Troubleshooting

Most incidents are handled from the portal, Diagnostics page (see Diagnostics), without SSH: health, live calls, live SIP capture, call trace, banned addresses, reloading and restarting FreeSWITCH. Each action there is recorded in the audit log, and also exists in the API and the MCP server.

Typical incidents

On the VM

The centrex commands run with the service’s settings: see Server settings.

Accounts

• Forgotten password: the “Forgot your password?” link on the sign-in page, or Resend invitation on the customer’s page. Without email set up: centrex inviter --courriel … prints the link.
• Two-step verification phone lost: an administrator resets it in the portal, or centrex reinitialiser-second-facteur --courriel … on the VM.
• Account locked after 5 failures: it unlocks by itself after 15 minutes.

FusionPBX interface

The PBX writes into FusionPBX, but its interface is closed: nginx does not serve it. For troubleshooting, open it locally for the time of the intervention. Do not change anything from this interface: the PBX would not find its settings there. Its dialplans look incomplete there, which is expected.

1. On the VM, install PHP-FPM and serve FusionPBX on the local address only:

   sudo apt install php8.4-fpm
   sudo tee /etc/nginx/sites-available/fusionpbx-local >/dev/null <<'NGINX'
   server {
   	listen 127.0.0.1:8081;
   	root /var/www/fusionpbx;
   	index index.php;
   	location / { try_files $uri $uri/ /index.php?$args; }
   	location ~ \.php$ {
   		include snippets/fastcgi-php.conf;
   		fastcgi_pass unix:/run/php/php8.4-fpm.sock;
   	}
   	location ~ /\. { deny all; }
   	location ~ \.(db|sql|conf)$ { deny all; }
   }
   NGINX
   sudo ln -s ../sites-available/fusionpbx-local /etc/nginx/sites-enabled/
   sudo nginx -t && sudo systemctl reload nginx
   

2. Create a FusionPBX superadmin account, as its installer does, in the default domain (the one created on first boot and named after the machine:

   read -r -s -p "Password: " MDP; echo
   HASH=$(MDP="$MDP" php -r 'echo password_hash(getenv("MDP"), PASSWORD_DEFAULT);')
   sudo -u postgres psql -v ON_ERROR_STOP=1 -v hash="$HASH" -v domaine="$(hostname -f)" fusionpbx <<'SQL'
   with d as (select domain_uuid from v_domains where domain_name = :'domaine'),
   u as (insert into v_users (user_uuid, domain_uuid, username, password, salt, user_enabled)
         select gen_random_uuid(), domain_uuid, 'depannage', :'hash', '', 'true' from d
         returning user_uuid, domain_uuid)
   insert into v_user_groups (user_group_uuid, domain_uuid, group_name, group_uuid, user_uuid)
   select gen_random_uuid(), u.domain_uuid, 'superadmin', g.group_uuid, u.user_uuid
   from u, v_groups g where g.group_name = 'superadmin';
   SQL
   

3. From your computer, open an SSH tunnel, then http://127.0.0.1:8081 in the browser:

   ssh -L 8081:127.0.0.1:8081 debian@VM
   

   Sign in as depannage@ followed by the machine name (hostname -f): the address 127.0.0.1 names no domain, the name after @ gives it.

4. After the intervention, close it again:

   sudo rm /etc/nginx/sites-enabled/fusionpbx-local && sudo systemctl reload nginx
   sudo systemctl disable --now php8.4-fpm
   sudo -u postgres psql fusionpbx -c "update v_users set user_enabled = 'false' where username = 'depannage'"
   

Vendor support

For an intervention by the vendor, open time-limited access: portal, Diagnostics page, Support access section, or centrex acces-assistance ouvrir --heures 24. It is closed by default, can be closed at any time, and each of its actions is in the audit log.