There's a param called auth-calls or something like that, make sure it's in your profile.<br><div class="gmail_quote"><div dir="ltr">On Fri, Apr 7, 2017 at 7:38 PM Peter Villeneuve <<a href="mailto:petervnv1@gmail.com">petervnv1@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg">Hi all,<br class="gmail_msg"><br class="gmail_msg"></div>I'm confused by some strange behavior I'm seeing on my vanilla FS installation.<br class="gmail_msg"><br class="gmail_msg"></div>If I have <param name="apply-inbound-acl" value="domains"/> set in my internal sip profile, even my registered user is unable to make any calls since he gets rejected by the 2017-04-07 17:13:10.085105 [WARNING] sofia.c:9983 IP xx.xx.xx.xx Rejected by acl "domains" message in the logs. Shouldn't FS fall back to regular digest authentication like it used to?<br class="gmail_msg"><br class="gmail_msg"></div>I know the user (let's call him 1000) is registered properly since running sofia status profile internal reg in the cli shows that he is indeed registered as expected.<br class="gmail_msg"><br class="gmail_msg"></div>I made sure in user 1000's directory entry that <variable name="user_context" value="default"/> is set.<br class="gmail_msg"><br class="gmail_msg"></div>If 1) I I apply <param name="apply-inbound-acl" value="domains"/> to the internal profile then calls from user 1000 get rejected by acl domains as explained above, with no fallback to digest authentication (don't know why it doesn't challenge the user)<br class="gmail_msg"><br class="gmail_msg"></div>if 2) I disable <param name="apply-inbound-acl" value="domains"/> then the call hits the public dialplan instead of the default one even though <variable name="user_context" value="default"/> is set in user 1000's directory xml entry.<br class="gmail_msg"><br class="gmail_msg"></div>I haven't used FS in awhile but I recall in the past not having this much trouble trying to get it working as expected. I suppose I could set the context in the internal profile to default but then all kinds of bad guys will be able to make calls on my dime (it's happened before). I want authenticated users only to make calls but this seems to be eluding me.<br class="gmail_msg"><br class="gmail_msg"></div>Is this a known bug (my debian installation was built from git 02c0860 2017-03-03 23:35:25Z 32bit) or am I doing something silly?<br class="gmail_msg"><br class="gmail_msg"></div>Thanks,<br class="gmail_msg"></div>Peter<br class="gmail_msg"></div>
_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a></blockquote></div>