[OpenSIPS-Users] authentication is not working
Toyima Dias
toyimads at gmail.com
Fri Feb 4 09:31:07 CET 2011
Thanks Bogdan...working on that!
2011/2/4 Bogdan-Andrei Iancu <bogdan at opensips.org>
> Hi Toyima,
>
> 1) be sure your opensips is using the right cfg file
>
> 2) be sure you restart opensips after doing changes in the cfg file
>
> 3) is still not working, debug your script by placing xlog() statement in
> different key point (like after "if") to see what is the execution flow in
> your script.
>
> Regards,
> Bogdan
>
>
> Toyima Dias wrote:
>
>> Any help my friends?
>> 2011/2/3 Toyima Dias <toyimads at gmail.com <mailto:toyimads at gmail.com>>
>>
>>
>> SORRY!!!!! OpenSIPS should send BEFORE (NOT after) the 200 OK, the
>> 401 :)
>>
>> 2011/2/3 Toyima Dias <toyimads at gmail.com <mailto:toyimads at gmail.com>>
>>
>>
>> =) but it should send after the 200 OK, the 401
>> unauthorized...and the same for INVITES or any other request
>> with 407 proxy authentication, and that's not working my dear
>> friend...at least seems not to work per the traces :(
>>
>> I did the changes in opensips.cfg as i mentioned in my first
>> email...what is wrong? i can get the point :(
>>
>>
>>
>> 2011/2/3 Anton Zagorskiy <a.zagorskiy at oyster-telecom.ru
>> <mailto:a.zagorskiy at oyster-telecom.ru>>
>>
>>
>> Hi Toyima.
>>
>> I see 200 OK reply. What is wrong? =)
>>
>>
>> From: users-bounces at lists.opensips.org
>> <mailto:users-bounces at lists.opensips.org>
>> [mailto:users-bounces at lists.opensips.org
>> <mailto:users-bounces at lists.opensips.org>] On Behalf Of
>> Toyima Dias
>> Sent: Thursday, February 03, 2011 11:32 AM
>> To: OpenSIPS users mailling list
>> Subject: [OpenSIPS-Users] authentication is not working
>>
>> Hello my friends,
>> I'm trying to configure authentication on my
>> OpenSIPS and
>> is not working at
>> all :(
>> I've added the following to the script to make it
>> work:
>> (but it doesn't)
>> ...
>> loadmodule "auth.so"
>> loadmodule "auth_db.so"
>> ...
>> modparam("usrloc", "db_url",
>>
>> "mysql://opensips:opensipsrw@localhost/opensips")
>> modparam("auth_db", "calculate_ha1", yes)
>> modparam("auth_db", "password_column", "password")
>> modparam("auth_db", "db_url",
>>
>> "mysql://opensips:opensipsrw@localhost/opensips")
>> modparam("auth_db", "load_credentials", "")
>> ...
>> if (!(method=="REGISTER") && from_uri==myself)
>> /*no multidomain
>> version*/
>> {
>> if (!proxy_authorize("", "subscriber")) {
>> proxy_challenge("", "0");
>> exit;
>> }
>> if (!db_check_from()) {
>> sl_send_reply("403","Forbidden
>> auth ID");
>> exit;
>> }
>> consume_credentials();
>> }
>> ...
>>
>> if (is_method("REGISTER"))
>> {
>> # authenticate the REGISTER requests
>> (uncomment to enable
>> auth)
>> if (!www_authorize("", "subscriber"))
>> {
>> www_challenge("", "0");
>> exit;
>> }
>> ##
>> if (!db_check_to())
>> {
>> sl_send_reply("403","Forbidden
>> auth ID");
>> exit;
>> }
>> if (!save("location"))
>> sl_reply_error();
>> exit;
>> }
>> But is not working at all...take a look:
>> #
>> U 2011/02/03 09:31:04.402891 172.30.140.22:48752
>> <http://172.30.140.22:48752/> -> 172.30.140.8:5060
>> <http://172.30.140.8:5060/>
>>
>> REGISTER sip:172.30.140.8 SIP/2.0
>> Via: SIP/2.0/UDP
>> 172.30.140.22:48752
>> ;branch=z9hG4bK-d87543-9a54af22967ae417-1--d87543-;rport
>> Max-Forwards: 70
>> Contact:
>> <sip:1000 at 172.30.140.22:48752;rinstance=fcade2df86ce0ab8>
>> To: "1000"<sip:1000 at 172.30.140.8 <sip%3A1000 at 172.30.140.8>
>> <mailto:sip%3A1000 at 172.30.140.8 <sip%253A1000 at 172.30.140.8>>>
>>
>> From: "1000"<sip:1000 at 172.30.140.8 <sip%3A1000 at 172.30.140.8>
>> <mailto:sip%3A1000 at 172.30.140.8 <sip%253A1000 at 172.30.140.8>>>;tag=cd3e2323
>>
>>
>> Call-ID: MmU0YjM1NThiNTg0ZjhiNGM4ODA4ZmU1YWFiYjBmNTc.
>> CSeq: 1 REGISTER
>> Expires: 3600
>> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY,
>> MESSAGE, SUBSCRIBE,
>> INFO
>> User-Agent: X-Lite release 1011s stamp 41150
>> Content-Length: 0
>>
>> #
>> U 2011/02/03 09:31:04.404039 172.30.140.8:5060
>> <http://172.30.140.8:5060/> -> 172.30.140.22:48752
>> <http://172.30.140.22:48752/>
>>
>> SIP/2.0 200 OK
>> Via: SIP/2.0/UDP
>> 172.30.140.22:48752
>> ;branch=z9hG4bK-d87543-9a54af22967ae417-1--d87543-;rport=
>> 48752
>> To: "1000"<sip:1000 at 172.30.140.8 <sip%3A1000 at 172.30.140.8>
>> <mailto:sip%3A1000 at 172.30.140.8 <sip%253A1000 at 172.30.140.8>>>;tag=c97b4d1cb1f3d0da549e06a8d482ef63.34dc
>>
>>
>> From: "1000"<sip:1000 at 172.30.140.8 <sip%3A1000 at 172.30.140.8>
>> <mailto:sip%3A1000 at 172.30.140.8 <sip%253A1000 at 172.30.140.8>>>;tag=cd3e2323
>>
>>
>> Call-ID: MmU0YjM1NThiNTg0ZjhiNGM4ODA4ZmU1YWFiYjBmNTc.
>> CSeq: 1 REGISTER
>> Contact:
>> <sip:1000 at 172.30.140.22:48752
>> ;rinstance=fcade2df86ce0ab8>;expires=3600
>> Server: OpenSIPS (1.6.4-2-notls (i386/linux))
>> Content-Length: 0
>> Am i missing something in my configuration?
>> Thanks in advance!!!
>>
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org <mailto:Users at lists.opensips.org>
>>
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> --
> Bogdan-Andrei Iancu
> OpenSIPS Event - expo, conf, social, bootcamp
> 2 - 4 February 2011, ITExpo, Miami, USA
> OpenSIPS solutions and "know-how"
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20110204/f990f1da/attachment-0001.htm>
More information about the Users
mailing list