System information

Permission identifier read write
aoc Lets user see Advice of Charge events gener-
ated as AOC events are received.
Allows user to execute the AOCMessage manager
action, for sending out AOC messages.
a
This level has been defined, but it is not currently used anywhere in Asterisk.
b
This level has been defined, but it is not currently used anywhere in Asterisk.
c
The UserEvent action is a useful mechanism for having messages delivered to other AMI clients.
d
DTMF events will not be generated in a bridged call between two channels unless generic bridging in the Asterisk core is being used. For
example, if the DTMF is being transmitted with the media stream and the media stream is flowing directly between the two endpoints,
Asterisk will not be able to report the DTMF events.
http.conf
As we’ve seen, the Asterisk Manager Interface can be accessed over HTTP as well as
TCP. To make that work, a very simple HTTP server is embedded in Asterisk. All of
the options relevant to the AMI go in the [general] section of /etc/asterisk/http.conf.
Enabling access to the AMI over HTTP requires both /etc/asterisk/man-
ager.conf and /etc/asterisk/http.conf. The AMI must be enabled in man-
ager.conf, with the enabled option set to yes, and the manager.conf op-
tion webenabled must be set to yes to allow access over HTTP. Finally,
the enabled option in http.conf must be set to yes to turn on the HTTP
server itself.
The available options are listed in Table 20-4:
Table 20-4. Options in the http.conf [general] section
Option Value/Example Description
enabled yes Enables the built-in HTTP server. The default is no.
bindport 8088 Sets the port number to listen on for HTTP connections. The default is 8088.
bindaddr 127.0.0.1 Sets the address to listen on for HTTP connections. The default is to listen on all
addresses (0.0.0.0). However, it is highly recommended to set this to
127.0.0.1.
tlsenable yes Enables listening for HTTPS connections. The default is no. It is highly recom-
mended that you only use HTTPS if you wish to expose HTTP connectivity outside
of the local machine.
a
tlsbindport 8089 Sets the port to listen on for HTTPS connections. The default is 8089.
tlsbindaddr 0.0.0.0 Sets the address to listen on for TLS-enabled AMI connections. The default is to
listen on all addresses (0.0.0.0).
tlscertfile /var/lib/asterisk/
keys/asterisk.pem
Sets the path to the HTTPS server certificate. This is required if tlsenable is set
to yes.
tlsprivate
key
/var/lib/asterisk/
keys/private.pem
Sets the path to the HTTPS private key. If this is not specified, the tlscert
file will be checked to see if it also contains the private key.
464 | Chapter 20: Asterisk Manager Interface (AMI)