Hi Guys

This is a great idea and something i have spent allot of time thinking about. There is one major problem with allowing users to access the system this is the security provided by the AMI (asterisk management interface).

The bigest security issue comes with using javascript.
The current admin interface works like so:

Admin logs in > AMI Accepts > Javascript asks AMI for all major config files > Config files parsed into arrays and stored by web browser > configs edited and passed back to AMI to be saved.

This is fine on an internal network with one user (as we always know who has access), but when it comes to allowing users to enter the system we would have to add each user to manager.conf, even if we only allow read only access that user would be able to parse the configs and see all settings in the system including the admin password - this is a big security issue.

So to sum it up it can be done but at huge risk to the security of your system, or with the use of a scripting language like PHP - not really viable on an embedded system due to resource usage.

If any one has any ideas on how to solve these issues let me know as I think a user management portal would be a great addition to the GUI

mmm IMAP looks good and would be simple to integrate into the GUI I will try and do some testing this weekend.

Jason what about storing the vm's in an external SQLlite database?  then a PHP app could be written (running on the external host) to securely access those.  Of course its not ideal but it does make storage space a non-issue. 

It makes it much less self-contained but I don't know if there would be another way.  Could switchfin have SQLlite support?

ok definitely sounds interesting!

Hi guys

Im just finishing the testing on uw-imap port as requested i have documented the details below.  This only includes the basic's and not any of the changes to make it compile hope it helps.


Cross compiling uw-imap to SwitchFin

1. Create a new folder in ‘package/’ name the folder ‘uw-imap’ this will hold the config for the make menuselect and also the SwitchFin makefile for uw-imap

2. In the newly created ‘package/uw-imap’ folder create a file called ‘Config.in’

3. Add the following to ‘Config.in’ file

config SF_PACKAGE_UW-IMAP

    bool "uw-imap"

    depends on (SF_PACKAGE_ASTERISK)

    default n

    help

        IMAP support for asterisk

• The ‘config SF_PACKAGE_UW-IMAP’ line tells SwitchFin to declare a variable called ‘SF_PACKAGE_UW-IMAP’

• The ‘bool "uw-imap"’ line tells SwitchFin that this is a Boolean  field and to name it ‘uw-imap’ in the make menu

• The ‘depends on (SF_PACKAGE_ASTERISK)’ line tells SwitchFin that this package requires asterisk to be enabled.

• The ‘default n’ line tells SwitchFin not to enable this feature by default.

4. Edit the ‘package/Config.in’ add ‘source "package/uw-imap/Config.in"’ this allows the SwitchFin make menu to see our new config.

5. Now in the ‘package/uw-imap/’ folder create a file called ‘uw-imap.mk’ this will be out make file.

6. Add the following to the ‘uw-imap.mk’

UW-IMAP_VERSION=2007e

UW-IMAP_NAME=imap-$(UW-IMAP_VERSION)

UW-IMAP_DIR=$(BUILD_DIR)/$(UW-IMAP_NAME)

UW-IMAP_SOURCE=$(UW-IMAP_NAME).tar.gz

UW-IMAP_SITE=ftp://ftp.cac.washington.edu/imap

UW-IMAP_UNZIP=zcat

UW-IMAP_PATCH=uw-imap.patch



$(DL_DIR)/$(UW-IMAP_SOURCE):

    $(WGET) -P $(DL_DIR) $(UW-IMAP_SITE)/$(UW-IMAP_SOURCE)



$(UW-IMAP_DIR)/.unpacked: $(DL_DIR)/$(UW-IMAP_SOURCE)

    $(UW-IMAP_UNZIP) $(DL_DIR)/$(UW-IMAP_SOURCE) | tar -C $(BUILD_DIR) $(TAR_OPTIONS) -

    touch $(UW-IMAP_DIR)/.unpacked



$(UW-IMAP_DIR)/.configured: $(UW-IMAP_DIR)/.unpacked

    $(PATCH_KERNEL) $(UW-IMAP_DIR) package/uw-imap $(UW-IMAP_PATCH)

    touch $(UW-IMAP_DIR)/.configured



uw-imap: $(UW-IMAP_DIR)/.configured

    $(MAKE) -C $(UW-IMAP_DIR) lnx IP=4 SSLTYPE=none CC=$(CC) LDFLAGS=$(LDFLAGS)



uw-imap-clean:

    rm -f $(UW-IMAP_DIR)/.configured

    -$(MAKE) -C $(UW-IMAP_DIR) clean



uw-imap-dirclean:

    rm -rf $(UW-IMAP_DIR)



ifeq ($(strip $(SF_PACKAGE_UW-IMAP)),y)

TARGETS+=uw-imap

Endif

How does this work
• First we download the uw-imap source using wget

• Next we check for the presence of a file called ‘.unpacked’ in the ‘build_ip04/imap-2007e’ if this doesn’t exist we check that the source is found in the ‘dl’ directory if it is then we extract the source into the ‘build_ip04’ dir and add a file called .unpacked so next time we build this step will be passed.

• Next we check for the ‘.unpacked’ file again and if it exists we first run a patch – this patch fixes issues with the cross compiling of uw-imap, you might not need to patch anything if the application cross compiles smoothly.  Then we run make telling uw-imap that the system is not using a shadow password (lnx) and only IPv4 (ip=4) and that we don’t have SSL (SSLTYPE=none)

• The other steps are pretty self explanatory ‘uw-imap-clean:’ = run make clean.  ‘uw-imap-dirclean:’ = remove imap2007e dir from the build dir.

7. Run make uw-imap from the SwitchFin dir, and see if it compiles

wow this is so cool!! I am going to try to compile a new build now

guys I compiled this new build, uw-imap seems to be running but I am getting nonstop errors in my Asterisk console

[Jul 17 19:29:09] ERROR[325]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 6000 in context default

[Jul 17 19:29:10] ERROR[325]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 6000 in context default

[Jul 17 19:29:11] ERROR[325]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 6000 in context default

[Jul 17 19:29:11] ERROR[338]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 113537 in context default

[Jul 17 19:29:12] ERROR[338]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 17772345678 in context default

[Jul 17 19:29:12] ERROR[338]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 6000 in context default

[Jul 17 19:29:12] ERROR[325]: app_voicemail.c:1258 messagecount: Couldn't find mailbox 6000 in context default

I know I need to manually configure voicemail.conf but where do I find documentation on the format of this file?  Also several users on my pbx do NOT have voicemail or mailboxes -- does having the uw-imap installed cause a problem in this case? (i mean, are voicemail boxes mandatory for all users now).

Notice that I am also getting this error for my TRUNKS too (113537 and 17772345678) which should definitely not have mailboxes so I am sure this is some kind of .conf file error.  But how to fix it? 

edit: by the way I tested enabling a voicemail box on one extension & reloading asterisk but the error continues.  So I think I need to create entries in the default context of voicemail.conf but again I don't know the proper format of these.

we still use the original make file for uw-imap but have to patch it to make it compile properly, the biggest issues with uw-imap was it was shadowing LDFLAGS in each applications Makefile simple solution rename LDFLAGS to LFLAGS also -lcrypt needed to be added to the LDFLAGS!!

but each application is different.

1) hehe no you will need an external IMAP server
2) if gmail uses standard IMAP should be fine then
3) should be OK just removing the values like so ,,

not sure i haven't tested it yet will try now.

got it to work heheh the authentication error was due to me having my password wrong stupid me was the last thing i checked too hhehhehe

did you change 'hasvoicemail = yes' to 'hasvoicemail = no' for each user in users.conf

this should make it work but breaks the ring time out to goto voice mail i think the dial cmd needs to be altered to.

I think that is working...... strange because *everywhere* on the web shows it set up in voicemail.conf.  Hummmm... ???

I don't think the imap client can support GMail anyway because I think Gmail requires SSL connection.  But I did not test this yet.   I use google apps for my email so unless uw-imap can support an SSL connection I guess I am out of luck in that case.

edit:yes this is as I feared.  I have completely locked out of switchfin GUI since adding in the gmail imap info.   It is getting 'hung up' while communicating I guess with the backend.  Here's a screenshot. 

I logged in via CLI and got this:

[Jul 18 00:10:57] ERROR[353]: app_voicemail.c:1875 mm_log: IMAP Error: Connection failed to gmail-imap.l.google.com,143: Connection timed out

[Jul 18 00:10:57] ERROR[353]: app_voicemail.c:1640 init_mailstream: Can't connect to imap server {imap.gmail.com:143/imap/user=luke@gmail.com}vm

[Jul 18 00:10:57] ERROR[353]: app_voicemail.c:1298 messagecount: IMAP mailstream is NULL

So I really need to just remove uw-imap for now I guess, and look for a different solution.  I am trying to make a new uImage now with madplay, mplayer etc But , but I cannot build it without uw-imap.   Make is failing, due to some dependency...  I made a separate post about it
http://switchfin.org/index.php?option=c … ;Itemid=54

any idea on that one?

yes thats what I was afraid of
ok, please see my above post (edited) I am trying to make a new uImage without uw-imap but it wont make......... how can I remove that dependency?