<div dir="ltr">But as I mentioned above I`m using <a href="https://wiki.freeswitch.org/wiki/Multiple_Companies">https://wiki.freeswitch.org/wiki/Multiple_Companies</a> . So using one REALM for all domains it`s not ideal solution.</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 4, 2016 at 10:00 PM, Sergey Safarov <span dir="ltr"><<a href="mailto:s.safarov@gmail.com" target="_blank">s.safarov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">In default config challenge will be for "<span style="font-size:12.8px">anonymous.</span><span style="font-size:12.8px">invalid" domain.</span><div><span style="font-size:12.8px">To change this edit profile.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Sergey</span></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Mon, Jan 4, 2016 at 11:34 PM, Volodymyr Fedorov <span dir="ltr"><<a href="mailto:lexxua@gmail.com" target="_blank">lexxua@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi community,<div>I experience interesting issue. Freeswitch running in multi-domain environment. </div><div>UA generates invite with anonymous@anonymous.invalid in FROM which is quite normal according to rfc3325.</div><div>Sample bellow:</div><div>===</div><div>INVITE <a href="mailto:sip%3A44264@pbx-sumy.co.ia.com" target="_blank">sip:44264@pbx-sumy.co.ia.com</a> SIP/2.0<br></div><div>Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport</div><div>From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=1989469488</div><div>To: <<a href="mailto:sip%3A44264@pbx-sumy.co.ia.com" target="_blank">sip:44264@pbx-sumy.co.ia.com</a>></div><div>Call-ID: 1409580995-5062-3@BA.BA.G.BHA</div><div>CSeq: 20 INVITE</div><div>Contact: "Anonymous" <<a href="http://sip:54240@10.10.6.170:5062" target="_blank">sip:54240@10.10.6.170:5062</a>></div><div>Max-Forwards: 70</div><div>User-Agent: Grandstream GXP1625 1.0.3.6</div><div>Privacy: id</div><div>P-Preferred-Identity: <<a href="mailto:sip%3A54240@pbx-sumy.co.ia.com" target="_blank">sip:54240@pbx-sumy.co.ia.com</a>></div><div>Supported: replaces, path, timer</div><div>Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE, MESSAGE</div><div>Content-Type: application/sdp</div><div>Accept: application/sdp, application/dtmf-relay</div><div>Content-Length: 332</div><div>===</div><div>Freeswitch sends 407 and uses as Digest-realm domain part from FROM :</div><div>"Proxy-Authenticate: Digest realm="anonymous.invalid""<br></div><div><br></div><div>Example:</div><div>===</div><div><div>SIP/2.0 407 Proxy Authentication Required<br></div><div>Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport=5062</div><div>From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=1989469488</div><div>To: <<a href="mailto:sip%3A44264@pbx-sumy.co.ia.com" target="_blank">sip:44264@pbx-sumy.co.ia.com</a>>;tag=ZamrKr7UecpNp</div><div>Call-ID: 1409580995-5062-3@BA.BA.G.BHA</div><div>CSeq: 20 INVITE</div><div>User-Agent: FreeSWITCH-mod_sofia/1.4.26-37~64bit</div><div>Accept: application/sdp</div><div>Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE</div><div>Supported: timer, path, replaces</div><div>Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.win</div><div>, message-summary, refer</div><div>Proxy-Authenticate: Digest realm="anonymous.invalid", nonce="917b30c9-9070-4ae5-87e6-1814b379fd94", algorithm=MD5, qop="auth"</div><div>Content-Length: 0</div></div><div>===</div><div><br></div><div>And call fails 403 Forbidden. So main question how to rid this. And is it feature or bug. Maybe I can use domain part from P-Preferred-Identity header ? </div><div><br></div><div>Thank you in advance.</div><span><font color="#888888"><div><br></div><div>-- <br><div><div dir="ltr"><div><div style="font-size:small">Best regards,</div><div style="font-size:small">Volodymyr</div></div></div></div>
</div></font></span></div>
<br></div></div>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div style="font-size:small">Best regards,</div><div style="font-size:small">Volodymyr</div></div></div></div>
</div>