31 May
2006
31 May
'06
11:26 a.m.
Hi all!
can any one tell me what is the best method to run openser out of
all the methods mentioned in the link below?
http://openser.org/install.php
Thank you,
Regards,
Padmaja
----- Original Message -----
From: <users-request(a)openser.org>
To: <users(a)openser.org>
Sent: Wednesday, May 31, 2006 12:09 PM
Subject: Users Digest, Vol 12, Issue 83
> Send Users mailing list submissions to
> users(a)openser.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://openser.org/cgi-bin/mailman/listinfo/users
> or, via email, send a message with subject or body 'help' to
> users-request(a)openser.org
>
> You can reach the person managing the list at
> users-owner(a)openser.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Users digest..."
>
>
> Today's Topics:
>
> 1. Can this work?: re. uac_auth cseq problem (G.Jacobsen)
> 2. Call Hunting: use Avpop or LCR module ? (Rafael J. Risco G.V.)
> 3. Re: Call Hunting: use Avpop or LCR module ?
> (Daniel-Constantin Mierla)
> 4. multiple domain best practices? (Mark Kent)
> 5. Re: dispatcher module and rewritehost vs forward (Script Head)
> 6. Dialog Module & MySQL (Martin Klisch)
> 7. OpenSER and Redundancy (Martin Klisch)
> 8. Re: how to run openser through monit daemon? (Jayesh Nambiar)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 30 May 2006 17:19:05 +0300
> From: "G.Jacobsen" <g_jacobsen(a)yahoo.co.uk>
> Subject: [Users] Can this work?: re. uac_auth cseq problem
> To: <users(a)openser.org>
> Message-ID: <06ef01c683f8$3d8da960$6501a8c0@winmach1>
> Content-Type: text/plain; charset="iso-8859-1"
>
> I am still digging in this cseq uac problem which I need desperately to
> solve.
>
> The problem is that the uac_auth function can create credentials for the
> downstream proxy after being challenged with a 401 or 407 message - but
> the downstream proxy (UAS) refuses this proxy_auth message since openser
> does not increase the cseq number. Increasing the cseq number only
> downstream wouldnt solve the problem since any replies of the downstream
> proxy back to the originating UAC would have cseq numbers which are out of
> sync.
>
> I propose: In order to keep the cseq numbers in sync upstream and
> downstream one must generate challenges and proxy-auth responses on both
> legs of the route - and not only respond downstream as currently.
>
> So whenever openser receives from the downstream proxy a challenge it must
> forward this challenge the originating UAC (if necessary modify the
> message in such a way that the UAC is guaranteed to respond). This
> upstream challenge causes the originating UAC to increase the cseq.
> Naturally openser must also increase the cseq number downstream when
> generating its own proxy_auth repsonse to the downstream proxy. Whatever
> credentials UAC produces are discarted by openser.
>
> The scheme:
>
> 1. UAC issues invite which is routed by OS to the downstream proxy (UAS) -
> as usual.
> 2. UAS issues challenge 401 or 407 - as usual
> 3. OS captures challenge on_failure route - as envisaged by UAC module
> 4. this is new:
> a) OS relays the challenge upstream to UAC (would it be necessary to
> modify it before doing so ?)
> b) OS constructs with uac_auth function correct proxy_auth credentials for
> UAS, increases the cseq with some text manipulation function and replies
> to UAS.
> 5. UAC responds with (wrong) proxy_auth credentials via OS to UAS
> 6. OS discards the credential message it received from the UAC - to avoid
> that the message reaches UAS.
> 7. Invite successful or failure : UAS responds with further messages which
> are routed to UAC.
>
> Can this scheme work - or am I overlooking something here ?
>
> TIA
>
> Gerry
>