[Freeswitch-users] Call to unregister endpoint with auth=true after endpoint password change

[Jose David Jurado Alonso]

Hi,

I have FS configured to only send calls to authenticated endpoints. It
works very well in general but there is a case in which it sends the call
to unregistered endpoints:

   1. Auth the endpoint and "registration" (ok)
   2. Call to endpoint and call arrives (ok)
   3. Change the endpoint password in FS DB and endpoint "fail registration"
   4. Call to endpoint and call arrives (ERROR, call must be ignored)

The ERROR is because the REGISTER event know that endpoint "fail
registration" and yet send the call anyway ignoring the "auth_calls=true"
configuration.

If I execute these fs_cli commands between step 3 and 4, the call is not
sent (OK for me, expected and desired case):

> sofia profile external flush_inbound_reg all
> sofia profile external flush_inbound_reg reboot
> sofia profile external check_sync

I have not tested if all the commands are necessary or not.

Does anyone know how it can be done to make it work as desired using
configuration without having to execute the commands after every password
change in an endpoint?

Relevant configuration is:

vars.xml:

  <!-- Internal SIP Profile -->
  <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
  <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/>
  <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/>
  <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>

  <!-- External SIP Profile -->
  <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/>
  <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/>
  <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/>
  <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>

sip_profile "external.xml" (i use it):

    <param name="manage-presence" value="false"/>
    <param name="auth-calls" value="true"/>
    <param name="multiple-registrations" value="true"/>


I use a dynamic directory getting SIP accounts from DB and generate the XML
(mod_curl) setting "cacheable=0".

Thanks!

José David Jurado Alonso.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190510/e1a7b44b/attachment-0001.html>