TO WHISPER permission denied, privacy in destination button!

You have set the privacy option to the destination button (this is a fop2 config option). Buttons with privacy cannot be spied on.

Best regards,

I tried it both ways (set in fop2admin) and neither worked. The log in the second block of code I posted seems to indicate that my privacy settings are correct. Am I misreading something?

You first had incorrect permissions in the manager user. Now you have another problem. Both listen and whisper use chanspy to work, and the command is properly sent between the client and server, you will need to inspect the manager events from and to asterisk ( -> <- in the logs), and the asterisk full log in order to look for problems with chanspy. There are some asterisk versions where chanspy is broken( 1.4.26 or something like that). You can incresease the debug log to -X 511 and also inspect the asterisk full log or console

Best regards,

OK. Two problems at once is always hard to fix!

Here is my -X 511 output:

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPRECEIVED 0

** MAIN AMI event received...
** MAIN Processing command received from flash clients...

10.10.8.111     <= <msg data="15|towhisper|12|f530f3d19ae1d9b661e9102167c3abad" />

-- PROCESS_FLASH_COMMAND origen 15 accion towhisper destino 12

-- PROCESS_FLASH_COMMAND password [string]

VALIDAR USUARIO 244

Validation ok, have all permissions

TO WHISPER permission denied, privacy in destination button!

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPSent
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- To: 172.16.8.196:3001
127.0.0.1       <- OurSSRC: 930506050
127.0.0.1       <- SentNTP: 1280220188.3181875200
127.0.0.1       <- SentRTP: 930497584
127.0.0.1       <- SentPackets: 1249
127.0.0.1       <- SentOctets: 199840
127.0.0.1       <- ReportBlock:
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- CumulativeLoss: 0
127.0.0.1       <- IAJitter: 0.0000
127.0.0.1       <- TheirLastSR: 2879153766
127.0.0.1       <- DLSR: 3.0790 (sec)
127.0.0.1       <- Server: 0

Only one line was output in /etc/log/asterisk/full:

[Jul 27 00:43:11] VERBOSE[12757] logger.c:   == Manager 'admin' logged off from 127.0.0.1

And this didn't repeat on subsequent clicks, so I don't think it's related.

It appears the log is saying the button has privacy enabled. I went into fop2admin and changed privacy from "all" to "none" (note, it might be better to clarify the mouseover text in future releases of fop2admin). After dong that, the logs changed to this:

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPSENT 0

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPSent
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- To: 172.16.8.198:3001
127.0.0.1       <- OurSSRC: 1999275949
127.0.0.1       <- SentNTP: 1280220498.3180355584
127.0.0.1       <- SentRTP: 22756960
127.0.0.1       <- SentPackets: 16751
127.0.0.1       <- SentOctets: 2680160
127.0.0.1       <- ReportBlock:
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- CumulativeLoss: 0
127.0.0.1       <- IAJitter: 0.0000
127.0.0.1       <- TheirLastSR: 2899427328
127.0.0.1       <- DLSR: 2.6380 (sec)
127.0.0.1       <- Server: 0

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPSENT 0

** MAIN AMI event received...
** MAIN Processing command received from flash clients...

10.10.8.111     <= <msg data="15|tospy|12|0c1144c012fcdc1c4cd7092df3146c44" />

-- PROCESS_FLASH_COMMAND origen 15 accion tospy destino 12

-- PROCESS_FLASH_COMMAND password [string]

VALIDAR USUARIO 244

Validation ok, have all permissions

Not a reference at all
Not a reference at all

TO SPY SIP/244 no definido!

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPReceived
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- From: 172.16.8.196:3001
127.0.0.1       <- PT: 200(Sender Report)
127.0.0.1       <- ReceptionReports: 1
127.0.0.1       <- SenderSSRC: 0
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- PacketsLost: 0
127.0.0.1       <- HighestSequence: 49947
127.0.0.1       <- SequenceNumberCycles: 0
127.0.0.1       <- IAJitter: 0
127.0.0.1       <- LastSR: 7122.0536870912
127.0.0.1       <- DLSR: 1.9000(sec)
127.0.0.1       <- RTT: 10(sec)
127.0.0.1       <- Server: 0

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPRECEIVED 0

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPReceived
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- From: 172.16.8.198:3001
127.0.0.1       <- PT: 200(Sender Report)
127.0.0.1       <- ReceptionReports: 1
127.0.0.1       <- SenderSSRC: 0
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- PacketsLost: 0
127.0.0.1       <- HighestSequence: 1186
127.0.0.1       <- SequenceNumberCycles: 0
127.0.0.1       <- IAJitter: 0
127.0.0.1       <- LastSR: 7122.1342177280
127.0.0.1       <- DLSR: 2.3500(sec)
127.0.0.1       <- RTT: 11(sec)
127.0.0.1       <- Server: 0

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPRECEIVED 0

** MAIN AMI event received...
** MAIN Processing command received from flash clients...

10.10.8.111     <= <msg data="15|towhisper|15|0c1144c012fcdc1c4cd7092df3146c44" />

-- PROCESS_FLASH_COMMAND origen 15 accion towhisper destino 15

-- PROCESS_FLASH_COMMAND password [string]

VALIDAR USUARIO 244

Validation ok, have all permissions

Not a reference at all
Not a reference at all

TO WHISPER SIP/244 no definido!

** MAIN AMI event received...
** MAIN Processing command received from flash clients...

10.10.8.111     <= <msg data="15|tospy|15|0c1144c012fcdc1c4cd7092df3146c44" />

-- PROCESS_FLASH_COMMAND origen 15 accion tospy destino 15

-- PROCESS_FLASH_COMMAND password [string]

VALIDAR USUARIO 244

Validation ok, have all permissions

Not a reference at all
Not a reference at all

TO SPY SIP/244 no definido!

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPSent
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- To: 172.16.8.196:3001
127.0.0.1       <- OurSSRC: 930506050
127.0.0.1       <- SentNTP: 1280220503.3180752896
127.0.0.1       <- SentRTP: 933017584
127.0.0.1       <- SentPackets: 16999
127.0.0.1       <- SentOctets: 2719840
127.0.0.1       <- ReportBlock:
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- CumulativeLoss: 0
127.0.0.1       <- IAJitter: 0.0000
127.0.0.1       <- TheirLastSR: 2899797606
127.0.0.1       <- DLSR: 3.0900 (sec)
127.0.0.1       <- Server: 0

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPSENT 0

** MAIN End of block from localhost

127.0.0.1       <- Event: RTCPSent
127.0.0.1       <- Privilege: reporting,all
127.0.0.1       <- To: 172.16.8.198:3001
127.0.0.1       <- OurSSRC: 1999275949
127.0.0.1       <- SentNTP: 1280220503.3180945408
127.0.0.1       <- SentRTP: 22796960
127.0.0.1       <- SentPackets: 17001
127.0.0.1       <- SentOctets: 2720160
127.0.0.1       <- ReportBlock:
127.0.0.1       <- FractionLost: 0
127.0.0.1       <- CumulativeLoss: 0
127.0.0.1       <- IAJitter: 0.0001
127.0.0.1       <- TheirLastSR: 2899755008
127.0.0.1       <- DLSR: 2.6380 (sec)
127.0.0.1       <- Server: 0

** MAIN AMI event received...
** MAIN There's an 'Event' in the event block
** MAIN Event detected block_count = 0
** MAIN There are 0 blocks for processing
** MAIN Answer block cleared

** DIGEST_EVENT: start

** PROCESA_BLOQUE RTCPSENT 0

Exiting...

My Asterisk is 1.6.0.10 as part of Trixbox 2.8.0.3. Chanspy does work if I dial 555.

I tried replacing read = system,call,log,verbose,command,agent,user and write = [the same] with read = all and write = all. I still can't do listen or whisper, but the system is at least now responding to the Dial, Pickup, Transfer, and Transfer to Voicemail options.

Here is the only line that appears in the Debug mode when I click "Whisper":

10.10.8.115     <= <msg data="14|towhisper|12|c3a8877fb35e1b910870cb61a91263ef" />

A similar line appears when I click "Listen."

Here is the contents of manager.conf (I changed the permissions back to the default in case they were screwing things up):

;
; Asterisk Call Management support
;
[general]
enabled = yes
port = 5038
bindaddr = 0.0.0.0

[admin]
secret = *****
deny=0.0.0.0/0.0.0.0
permit=127.0.0.1/255.255.255.0
read = all
write = all

#include manager_additional.conf
#include manager_custom.conf

And here is fop2.cfg:

[general]
; AMI definitions
manager_host=localhost
manager_port=5038
manager_user=admin
manager_secret=***** [same as in manager.conf]
;event_mask=call,agent

; Daemon definitios
;listen_port      = 4445
;restrict_host    = www.asternic.org
;web_dir          = /var/www/html/operator/fop2

; Global Config
language           = en
poll_interval      = 86400
poll_voicemail     = 1
monitor_ipaddress  = 0

; Force blind transfer on asterisk 1.6
blind_transfer     = 1

; Force supervised transfer on asterisk 1.4
; requires the atxfer manager backport patch
; supervised_transfer = 1

; Force delimiter for asterisk applications
; force_parameter_delimiter = ","

; When adding or removing members to a queue, fop2 will default to
; AddQueueMember/RemoveQueueMember commands. If you set use_agentlogin
; to 1, together with the QueueChannel in a button definition set to
; an Agent number it will use AgentCallbackLogin and Agentlogoff instead.
;
; use_agentlogin = 0


; Master Password that overrides any individual one
;master_key = [default]

; Filename to use when start monitoring, you can use ${UNIQUEID},
; ${ORIG_EXTENSION}, ${DEST_EXTENSION}
; and date formats %Y %m %d to construct the filename.
;
; Settings for modifying the recording filename
; Available variables are:
; ${UNIQUEID} = Unique Id of the call
; ${TIMESTAMP} = Unix Timestamp when the recording was initiated
; ${DEST_EXTENSION} = Target extenstion being monitored
; ${ORIG_EXTENSION} = Extension/User that started the recording (not
;                     the other leg)
; Date variables:
; %Y 4 digits year
; %y 2 digits year
; %m 2 digits month
; %d 2 digits day
; %h 2 digits hour
; %i 2 digits minute
; %s 2 digits seconds

monitor_filename=g${DEST_EXTENSION}-${UNIQUEID}
monitor_format=wav
monitor_mix=true

; --- SAMPLE GROUPS ---
;group=queues:QUEUE/100,QUEUE/101
;group=deptA:SIP/100,SIP/101,SIP/102
; --- END SAMPLE ---

; --- SAMPLE USER LIST ---
; format: user= EXTENSION : SECRET : PERMISSIONS : GROUPS
; You can enumerate several permissions and groups separated by comma
; available permissions:  'all', 'dial', 'hangup', 'meetme', 'pickup',
;                         'record', 'spy', 'transfer', 'whisper',
;                         'queuemanager', 'queueagent', 'phonebook'
;
;user=620:1234:all:queues
;user=621:1234:dial,transfer,pickup:deptA
;user=622:1234:all
;user=623:1234:meetme,pickup
;buttonfile=buttons.cfg
; ------ END SAMPLE ------

; This line is NOT commented, it executes
; the autoconfig configuration for FreePBX
#exec autoconfig-users-freepbx.sh

Users and permissions are set in fop2admin. I have the users I am testing with set for "all" permissions, and the extensions I am trying to monitor set to "none". (The way the mouseover text for the Privacy column in fop2admin reads, it is hard to tell, but I think "none" means "no restrictions" and therefore it should work, whereas "all" means "all things restricted. Regardless, I tried it with all and nothing happened.)

I have tried with Firefox, IE, and Google Chrome, just in case it is a browser issue.

I am having the same problem as the original poster--none of the buttons works except for hangup.

This is on a more or less virgin Trixbox 2.8.0.3 installation (Asterisk 1.6.0.10). I've enabled the extension I am logging in with to have "all" permissions in the FOP2Admin module.

I do not have a buttons.cfg file, as I am using the autoconfig-users-freepbx.sh file. The manager and secret in fop2.cfg are properly matched to manager.conf.

Here are some excerpts from the debug log immediately after I try to click on some of the non-functional buttons:

10.10.8.111     <= <msg data="14|originate|14|cc6911c5d086d504a994dec25a27e0af" />

127.0.0.1       -> Action: Originate
127.0.0.1       -> Channel: SIP/243
127.0.0.1       -> Exten: 243
127.0.0.1       -> Context: from-internal
127.0.0.1       -> Priority: 1
127.0.0.1       -> CallerID: [name] <243>
127.0.0.1       -> Async: True

127.0.0.1       <- Response: Error
127.0.0.1       <- Message: Permission denied
127.0.0.1       <- Server: 0

Response: Error
Message: Permission denied
Server: 0

-----

10.10.8.111     <= <msg data="14|towhisper|14|cc6911c5d086d504a994dec25a27e0af" />

127.0.0.1       <- Event: PeerStatus
127.0.0.1       <- Privilege: system,all
127.0.0.1       <- ChannelType: SIP
127.0.0.1       <- Peer: SIP/231
127.0.0.1       <- PeerStatus: Registered
127.0.0.1       <- Server: 0

-----

127.0.0.1       <- Event: PeerStatus
127.0.0.1       <- Privilege: system,all
127.0.0.1       <- ChannelType: SIP
127.0.0.1       <- Peer: SIP/237
127.0.0.1       <- PeerStatus: Registered
127.0.0.1       <- Server: 0

127.0.0.1       <- Event: PeerStatus
127.0.0.1       <- Privilege: system,all
127.0.0.1       <- ChannelType: SIP
127.0.0.1       <- Peer: SIP/234
127.0.0.1       <- PeerStatus: Registered
127.0.0.1       <- Server: 0

-----

10.10.8.111     <= <msg data="14|towhisper|12|2d80cea36d9bdc4535c47e7ba7c22db6" />

-----

10.10.8.111     <= <msg data="14|towhisper|12|2d80cea36d9bdc4535c47e7ba7c22db6" />

10.10.8.111     <= <msg data="1|ping||" />
10.10.8.111     => { 'btn': '0', 'cmd': 'pong', 'data': '0', 'slot': '' }

I hope we can get this working, as I just bought FOP2 and am impressed with what it shows and the interface! :)