TIPS ARI requires username/password (maint user)

Giovanni

New Member
Joined
Sep 27, 2013
Messages
8
Reaction score
1
Hi

I am new to PIAF and everything is installed, I am trying to give users the ability to access their voicemail using ARI from FreePBX which is available on the Users section as Voicemail & Recordings.

If I am logged in as maint user I can see the page, It asks for extension and username to login. However, users who are not logged in as maint are getting the apache .htaccess page requesting a login...

I would like to be able to give my users the URL to check their voicemail without giving them the maint password.

How can I avoid getting this authentication message for users? Thanks :)
 

Attachments

  • ari.png
    ari.png
    23.4 KB · Views: 23
Joined
Oct 18, 2013
Messages
220
Reaction score
20
I just looked at mine and it does that for all the items in the Users menu except for AsteriDex (i.e. Voicemail, MeetMe, Reminders).
 
Joined
Oct 18, 2013
Messages
220
Reaction score
20
Technically you could modify/rename the appropriate apache config files in /etc/pbx/httpdconf to remove the authentication requirements, but I don't know what (if anything) that would break.

Edit:
After poking around more you'd have to do more than that. The voicemail module seems to include files from /admin, so even disabling auth to the voicemail module itself still triggers auth because it's pulling from admin as well.
 

Giovanni

New Member
Joined
Sep 27, 2013
Messages
8
Reaction score
1
This has been covered SO many times. There is no dead horse left to beat.

Actually, yes and NO... removing ari.conf (which I did) will allow you to display the page after clicking on "cancel" multiple times.

HOWEVER - there is a .jsp file that is within www/admin that is trying to load causing the pop up to keep coming up... so how can I remove that .jsp???
 

Giovanni

New Member
Joined
Sep 27, 2013
Messages
8
Reaction score
1
This is the problem... suggestions?

source of /recordings/index pulls a stylesheet from admin...

HTML:
  <head>
    <TITLE>User Portal</TITLE>
      <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
    <meta http-equiv="X-UA-Compatible" content="chrome=1">
    <meta name="robots" content="noindex" />
    <link rel="shortcut icon" href="images/favicon.ico">
    <link rel="stylesheet" href="theme/main.css" type="text/css" />   
    <link href="/admin/assets/css/mstyle_autogen_1372443883.css?load_version=2.11.0.11" rel="stylesheet" type="text/css"><script type="text/javascript" src="/admin/assets/js/jquery-1.7.1.min.js"></script>  </head>
  <body>
 

Giovanni

New Member
Joined
Sep 27, 2013
Messages
8
Reaction score
1
maybe I could do a snippet here, this is where the problem comes from....


PHP:
root@ipbx:/var/www/html/recordings/theme $ cat page.tpl.php | head -n 30
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <TITLE>User Portal</TITLE>
      <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
    <meta http-equiv="X-UA-Compatible" content="chrome=1">
    <meta name="robots" content="noindex" />
    <link rel="shortcut icon" href="images/favicon.ico">
    <link rel="stylesheet" href="theme/main.css" type="text/css" />   
    <?php
 
Joined
Oct 18, 2013
Messages
220
Reaction score
20
Copy the stylesheet and JS to the ARI dir and change the files to point there instead? (after backing up the files of course)
 

phonebuff

Guru
Joined
Feb 7, 2008
Messages
1,115
Reaction score
129
I hate to add to this and the referenced "FIX" but I am going to --

New install, this week. I is an "upgrade" from a much older box that has been in service more than two years.

Only issue is that they record "everything" at the extension level for five extensions an the supervisor used to log in as ADMIN to see the recordings, this seems to be suffering from this issue as well, can any of you that have been fighting with it confirm this ?

Thanks,
Jeff --
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
so you're talking about /recordings ?
the first prompt, an http auth browser prompt must be a valid user from /usr/local/apache/passwd/wwwpasswd
the second prompt, on the page, require a voicemail box and password or the "User Portal Admin Username" set from the "settings"->"advanced settings" menu.
 

phonebuff

Guru
Joined
Feb 7, 2008
Messages
1,115
Reaction score
129
Hyksos,

For Recordings the old FreePBX 2.8 needed you to Login with admin and it's password to the ARI page to listen to recordings of calls made by extension. The new FreePBX 2.11 install apparently has combined this function with the CDR report under the maint window.

I jumped to the conclusion that this issue was related to my problem and I am slowly finding that it is not.

Although I am still looking at the functions and features and where things moved in the 2.11 menu system..

=====================
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
You're loosing me with all those generic statements.
Try to be specific and I'm sure we can all figure it out.

IPofthePBX/recordings
You always needed to login with maint and then either an extension or the "admin" user (which can be anything since the username and password are defined in freepbx settings.)

Now if before the guy says he just needed to enter the admin user when visiting /recordings, it's because you had modified the system to remove the http auth for /recordings. Which many people do.

Your dude just need to hit /recordings.
And you need to either give him the maint/password for the http auth and create him an admin user in freepbx settings for the ARI login which is after the http auth.
OR
You need to remove the http auth for /recordings and create him an admin user in freepbx settings for the ARI.

As of right now, I do not agree that something changed... Your current system is simply not configured like the old one yet.
 

phonebuff

Guru
Joined
Feb 7, 2008
Messages
1,115
Reaction score
129
Sorry,

But we will have to agree to disagree-- I have access to both systems and I will look again tomorrow. But even after making the "changes" recommended in the other thread and resetting the password (passwd-ari) for ARI admin, and logging first into the maint panel, the ARI panel does not allow me to login as admin, and does not appear to provide for viewing of the recordings and calls on these five extensions as it did in Freepbx 2.8. (http://127.0.0.1:8080/menu.php?id=recordings)

However, the Reports CDR in 2.11 does include a column for "Recordings" where as the Reports Call Log in 2.8 did not !

Applied ==> http://pbxinaflash.com/community/in...quired-on-user-portal.13204/page-2#post-84075

====
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
the second prompt, on the page, require a voicemail box and password or the "User Portal Admin Username" set from the "settings"->"advanced settings" menu.
 

phonebuff

Guru
Joined
Feb 7, 2008
Messages
1,115
Reaction score
129
Okay,

So I am in the box -- Settings => Advanced Setting => System Setup --

I see two entries that may apply --

User Portal Admin Username -- It's blank
User Portal Admin Password -- "ari_password"

Now looking at amportal.conf
# User Portal Admin Username
# Default Value:
ARI_ADMIN_USERNAME=

# User Portal Admin Password
# Default Value: ari_password
ARI_ADMIN_PASSWORD=ari_password

So I am changed the Username - to admin -- No Joy still get "Incorrect Username or Password "

Do I also have to set the password here, instead of in passwd-ari ?

=============
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
I guess by now you figured out the obvious, but yes. You set both the desired username and the password there.
(But that I just meant that maybe you tried it and it worked... because it's been an hour.)

I have no idea about passwd-ari... never used, never needed.
It's probably just a password tool, and it's not asking and setting a username I guess, dunno!
 

phonebuff

Guru
Joined
Feb 7, 2008
Messages
1,115
Reaction score
129
I guess by now you figured out the obvious,[\quote]

Nope, in fact have not even gone back and looked at it again. Had other priorities and may not get back to this for a few days.
 

darmock

PIAF Developer
Joined
Oct 18, 2007
Messages
2,892
Reaction score
98
The ARI has always been a pain in the butt....

passwd-ari changes 2 files

/var/www/html/recordings/includes/main.conf.php
/etc/amportal.conf

Make sure the common lines match

This was written long before fpbx had an interface. along about freepbx 2.7 they added

ARI_ADMIN_PASSWORD
ARI_ADMIN_USERNAME

to amportal.conf and I don't believer we have changed it since!

The passwd-ari program is convoluted and does endless checks to make sure that things are where they should be. Beyond that we don't support modifying our base security paradigm so that is about all I can do to assist you.


regards

Tom
 

Hyksos

Guru
Joined
May 28, 2011
Messages
474
Reaction score
70
if he's right passwd-ari is broken and it doesn't a link with modifying the http auth.
if you want to send me the src for it i'll update you on its current working conditions!
 

Members online

Forum statistics

Threads
25,779
Messages
167,505
Members
19,199
Latest member
leocipriano
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.
Top