issabelfoundation / issabelpbx Goto Github PK

Dear all
Centos switched the mainline to centos stream.

centos 7 will be end of Life in 2024.
Will issabel switch to centos stream in future?

Would the actual netinstaller also work with centos stream?

We are looking for a new pbx solution for the next years and would like to know a little roadmap of this great project.

A last question which is not important but would get the web gui in future a new more modern design? It’s not important cause features and handling the asterisk is the main reason why I like to use issabelpbx for production,
Best Regards and greetings from Germany

When editing the class of service name (changing the context name), the change is not replicated to the context of the extensions, causing extensions to be without a valid context.

hola a todos. cuando sale una nueva versión?

Hello,
can i have a small feature request?
Can you add to a gui Callback module, field for "$variable" from file "/var/lib/asterisk/bin/callback (45line)"?
Thanks to this, for each entry you could set the PBX connection time with the number

Ola, do you have any Dockerfiles to climb into containers?

after a while of server working, We will have Duplicate on CDR and Recording.
We should unload extra odbc madule on module.conf but we should prevent this issue.

[One year ago i've added this to the 'framework' project; i try also to add here, that seems at least have some feedback on bugs. Feel free to close this or that]
I've produced a patch/POC to enable in Issabel authentication using external sources. This patch is working in my production environment, but clearly need work to be integrated.

First patch modify login input, because i've not found a way to pass to authenticateUser() the non-md5 password; probably this is a big security hole (i suspect that the plaintext password is then saved to session cookie...) but it works.

index.php.diff.txt

Second patch modify authenticateUser() decoupling check for user existance in the db for the effective password check; i've addedd an LDAP/AD password check and an example, untested, code to login to an POP/IMAP server. Last i've keeped the original code that check against md5 password on the DB.

paloSantoACL.class.php.diff.txt

I'm seeking feedback, expecially for the security things.

Thanks.

modules/blacklist/functions.inc.php: function blacklist_get_config($engine)

$id = "app-blacklist";
$ext->addInclude('from-internal-additional', $id); // Add the include from from-internal
$ext->add($id, $c, '', new ext_macro('user-callerid'));

the $c variable is not defined

As a result, the wrong context is generated

[app-blacklist]
include => app-blacklist-custom
exten => ,1,Macro(user-callerid,)
;--== end of [app-blacklist] ==--;

log:

ERROR[52942] pbx.c: You have to be kidding-- add exten '' to context app-blacklist? Figure out a name and call me back. Action ignored.

Hello,

I would like to report for XSS vulnerability.

The path of the vulnerability:

In file https://github.com/IssabelFoundation/issabelPBX/blob/master/backup/page.backup_restore.php

// line 16
$var[$k] = isset($_REQUEST[$k]) ? $_REQUEST[$k] : $v;
// line 143
dbug($_SESSION['backup_restore_path'], $var);

In file customappsreg/functions.inc.php
https://github.com/IssabelFoundation/issabelPBX/blob/master/framework/amp_conf/htdocs/admin/libraries/utility.functions.php

// line 296
function dbug(){
	// ...
	$opts = func_get_args();
       // ...

	switch (count($opts)) {
		case 1:
			$msg		= $opts[0];
			break;
		case 2:
			if ( is_array($opts[0]) || is_object($opts[0]) ) {
				$msg	= $opts[0];
				$dump	= $opts[1];
			} else {
				$disc	= $opts[0];
				$msg	= $opts[1];
			}
			break;
		case 3:
			$disc		= $opts[0];
			$msg		= $opts[1];
			$dump		= $opts[2];
			break;
	}
        // ...
      if ($dump==1) {//force output via var_dump
		ob_start();
		var_dump($msg);
		$msg=ob_get_contents();
		ob_end_clean();
		dbug_write($msg."\n\n\n");
	} elseif(is_array($msg) || is_object($msg)) {
		dbug_write(print_r($msg,true)."\n\n\n");
	} else {
		dbug_write($msg."\n\n\n");
	}

}

$msg carry the value from $_REQUEST without sanitization. Then there is XSS vulnerability.

Buen día, veo que varios usuario cuando ejecutan un yum update el modulo del callcenter center no deja realizar transferencia, desde el mismo modulo, y también marcar sin agentes. Veo que en el embebido hay actualizaciones es recomendable ejecutarlas desde el embebido. agradezco un comentario de IssabelPbx. gracias.

Hola buen día es posible incluir este módulo de freepbx en los repos de issabelpbx.

https://github.com/POSSA/freepbx-trunk-balancing

gracias.

When extension (A) makes a call to an extension (B) and performs transfer (* 2) to extension (C), the recording of the call is interrupted between extension (B) and (C), recording only the first part between extension (A) and (B) ...

Bug: Unembedded IssabelPbx User Control Panel When you click on it. It will come back as /recordings not found on server

in the address "https://<my_ip>/admin/config.php?display=modules" when selecting the "extended" repository and doing the search a tts name module appears, when trying to install it it presents an error informing dependency of the module "ttsengines" that I have not found anywhere ...
what to do? Is it an error already known?
ps: I do not like the "Festival" available at "https://<my_ip>/index.php?menu=festival"

When using one_touch_record.php under the load it might be possible that some channel variables are not set.
This is causing astman to set variable as a global variable because setVar is called with channel equal to ''.
As I understand from freepbx bug tracker/forum this issue is known. I think that fix for this issue should be back ported to Issabel
https://issues.freepbx.org/browse/FREEPBX-8803
https://community.freepbx.org/t/call-recording-stops-working-after-a-few-hours-of-restarting-asterisk/27363/4

Hi all,

When downloading call recordings with the interface language set to Portuguese (Brazil), it downloads a corrupted audio. But if set the interface to Ingles again the download work fine.

Tks,

buen día,
En el foro hgnetwork y otros desarrrolladoes han dejado mejoras acá del callcenter; les gustaria una respuesta o cuando salen a producción estas mejoras.
Se encuentran desmotivados para seguir realizando más cambios. Sin obtener respuesta de issabelpbx.

También nos preguntamos cuando cambian el php actual a php7.

En el foro esta la duda. gracias si dan respuesta.

1.  Want to know when you coming out with the new core. When you go to download the modules. It show a parking and recording updates. But when you try to download them. you will come back with that error. There isn't a 		module update to 2.11.0.48. The last one we have is 2.11.0.47. So what I was wondering when are they going to post the update 2.11.0.48.
   

When will the new IaaabelPBX and Core coming out. Wanting to test the multi parking lot that the notes say that it should have.

Parking Lot cannot be upgraded:

IssabelPBX version 2.11.0.48 or higher is required, you have 2.11.0
Core module version 2.11.0.48 or higher is required, you have 2.11.0.47

Please try again after the dependencies have been installed.

2. Will the new parking also have park to station in it like was build into freepbx 12?

3. Here is the parking bug that I have seen.

https://forum.issabel.org/d/2472-bug-in-parking-bug-problem
IssabelFoundation/issabel#43

This is a big problem in the parking coding.
I Did make an Issues also over at IssabelFoundation/issabel#43
I am just posting it here to try and make sure it happen to get looked at. This bug is in every running system that has been change to using the res_parking_additional.conf for the park info.

The normal setting for the Parking is 700 by default.
If it happen to be setup for 700 with slots 701-703. It will save the info into the extensions_additional.conf and res_parking_additional.conf

res_parking_additional.conf
parkext=700
parkpos=701-703
context=parkedcalls
parkext_exclusive=no
parkingtime=150
comebacktoorigin=no
parkedplay=both
courtesytone=beep
parkedcalltransfers=caller
parkedcallreparking=caller
parkedmusicclass=default
findslot=first
Now if we do a command feature show. We happen to see this.
Call parking (Parking lot: default)

Parking extension : 700
Parking context : parkedcalls
Parked call extensions: 701-750
Parkingtime : 45000 ms
Comeback to origin : yes
Comeback context : parkedcallstimeout (comebacktoorigin=yes, not used)
Comeback dial time : 30
MusicOnHold class : default
Enabled : Yes

how if you look at the Parked call extensions line. You will see the system say that the slots are from 701-750. When it show be 701-703

How this is where the problem come in.
If change the lot to 800 with slots 801-803. And saved
We can see in the file res_parking_additional.conf it has been update.
parkext=800
parkpos=801-803
context=parkedcalls
parkext_exclusive=no
parkingtime=150
comebacktoorigin=no
parkedplay=both
courtesytone=beep
parkedcalltransfers=caller
parkedcallreparking=caller
parkedmusicclass=default
findslot=first
If we run a feature show command again. We will see this.
Call parking (Parking lot: default)

Parking extension : 700
Parking context : parkedcalls
Parked call extensions: 701-750
Parkingtime : 45000 ms
Comeback to origin : yes
Comeback context : parkedcallstimeout (comebacktoorigin=yes, not used)
Comeback dial time : 30
MusicOnHold class : default
Enabled : Yes

Also if try to park into 800 now it will recall the call back to the ext without even parking.
If you take what is in the res_parking_additional.conf into the features_general_additional.conf
Do a reload and it will show the right parking info.

So all in all it looks like the system isn't loading any info in the res_parking_additional.conf file. So this is messing up the parking system if the lot has been changed.

you will have to copy the info from the res_parking_additional.conf into the feature_additional.conf file. And then make it where it can't be change. then it will load the info all right.

I have two tables from different databases, one is call_center.calls and other is asteriskcdr.cdr, one has a huge record of data of the calls but the other as well. I want to know which of those stores the related data to the calls that the system execute by itself AND the calls manually made by humans.

Also: I have a problem with the date on the table audit, it says ODBC error 22007

I Believe installing issabelPBX as a Docker container is very beneficial, this is especially true for aspects like scalability, migration and network infrastructure management.

I've found many Docker images uploaded to the Docker hub, but all of them or non official and contains bugs and security issues.

CallPark is not working, We can create park or use 700 to park calls but after that we can not get back the parked call.
also the parked calls are not shown on Oerator panel, It seems they are not parked.

thanks.

Issabel-20181002-asterisk11-13 |
No calling when Internet connection is down.
when internet connection is down, extensions can not call to gether, for testing you can disable pppoe connection (or any other things) on your router, then extensions could not call to gether.

thanks.