Ice error 1004 bbb

user gets ICE 1004 error when connecting with microphone in android mobile/tablet in chrome,We are Currently using BBB stable release-version 2.4 #14136

Describe the bug
When the user tries to join the audio in android mobile/tablet with Chrome especially in android 11, everytime user will get a «Failure on call (reason=ICE error) (error 1004)» error after allowing their browser to share the microphone .

To Reproduce
Steps to reproduce the behavior:

Make sure that the BigBlueButton server HTML5 client settings
(/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml) has
public.app.skipCheck set to true (this instructs the HTML5 client to skip the EchoTest)

Join a meeting from a browser that has not been allowed to share the microphone
with it

Choose to join with microphone

Allow the browser to use your microphone

Expected behavior
Audio conference should be joined without problems.

Actual behavior
A «Failure on call (reason=ICE error) (error 1004)» error is presented to the user,when
pushing neither «Microphone» or «Listen only»

Screenshots

• Device: Android Mobile/tablets.
• OS: Android 11
• Browser chrome
• Version [96.0.4]

The text was updated successfully, but these errors were encountered:

Источник

Error 1004 only on android smartphone google chrome #13008

I am getting this error «Failure on call (reason = ICE error) (error 1004)» on android smartphone in google chrome.
Firefox work normaly.
The problem also occurs on demo.bigbluebutton.org and test.bigbluebutton.org


Smartphone Samsung A31,A41 not work in default settings, Samsung A51 Work normal (not default)
Version Google chrome it’s the same everywhere 92,0,4515,131
Log Freeswitch
021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:5517 Set telephone-event payload to 110@48000
2021-08-16 14:24:53.312613 [DEBUG] mod_opus.c:613 Opus encoder: set bitrate to local settings [72000bps]
2021-08-16 14:24:53.312613 [DEBUG] mod_opus.c:613 Opus encoder: set bitrate to local settings [72000bps]
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:3847 Set Codec sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su opus/48000 20 ms 960 samples 0 bits 1 channels
2021-08-16 14:24:53.312613 [DEBUG] switch_core_codec.c:111 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su Original read codec set to opus:116
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4340 Searching for rtp candidate.
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4340 Searching for rtcp candidate.
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4387 Look for Relay Candidates as last resort
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4340 Searching for rtp candidate.
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4340 Searching for rtcp candidate.
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:4393 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su no suitable candidates found.
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:5860 Set telephone-event payload to 110@48000
2021-08-16 14:24:53.312613 [DEBUG] switch_core_media.c:5918 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su Set 2833 dtmf send payload to 110 recv payload to 110
2021-08-16 14:24:53.312613 [NOTICE] switch_channel.c:3908 Hangup sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su [CS_EXECUTE] [INCOMPATIBLE_DESTINATION]
2021-08-16 14:24:53.312613 [DEBUG] switch_core_session.c:2914 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:651 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State EXECUTE going to sleep
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:585 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) Running State Change CS_HANGUP (Cur 2 Tot 4)
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:848 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) Callstate Change RINGING -> HANGUP
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:850 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State HANGUP
2021-08-16 14:24:53.312613 [DEBUG] mod_sofia.c:453 Channel sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su hanging up, cause: INCOMPATIBLE_DESTINATION
2021-08-16 14:24:53.312613 [DEBUG] mod_sofia.c:598 Responding to INVITE with: 488
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:60 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su Standard HANGUP, cause: INCOMPATIBLE_DESTINATION
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:850 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State HANGUP going to sleep
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:620 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State Change CS_HANGUP -> CS_REPORTING
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:585 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) Running State Change CS_REPORTING (Cur 2 Tot 4)
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:936 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State REPORTING
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:174 sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su Standard REPORTING, cause: INCOMPATIBLE_DESTINATION
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:936 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State REPORTING going to sleep
2021-08-16 14:24:53.312613 [DEBUG] switch_core_state_machine.c:611 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) State Change CS_REPORTING -> CS_DESTROY
2021-08-16 14:24:53.312613 [DEBUG] switch_core_session.c:1736 Session 4 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) Locked, Waiting on external entities
2021-08-16 14:24:53.312613 [NOTICE] switch_core_session.c:1754 Session 4 (sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su) Ended
2021-08-16 14:24:53.312613 [NOTICE] switch_core_session.c:1758 Close Channel sofia/external/w_0mkxbakjxpqc_23-bbbID-R@conf2.biot.su [CS_DESTROY]

The text was updated successfully, but these errors were encountered:

@Amorthis Can you please confirm whether cameras/listen only aren’t working as well?

Simply click on ‘Gather candidates’ button and tell us if you get any candidate from your Samsung device. You may be hitting a bug

I am testing 2.2 and 2.3 version. In my subdomain conf 2.2.
I see only black area in Webcam zone. Another team don’t see my connection.
when I connect to the problematic device, I see a black square at the place of the video, I hear the rest of the conference participants, but they do not see me or hear me.
this problem has appeared in the last 2 months

In Google Chrome on a41 problem

In Firefox on a41 no problem

Thanks. It seems you are hitting a bug related to Chrome/Samsung browsers (not all, but specific devices) where the browser hangs at the beginning of media connection (for audio/video/screenshare).

Источник

Failure On Call (reason=ICE Error) (Error 1004) #14463

I am planning to install BBB (Version 2.4.4) in Ubuntu 18.04 (Aws).
I have installed using the instructions given in https://docs.bigbluebutton.org/2.4/install.html#minimum-server-requirements
But after the installation I got an error and not able to enable the microphone it constantly threw 1004 errors in

Ubuntu 20.04 Google Chrome Version 98.0.4758.102 (Official Build) (64-bit) but it was working fine in Mozilla.

Throwing error Mac Google Chrome Version 98.0.4758.109 (Official Build) (64-bit) but it was working fine in Safari.

But in Windows PC, it was working fine in both Chrome and Mozilla.

I thought it was my installation issue but I found that https://test.bigbluebutton.org/ and https://test24.bigbluebutton.org/

Here am attaching a screenshot from https://test.bigbluebutton.org/

A clear and concise description of what the bug is.

Installation type
wget -qO- https://ubuntu.bigbluebutton.org/bbb-install.sh | bash -s — -v bionic-240 -s bbb.example.com -e notice@example.com -a -w

Firewall and IP address type
Is your server behind a NAT or firewall? Yes
Does your BBB server have its own IPv4 address? Yes

Console output

Additional context
I thought it was my installation issue but I found that https://test.bigbluebutton.org/ and https://test24.bigbluebutton.org/

The text was updated successfully, but these errors were encountered:

That’s exactly something I’m experiencing. It also happens in some phones (with both Chrome and Firefox).
I’ve tried the only solution provided here But it doesn’t work.

Additional: I’ve checked freeswitch log in my case. The only thing looks suspicious is hangup with [INCOMPATIBLE_DESTINATION] and then [CS_DESTROY] .

Looking at this and wondering if its related to #7547

@ffdixon thanks for your quick response. Please can you suggest some ETA for this issue?

Looking at this and wondering if its related to #7547

Since mDNS candidates should be either resolvable (or can be ignored) as of FS 1.10.7, the client-side filtering is obsolete and can probably be phased out. It might be able to attenuate this scenario by providing at least some candidate to be parsed (avoiding the incompatible destination error) and giving a chance for the connection to be established through a peer reflexive candidate (because mDNS probably won’t work at all).

Although the actual question is: what kind of heuristic (or bug) is kicking in Chrome that would prevent (or delay) the generation of relay / srflx candidates?

@shivaprasad573 , could you please share bbb-html5 and FreeSWITCH logs ?

Also, are you behind a restrictive network/firewall ? If so, please tell us which ports are blocked, so we might be able to reproduce your scenario here.

These are the logs that are printed in the browser console

Hi @mariogasparoni i am also facing the same issue after installing the bigbluebutton and tried to join the meeting facing the same ICE error please update the solution for this issue.
please review the comment, thanks

BBB is working fine in 99.8% of the cases, the rest 0.2% are facing ICE 1004 issue in their devices. A particular customer, who is facing this issue, is using a latest SAMSUNG device with android version 11 and latest chrome version. We adviced them to clear the browser cache, asked them to reinstall chrome still the issue prevailed. And when installed a latest firefox and tried connecting, the audio connected successfully once and after that the same ICE 1004 error appeared whenever try connecting to the meeting.

@Kernelogy what version of bbb. sudo bbb-conf —check will tell you?

BigBlueButton Server 2.4.2 (2885)
Kernel version: 5.4.0-1061-aws
Distribution: Ubuntu 18.04.6 LTS (64-bit)
Memory: 32882 MB
CPU cores: 8

Источник

Error 1004 (reason=Incompatible SDP) (error 1004) #9088

Hi guys, I use BBB from Chrome (Moodle). I was not occuring an error but since yesterday it started to give error 1004 reason Incompatibe SDP. What should I do?

The text was updated successfully, but these errors were encountered:

Please open https://test.webrtc.org/ and start the test.
Are you the administrator of that BigBlueButton server? If yes, please run bbb-conf —check .
Additionally, can you test again on https://test.bigbluebutton.org/ and let us know if you still encounter the error?

Hi, I am getting the same error on my fresh setup. Webcam works fine, but no voice is possible.

The test with https://test.bigbluebutton.org/ is fine, so it seems that I need to change something in my setup. I did not change any config files, just took a quick out-of-the-box test and noticed the problem.
BTW: Took a Scaleway Instance to run BBB, if that helps in any way. Used the bbb-install.sh script with Greenlight and my own domain.

bbb-conf —check output

I changed the Domain and Public IP Adress for privacy reasons.

On the test environment I checked the console in Chrome and received two candidates for the connection.
sip.invitecontext.mediahandler | ICE candidate received:

But on my own instance there is no message like that in the console.

It seems that I missed something. In my Scaleway Dashboard I set the Security Group for my bbb instance to allow all udp and tcp connections/ports.

Источник

bbb-docker on AWS: ICE ERROR — 1004 #142

Describe the bug:
When starting a new video call from greenlight, when clicking the «mic» option in the pop up the audio test fails and i get the 1004 error.

Setup:
I have been following the instructions on github using as development server a c5.xlarge with ubuntu-focal-20.04 on AWS as suggested in https://docs.bigbluebutton.org/2.2/install.html#minimum-server-requirements.

My .env file has been generated using the ./scripts/setup from the github docs mentioned above:
bbb-docker-env.txt
Here instead you have my freeswitch container log where the error arises:
freeswitch-container-log.txt

2021-07-29 07:13:06.425040 [ERR] switch_core_media.c:9685 AUDIO RTP REPORTS ERROR: [Bind Error! my.external.ipv4.address:18158]
I did check the connectivity on that port via nc and it seems alright.

Expected behavior:
The call should start

Actual behavior:
User gets 1004 Error, the call fails

Additional context:
My first idea was a problem with AWS inbounds rules of the security group, this is my actual setup:

The text was updated successfully, but these errors were encountered:

Источник

Hi,

I have installed a new BBB and coturnserver in the latest versions,
where the Coturn server is not working, when I force its usage via firefox with
about:config , media.peerconfiguration.relay_only true.

Intenal usage of BBB works and external useage with firefox option «media.peerconfiguration.relay_only» = false
also works

about:webrtc
in firefox shows from the IP from my home provider to the external IP of the BBB server:
with firefox option «media.peerconfiguration.relay_only» = false

ICE State        Nominated        Selected        Local Candidate        Remote Candidate        Component ID        Priority        Bytes sent:        Bytes received:
succeeded        true        true        109.40.0.6:30836/udp(prflx) [non-proxied]        192.192.192.141:27540/udp(host)        1        7962083765461713000        37262        3063599
succeeded        true        true        109.40.0.6:30836/udp(prflx) [non-proxied]        192.192.192.141:27540/udp(host)        1        7962083765461713000        37262        3063599

To test the Coturn server, I do a about:config in firefox and set
media.peerconfiguration.relay_only true

Then the BBB connection fails with errors:

Audio: Failure on call (reson ICE error) (error 1004)
Video: Connection failure (ICE error 1107)

about:webrtc in firefox shows nothing !

ICE Stats
ICE State        Nominated        Selected        Local Candidate        Remote Candidate        Component ID        Priority        Bytes sent:        Bytes received:
ICE restarts:0
ICE rollbacks:0

when I run the turnserver
command on the turn server, then I see an endless error message

1: Trying to bind fd 42 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
bind: Address already in use
1: Trying to bind fd 13 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
bind: Address already in use
[…]

maybe this is the issue ??

I have just reinstalled the coturn server from scratch and redid the config according to
https://docs.bigbluebutton.org/admin/setup-turn-server.html
which didn’t change a thing.
I did not change anything to the network configuration on the coturn server:

>ip addr

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:1d:eb:81 brd ff:ff:ff:ff:ff:ff
    inet 10.1.2.251/24 brd 10.1.255.255 scope global ens160
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe1d:eb81/64 scope link
       valid_lft forever preferred_lft forever

On the main BBB server I had to add the external IP address to the loopback adapter because BBB would not work without it.

/etc/network/interfaces
———————————————————————
# ifupdown has been replaced by netplan(5) on this system.  See
# /etc/netplan for current configuration.
# To re-enable ifupdown on this system, you can run:
#    sudo apt install ifupdown

# The loopback network interface
auto lo
iface lo inet loopback
        post-up ip addr add 192.192.192.141/32 dev lo
        pre-down ip addr del 192.192.192.141/32 dev lo
———————————————————————
I had to add this to  /etc/network/interfaces
on the BBB server because this would not work in the /etc/netplan   file.

I did not create such an interface on the coturn server (is a fresh reinstall)

I have now come to the point where I do not know what to do next.
The communications from the BBB server to the Turn server works without any issues (no errors, see bbb-conf —check below).

— Internal users can use BBB without any issues and errors.
— Users in a home setup can also use BBB without any issues and errors.
— Only users behind a restrictive firewall have issues.

Here my config files (with modified IPs/hostnames for this article):

———————————————————————————

BBB server
———-
— Ubuntu 18.04.6 LTS (GNU/Linux 4.15.0-166-generic x86_64)
— External firewall IP 192.192.192.141 (changed for this posting)
— internal 10.1.2.250
— b.testdomain.com (changed for this posting)
— deactivated ufw firewall (for testing)
— otherwise port setup
To                         Action      From
—                         ——      —-
OpenSSH                    ALLOW       Anywhere
80/tcp                     ALLOW       Anywhere
443/tcp                    ALLOW       Anywhere
16384:32768/udp            ALLOW       Anywhere
Nginx Full                 ALLOW       Anywhere
49152:65535/udp            ALLOW       Anywhere
OpenSSH (v6)               ALLOW       Anywhere (v6)
80/tcp (v6)                ALLOW       Anywhere (v6)
443/tcp (v6)               ALLOW       Anywhere (v6)
16384:32768/udp (v6)       ALLOW       Anywhere (v6)
Nginx Full (v6)            ALLOW       Anywhere (v6)
49152:65535/udp (v6)       ALLOW       Anywhere (v6)

> bbb-conf —check

BigBlueButton Server 2.4.0 (2818)
                    Kernel version: 4.15.0-166-generic
                      Distribution: Ubuntu 18.04.6 LTS (64-bit)
                            Memory: 32939 MB
                         CPU cores: 8

/etc/bigbluebutton/bbb-web.properties (override for bbb-web)
/usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties (bbb-web)
       bigbluebutton.web.serverURL: https://b.testdomain.com
                defaultGuestPolicy: ALWAYS_ACCEPT
                 svgImagesRequired: true
              defaultMeetingLayout: SMART_LAYOUT

/etc/nginx/sites-available/bigbluebutton (nginx)
                       server_name: b.testdomain.com
                              port: 80, [::]:80
                              port: 443 ssl

/opt/freeswitch/etc/freeswitch/vars.xml (FreeSWITCH)
                       local_ip_v4: 10.1.2.250
                   external_rtp_ip: 192.192.192.141
                   external_sip_ip: 192.192.192.141

/opt/freeswitch/etc/freeswitch/sip_profiles/external.xml (FreeSWITCH)
                        ext-rtp-ip: $${external_rtp_ip}
                        ext-sip-ip: $${external_sip_ip}
                        ws-binding: 192.192.192.141:5066
                       wss-binding: 192.192.192.141:7443

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)
                     playback_host: b.testdomain.com
                 playback_protocol: https
                            ffmpeg: 4.2.4-1ubuntu0.1bbb2~18.04

/etc/bigbluebutton/nginx/sip.nginx (sip.nginx)
                        proxy_pass: 192.192.192.141
                          protocol: http

/usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml (Kurento SFU)
/etc/bigbluebutton/bbb-webrtc-sfu/production.yml (Kurento SFU — override)
                        kurento.ip: 10.1.2.250
                       kurento.url: ws://127.0.0.1:8888/kurento
                    kurento.sip_ip: 192.192.192.141
               recordScreenSharing: true
                     recordWebcams: true
                  codec_video_main: VP8
               codec_video_content: VP8

/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml (HTML5 client)
/etc/bigbluebutton/bbb-html5.yml (HTML5 client config override)
                             build: 2440
                        kurentoUrl: wss://b.testdomain.com/bbb-webrtc-sfu
                  enableListenOnly: true
                    sipjsHackViaWs: true

/usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml (STUN Server)
                              stun: b2.testdomain.com

/etc/kurento/modules/kurento/WebRtcEndpoint.conf.ini (STUN Server)
                              stun: 10.1.2.251:3478

# Potential problems described below

=============================================================================

Coturn server
————-
— Ubuntu 20.04.3 LTS (GNU/Linux 5.4.0-92-generic x86_64)
— External firewall IP 192.192.192.142 (changed for this posting)
— internal 10.1.2.251
— b2.testdomain.com (changed for this posting)
— deactivated ufw firewall (for testing)
— otherwise port setup
To                         Action      From
—                         ——      —-
80/tcp                     ALLOW       Anywhere
443/udp                    ALLOW       Anywhere
443/tcp                    ALLOW       Anywhere
3478/tcp                   ALLOW       Anywhere
3478/udp                   ALLOW       Anywhere
49152:65535/udp            ALLOW       Anywhere
OpenSSH                    ALLOW       Anywhere
80/tcp (v6)                ALLOW       Anywhere (v6)
443/udp (v6)               ALLOW       Anywhere (v6)
443/tcp (v6)               ALLOW       Anywhere (v6)
3478/tcp (v6)              ALLOW       Anywhere (v6)
3478/udp (v6)              ALLOW       Anywhere (v6)
49152:65535/udp (v6)       ALLOW       Anywhere (v6)
OpenSSH (v6)               ALLOW       Anywhere (v6)

/etc/turnserver.conf
—————————————————————————
listening-port=3478
tls-listening-port=443
#
# BBB will not work work when using this
# listening-ip=192.192.192.142
#
relay-ip=192.192.192.142
#
# Have to use this instead
external-ip=192.192.192.142/10.1.2.251
#
verbose
fingerprint
lt-cred-mech
use-auth-secret
static-auth-secret=test1234567890(we-use-different-pw)
realm=testdomain.com
cert=/etc/turnserver/fullchain.pem
pkey=/etc/turnserver/privkey.pem
cipher-list=»ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384″
dh-file=/etc/turnserver/dhp.pem
syslog
keep-address-family
no-cli
no-tlsv1
no-tlsv1_1
no-loopback-peers
no-multicast-peers
denied-peer-ip=10.0.0.0-10.255.255.255
denied-peer-ip=172.16.0.0-172.31.255.255
denied-peer-ip=192.168.0.0-192.168.255.255
denied-peer-ip=100.64.0.0-100.127.255.255
denied-peer-ip=169.254.0.0-169.254.255.255
denied-peer-ip=192.0.0.0-192.0.0.255
denied-peer-ip=192.0.2.0-192.0.2.255
denied-peer-ip=198.18.0.0-198.19.255.255
denied-peer-ip=198.51.100.0-198.51.100.255
denied-peer-ip=203.0.113.0-203.0.113.255
denied-peer-ip=fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
denied-peer-ip=fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff
denied-peer-ip=::ffff:0:0-::ffff:ffff:ffff
denied-peer-ip=64:ff9b::-64:ff9b::ffff:ffff
denied-peer-ip=64:ff9b:1::-64:ff9b:1:ffff:ffff:ffff:ffff:ffff
denied-peer-ip=2001::-2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff
denied-peer-ip=2001:db8::-2001:db8:ffff:ffff:ffff:ffff:ffff:ffff
denied-peer-ip=2002::-2002:ffff:ffff:ffff:ffff:ffff:ffff:ffff
—————————————————————————

> turnserver

0: log file opened: /var/log/turnserver/turn_1797_2022-01-10.log
0: Relay address to use: 192.192.192.142
0: Bad configuration format: no-loopback-peers
0: Black listing: 10.0.0.0-10.255.255.255
0: Black listing: 172.16.0.0-172.31.255.255
0: Black listing: 192.168.0.0-192.168.255.255
0: Black listing: 100.64.0.0-100.127.255.255
0: Black listing: 169.254.0.0-169.254.255.255
0: Black listing: 192.0.0.0-192.0.0.255
0: Black listing: 192.0.2.0-192.0.2.255
0: Black listing: 198.18.0.0-198.19.255.255
0: Black listing: 198.51.100.0-198.51.100.255
0: Black listing: 203.0.113.0-203.0.113.255
0: Black listing: fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
0: Black listing: fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff
0: Black listing: ::ffff:0:0-::ffff:ffff:ffff
0: Black listing: 64:ff9b::-64:ff9b::ffff:ffff
0: Black listing: 64:ff9b:1::-64:ff9b:1:ffff:ffff:ffff:ffff:ffff
0: Black listing: 2001::-2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff
0: Black listing: 2001:db8::-2001:db8:ffff:ffff:ffff:ffff:ffff:ffff
0: Black listing: 2002::-2002:ffff:ffff:ffff:ffff:ffff:ffff:ffff
0: Config file found: /root/../etc/turnserver.conf
0: Bad configuration format: no-loopback-peers
0:
RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server
Version Coturn-4.5.1.1 ‘dan Eider’
0:
Max number of open files/sockets allowed for this process: 1048576
0:
Due to the open files/sockets limitation,
max supported number of TURN Sessions possible is: 524000 (approximately)
0:

==== Show him the instruments, Practical Frost: ====

0: TLS supported
0: DTLS supported
0: DTLS 1.2 supported
0: TURN/STUN ALPN supported
0: Third-party authorization (oAuth) supported
0: GCM (AEAD) supported
0: OpenSSL compile-time version: OpenSSL 1.1.1f  31 Mar 2020 (0x1010106f)
0:
0: SQLite supported, default database location is /var/lib/turn/turndb
0: Redis supported
0: PostgreSQL supported
0: MySQL supported
0: MongoDB is not supported
0:
0: Default Net Engine version: 3 (UDP thread per CPU core)

=====================================================

0: Domain name:
0: Default realm: testdomain.com
0:
CONFIGURATION ALERT: You specified —lt-cred-mech and —use-auth-secret in the same time.
Be aware that you could not mix the username/password and the shared secret based auth methohds.
Shared secret overrides username/password based auth method. Check your configuration!
0: ERROR:
CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!
0: SSL23: Certificate file found: /etc/turnserver/fullchain.pem
0: SSL23: Private key file found: /etc/turnserver/privkey.pem
0: TLS1.2: Certificate file found: /etc/turnserver/fullchain.pem
0: TLS1.2: Private key file found: /etc/turnserver/privkey.pem
0: TLS cipher suite: ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
0: DTLS: Certificate file found: /etc/turnserver/fullchain.pem
0: DTLS: Private key file found: /etc/turnserver/privkey.pem
0: DTLS1.2: Certificate file found: /etc/turnserver/fullchain.pem
0: DTLS1.2: Private key file found: /etc/turnserver/privkey.pem
0: DTLS cipher suite: ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
0: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED
0: ===========Discovering listener addresses: =========
0: Listener address to use: 127.0.0.1
0: Listener address to use: 10.1.2.251
0: Listener address to use: ::1
0: =====================================================
0: Total: 1 ‘real’ addresses discovered
0: =====================================================
0: pid file created: /var/run/turnserver.pid
0: IO method (main listener thread): epoll (with changelist)
0: Wait for relay ports initialization…
0:   relay 192.192.192.142 initialization…
0:   relay 192.192.192.142 initialization done
0: Relay ports initialization done
0: IO method (general relay thread): epoll (with changelist)
1: turn server id=1 created
bind: Address already in use
1: IO method (general relay thread): epoll (with changelist)
1: turn server id=0 created
1: IPv4. DTLS/UDP listener opened on: 127.0.0.1:3478
1: IPv4. DTLS/UDP listener opened on: 127.0.0.1:3479
1: IPv4. DTLS/UDP listener opened on: 127.0.0.1:443
1: IPv4. DTLS/UDP listener opened on: 127.0.0.1:444
1: IPv4. DTLS/UDP listener opened on: 10.1.2.251:3478
1: IPv4. DTLS/UDP listener opened on: 10.1.2.251:3479
1: IPv4. DTLS/UDP listener opened on: 10.1.2.251:443
1: IPv4. DTLS/UDP listener opened on: 10.1.2.251:444
1: IPv6. DTLS/UDP listener opened on: ::1:3478
1: IPv6. DTLS/UDP listener opened on: ::1:3479
1: IPv6. DTLS/UDP listener opened on: ::1:443
1: IPv6. DTLS/UDP listener opened on: ::1:444
1: Total General servers: 2
bind: Address already in use
1: Trying to bind fd 13 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
1: Trying to bind fd 42 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
1: IO method (admin thread): epoll (with changelist)
1: IO method (auth thread): epoll (with changelist)
1: IO method (auth thread): epoll (with changelist)
1: SQLite DB connection success: /var/lib/turn/turndb
bind: Address already in use
1: Trying to bind fd 13 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
bind: Address already in use
1: Trying to bind fd 42 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
bind: Address already in use
1: Trying to bind fd 13 to <127.0.0.1:3478>: errno=98
Cannot bind local socket to addr: Address already in use
1: Cannot bind TLS/TCP listener socket to addr 127.0.0.1:3478
1: Trying to bind TLS/TCP listener socket to addr 127.0.0.1:3478, again…
bind: Address already in use
^C

External firewall setup
—————————————————————————
— for BBB server
Allow TCP 80
Allow TCP-UDP 443
Allow UDP 16384-32768
Any-External -> SNAT 192.192.192.141 -> 10.1.2.250

— for Coturn server
Allow TCP 80
Allow TCP-UDP 443
Allow TCP-UDP 3478
Allow UDP 49152-65535
Any-External -> SNAT 192.192.192.142 -> 10.1.2.251

—————————————————————————

I appreciate if one of you have an idea which will help me fix the issue

thank you,

Best
J.Mann

Была ли эта страница полезной?

0 / 5 — 0 рейтинги

If you encountered any problems with the installation of BigBlueButton, this section covers how to resolve many of the common issues.

If you have not already done so, read through the getting help section.

Introduction

Start here: run sudo bbb-conf --check

We’ve built in a BigBlueButton configuration utility, called bbb-conf, to help you configure your BigBlueButton server and troubleshoot your setup if something doesn’t work right.

If you think something isn’t working correctly, the first step is enter the following command.

This will check your setup to ensure the correct processes are running, the BigBlueButton components have correctly started, and look for common configuration problems that might prevent BigBlueButton from working properly.

If you see text after the line ** Potential problems described below **, then it may be warnings (which you can ignore if you’ve change settings) or errors with the setup.

Recording

Recording not processing after upgrading

If after updating from BigBlueButton 2.0 to BigBlueButton 2.2 your recordings are not processing, and if you are seeing Permission denied errors in /var/log/bigbluebutton/bbb-rap-worker.log

I, [2019-06-07T14:26:09.034878 #14808]  INFO -- : /usr/lib/ruby/2.5.0/logger.rb:754:in `initialize': Permission denied @ rb_sysopen - /var/log/bigbluebutton/presentation/process-02feca80700b3e95b877af85db972904397857a1-1559909318977.log (Errno::EACCES)

You can resolve the errors with the following command

$ sudo chown -hR bigbluebutton:bigbluebutton /var/log/bigbluebutton/presentation /var/log/bigbluebutton/screenshare

and then rebuild the recordings that had not yet processed. You can see the list of recordings with

and then to rebuild a recording, use sudo bbb-record --rebuild <internal_meeting_id>, as in

$ sudo bbb-record --rebuild 298b06603719217df51c5d030b6e9417cc036476-1559314745219

Webcams/screen sharing aren’t working

Certify that appropriate external addresses have been set for mediasoup. When installed via packages, mediasoup IPs are normally misconfigured. If installed via bbb-install, then IPv4 is generally correct, but IPv6 might be absent.

Nonetheless, we recommend double-checking the instructions in Updating mediasoup.

Configure mediasoup to use IPv6

mediasoup (bbb-webrtc-sfu) does not come with a IPv6 enabled by default when installed either via packages or bbb-install.

To configure IPv6, bbb-webrtc-sfu’s override configuration file (located in /etc/bigbluebutton/bbb-webrtc-sfu/production.yml) should be used.

See Updating mediasoup for instructions and examples on how to do so.

I’m having troubles seeing webcams or screen sharing in Firefox

That’s usually the symptom of a known Firefox issue where it doesn’t comply with ICE-lite implementations (and mediasoup is one).

This issue can be worked around by forcing TURN usage in Firefox user agents. To achieve that, set the public.kurento.forceRelayOnFirefox configuration to true in /etc/bigbluebutton/bbb-html5.yml. For example:

public:
  kurento:
    forceRelayOnFirefox: true

How often does this Firefox issue happens?

Short (non) answer: that’s difficult to measure.

Every Firefox installation is prone to the lack of ICE-lite spec compliance. However, the issue doesn’t manifest itself on all Firefox installations as it is dependent on how the end user’s network topology is organized. It’s generally a small subset of Firefox users, but that can vary depending on the user base.

Where can I track progress on a definitive solution or better workaround?

This is a Firefox bug, so the best place to get an overview on progress and what the issue is about is Mozilla’s issue.

You can also track BigBlueButton’s issue for updates on additional workarounds.

Why isn’t forceRelayOnFirefox enabled by default?

It’s not on by default because bigbluebutton does not come with a TURN server by default, and that’s what versioned-in-code setting presumes.

How do I know if mediasoup is being used?

The most direct and precise way to figure out whether mediasoup is being used is checking about:webrtc (Firefox) or chrome://webrtc-internals. For example: open one of those, share a camera. Look for the remote description (SDP); see if it contains mediasoup-client in the SDP header. If it does, you’re using mediasoup.

Regardless of that: mediasoup is the default in 2.5 and should always be used unless default settings were explicitly changed.

mediasoup is the default in 2.5. Why is Kurento still around?

Because Kurento is still used for stream recording. It should be removed as a dependency as soon as this issue is addressed.

Is single-core performance still important with mediasoup?

Yes.

How can I control the number of mediasoup workers?

To control the number of mediasoup workers, bbb-webrtc-sfu’s override configuration file (located in /etc/bigbluebutton/bbb-webrtc-sfu/production.yml) should be used.

There are a couple of configurations of interest here:

mediasoup.workers

This configuration controls the number of mediasoup workers intended for general use (media type agnostic, shared pool).

Accepted values are:

• "auto" (default): creates ceil((min(nproc,32) * 0.8) + (max(0, nproc - 32) / 2)) workers;
• "cores": creates workers up to the host’s core count (as provided by os.cpus().length);
• <Number>: overrides the number of workers with a fixed value;
• The default and fallback values are auto.

For example:

• To set the number of workers to cores: yq w -i /etc/bigbluebutton/bbb-webrtc-sfu/production.yml mediasoup.workers "cores"

mediasoup.dedicatedMediaTypeWorkers

This configuration controls the number of mediasoup workers to be used by specific media types.
If a dedicated pool is set, streams of its media type will always land on it. Otherwise, they will use the shared pool.

The configuration is an object of the following format:

mediasoup.dedicatedMediaTypeWorkers:
   audio: "auto"|"cores"|<Number>
   main: "auto"|"cores"|<Number>
   content: "auto"|"cores"|<Number>

The semantics of auto, cores and Number are the same as in the mediasoup.workers configuration. Default values for all media types are 0 (no dedicated workers).

The media types semantics are:

• audio: audio (listen only, microphone) streams;
• main: webcam video streams;
• content: screen sharing streams (audio and video).

For example:

• To set the number of dedicated audio workers to auto: yq w -i /etc/bigbluebutton/bbb-webrtc-sfu/production.yml mediasoup.dedicatedMediaTypeWorkers.audio "auto"

Can I scale the number of streams up indefinitely with mediasoup?

No. Scalability improves a lot with mediasoup, but there are still a couple of bottlenecks that can be hit as far as far as the media stack is concerned. Namely:

• The signaling server (bbb-webrtc-sfu): it does not scale vertically indefinitely. There’s always work ongoing on this area that can be tracked in this issue;
• The mediasoup worker balancing algorithm implemented by bbb-webrtc-sfu is still focused on multiparty meetings with a restrained number of users. If your goal is thousand-user 1-N (streaming-like) meetings, you may max out CPU usage on certain mediasoup workers even though there are other idle oworkers free.

Kurento

WebRTC video not working with Kurento

Check the value for /proc/sys/net/ipv4/tcp_syncookies that it contains the value 1.

$ cat /proc/sys/net/ipv4/tcp_syncookies
1

If not, edit /etc/sysctl.conf and set the value for net.ipv4.tcp_syncookies to 1.

net.ipv4.tcp_syncookies = 1

Save the file and restart.

Unit kurento-media-server.service is masked

If sudo bbb-conf --check returns the warning

Restarting BigBlueButton 2.0.0-RC9 (and cleaning out all log files) ...
Stopping BigBlueButton
 ... cleaning log files
Starting BigBlueButton
Failed to start kurento-media-server.service: Unit kurento-media-server.service is masked.

You can unmask Kurento using the command

$ systemctl unmask kurento-media-server.service

The default installation of BigBlueButton should work in most netowrk configurations; however, if your users ae behind a restrictive network that blocks outgoing UDP connections, they may encounter 1020 errors (media unable to reach server).

If you get reports of these errors, setup TURN server to help their browsers send WebRTC audio and video streams via TCP over port 443 to the TURN server. The TURN server will then relay the media to your BigBlueButton server.

See Configure TURN.

FreeSWITCH

Configure BigBluebutton/FreeSWITCH to support IPV6

The HTML5 client now enables users on mobile devices to connect to a BigBlueButton server. However, on some cellular networks iOS devices only receive an IPV6 address.

To enable BigBlueButton (FreeSWITCH) to accept incoming web socket connections on IPV6, the BigBlueButton server must have an IPV6 address. You also need to make the following changes to the server.

First, create the file /etc/nginx/conf.d/bigbluebutton_sip_addr_map.conf with this content:

map $remote_addr $freeswitch_addr {
    "~:"    [2001:db8::1];
    default    192.0.2.1;
}

replacing the ip addresses 192.0.2.1 with the system’s external IPV4 addresses, and replace 2001:db8::1 with the system’s external IPV6 address. Next, edit the file /etc/bigbluebutton/nginx/sip.nginx to have the following:

proxy_pass https://$freeswitch_addr:7443;

Next, ensure all of the following params are present in freeswitch’s sip_profiles/external-ipv6.xml:

• ws-binding
• wss-binding
• rtcp-audio-interval-msec
• rtcp-video-interval-msec
• dtmf-type
• liberal-dtmf
• enable-3pcc

If any are missing, copy them from sip_profiles/external.xml, then restart BigBlueButton (sudo bbb-conf --restart).

FreeSWITCH fails to bind to IPV4

In rare occasions after shutdown/restart, the FreeSWITCH database can get corrupted. This will cause FreeSWITCH to have problems binding to IPV4 address (you may see error 1006 when users try to connect).

To check, look in /opt/freeswitch/var/log/freeswitch/freeswitch.log for errors related to loading the database.

2018-10-25 11:05:11.444727 [ERR] switch_core_db.c:108 SQL ERR [unsupported file format]
2018-10-25 11:05:11.444737 [ERR] switch_core_db.c:223 SQL ERR [unsupported file format]
2018-10-25 11:05:11.444759 [NOTICE] sofia.c:5949 Started Profile internal-ipv6 [sofia_reg_internal-ipv6]
2018-10-25 11:05:11.444767 [CRIT] switch_core_sqldb.c:508 Failure to connect to CORE_DB sofia_reg_external!
2018-10-25 11:05:11.444772 [CRIT] sofia.c:3049 Cannot Open SQL Database [external]!

If you see these errors, clear the FreeSWITCH database (BigBlueButton doesn’t use the database and FreeSWITCH will recreate it on startup).

$ sudo systemctl stop freeswitch
$ rm -rf /opt/freeswitch/var/lib/freeswitch/db/*
$ sudo systemctl start freeswitch

Forward calls from an Asterisk server to FreeSWITCH

Let’s assume the following:

asterisk server ip:          192.168.1.100
bigbluebutton/freeswitch ip: 192.168.1.200

Changes to your Asterisk server

Setup your gateway to BigBlueButton/FreeSWITCH. in /etc/asterisk/sip.conf add

[fs-gw]
type=peer
username=fs-gw
insecure=very
contactpermit=192.168.1.200/255.255.255.255
qualify=no
nat=yes
host=192.168.1.200
canreinvite=no
disallow=all
allow=ulaw

Route the calls to the gateway. In /etc/asterisk/extensions.conf context where your calls are being handled, forward the calls to the gateway. Here, when someone dials 85001, the call is sent to the fs-gw defined above.

exten => 85001,1,Dial(SIP/fs-gw/${EXTEN})
exten => 85001,2,Hangup

Changes to your BigBlueButton/FreeSWITCH server

In BigBlueButton/FreeSWITCH, make the following changes:

Lock down so that only Asterisk can forward calls to FreeSWITCH. In /opt/freeswitch/conf/autoload_configs/acl.conf.xml, add the following ACL. We also need to allow BigBlueButton to call into FreeSWITCH, that’s why we add the IP of BigBlueButton/FreeSWITCH into the ACL.

    <list name="asterisk-gw" default="deny">
       <node type="allow" cidr="192.168.1.200/32"/>
       <node type="allow" cidr="192.168.1.100/32"/>
       <node type="allow" cidr="127.0.0.1/32"/>
    </list>

Then we apply the ACL into the profile that receives the calls from external gateways. In /opt/freeswitch/conf/sip_profiles/external.xml, add the ACL under <settings>

  <settings>
    <!-- Apply ACL from asterisk-gw -->
    <param name="apply-inbound-acl" value="asterisk-gw"/>
...
</settings>

To debug, try connecting to FS CLI and increase logging level. Once connected, make your call and see what the logs say.

$ /opt/freeswitch/bin/fs_cli -p $(xmlstarlet sel -t -m 'configuration/settings/param[@name="password"]' -v @value /opt/freeswitch/etc/freeswitch/autoload_configs/event_socket.conf.xml)

  Once connected:
  help -- shows the available commands
  console loglevel <level> -- change log level

  Ctrl-D to exit

FreeSWITCH fails to bind to port 8021

FreeSWITCH supports both IPV4 and IPV6. However, if your server does not support IPV6, FreeSWITCH will be unable to bind to port 8021. If you run sudo bbb-conf --check and see the following error

# Error: Found text in freeswitch.log:
#
#    Thread ended for mod_event_socket
#
# FreeSWITCH may not be responding to requests on port 8021 (event socket layer)
# and users may have errors joining audio.
#

it might be that your server has IPV6 disabled (or does not support it). You can check this by running the following command

$ sudo ip addr | grep inet6
inet6 ::1/128 scope host
...

If you do not see the line inet6 ::1/128 scope host, then your server has IPV6 disabled. In this case, we need to disable FreeSWITCH’s support for IPV6. First, edit /opt/freeswitch/etc/freeswitch/autoload_configs/event_socket.conf.xml and change the line

    <param name="listen-ip" value="::"/>

to

    <param name="listen-ip" value="127.0.0.1"/>

This tells FreeSWITCH that instead of binding port 8021 to the local IPV6 address, bind to the IPV4 address 127.0.0.1. Next, execute the following two commands

$ sudo mv /opt/freeswitch/etc/freeswitch/sip_profiles/internal-ipv6.xml /opt/freeswitch/etc/freeswitch/sip_profiles/internal-ipv6.xml_
$ sudo mv /opt/freeswitch/etc/freeswitch/sip_profiles/external-ipv6.xml /opt/freeswitch/etc/freeswitch/sip_profiles/external-ipv6.xml_

and then restart BigBlueButton with the commands

$ sudo bbb-conf --clean
$ sudo bbb-conf --check

FreeSWITCH fails to start with a SETSCHEDULER error

When running in a container (like a chroot, OpenVZ or LXC), it might not be possible for FreeSWITCH to set its CPU priority to real-time round robin. If not, it will result in lower performance compared to a non-virtualized installation.

If you running BigBlueButton in a container and an error starting FreeSWITCH, try running systemctl status freeswitch.service and see if you see the error related to SETSCHEDULER

$ systemctl status freeswitch.service
● freeswitch.service - freeswitch
   Loaded: loaded (/lib/systemd/system/freeswitch.service; enabled; vendor preset: enabled)
   Active: inactive (dead) (Result: exit-code) since Mon 2017-10-02 16:17:29 UTC; 18s ago
  Process: 10967 ExecStart=/opt/freeswitch/bin/freeswitch -u freeswitch -g daemon -ncwait $DAEMON_OPTS (code=exited, status=214/SETSCHEDULER)
 Main PID: 3327 (code=exited, status=0/SUCCESS)

Oct 02 16:17:29 scw-9e2305 systemd[1]: Failed to start freeswitch.
Oct 02 16:17:29 scw-9e2305 systemd[1]: freeswitch.service: Unit entered failed state.
Oct 02 16:17:29 scw-9e2305 systemd[1]: freeswitch.service: Failed with result 'exit-code'.
Oct 02 16:17:29 scw-9e2305 systemd[1]: freeswitch.service: Service hold-off time over, scheduling restart.
Oct 02 16:17:29 scw-9e2305 systemd[1]: Stopped freeswitch.
Oct 02 16:17:29 scw-9e2305 systemd[1]: freeswitch.service: Start request repeated too quickly.
Oct 02 16:17:29 scw-9e2305 systemd[1]: Failed to start freeswitch.

If you see SETSCHEDULER in the error message, edit /lib/systemd/system/freeswitch.service and comment out the line containing CPUSchedulingPolicy=rr (round robin)

IOSchedulingPriority=2
#CPUSchedulingPolicy=rr
CPUSchedulingPriority=89

Save the file, run systemctl daemon-reload, and then restart BigBlueButton. FreeSWITCH should now startup without error.

Users not able to join Listen Only mode

When doing sudo bbb-conf --check, you may see the warning

voice Application failed to register with sip server

This error occurs when bbb-apps-sip isn’t able to make a SIP call to FreeSWITCH. You’ll see this in BigBlueButton when users click the headset icon and don’t join the voice conference.

One possible cause for this is you have just installed BigBlueButton, but not restarted it. The packages do not start up the BigBlueButton components in the right order. To restart BigBlueButton, do the following:

$ sudo bbb-conf --restart
$ sudo bbb-conf --check

If you don’t want FreeSWITCH to bind to 127.0.0.1, you need to figure out which IP address its using. First, determine the IP address FreeSWITCH is monitoring for incoming SIP calls with the following command:

$ netstat -ant | grep 5060

You should see an output such as

tcp        0      0 234.147.116.3:5060    0.0.0.0:*               LISTEN

In this example, FreeSWITCH is listening on IP address 234.147.116.3. The IP address on your server will be different.

Next, edit /usr/share/red5/webapps/sip/WEB-INF/bigbluebutton-sip.properties and set the value for sip.server.host to the IP address returned from the above command. Save the changes (you’ll need to edit the file as root to save changes).

Restart BigBlueButton using the commands and run the built-in diagnostics checks.

$ sudo bbb-conf --clean
$ sudo bbb-conf --check

Unable to connect using fs_cli

As of BigBlueButton 2.2.18, the packaging now replaces the default ClueCon password for connecting to the FreeSWITCH command line interface (fs_cli) with a random password.

(By default, FreeSWITCH only allowed unauthenticated connections from 127.0.0.1, but it’s still good security practice to not use default passwords).

To connect to fs_cli, use the following command which supplies the password for authenticating.

/opt/freeswitch/bin/fs_cli -p $(xmlstarlet sel -t -m 'configuration/settings/param[@name="password"]' -v @value /opt/freeswitch/etc/freeswitch/autoload_configs/event_socket.conf.xml)

We also added /usr/local/bin/fs_clibbb with the contents

#!/bin/bash

/opt/freeswitch/bin/fs_cli -p $(xmlstarlet sel -t -m 'configuration/settings/param[@name="password"]' -v @value /opt/freeswitch/etc/freeswitch/autoload_configs/event_socket.conf.xml)

that will let you type fs_clibbb at the command prompt to get into FreeSWITCH console.

Echo test hangs upgrading BigBlueButton 2.2

The install scripts now change the default CLI password for FreeSWITCH and the other parts of BigBlueButton need to use this new password. For a new installation, the install scripts will automatically set this new password.

If you upgrade using bbb-install.sh, the script will update the FreeSWITCH password using sudo bbb-conf --setip <hostname>.

If you upgraded using manual steps, be sure to do ao sudo bbb-conf --setip <hostname> to sync all the FreeSWITCH passwords.

FreeSWITCH using default stun server

For many years, in BigBlueButton’s FreeSWITCH configuration file /opt/freeswitch/etc/freeswitch/vars.xml, the default value for external_rtp_ip was stun.freeswitch.org

  <X-PRE-PROCESS cmd="set" data="external_rtp_ip=stun:stun.freeswitch.org"/>

However, this is not a reliable choice for stun server. Recommend either changing it to your servers external IP address or setup your own stun/turn server. For example, if your server has an external IP at 234.32.3.3

  <X-PRE-PROCESS cmd="set" data="external_rtp_ip=234.32.3.3"/>

You can add a line in /etc/bigbluebutton/bbb-conf/apply-conf.sh to always apply this value even if the FreeSWITCH package upgrades.

xmlstarlet edit --inplace --update '//X-PRE-PROCESS[@cmd="set" and starts-with(@data, "external_rtp_ip=")]/@data' --value "external_rtp_ip=234.32.3.3" /opt/freeswitch/conf/vars.xml

Note: If your server has an internal/exteral IP address, such as on AWS EC2 server, be sure to set it to the external IP address configure a dummy network interface card (see Update FreeSWITCH).

HTML5 Server

bbb-html5 fails to start with a SETSCHEDULER error

As of 2.2.31, the systemd unit file for bbb-html5.service now contains the following lines

CPUSchedulingPolicy=fifo
Nice=19

You can override this with creating the following directory

mkdir /etc/systemd/system/bbb-html5.service.d

and creating /etc/systemd/system/bbb-html5.service.d/override.conf with the following contents

[Service]
CPUSchedulingPolicy=other
Nice=-10

Then do systemctl daemon-reload and restart BigBlueButton.

Installation and packages

The following packages have unmet dependencies

When installing the latest build of BigBlueButton, the package bbb-conf now uses yq to manage YAML files.

You need to add the repository ppa:rmescandon/yq to your server. For steps on how to do this, see Update your server in the BigBlueButton 2.2 install guide.

Alternatively, if you have not made any customizations to BigBlueButton (outside of using bbb-conf), you can use bbb-install.sh to install/upgrade to the latest version (the bbb-install.sh script will automatically install the repository for yq).

No Symbolic Link

If you’ve installed/uninstalled BigBlueButton packages, you may get a No Symbolic Link warning from bbb-conf --check:

** Potential Problems **
    nginx (conf): no symbolic link in /etc/nginx/sites-enabled for bigbluebutton

To solve this, add a symbolic link to nginx for the BigBlueButton site:

$ sudo ln -s /etc/nginx/sites-available/bigbluebutton /etc/nginx/sites-enabled/bigbluebutton
$ sudo /etc/init.d/nginx restart

Package install fails with sed error

Some of the BigBlueButton packages use sed scripts to extract contents from configuration files. If the file does not exist at the time of the script’s execution, or the sed script matches multiple entries in a file (such as when a configuration line is commented out), you can see an error such as

Setting up bbb-client (1:2.0.0-374) ...
sed: -e expression #1, char 42: unterminated `s' command
dpkg: error processing package bbb-client (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of bbb-config:
 bbb-config depends on bbb-client; however:
  Package bbb-client is not configured yet.

dpkg: error processing package bbb-config (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 bbb-client
 bbb-config
E: Sub-process /usr/bin/dpkg returned an error code (1)

In the above example, the /var/lib/dpkg/info/bbb-client.postinst failed to finish. To debug, edit this file and change the first line to read

and run

$ sudo apt-get install -f

You should now see each command in bbb-conf.postinst as it executes upto the line in which the error occurs. Post this output to https://groups.google.com/forum/#!forum/bigbluebutton-setup for help in resolving the issue.

Errors with packages

Some hosting providers do not provide a complete /etc/apt/source.list. If you are finding your are unable to install a package, try replacing your /etc/apt/sources.list with the following

deb https://archive.ubuntu.com/ubuntu xenial main restricted universe multiverse
deb https://archive.ubuntu.com/ubuntu xenial-updates main restricted universe multiverse
deb https://security.ubuntu.com/ubuntu xenial-security main restricted universe multiverse

then do

and try installing BigBlueButton again from the beginning.

WebRTC errors (1001, 1002,…)

WebRTC offers very high-quality audio. However, the user’s network settings (or firewall) may not allow WebRTC to connect (or keep connected).

Here are the following lists the possible WebRTC error messages that a user may encounter:

• 1001: WebSocket disconnected — The WebSocket had connected successfully and has now disconnected. Possible Causes:
  • Loss of internet connection
  • Nginx restarting can cause this
• 1002: Could not make a WebSocket connection — The initial WebSocket connection was unsuccessful. Possible Causes:
  • Firewall blocking ws protocol
  • Server is down or improperly configured
  • See potential solution here.
• 1003: Browser version not supported — Browser doesn’t implement the necessary WebRTC API methods. Possible Causes:
  • Out of date browser
• 1004: Failure on call — The call was attempted, but failed. Possible Causes:
  • For a full list of causes refer here
  • There are 24 different causes so I don’t really want to list all of them
  • Solution for this issue outlined here.
• 1005: Call ended unexpectedly — The call was successful, but ended without user requesting to end the session. Possible Causes:
  • Unknown
• 1006: Call timed out — The library took too long to try and connect the call. Possible Causes:
  • Previously caused by Firefox 33-beta on Mac. We’ve been unable to reproduce since release of FireFox 34
• 1007: ICE negotiation failed — The browser and FreeSWITCH try to negotiate ports to use to stream the media and that negotiation failed. Possible Causes:
  • NAT is blocking the connection
  • Firewall is blocking the UDP connection/ports
• 1008: Call transfer failed — A timeout while waiting for FreeSWITCH to transfer from the echo test to the real conference. This might be caused by a misconfiguration in FreeSWITCH, or there might be a media error and the DTMF command to transfer didn’t go through (In this case, the voice in the echo test probably didn’t work either.)
• 1009: Could not fetch STUN/TURN server information — This indicates either a BigBlueButton bug (or you’re using an unsupported new client/old server combination), but could also happen due to a network interruption.
• 1010: ICE negotiation timeout — After the call is accepted the client’s browser and the server try and negotiate a path for the audio data. In some network setups this negotiation takes an abnormally long time to fail and this timeout is set to avoid the client getting stuck.
• 1020: Media cloud could not reach the server — See how to solve this here.

Networking

Server running behind NAT

The following issue might be helpful in debugging if you run into errors and your server is behind NAT.

Could not get your microphone for a WebRTC call

Chrome requires (As of Chrome 47) that to access the user’s microphone for WebRTC your site must be serving pages via HTTPS (that is, nginx is configured with a SSL certificate).

If the user attempts to share their microphone and your BigBlueButton sever is not configured for SSL, Chrome will block access and BigBlueButton will report the following error

WebRTC Audio Failure: Detected the following WebRTC issue: Could not get your microphone for a WebRTC call. Do you want to try flash instead?

To enable Chrome to access the user’s microphone, see Configure HTTPS on BigBlueButton.

The browser is not supported

When you attempt to join a BigBlueButton session, the client looks for supported browsers before fully loading. The client gets its list of supported browsers from /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml. You can see the list of supported browsers at the bottom. For example,

- browser: mobileSafari
  version:
    - 11
    - 1

states that Mobile Safari version 11.1 or later is supported (notice the first letter is lower case and concatenated with the remainder of the browser name).

To add a browser to the list, first find your browser’s useragent. You could use a tool like https://wtools.io/check-my-user-agent as well. For example, with the Vivaldi browser you might see

Vivaldi 2.8.1664 / Linux 0.0.0

Next, to add this as a supported browser, append to settings.yml

- browser: vivaldi
  version:
    - 2
    - 8

save the updated settings.yml file, and then restart your BigBlueButton server with sudo bbb-conf --restart. Note any browser you add must support WebRTC libraries (not all do), so be sure to check it first with https://test.webrtc.org/.

Tomcat shows “Cannot assign requested address on startup”

If your server has multiple IP addresses, Tomcat might not pick the right address to bind. This could throw an error on installation when tomcat is attempting to install.

Check /var/log/tomcat7/catalina.out for the following error

Jan 30, 2018 9:17:37 AM org.apache.catalina.core.StandardServer await
SEVERE: StandardServer.await: create[localhost:8005]:
java.net.BindException: Cannot assign requested address (Bind failed)
 at java.net.PlainSocketImpl.socketBind(Native Method)

If you see this, first ensure that there isn’t another copy of tomcat running by doing ps -aef | grep tomcat7. If you do see another copy running, try killing it and then restarting tomcat.

If you still see the same error in catalina.out, then /etc/tomcat7/server.xml and change

<Server port="8005" shutdown="SHUTDOWN">

<Server address="0.0.0.0" port="8005" shutdown="SHUTDOWN">

Restart tomcat7 again and it should start normally.

nginx not running

The common reasons for nginx not running are inability to bind to port 80 and configuration errors. To check if port 80 is already in use, use

to see if any process is currently bound to port 80. If so, check to see if another web server is installed. If so, then stop the web server and try to restart nginx. One of the server requirements before you install BigBlueButton is that port 80 is not in use by another application (such as Apache). For details on why this is a requirements, see We recommend running BigBlueButton on port 80.

If port 80 is free, check if your nginx configuration file has errors. Try a restart of nginx

$ sudo systemctl restart nginx

and look for the output of

   [ OK ]

If you see [ Fail ], then your nginx configuration files might have a syntax error. Check the syntax of the nginx configuration files using the command

and see if it reports any errors. You can also check the error.log file for nginx to see what errors it gives on startup

$ sudo cat /var/log/nginx/error.log

“Welcome to nginx”

During installation of BigBlueButton the packaging scripts attempt to assign the correct IP address during setup. However, if the IP address changes (such as when rebooting a VM), or the first IP address was not the correct IP address for the server, you may see a “Welcome to nginx” page.

To reconfigure the BigBlueButton to use the correct IP address or hostname, see BigBlueButton does not load.

bbb-web

404 Error when loading the client

BigBlueButton 2.2 requires Java 8 as the default Java. Recently, some Ubuntu 16.04 distributions have switched the default version of Java to Java 9 (or later).

Use java -version to check that the default version of 1.8.0.

~/dev$ java -version
openjdk version "1.8.0_242"
OpenJDK Runtime Environment (build 1.8.0_242-8u242-b08-0ubuntu3~16.04-b08)
OpenJDK 64-Bit Server VM (build 25.242-b08, mixed mode)

If not, do the following

sudo apt-get install openjdk-8-jre
update-alternatives --config java  # Choose java-8 as default

Run java -version and confirm it now shows the default as 1.8.0, and then restart BigBlueButton with sudo bbb-conf --restart

Blank presentation area on create or upload

If you join a meeting and the default presentation is not visible or your uploaded presentation doesn’t display, then this is most likely due to a permissions error. To solve this, ensure that /var/bigbluebutton/ is owned by bigbluebutton rather than root or any other account. See this issue for more explanation.

Unable to create presentation

If you see the following error in /var/log/bigbluebutton/bbb-web.log

  failed to map segment from shared object: Operation not permitted

use the command mount to check that the /tmp director does not have noexec permissions (which would prevent executables from running in the /tmp directory). If you see noexec for /tmp, you need to remount the directory with permissions that enable processes (such as the slide conversion) to execute in the /tmp directory.

Too many open files

On servers with greater than 8 CPU cores, bbb-web log (/var/log/bigbluebutton/bbb-web.log) may throw an error of Too many open files

Caused by: java.io.IOException: Too many open files

To resolve, create an override file that increases the number of open files for bbb-web

$  sudo mkdir -p /etc/systemd/system/bbb-web.service.d/
$  sudo cat > /etc/systemd/system/bbb-web.service.d/override.conf << HERE
[Service]
LimitNOFILE=
LimitNOFILE=8192
HERE
$  sudo systemctl daemon-reload

bbb-web takes a long time to startup

bbb-web relies on the SecureRandom class (which uses available entropy) to provide random values for its session IDs. On a virtualized server, however, the available entropy can run low and cause bbb-web to block for a long period before it finishes it’s startup sequence (see Slow startup of tomcat).

To provide bbb-web with more entropy, you can install haveged

$ sudo apt-get install haveged

For more information see How to Setup Additional Entropy for Cloud Servers Using Haveged.

Error installing bbb-web

If you get the following error during upgrade to BigBlueButton

Unpacking bbb-web (1:2.2.0-67) over (1:2.2.0-66) ...
dpkg: error processing archive /var/cache/apt/archives/bbb-web_1%3a2.2.0-67_amd64.deb (--unpack):
 trying to overwrite '/etc/bigbluebutton/nginx/web', which is also in package bbb-client 1:2.2.0-28
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/bbb-web_1%3a2.2.0-67_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)```

Then first uninstall bbb-client

$ sudo apt-get purge bbb-client

and try installing BigBlueButton again.

Other errors

Root partition too small

If the root partition on your BigBlueButton server is too small (for disk space requirements see Before you install), we recommend moving the following directories to an external partition with sufficient disk space.

BigBlueButton processing and storage of recordings:

Location of all media directories on disk available here.

To make the move, we’ll first stop BigBlueButton, then move the above directories to a new location on the external partition, create symbolic links from the original locations to the new locations, and restart BigBlueButton.

In the following example, the external partition is mounted on /mnt.

$ sudo bbb-conf --stop

$ sudo mv /var/freeswitch/meetings /mnt
$ sudo ln -s /mnt/recordings /var/freeswitch/meetings

$ sudo mv /usr/share/red5/webapps/video/streams /mnt
$ sudo ln -s /mnt/streams /usr/share/red5/webapps/video/streams

$ sudo /var/bigbluebutton /mnt
$ sudo ln -s /mnt/bigbluebutton /var/bigbluebutton

$ sudo bbb-conf --start

BigBlueButton does not load

If your has changed it’s network connection (such as on reboot), you can clean most of BigBlueButton’s configuration files with the following steps.

$ sudo bbb-conf --setip <ip_address_or_hostname>

$ sudo bbb-conf --clean
$ sudo bbb-conf --check

For more information see bbb-conf options.

Running within an LXD Container

LXD is a very powerful container system for Ubuntu lets you run full Ubuntu 16.04 servers within a container. Because you can easily clone and snapshot LXD containers, they are ideal for development and testing of BigBlueButton.

However, if you install BigBlueButton within an LXD container, you will get the following error from sudo bbb-conf --check

** Potential problems described below **

#
# Error: Unable to connect to the FreeSWITCH Event Socket Layer on port 8021

You’ll also get an error from starting FreeSWITCH with bbb-conf --restart. When you try systemctl status freeswitch.service, you’ll see an error with SETSCHEDULER.

$ sudo systemctl status freeswitch.service
● freeswitch.service - freeswitch
   Loaded: loaded (/lib/systemd/system/freeswitch.service; enabled; vendor preset: enabled)
   Active: inactive (dead) (Result: exit-code) since Wed 2017-04-26 16:34:24 UTC; 23h ago
  Process: 7038 ExecStart=/opt/freeswitch/bin/freeswitch -u freeswitch -g daemon -ncwait $DAEMON_OPTS (code=exited, status=214/SETSCHEDULER)

Apr 26 16:34:24 big systemd[1]: Failed to start freeswitch.
Apr 26 16:34:24 big systemd[1]: freeswitch.service: Unit entered failed state.
Apr 26 16:34:24 big systemd[1]: freeswitch.service: Failed with result 'exit-code'.
Apr 26 16:34:24 big systemd[1]: freeswitch.service: Service hold-off time over, scheduling restart.
Apr 26 16:34:24 big systemd[1]: Stopped freeswitch.
Apr 26 16:34:24 big systemd[1]: freeswitch.service: Start request repeated too quickly.
Apr 26 16:34:24 big systemd[1]: Failed to start freeswitch.

This error occurs because the default systemd unit script for FreeSWITCH tries to run with permissions not available to the LXD container. To run FreeSWITCH within an LXD container, edit /lib/systemd/system/freeswitch.service and replace with the following

[Unit]
Description=freeswitch
After=syslog.target network.target local-fs.target

[Service]
Type=forking
PIDFile=/opt/freeswitch/var/run/freeswitch/freeswitch.pid
Environment="DAEMON_OPTS=-nonat"
EnvironmentFile=-/etc/default/freeswitch
ExecStart=/opt/freeswitch/bin/freeswitch -u freeswitch -g daemon -ncwait $DAEMON_OPTS
TimeoutSec=45s
Restart=always
WorkingDirectory=/opt/freeswitch
User=freeswitch
Group=daemon

[Install]
WantedBy=multi-user.target

Then enter the following commands to load the new unit file and restart BigBlueButton.

$ sudo systemctl daemon-reload
$ sudo bbb-conf --restart

You can run BigBlueButton within a LXD container.

Unable to connect to redis

The packages bbb-apps-akka, bbb-fsesl-akka, and bbb-transcode-akka are packaged by sbt, but they need to have redis-server running before they startup. If sudo bbb-conf --debug shows redis connection errors

Sep 22 15:32:12 sv21 bbb-apps-akka[7804]: Exception in thread "main" io.lettuce.core.RedisConnectionException: Unable to connect to 127.0.0.1:6379
Sep 22 15:32:12 sv21 bbb-apps-akka[7804]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:78)
Sep 22 15:32:12 sv21 bbb-apps-akka[7804]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:56)
Sep 22 15:32:12 sv21 bbb-apps-akka[7804]: Caused by: io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: /127.0.0.1:6379
Sep 22 15:32:12 sv21 bbb-apps-akka[7804]: Caused by: java.net.ConnectException: Connection refused
Sep 22 15:32:12 sv21 bbb-fsesl-akka[7893]: Exception in thread "main" io.lettuce.core.RedisConnectionException: Unable to connect to 127.0.0.1:6379
Sep 22 15:32:12 sv21 bbb-fsesl-akka[7893]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:78)
Sep 22 15:32:12 sv21 bbb-fsesl-akka[7893]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:56)
Sep 22 15:32:12 sv21 bbb-fsesl-akka[7893]: Caused by: io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: /127.0.0.1:6379
Sep 22 15:32:12 sv21 bbb-fsesl-akka[7893]: Caused by: java.net.ConnectException: Connection refused
Sep 22 15:32:13 sv21 bbb-transcode-akka[8001]: Exception in thread "main" io.lettuce.core.RedisConnectionException: Unable to connect to 127.0.0.1:6379
Sep 22 15:32:13 sv21 bbb-transcode-akka[8001]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:78)
Sep 22 15:32:13 sv21 bbb-transcode-akka[8001]: #011at io.lettuce.core.RedisConnectionException.create(RedisConnectionException.java:56)
Sep 22 15:32:13 sv21 bbb-transcode-akka[8001]: Caused by: io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: /127.0.0.1:6379
Sep 22 15:32:13 sv21 bbb-transcode-akka[8001]: Caused by: java.net.ConnectException: Connection refused

you can add overrides for these three packages to ensure they start after redis.server. Run the following script.

#!/bin/bash

mkdir -p /etc/systemd/system/bbb-apps-akka.service.d
cat > /etc/systemd/system/bbb-apps-akka.service.d/override.conf <<HERE
[Unit]
Requires=redis-server.service
After=redis-server.service
HERE

mkdir -p /etc/systemd/system/bbb-fsesl-akka.service.d
cat > /etc/systemd/system/bbb-fsesl-akka.service.d/override.conf <<HERE
[Unit]
Requires=redis-server.service
After=redis-server.service
HERE


mkdir -p /etc/systemd/system/bbb-transcode-akka.service.d
cat > /etc/systemd/system/bbb-transcode-akka.service.d/override.conf <<HERE
[Unit]
Requires=redis-server.service
After=redis-server.service
HERE

The script bbb-install now creates these overrides by default.

500 Internal Server Error

It is most likely an error on GreenLight. Check the log file according to Troubleshooting Greenlight.

If this error occurrs on just a small number of PCs accessing a BigBlueButton server within a LAN through a proxy server and you find the description “Error::Unsafe Host Error (x.x.x.x is not a safe host)” (where x.x.x.x is an IP address) in the log file, check if the “Don’t use the proxy server for local (intranet) addresses” (in the Windows proxy setting) is ticked.

Legacy errors

Conference not found errors

The command sudo bbb-conf --debug searches through the red5, tomcat7, and nginx logs looking for errors and exceptions. However, the messages such as

    -- ERRORS found in /usr/share/red5/log/* --
/usr/share/red5/log/bigbluebutton.log:2015-05-02 13:50:37,681-04:00 [pool-17-thread-1] ERROR o.b.w.v.f.a.PopulateRoomCommand - Not XML: [Conference 78505 not found]

are innocuous and can be ignored.