[Freeswitch-users] Digest-realm for hidden caller-id

[Sergey Safarov]

Place kamailio before FS and rewrite From header

On Thu, Jan 7, 2016, 10:56 Volodymyr Fedorov <lexxua at gmail.com> wrote:

> But as I mentioned above I`m using
> https://wiki.freeswitch.org/wiki/Multiple_Companies . So using one REALM
> for all domains it`s not ideal solution.
>
> On Mon, Jan 4, 2016 at 10:00 PM, Sergey Safarov <s.safarov at gmail.com>
> wrote:
>
>> In default config challenge will be for "anonymous.invalid" domain.
>> To change this edit profile.
>>
>> Sergey
>>
>> On Mon, Jan 4, 2016 at 11:34 PM, Volodymyr Fedorov <lexxua at gmail.com>
>> wrote:
>>
>>> Hi community,
>>> I experience interesting issue. Freeswitch running in multi-domain
>>> environment.
>>> UA generates invite with anonymous at anonymous.invalid in FROM  which is
>>> quite normal according to rfc3325.
>>> Sample bellow:
>>> ===
>>> INVITE sip:44264 at pbx-sumy.co.ia.com SIP/2.0
>>> Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport
>>> From: "Anonymous" <sip:anonymous at anonymous.invalid>;tag=1989469488
>>> To: <sip:44264 at pbx-sumy.co.ia.com>
>>> Call-ID: 1409580995-5062-3 at BA.BA.G.BHA
>>> CSeq: 20 INVITE
>>> Contact: "Anonymous" <sip:54240 at 10.10.6.170:5062>
>>> Max-Forwards: 70
>>> User-Agent: Grandstream GXP1625 1.0.3.6
>>> Privacy: id
>>> P-Preferred-Identity: <sip:54240 at pbx-sumy.co.ia.com>
>>> Supported: replaces, path, timer
>>> Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO,
>>> REFER, UPDATE, MESSAGE
>>> Content-Type: application/sdp
>>> Accept: application/sdp, application/dtmf-relay
>>> Content-Length:   332
>>> ===
>>> Freeswitch sends 407 and uses as Digest-realm domain part from FROM :
>>> "Proxy-Authenticate: Digest realm="anonymous.invalid""
>>>
>>> Example:
>>> ===
>>> SIP/2.0 407 Proxy Authentication Required
>>> Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport=5062
>>> From: "Anonymous" <sip:anonymous at anonymous.invalid>;tag=1989469488
>>> To: <sip:44264 at pbx-sumy.co.ia.com>;tag=ZamrKr7UecpNp
>>> Call-ID: 1409580995-5062-3 at BA.BA.G.BHA
>>> CSeq: 20 INVITE
>>> User-Agent: FreeSWITCH-mod_sofia/1.4.26-37~64bit
>>> Accept: application/sdp
>>> Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,
>>> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
>>> Supported: timer, path, replaces
>>> Allow-Events: talk, hold, conference, presence, as-feature-event,
>>> dialog, line-seize, call-info, sla, include-session-description,
>>> presence.win
>>> , message-summary, refer
>>> Proxy-Authenticate: Digest realm="anonymous.invalid",
>>> nonce="917b30c9-9070-4ae5-87e6-1814b379fd94", algorithm=MD5, qop="auth"
>>> Content-Length: 0
>>> ===
>>>
>>> And call fails 403 Forbidden. So main question how to rid this. And is
>>> it feature or bug. Maybe I can use domain part from P-Preferred-Identity
>>> header ?
>>>
>>> Thank you in advance.
>>>
>>> --
>>> Best regards,
>>> Volodymyr
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> --
> Best regards,
> Volodymyr
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160107/52b1652f/attachment.html