2 ; AMI - The Asterisk Manager Interface
4 ; Third party application call management support and PBX event supervision
6 ; This configuration file is read every time someone logs in
8 ; Use the "manager show commands" at the CLI to list available manager commands
9 ; and their authorization levels.
11 ; "manager show command <command>" will show a help text.
13 ; ---------------------------- SECURITY NOTE -------------------------------
14 ; Note that you should not enable the AMI on a public IP address. If needed,
15 ; block this TCP port with iptables (or another FW software) and reach it
16 ; with IPsec, SSH, or SSL vpn tunnel. You can also make the manager
17 ; interface available over http/https if Asterisk's http server is enabled in
18 ; http.conf and if both "enabled" and "webenabled" are set to yes in
19 ; this file. Both default to no. httptimeout provides the maximum
20 ; timeout in seconds before a web based session is discarded. The
21 ; default is 60 seconds.
29 ; a) httptimeout sets the Max-Age of the http cookie
30 ; b) httptimeout is the amount of time the webserver waits
31 ; on a action=waitevent request (actually its httptimeout-10)
32 ; c) httptimeout is also the amount of time the webserver keeps
33 ; a http session alive after completing a successful action
37 ; Parameters that control AMI over TLS. ("enabled" must be set too).
38 ; You can open a connection to this socket with e.g.
40 ; openssl s_client -connect my_host:5039
42 ; sslenable=no ; set to YES to enable it
43 ; sslbindport=5039 ; the port to bind to
44 ; sslbindaddr=0.0.0.0 ; address to bind to, default to bindaddr
45 ; sslcert=/tmp/asterisk.pem ; path to the certificate.
49 ;allowmultiplelogin = yes ; IF set to no, rejects manager logins that are already in use.
50 ; ; The default is yes.
52 ;displayconnects = yes
54 ; Add a Unix epoch timestamp to events (not action responses)
56 ;timestampevents = yes
58 ; debug = on ; enable some debugging info in AMI messages (default off).
59 ; Also accessible through the "manager debug" CLI command.
63 ;permit=209.16.236.73/255.255.255.0
65 ; If the device connected via this user accepts input slowly,
66 ; the timeout for writes to it can be increased to keep it
67 ; from being disconnected (value is in milliseconds)
71 ;displayconnects = yes ; Display on CLI user login/logoff
73 ; Authorization for various classes
75 ; Read authorization permits you to receive asynchronous events, in general.
76 ; Write authorization permits you to send commands and get back responses. The
77 ; following classes exist:
79 ; system - General information about the system and ability to run system
80 ; management commands, such as Shutdown, Restart, and Reload.
81 ; call - Information about channels and ability to set information in a
83 ; log - Logging information. Read-only.
84 ; verbose - Verbose information. Read-only.
85 ; agent - Information about queues and agents and ability to add queue
87 ; user - Permission to send and receive UserEvent.
88 ; config - Ability to read and write configuration files.
89 ; command - Permission to run CLI commands. Write-only.
90 ; dtmf - Receive DTMF events. Read-only.
91 ; reporting - Ability to get information about the system.
92 ; cdr - Output of cdr_manager, if loaded. Read-only.
93 ; dialplan - Receive NewExten and VarSet events. Read-only.
94 ; originate - Permission to originate new calls. Write-only.
96 ;read = system,call,log,verbose,agent,user,config,dtmf,reporting,cdr,dialplan
97 ;write = system,call,agent,user,config,command,reporting,originate