System information

The manager.conf configuration file also contains the configuration of AMI user ac-
counts. An account is created by adding a section with the username inside square
brackets. Within each [username] section there are options that can be set that will
apply only to that account. Table 20-2 lists the options available in a [username] section.
Table 20-2. Options for [username] sections
Option Value/Example Description
secret password Sets the password used for authentication. This must be set.
deny 0.0.0.0/0.0.0.0 Sets an IP address Access Control List (ACL) for addresses that
should be denied the ability to authenticate as this user. By
default this option is not set.
permit 192.168.1.0/255.255.255.0 Sets an IP address ACL for addresses that should be allowed
to authenticate as this user. As with deny, by default this
option is not set. Without these options set, any IP address
that can reach the AMI will be allowed to authenticate as
this user.
writetimeout 100 Sets the timeout used by Asterisk when writing data to the
AMI connection for this user. This option is specified in mil-
liseconds. The default value is 100.
displayconnects yes Also available in the [general] section (refer to
Table 20-1), but can be controlled on a per-user basis.
read system,call[,...] Defines which manager events this user will receive. By de-
fault, the user will receive no events. Table 20-3 covers the
available permission types for the read and write options.
write system,call[,...] Defines which manager actions this user is allowed to exe-
cute. By default, the user will not be able to execute any
actions. Table 20-3 covers the available permission types for
the read and write options.
eventfilter !Channel: DAHDI* Used to provide a whitelist- or blacklist-style filtering of
manager events before they are delivered to the AMI client
application. Filters are specified using a regular expression.
A specified filter is a whitelist filter unless preceded by an
exclamation point.
a
a
If no filters are specified, all events that are allowed based on the read option will be delivered. If only whitelist filters have been specified,
only events that match one of the filters will be delivered. If there are only blacklist-style filters, all events that do not match any of the
filters will be delivered. Finally, if there is a mix of whitelist- and blacklist-style filters, the whitelist filters will be processed first, and then
the blacklist filters.
As discussed in Table 20-2, the read and write options set which manager actions and
manager events a particular user has access to. Table 20-3 shows the available permis-
sion values that can be specified for these options.
462 | Chapter 20: Asterisk Manager Interface (AMI)