Media server connection is failed, will try to re-connect

[Thomas Scholzen]

Hi Maxim,

I just migrated from OM 6.00 to 7.00. After the upgrade did not work 
(too much stuff in the backup) I went for a fresh installation. I 
installed OM 7.0.0, kurento via docker and coturn. However, I get "Media 
server connection for user  XXX is failed, will try to re-connect" every 
2 to 15 seconds, depending on the client and location. When the internet 
is routed via VPN to the server that runs OM, there are no problems. OS 
Ubuntu 20.04
So I suspect an issue with the turnserver. With OM 6.0.0 this setup went 
fine, so there is probably some kind of misconfiguration.

"$ docker logs kms" gives me:

"KurentoWebRtcEndpointImpl 
WebRtcEndpointImpl.cpp:609:WebRtcEndpointImpl: TURN server not found in 
config; remember that NAT traversal requires STUN or TURN"

In /etc/turnserver.conf I have:
  use-auth-secret
  static-auth-secret=7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
  realm=testexample.de
  stale-nonce=0
  log-file=/var/log/turnserver/turnserver.log
  syslog

In webapps/openmeetings/WEB-INF/classes/openmeetings.properties I have:

   kurento.ws.url=ws://127.0.0.1:8888/kurento
   kurento.turn.url=xxx.yyy.zzz.aaa:3478
   kurento.turn.user=
   kurento.turn.secret=7xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
   kurento.turn.mode=rest

Because I run also other services on this server SSL is done via port 
4443 with a proxy to localhost:5080/openmeetings (see attached apache2 
virtual host config). This makes it a bit complicated, but it was 
working flawless with OM 6.0.0

I Would appreciate if you could give me a hint how to debug this.

Best regards
Thomas#               NameVirtualHost *:4443

                <VirtualHost *:4443>
                ServerName openmeetings.testexample.de
                ServerAdmin r...@testexample.de
###      OpenMeetings    ###
## Custom fragment
RewriteEngine On
RewriteCond %{HTTP:Connection} Upgrade [NC]
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteRule /(.*) ws://localhost:5080/$1 [P,L]
RedirectMatch ^/$ https://openmeetings.testexample.de/openmeetings
ProxyPreserveHost On

                ProxyRequests Off
                SSLEngine on
                SSLProtocol -all +TLSv1.2 +TLSv1.3
                SSLCipherSuite  
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
                SSLHonorCipherOrder     on
                ErrorLog /var/log/apache2/error.log
                SSLCertificateFile /etc/letsencrypt/testexample.de/fullchain.cer
                SSLCertificateKeyFile 
/etc/letsencrypt/testexample.de/testexample.de.key

<Location /openmeetings>
  Require all granted      
  ProxyPass http://localhost:5080/openmeetings
  ProxyPassReverse http://localhost:5080/openmeetings
  RewriteEngine On
  RewriteRule ^/(.*) http://localhost:5080/$1 [P]
</Location>
<Location /open>
  Require all granted
  ProxyPass http://localhost:5080/open
  ProxyPassReverse http://localhost:5080/open
</Location>
<Location /send>
  Require all granted
  ProxyPass http://localhost:5080/send
  ProxyPassReverse http://localhost:5080/send
</Location>
<Location /idle>
  Require all granted
  ProxyPass http://localhost:5080/idle
  ProxyPassReverse http://localhost:5080/idle
</Location>
<Location /close>
  Require all granted
  ProxyPass http://localhost:5080/close
  ProxyPassReverse http://localhost:5080/close
</Location>

</VirtualHost>