[OpenSIPS-Users] Bare Bones

[Alexander Shukaev]

So far I've made some good progress and I would like to share it.  Big 
thanks to Travis for pointing me into the right direction.

It turns out that I had

STORE_PLAINTEXT_PW=0

which is a natural setting for production I guess.  Hence,

modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")

is no longer valid.  It should rather be

modparam("auth_db", "calculate_ha1", no)
modparam("auth_db", "password_column", "ha1")

Don't forget to stop 'opensips', then

sudo opensipsdbctl drop
sudo opensipsdbctl create

and again

sudo opensipsctl add 1234 1234
sudo opensipsctl add 5678 5678

and start 'opensips' again.  Then it really starts to work with the 
registration in Ekiga.  Finally!

Next, I moved to testing the communication between those accounts.  To 
do this, in addition to Ekiga I installed Linphone.  So, through Ekiga, 
I register 1234 and add 5678 to contacts, while through Linphone, I 
register 5678 and add 1234 to contacts.  It turns out that there is 
another strange problem now.  Within Linphone I can both IM and call 
from 5678 to 1234 (Ekiga) and in Ekiga I can read those IMs and accept 
calls accordingly, while within Ekiga I can neither IM nor call from 
1234 to 5678 (Linphone) as for IMs, for example, I get sometimes either 
"NOTICE: Could not send message: Unauthorised" or  "NOTICE: Could not 
send message: Forbidden".  I attach the Wireshark log for the 
"Forbidden" case.

Regards,
Alexander

On 30.10.2015 00:18, Alexander Shukaev wrote:
>> It doesn't look like there's a password specified for the user in your 
>> DB
>> 
>> Did you configure you UAC to use one?
> 
> Could it be because it's hashed?  I'm under impression that it's
> stored in 'ha1' and 'ha1b' fields in the encoded form due to
> 
> modparam("auth_db", "calculate_ha1", yes)
> modparam("auth_db", "password_column", "password")
> modparam("auth_db|uri", "db_url",
> "postgres://opensips:$@localhost/opensips") # CUSTOMIZE ME
> modparam("auth_db", "load_credentials", "")
> 
>> Also, did you use the opensipsdbctl create to build your user?
> 
> Of course, I'm pretty sure it was:
> 
> sudo opensipsdbctl create
> sudo opensipsctl add 1234 1234
> sudo opensipsctl add 5678 5678
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: message.pcapng
Type: application/octet-stream
Size: 3568 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20151030/371c6d57/attachment.obj>