<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Ballongtext Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BallongtextChar
{mso-style-name:"Ballongtext Char";
mso-style-priority:99;
mso-style-link:Ballongtext;
font-family:"Tahoma","sans-serif";}
span.E-postmall19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SV" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Ok, then your manager is wrong :)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Actually, I don’t know enough to move this discussion forward, maybe anyone else can help out. However, for the specific problem we’re talking
about here, I can’t see anything else than it’s the software in the phone that causes problems. But I’m not really sure that the solution you want is even possible to do – according to me I don’t think it is, at least not in a 100% working way.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D">/Peter<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Från:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org]
<b>För </b>Samira Mh<br>
<b>Skickat:</b> den 3 juli 2012 07:48<br>
<b>Till:</b> FreeSWITCH Users Help<br>
<b>Ämne:</b> Re: [Freeswitch-users] how to solve the error Rejected by acl "domains".
</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Falling back to Digest auth?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black">i have to limit the count of registerations because that feature is exactly what my manager want !:(<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black">so i must to implement it correctly ...<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<div>
<div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">
<hr size="1" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="background:white"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black">From:</span></b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:black"> Peter Olsson <<a href="mailto:peter.olsson@visionutveckling.se">peter.olsson@visionutveckling.se</a>><br>
<b>To:</b> FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a>>
<br>
<b>Sent:</b> Tuesday, July 3, 2012 9:58 AM<br>
<b>Subject:</b> Re: [Freeswitch-users] how to solve the error Rejected by acl "domains". Falling back to Digest auth?</span><span style="color:black"><o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="color:black"><br>
Yes, I know. That code does exactly what you want. It's the feature itself that is more questionable...<br>
<br>
Personally I don't believe this will ever work, since there are so many possibilities for timing issues for the registration. As MC said earlier on this discussion, you need to rethink if this is something you really want.<br>
<br>
When it comes to security this will not, in any way, increase the security for you. If you're unlucky it might do the opposite, leaving the phone registered to the "theif", and leave the "real" user blocked from registering.<br>
<br>
Keep your accounts secure, and this shouldn't be needed.<br>
<br>
/Peter<br>
<br>
________________________________<br>
Från: <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a> [<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a>] för Samira Mh [<a href="mailto:saami_mh@ymail.com">saami_mh@ymail.com</a>]<br>
Skickat: den 3 juli 2012 05:48<br>
Till: FreeSWITCH Users Help<br>
Ämne: Re: [Freeswitch-users] how to solve the error Rejected by acl "domains". Falling back to Digest auth?<br>
<br>
hi Peter,<br>
<br>
this feature(max-registrations-per-extension) is embeded in the sofia_reg.c as follow :<br>
<br>
............<br>
if (max_registrations_perext > 0 && (sip && sip->sip_contact && (sip->sip_contact->m_expires == NULL || atol(sip->sip_contact->m_expires) > 0))) {<br>
/* if expires is null still process */<br>
/* expires == 0 means the phone is going to unregiser, so don't count against max */<br>
uint32_t count = 0;<br>
<br>
call_id = sip->sip_call_id->i_id;<br>
switch_assert(call_id);<br>
<br>
sql = switch_mprintf("select count(sip_user) from sip_registrations where sip_user='%q' AND call_id <> '%q'", username, call_id);<br>
switch_assert(sql != NULL);<br>
sofia_glue_execute_sql_callback(profile, NULL, sql, sofia_reg_regcount_callback, &count);<br>
free(sql);<br>
<br>
if (count + 1> max_registrations_perext) {<br>
ret = AUTH_FORBIDDEN;<br>
if (sofia_test_pflag(profile, PFLAG_LOG_AUTH_FAIL)) {<br>
switch_log_printf(SWITCH_CHANNEL_LOG, SWITCH_LOG_WARNING,<br>
"SIP auth failure (REGISTER) due to reaching max allowed registrations. Count: %d\n", count);<br>
}<br>
goto end;<br>
}<br>
}<br>
<br>
.............<br>
<br>
________________________________<br>
From: Peter Olsson <<a href="mailto:peter.olsson@visionutveckling.se">peter.olsson@visionutveckling.se</a>><br>
To: FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a>><br>
Sent: Monday, July 2, 2012 9:35 PM<br>
Subject: Re: [Freeswitch-users] how to solve the error Rejected by acl "domains". Falling back to Digest auth?<br>
<br>
It seems the phone tries to register, even though it is already registered according to FS.<br>
<br>
So if you really want to use this method, I think you must do further debugging on the phone...<br>
<br>
As mentioned before on this list, I don't think this is a good approach, and since noone had even heard about this variable before, I'm guessing it's not widely used. However, in this particular example, FS is just doing exactly what it has been told to do,
only to allow a registration if it doesn't exist already.<br>
<br>
/Peter<br>
<br>
2 jul 2012 kl. 18:53 skrev "Samira Mh" <<a href="mailto:saami_mh@ymail.com">saami_mh@ymail.com</a><mailto:<a href="mailto:saami_mh@ymail.com">saami_mh@ymail.com</a>><mailto:<a href="mailto:saami_mh@ymail.com">saami_mh@ymail.com</a><mailto:<a href="mailto:saami_mh@ymail.com">saami_mh@ymail.com</a>>>>:<br>
<br>
hi guys,<br>
please let me know paste myconfigurations as follow:<br>
1-<br>
vim /usr/local/freeswitch/conf/directory/default/v_212263612400.xml<br>
<include><br>
<user id="212263612400"><br>
<params><br>
<param name="password" value="samira"/><br>
<param name="vm-password" value="user-choose"/><br>
<param name="vm-enabled" value="true"/><br>
<param name="max-registrations-per-extension" value="1"/><br>
<br>
</params><br>
<variables><br>
<variable name="toll_allow" value=""/><br>
<variable name="accountcode" value=""/><br>
<variable name="user_context" value="default"/><br>
<variable name="directory-visible" value="true"/><br>
<variable name="directory-exten-visible" value="true"/><br>
<variable name="limit_max" value="5"/><br>
<variable name="sip-force-contact" value="NDLB-connectile-dysfunction"/><br>
<variable name="nibble_account" value="20014334"/><br>
</variables><br>
</user><br>
</include><br>
<br>
2-vim /usr/local/freeswitch/conf/autoload_configs/acl.conf.xml<br>
<configuration name="acl.conf" description="Network Lists"><br>
<network-lists><br>
<br>
<list name="domains" default="deny"><br>
<node type="allow" domain="$${domain}"/><br>
</list><br>
<br>
</network-lists><br>
</configuration><br>
<br>
*max-registrations-per-extension =1<br>
when issue the following command the user is registered so another user with the extension '2122636124' couldn't register simultaneously :<br>
sofia status profile internal reg<br>
<br>
Now what is problem?<br>
every time i want to dial some extensions that is configured in my dialplan the following erroe occure:<br>
2012-07-02 21:02:12.050074 [WARNING] sofia_reg.c:1471 SIP auth challenge (REGISTER) on sofia profile 'internal_private' for [212263612400@192.168.10.70<<a href="mailto:212263612400@192.168.10.70">mailto:212263612400@192.168.10.70</a>>] from ip 192.168.18.120<br>
2012-07-02 21:02:14.710049 [DEBUG] sofia.c:7904 IP 192.168.18.120 Rejected by acl "domains". Falling back to Digest auth.<br>
2012-07-02 21:02:14.710049 [WARNING] sofia_reg.c:1471 SIP auth challenge (INVITE) on sofia profile 'internal_private' for [00989191949637@192.168.10.70<<a href="mailto:00989191949637@192.168.10.70">mailto:00989191949637@192.168.10.70</a>>] from ip 192.168.18.120<br>
2012-07-02 21:02:14.710049 [DEBUG] sofia.c:7904 IP 192.168.18.120 Rejected by acl "domains". Falling back to Digest auth.<br>
2012-07-02 21:02:14.710049 [WARNING] sofia_reg.c:2607 SIP auth failure (REGISTER) due to reaching max allowed registrations. Count: 1<br>
2012-07-02 21:02:14.710049 [WARNING] sofia_reg.c:1416 SIP auth failure (INVITE) on sofia profile 'internal_private' for [00989191949637@192.168.10.70<<a href="mailto:00989191949637@192.168.10.70">mailto:00989191949637@192.168.10.70</a>>] from ip 192.168.18.120<br>
<br>
so if i remove the line <param name="max-registrations-per-extension" value="1"/> from /usr/local/freeswitch/conf/directory/default/v_212263612400.xml or from within /usr/local/freeswitch/conf/sip_profiles/internal.xml(it is posible to defined either<br>
internal.xml or /usr/local/freeswitch/conf/directory/default/v_212263612400.xml) the problem solved --with the same settings on vim /usr/local/freeswitch/conf/autoload_configs/acl.conf.xml-- but simultaneously registeration per extension couldn't worked
properly ,,,<br>
<br>
plz help,<br>
what is problem on my settings?<br>
<br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><mailto:<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>><mailto:<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><mailto:<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>>><br>
<a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com</a><<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com/</a>><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org/</a>><br>
<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org</a><<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org/</a>><br>
<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com/</a>><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>><mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>>><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org/</a>><br>
<br>
<br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><mailto:<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>><br>
<a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><<a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com/</a>><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com</a><<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com/</a>><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org/</a>><br>
<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org</a><<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org/</a>><br>
<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com/</a>><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org/</a>><br>
<br>
<br>
!DSPAM:4ff26ae632762054019490!<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
<br>
<o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal">!DSPAM:4ff2867f32765777574751! <o:p></o:p></p>
</div>
</body>
</html>