FWIW, I could not reproduce this behavior on v1.2.stable branch. When I set auth-calls=false in the SIP profile and make an inbound call it just relies on the ACL and that's it. <br><br>Miconda, what version of FS did you say you were running?<br>
<br>-MC<br><br><div class="gmail_quote">On Tue, Aug 21, 2012 at 1:50 PM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi Mike,<br>
<div class="im"><br>
On 8/21/12 10:27 PM, Michael Jerris wrote:<br>
> auth-calls false means we won't challenge invite, accept-blind-auth means if auth headers are there, we ignore them.<br>
<br>
</div>it is what I expected from auth-calls (and worked like this in the<br>
past), but now even if set to false, the calls are challenged with 407<br>
reply for authentication. Only when I set accept-blind-auth to false<br>
there is no 407.<br>
<br>
Overall, it gets me what I need, access being granted on IP acl, but I<br>
wanted to double check if such change in behaviour of auth-calls was<br>
done on purpose. I will review my changes comparing with the default<br>
configs to see if I modified other params that could result in this<br>
situation, although I think there is no other related parameter.<br>
<br>
Cheers,<br>
Daniel<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
> Mike<br>
><br>
> On Aug 21, 2012, at 1:57 PM, Daniel-Constantin Mierla <<a href="mailto:miconda@gmail.com">miconda@gmail.com</a>> wrote:<br>
><br>
>> Hello,<br>
>><br>
>> in the past I used to set:<br>
>><br>
>> <param name="auth-calls" value="false"/><br>
>><br>
>> in the sip profile in order to skip user authentication for calls.<br>
>><br>
>> Lately I started to play a bit with 1.2 stable branch and seems that<br>
>> setting auth-calls to false is no longer doing what I expected, calls<br>
>> being challenged for user authentication.<br>
>><br>
>> Setting instead the accept-blind-auth to false got me what I wanted, like:<br>
>><br>
>> <!-- accept any authentication without actually checking (not a<br>
>> good feature for most people) --><br>
>> <param name="accept-blind-auth" value="true"/><br>
>><br>
>> But from the comment (checked the wiki as well, but has the same text)<br>
>> is a bit unclear what is the real purpose for it.<br>
>><br>
>> Isn't auth-calls=false supposed to accept calls without user<br>
>> authentication anymore?<br>
>><br>
>> For this particular case, I play some announcements, like 'user not<br>
>> available', and should work also for calls coming from outside. The<br>
>> access is restricted by IP address ACL, allowing SIP traffic only from<br>
>> my Kamailio instance.<br>
><br>
> _________________________________________________________________________<br>
> Professional FreeSWITCH Consulting Services:<br>
> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
><br>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
><br>
> Official FreeSWITCH Sites<br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
><br>
> FreeSWITCH-users mailing list<br>
> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br>
</div></div><div class="im HOEnZb">--<br>
Daniel-Constantin Mierla - <a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a><br>
<a href="http://twitter.com/#!/miconda" target="_blank">http://twitter.com/#!/miconda</a> - <a href="http://www.linkedin.com/in/miconda" target="_blank">http://www.linkedin.com/in/miconda</a><br>
Kamailio Advanced Training, Berlin, Nov 5-8, 2012 - <a href="http://asipto.com/u/kat" target="_blank">http://asipto.com/u/kat</a><br>
<br>
<br>
</div><div class="HOEnZb"><div class="h5">_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Michael S Collins<br>Twitter: @mercutioviz<br><a href="http://www.FreeSWITCH.org" target="_blank">http://www.FreeSWITCH.org</a><br><a href="http://www.ClueCon.com" target="_blank">http://www.ClueCon.com</a><br>
<a href="http://www.OSTAG.org" target="_blank">http://www.OSTAG.org</a><br><br><br>