related to the installer you are using (handy to track ...).

4) We have had "odd" situations with Vicibox 5.0.3 where a folder permission was incorrect between the recording folder and /var/. You may test by making all chmod 777 (note what they are first so you can put them back to what they should be if the solution fails, of course).
One at a time. Test after each.

Code: Select all

chmod 777 /var
chmod 777 /var/spool
chmod 777 /var/spool/asterisk
chmod 777 /var/spool/asterisk/monitorDONE/
chmod 777 /var/spool/asterisk/monitorDONE/MP3/

[scopor]

Hi William thanks for your reply. I am currently away overseas away from my server. When I return I will provided the needed info and comply with the forum rules so you can better be of assistance. Thank you.

[scopor]

Hi William
My configuration is as follows:
Vicibox 5 i686-5.0.3 | Vicidial VERSION: 2.8-417a BUILD: 131019-0849.|Asterisk 1.8.23.1-vici| Single Server| No Digium/Sangoma Hardware| No Extra Software After installation| Dual Intel Xeon 3.0

Still can't access recordings. This is the error message I am getting.

Access forbidden!

You don't have permission to access the requested object. It is either read-protected or not readable by the server.

If you think this is a server error, please contact the webmaster.

Error 403

172.16.50.57
Thu Jan 2 18:54:48 2014
Apache/2.2.22 (Linux/SUSE)

[williamconley]

Check /etc/apache2/conf.d/vicirecord.conf for restrictions. If none are present, post the output from these:

Code: Select all

ll /var -d
ll /var/spool -d
ll /var/spool/asterisk -d
ll /var/spool/asterisk/monitorDONE -d

On a recent install, I get:

Code: Select all

dialer1:/ # ll /var -d
drwxr-xr-x 15 root root 4096 Aug 21 21:21 /var
dialer1:/ # ll /var/spool -d
drwxr-xr-x 11 root root 4096 Aug 21 21:23 /var/spool
dialer1:/ # ll /var/spool/asterisk -d
drwxr-xr-x 10 asterisk asterisk 4096 Aug 30 20:30 /var/spool/asterisk
dialer1:/ # ll /var/spool/asterisk/monitorDONE -d
drwxr-xr-x 9 wwwrun root 4096 Jan  3 19:37 /var/spool/asterisk/monitorDONE


[scopor]

This is the output from my configuration:

-rw-r--r-- 1 root root 271 Aug 21 21:21 vicirecord.conf... I have chmod this to 777 but it didn't make a difference.

Code: Select all

vici1:/etc/apache2/conf.d # ll /var -d
drwxr-xr-x 15 root root 4096 Aug 21 21:21 /var
vici1:/etc/apache2/conf.d # ll /var/spool -d
drwxr-xr-x 11 root root 4096 Aug 21 21:23 /var/spool
vici1:/etc/apache2/conf.d # ll /var/spool/asterisk -d
drwxr-x--- 10 asterisk asterisk 4096 Nov  6 17:06 /var/spool/asterisk
vici1:/etc/apache2/conf.d # ll /var/spool/asterisk/monitorDONE -d
drwxr-xr-x 9 wwwrun root 4096 Jan  4 15:46 /var/spool/asterisk/monitorDONE

[williamconley]

This is the output from my configuration:
-rw-r--r-- 1 root root 271 Aug 21 21:21 vicirecord.conf... I have chmod this to 777 but it didn't make a difference.

you are not expected to chmod this. this is a configuration file, you are expected to READ this. LOL

vici1:/etc/apache2/conf.d # ll /var/spool/asterisk -d
drwxr-x--- 10 asterisk asterisk 4096 Nov 6 17:06 /var/spool/asterisk

this, on the other hand, would appear to be in need of a chmod

[scopor]

Thank you William. I don't mind your lol at all it's how we newbies learn. With your expertise and help I was able to solve the problem. I chmod the file you identified from drwxr-x--- 10 asterisk asterisk 4096 Nov 6 17:06 /var/spool/asterisk to drwxr-xr-x 10 asterisk asterisk 4096 Nov 6 17:06 /var/spool/asterisk. Thank you once again. How do I prevent this from happening again though. I was researching and this permission seems to occur via ftp and I havent ftp to my server. All work was done via command line either in front terminal or via ssh. I wish you can explain how this happen because this was a brand new installation. I will appreciate your feedback. Issue resolved.

[dspaan]

Just reporting that i had the same issue on a fresh ViCibox 5 install. It wasn't a umask problem and the permissions seemed to be correct and when i did chmod on the monitordone and mp3 directories it didn't hep but eventually performing all 5 of these commands it solved the problem:

chmod 777 /var
chmod 777 /var/spool
chmod 777 /var/spool/asterisk
chmod 777 /var/spool/asterisk/monitorDONE/
chmod 777 /var/spool/asterisk/monitorDONE/MP3/

[aziz]

it simple put this command
chmod 777 /var/spool/asterisk

[Alex]

You need to give permission to /var/spool/asterisk folder with the following command. It will solve your issue easily.

chmod 755 /var/spool/asterisk