Nonce generation may be seeded by time as an input component, as many pseudorandom values are. However, the only way to get two servers to truly generate the same nonce, setting a common preshared secret is the only way: https://kamailio.org/docs/modules/5.6.x/modules/auth.html#auth.p.secret -- Alex

On Mar 16, 2023, at 10:11 AM, Benoit Panizzon <benoit.panizzon@imp.ch> wrote:

Hi

We have two registrars.

Today I observed a CPE doing this:

CPE REGISTER (no auth) => Registrar 1 => 407 Challenge NONCE A

CPE REGISTER (auth to NONCE A => Registrar 2 => 407 Challenge NONCE B

CPE REGISTER (auth to NONCE B => Registrar 1 => 407 Challenge NONCE A

and so on.

Time on both registrars is in sync (I tought NONCE was based on time)

Is there a way to sync the NONCE so that both would accept authentication based on the same NONCE?

Mit freundlichen Grüssen

-Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________

Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send an email to sr-users-leave@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:

-- Alex Balashov Principal Consultant Evariste Systems LLC Web: https://evaristesys.com Tel: +1-706-510-6800