<span style='font-family:Verdana'><span style='font-size:12px'>I see... thank you very much for explaining<br />
<br />
<br />
<p style="margin:0px; padding:0px;" >
</p>
<blockquote style="border-left: 1px solid #CCC; padding-left: 5px; margin-left: 5px; margin-bottom: 0px; margin-top: 0px; margin-right: 0px;" type="cite">
<p style="margin:0px; padding:0px;" >
<span style="font-family:Verdana"><span style="font-size:12px">----- Original Message -----</span></span></p>
<p style="margin:0px; padding:0px;" >
<span style="font-family:Verdana"><span style="font-size:12px">From: Avi Marcus</span></span></p>
<p style="margin:0px; padding:0px;" >
<span style="font-family:Verdana"><span style="font-size:12px">Sent: 07/29/12 08:39 PM</span></span></p>
<p style="margin:0px; padding:0px;" >
<span style="font-family:Verdana"><span style="font-size:12px">To: FreeSWITCH Users Help</span></span></p>
<p style="margin:0px; padding:0px;" >
<span style="font-family:Verdana"><span style="font-size:12px">Subject: Re: [Freeswitch-users] how to force sofia to use digest auth first?</span></span></p>
<br />
<div>
<div>
It's not what you think...
<div>
part of the 401 unauthorized attempt is that it sends back a nonce key that you use to encrypt your password. That way, SIP has built-in protection against replay attacks even over unencrypted connections.</div>
<div>
(If someone is watching though, they can try to brute force your passwords based on the nonce key...)</div>
<div>
<br clear="all" />
<div>
<span style="font-family:Verdana,Arial,Helvetica,sans-serif"><span style="font-size:small">-Avi</span></span></div>
<br />
<br />
<br />
<div class="gmail_quote">
On Sun, Jul 29, 2012 at 8:05 PM, Mi Ke <span><<a href="mailto:mi.ke@null.net" target="_blank">mi.ke@null.net</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span style="font-family:Verdana"><span style="font-size:12px"><span style="font-family:verdana"><span style="font-size:12px">Hi All,<br />
<br />
I use the following bridge params to originate call:<br />
<br />
{sip_auth_username=xxx,sip_auth_password=yyy,effective_caller_id_name=xxx,effective_caller_id_number=xxx}sofia/external/<a href="mailto:1111@1.1.1.1" target="_blank">1111@1.1.1.1</a><br />
<br />
Since my remote carrier supports only digest authentication, it replies with 401 (Unauthorized) for my first INVITE, and then FS falls back to digest auth and my calls goes OK.<br />
<br />
Is it possible to change auth type priority for sip profile/globally so digest auth will be used first or disable plain auth completely ?<br />
<br />
WBR / Mike</span></span></span></span><br />
<br />
<br />
_________________________________________________________________________<br />
Professional FreeSWITCH Consulting Services:<br />
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br />
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br />
<br />
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br />
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br />
<br />
Official FreeSWITCH Sites<br />
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br />
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br />
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br />
<br />
Join Us At ClueCon - Aug 7-9, 2012<br />
<br />
FreeSWITCH-users mailing list<br />
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br />
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br />
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br />
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br />
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
<p style="margin:0px; padding:0px;" >
</p>
</span></span>