[Freeswitch-users] sip profile - accept-blind-auth vs

[Michael Collins]

FWIW, I could not reproduce this behavior on v1.2.stable branch. When I set
auth-calls=false in the SIP profile and make an inbound call it just relies
on the ACL and that's it.

Miconda, what version of FS did you say you were running?

-MC

On Tue, Aug 21, 2012 at 1:50 PM, Daniel-Constantin Mierla <miconda at gmail.com
> wrote:

> Hi Mike,
>
> On 8/21/12 10:27 PM, Michael Jerris wrote:
> > auth-calls false means we won't challenge invite, accept-blind-auth
> means if auth headers are there, we ignore them.
>
> it is what I expected from auth-calls (and worked like this in the
> past), but now even if set to false, the calls are challenged with 407
> reply for authentication. Only when I set accept-blind-auth to false
> there is no 407.
>
> Overall, it gets me what I need, access being granted on IP acl, but I
> wanted to double check if such change in behaviour of auth-calls was
> done on purpose. I will review my changes comparing with the default
> configs to see if I modified other params that could result in this
> situation, although I think there is no other related parameter.
>
> Cheers,
> Daniel
>
> >
> > Mike
> >
> > On Aug 21, 2012, at 1:57 PM, Daniel-Constantin Mierla <miconda at gmail.com>
> wrote:
> >
> >> Hello,
> >>
> >> in the past I used to set:
> >>
> >> <param name="auth-calls" value="false"/>
> >>
> >> in the sip profile in order to skip user authentication for calls.
> >>
> >> Lately I started to play a bit with 1.2 stable branch and seems that
> >> setting auth-calls to false is no longer doing what I expected, calls
> >> being challenged for user authentication.
> >>
> >> Setting instead the accept-blind-auth to false got me what I wanted,
> like:
> >>
> >>      <!-- accept any authentication without actually checking (not a
> >> good feature for most people) -->
> >>      <param name="accept-blind-auth" value="true"/>
> >>
> >> But from the comment (checked the wiki as well, but has the same text)
> >> is a bit unclear what is the real purpose for it.
> >>
> >> Isn't auth-calls=false supposed to accept calls without user
> >> authentication anymore?
> >>
> >> For this particular case, I play some announcements, like 'user not
> >> available', and should work also for calls coming from outside. The
> >> access is restricted by IP address ACL, allowing SIP traffic only from
> >> my Kamailio instance.
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > 
> > 
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
>
> --
> Daniel-Constantin Mierla - http://www.asipto.com
> http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
> Kamailio Advanced Training, Berlin, Nov 5-8, 2012 -
> http://asipto.com/u/kat
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
Michael S Collins
Twitter: @mercutioviz
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120821/b56e90ec/attachment-0001.html