[Freeswitch-users] Call to unregister endpoint with auth=true after endpoint password change

[Alexey Sibyakin]

Hi,

FreeSWITCH will not send a call to an unregistered endpoint. Registration
will not expire because of password changing.

Try to reduce expire or flush registration via ESL on password change.

Regards,

Alex

Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor,
Palo Alto, CA 94303 Email: alex at freeswitch.com Website:
https://www.signalwire.com



On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso <
josedavid at zennio.com> wrote:

> Hi,
>
> I have FS configured to only send calls to authenticated endpoints. It
> works very well in general but there is a case in which it sends the call
> to unregistered endpoints:
>
>    1. Auth the endpoint and "registration" (ok)
>    2. Call to endpoint and call arrives (ok)
>    3. Change the endpoint password in FS DB and endpoint "fail
>    registration"
>    4. Call to endpoint and call arrives (ERROR, call must be ignored)
>
> The ERROR is because the REGISTER event know that endpoint "fail
> registration" and yet send the call anyway ignoring the "auth_calls=true"
> configuration.
>
> If I execute these fs_cli commands between step 3 and 4, the call is not
> sent (OK for me, expected and desired case):
>
> > sofia profile external flush_inbound_reg all
> > sofia profile external flush_inbound_reg reboot
> > sofia profile external check_sync
>
> I have not tested if all the commands are necessary or not.
>
> Does anyone know how it can be done to make it work as desired using
> configuration without having to execute the commands after every password
> change in an endpoint?
>
> Relevant configuration is:
>
> vars.xml:
>
>   <!-- Internal SIP Profile -->
>   <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
>   <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/>
>   <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/>
>   <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
>
>   <!-- External SIP Profile -->
>   <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/>
>   <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/>
>   <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/>
>   <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
>
> sip_profile "external.xml" (i use it):
>
>     <param name="manage-presence" value="false"/>
>     <param name="auth-calls" value="true"/>
>     <param name="multiple-registrations" value="true"/>
>
>
> I use a dynamic directory getting SIP accounts from DB and generate the
> XML (mod_curl) setting "cacheable=0".
>
> Thanks!
>
> José David Jurado Alonso.
> _________________________________________________________________________
>
> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN
> services.
> Build your next product on our scalable cloud platform.
>
> Join our online community to chat in real time
> https://signalwire.community
>
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190510/75cadc2a/attachment.html>