<br><br><div class="gmail_quote">On Sun, Feb 6, 2011 at 5:22 PM, Simon J Mudd <span dir="ltr"><<a href="mailto:sjmudd@pobox.com">sjmudd@pobox.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
I've been looking at trying to configure tighter controls for extensions that register.<br>
Doing so made me trigger this error message (adjusted slightly):<br>
<br>
2011-02-07 00:07:51.343303 [WARNING] sofia_reg.c:1247 SIP auth challenge (REGISTER) on sofia profile 'internal' for [<a href="mailto:1000@sip.example.com">1000@sip.example.com</a>] from ip 192.168.4.99<br>
2011-02-07 00:07:51.343303 [WARNING] sofia_reg.c:1247 SIP auth challenge (REGISTER) on sofia profile 'internal' for [<a href="mailto:1000@sip.example.com">1000@sip.example.com</a>] from ip 192.168.4.99<br>
<br>
Looking at the message it is not clear if the SIP authentication has succeeded or failed.<br>
Judging by the code it seems this is meant to represent a SIP auth failure. If so should<br>
the code not be patched as shown?<br></blockquote><div><br></div><div>No. This is just saying that there was a challenge, not that there was a failure. There is already a failure detection routine. To test it, setup a SIP client with an incorrect password. You'll see two log lines like this:</div>
<div><br></div><div><font class="Apple-style-span" face="'courier new', monospace">2011-02-07 12:23:28.490029 [WARNING] sofia_reg.c:1247 SIP auth challenge (REGISTER) on sofia profile 'internal' for [<a href="mailto:1002@10.10.16.161">1002@10.10.16.161</a>] from ip 10.10.16.161</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011-02-07 12:23:29.035950 [WARNING] sofia_reg.c:1247 SIP auth challenge (REGISTER) on sofia profile 'internal' for [<a href="mailto:1002@10.10.16.161">1002@10.10.16.161</a>] from ip 10.10.16.161</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011-02-07 12:23:29.240695 [WARNING] sofia_reg.c:1205 SIP auth failure (REGISTER) on sofia profile 'internal' for [<a href="mailto:1002@10.10.16.161">1002@10.10.16.161</a>] from ip 10.10.16.161</font></div>
<div><br></div><div>This allows you to differentiate between the mere fact that an auth challenge was sent to the SIP client vs. the SIP client failing to auth. (Someone asked for that differentiation a while back - I don't know who or why...)</div>
<div><br></div><div>-MC</div><div><br></div></div>