ERROR[3599]: manager.c:6660 process_message: Unable to process manager action 'Challenge'. Asterisk is shutting down. == Connect attempt from '127.0.0.1' unable to authenticate

Asterisk Asterisk APIs
1

Hi

i’m getting Connect attempt from ‘127.0.0.1’ unable to authenticate error after approx one minute of any asterisk operation,

here is the logs:

== Manager ‘admin’ logged on from 127.0.0.1
== Manager ‘admin’ logged on from 127.0.0.1
== Using SIP RTP CoS mark 5
– Called 10005
– SIP/10005-00000000 is ringing
– SIP/10005-00000000 is ringing

0x7fd2d4008370 – Strict RTP learning after remote address set to: 89.64.42.130:35644
– SIP/10005-00000000 answered
– Executing [1001@entry-from-bridge-api:1] AGI(“SIP/10005-00000000”, “agi://127.0.0.1:4574/xyz.agi”) in new stack
== Manager ‘admin’ logged off from 127.0.0.1
– AGI Script Executing Application: (BridgeWait) Options: (agent-hold-bridge,participant)
– SIP/10005-00000000 is entering waiting bridge agent-hold-bridge:091114cb-4808-4593-94f7-73f9829d1ae5
– Channel SIP/10005-00000000 joined ‘holding_bridge’ base-bridge <091114cb-4808-4593-94f7-73f9829d1ae5>
– Started music on hold, class ‘default’, on channel ‘SIP/10005-00000000’
0x7fd2d4008370 – Strict RTP switching to RTP target address 89.64.42.130:35644 as source
0x7fd2d4008370 – Strict RTP learning complete - Locking on source address 89.64.42.130:35644
– Stopped music on hold on SIP/10005-00000000
– Channel SIP/10005-00000000 left ‘holding_bridge’ base-bridge <091114cb-4808-4593-94f7-73f9829d1ae5>
– <SIP/10005-00000000>AGI Script agi://127.0.0.1:4574/xyz.agi, returning 4
== Spawn extension (entry-from-bridge-api, 1001, 1) exited non-zero on ‘SIP/10005-00000000’
[Oct 17 20:15:13] ERROR[3599]: manager.c:6660 process_message: Unable to process manager action ‘Challenge’. Asterisk is shutting down.
== Connect attempt from ‘127.0.0.1’ unable to authenticate
Asterisk cleanly ending (0).
Executing last minute cleanups
== Destroying musiconhold processes
== Manager unregistered action DBGet
== Manager unregistered action DBGetTree
== Manager unregistered action DBPut

Manager.conf

;
; Asterisk Call Management support
;

; By default asterisk will listen on localhost only.
[general]
enabled = yes
port = 5038
;indaddr = 127.0.0.1
bindaddr = 0.0.0.0

[admin]
secret =xyz123
;deny=0.0.0.0/0.0.0.0
permit=127.0.0.1
write = all
read = all
; No access is allowed by default.
; To set a password, create a file in /etc/asterisk/manager.d
; use creative permission games to allow other serivces to create their own
; files
#include “manager.d/*.conf”

Any tip will be appreciated here.
Thanks

2

It seems that admin requested a normal shutdown.

3

Thanks @david551 for your response,

Who is admin here? , the above problem i am facing in my Cloud base virtual Ubuntu machine. And how can i prevent this shutdown?

4

Asterisk does not enable any AMI accounts by default, so admin must be something you have added to the system, possibly by installing some sort of Asterisk GUI. Alternatively your system has been badly compromised and it has been added by the hacker.

5

Hi @david551

can you suggest what configuration I need to take into account to prevent hackers?

and I am using fast-agi on the same server to connect with my Java program for outgoing calls

Thanks

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.