[Users] no authorize with ATA and phones

[Bogdan-Andrei Iancu]

Hi Jens,

can you capture the request that trigger the error? (the second INVITE, 
after challenge). I can take a look to see what is the problem.

if you configure the credentials into the phone, a reason for the phone 
not to respond to authentication is that it was not able to match any 
local credentials against the received challenge - based on username and 
realm).

regards,
bogdan

regards,
bogdan

Jens Carl wrote:

>Hello list,
>
>i have following code in my openser configuration to prevent that
>everybody can make calls to PSTN:
>
>process INVITE messages
>-- snip
>
>if( !allow_trusted() ) {
>  if( !proxy_authorize( "myrealm", "subscriber" ) ) {
>    proxy_challenge( "realm", "1" );
>    return;
>  } else if ( !check_from() ) {
>    sl_send_reply( "403", "Use From=ID" );
>    return;
>  };
>  consume_credentials();
>};
>
>-- snap
>
>This works fine with snom200, snom360 and some other phones/ATA.
>It isn't working with Linksys IPPhone SPA941, snom100 and the ATA
>Linksys SPA 2001.
>
>All these three devices aren't sending the credentials after they are
>challenge to send them. I know this because the new INVITE message have
>no digest information in it, the call isn't be placed and the following
>error message from the logs of OpenSER:
>
>/sbin/openser[3323]: find_credentials(): Error while parsing headers
>
>I have also tried that the second parameter of proxy_challenge are 0
>(zero) but that didn't helped.
>
>Have anybody a clue where I can change this behaviour of the three
>devices? Have I change some settings, etc of the phones/ATA?
>
>Or maybe I have to change my code for the OpenSER? But I will avoid this
>because I don't want to be an open relay.
>
>Thanks in advance
>
>Jens
>
>_______________________________________________
>Users mailing list
>Users at openser.org
>http://openser.org/cgi-bin/mailman/listinfo/users
>
>  
>