[Freeswitch-users] Conflicting settings in SIP profile in vanilla demo

Wed Nov 23 15:58:47 UTC 2022

After a few days on this topic my head is spinning (and I’ve read the Packt book and the wiki). And I’m using the vanilla demo only.  Maybe if I break this down you could confirm my understanding:

1.       The ‘domains’ acl is a list of IP addresses/ranges creating by reading from the users directory (from users who have a CIDR set).  It’s a list of those found CIDR’s.

2.       I can add an IP range to the domains acl by adding an allow node with cidr in the acl definition

3.       If a user registers from an IP matching the domains ACL, they are automatically authenticated, and their vars & params from the user definition are applied

Then why if that user tries to dial 5000 are they put into the public context (even though their variables, including user_context, were applied when they autoregistered)?  Their user_context is set to default in the user definition.

Something in my chain of logic above must be wrong

From: FreeSWITCH-users [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Brian West
Sent: Wednesday, November 23, 2022 9:12 AM
To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
Subject: Re: [Freeswitch-users] Conflicting settings in SIP profile in vanilla demo

you're not setting the user_context in the variables that matches the cidr= attribute from the user in the directory.  

You can also call set_user to make it apply in the dialplan if needed also.

/b

On Tue, Nov 22, 2022 at 6:13 PM TTT <lists at telium.io <mailto:lists at telium.io> > wrote:

When a user is autoauthenticated, do the variables from the user profile get applied?  Or does that happen only during true authentication?

I’m trying to explain a strange behavior of a user being processed in the wrong dialplan context if I add the user’s subnet to the ‘domains’ acl as a cidr.  (A separate post topic)

From: FreeSWITCH-users [mailto:freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org> ] On Behalf Of Ken Rice
Sent: Tuesday, November 22, 2022 6:48 PM
To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org <mailto:freeswitch-users at lists.freeswitch.org> >
Subject: Re: [Freeswitch-users] Conflicting settings in SIP profile in vanilla demo

no, it means users that match the acl are auto authenticated. 

Sent from my iPhone

On Nov 22, 2022, at 14:53, TTT <lists at telium.io <mailto:lists at telium.io> > wrote:

I am working with a simple FreeSWITCH installation, with the vanilla demo configuration. I see that the Internal SIP profile contains:

  <param name="apply-inbound-acl" value="domains"/>

  <param name="auth-calls" value="$${internal_auth_calls}"/>

The first line means that if a caller's IP is on the 'domains' list that they do NOT need to authenticate. The second line means that in order to use this SIP profile the user MUST be authenticated (internal_auth_calls is true).

Aren't these two lines contradictory? Why allow a user to not authenticate for this SIP profile, and then say they must authenticate to use this SIP profile?

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales at freeswitch.com <mailto:sales at freeswitch.com> 
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org> 
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales at freeswitch.com <mailto:sales at freeswitch.com> 
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org> 
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com

-- 

Brian West | Co-founder and Developer

Need Commercial support? email sales at freeswitch.com <mailto:sales at freeswitch.com>  

FreeSWITCH Solutions |  <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g> 17345 Civic Drive #2531 Brookfield, WI 53045

Email: brian at freeswitch.com <mailto:brian at freeswitch.com> 

Mobile: 918-424-9378

Website:  <https://www.freeswitch.com/> https://www.FreeSWITCH.com

 <https://www.facebook.com/freeswitch>  <https://twitter.com/freeswitch> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20221123/964b7fa7/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 344 bytes
Desc: not available
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20221123/964b7fa7/attachment-0001.jpg>