[OpenSIPS-Users] uac_auth to uac_registrant module

[Igor Olkhovskii]

Made it work via modification of CSeq (remove_hf -> append_hf) and now 
is a question, how to get correct realm from response. OpenSIPs is very 
limitated to text processing....

21.07.2014 18:39, Igor Olhovskiy пишет:
> Found this tread, but seems to be no luck in to work with INVITE on
> Asterisk.
> Is there any luck to get Asterisk auth (without touching Asterisk)
>
> https://www.mail-archive.com/users@lists.opensips.org/msg25236.html
> On 21.07.2014 16:14, Igor Olhovskiy wrote:
>> Hi!
>> I'm trying to get OpenSIPS 1.11 act as registrar proxy. Means it's not
>> only register on external servers, but take care of INVITE's and so.
>> I've configured modules as:
>>
>> loadmodule "uac_auth.so"
>> loadmodule "uac.so"
>> loadmodule "uac_registrant.so"
>> modparam("uac","restore_mode","auto")
>> modparam("uac_auth","auth_realm_avp","$avp(uac_realm)")
>> modparam("uac_auth","auth_username_avp","$avp(uac_username)")
>> modparam("uac_auth","auth_password_avp","$avp(uac_password)")
>> modparam("uac_registrant", "timer_interval", 120)
>> modparam("uac_registrant", "hash_size", 2)
>> modparam("uac_registrant", "db_url",
>> "mysql://opensips:opensips@localhost/opensips")
>>
>> ....
>> failure_route[1] {
>>                  ......
>>                  # have we already tried to authenticate?
>>                  if (isflagset(8)) {
>>                          xlog("L_INFO", "FAILUREROUTE_STATUS40X_SETFLAG8:
>> [F=$fu R=$ru D=$du M=$rm IP=($si:$sp $Ri:$Rp) ID=$ci]");
>>                          t_reply("503","Authentication failed");
>>                          exit;
>>                  }
>>                  if (is_method("INVITE")) {
>>                          # mark that auth was performed
>>                          setflag(8);
>>                          # trigger again the failure route
>>                          t_on_failure("1");
>>                          # repeat the request with auth response this time
>>                          $avp(uac_realm) = $td;
>>                          $avp(uac_username) = $fU;
>>                          avp_db_query("SELECT password FROM registrant
>> WHERE (registrar = 'sip:$avp(uac_realm)') AND ( username =
>> '$avp(uac_username)')","$avp(uac_password)");
>>                          xlog("L_INFO",
>> "FAILUREROUTE_STATUS40X_UACAUTHINVITE_DEBUG_VARIABLES: AVP_UAC_REALM:
>> $avp(uac_realm) AVP_UAC_USERNAME: $avp(uac_username) AVP_UAC_PASSWORD
>> :$avp(uac_password)");
>>                          uac_auth();
>>                          t_relay();
>>                  }
>>          }
>> .....
>> }
>>
>>
>> I see correct vars in debug message, but uac_auth() not to append branch
>> to reply INVITE.
>>
>> For example, I have  such string
>> AVP_UAC_REALM: some-dns.example.net.ua AVP_UAC_USERNAME: 2225678
>> AVP_UAC_PASSWORD :SuperStrongPassword
>>
>> What is wrong in this config/AVP's?