Sean, my suggestion would be not to reinvent the wheel. If you need another profile to accept registrations, just copy internal.xml and modify what you need. But I think there is another issue here. FS sends back a 401, which is normal, but your SNOM should then send another REGISTER with Digest auth. It doesn't OR your failed to include the whole trace. If it doesn't, it means it's screwed. I had this issue with a very bad ATA from Telco Systems. But I think some people use the M3 on FS, so I guess there is way to make that work (perhaps a firmware update on the M3 or a parameter). First thing, can you confirm ASAP you included the whole trace ? David Ponzone Direction Technique email: david.ponzone@ipeva.fr tel: 01 74 03 18 97 gsm: 06 66 98 76 34 Service Client IPeva tel: 0811 46 26 26 www.ipeva.fr - www.ipeva-studio.com Ce message et toutes les pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisée est interdite. Tout message électronique est susceptible d'altération. IPeva décline toute responsabilité au titre de ce message s'il a été altéré, déformé ou falsifié. Si vous n'êtes pas destinataire de ce message, merci de le détruire immédiatement et d'avertir l'expéditeur. Le 02/05/2010 à 03:30, Sean Holt a écrit :
Hello list,
I keep getting this authentication error when I attempt to connect a device from the outside. I followed the wiki that suggest creating a separate profile to handle external device connections.
Here’s my external xml file <profile name="gexternal5090"> <!-- This profile is only for outbound registrations to providers --> <gateways> <X-PRE-PROCESS cmd="include" data="external/*.xml"/> </gateways> <aliases> <alias name="outbound"/> </aliases> <domains> <domain name="$${domain}" parse="true"/> </domains> <settings> <param name="debug" value="0"/> <param name="sip-trace" value="no"/> <param name="rfc2833-pt" value="101"/> <param name="sip-port" value="5090"/> <param name="dialplan" value="XML"/> <param name="context" value="public"/> <param name="dtmf-duration" value="100"/> <param name="codec-prefs" value="$${outbound_codec_prefs}"/> <param name="hold-music" value="$${moh_uri}"/> <param name="use-rtp-timer" value="true"/> <param name="rtp-timer-name" value="soft"/> <param name="manage-presence" value="false"/> <param name="inbound-codec-negotiation" value="generous"/> <param name="nonce-ttl" value="60"/> <param name="auth-calls" value="false"/> <param name="rtp-timeout-sec" value="1800"/> <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="71.133.39.219"/> <param name="ext-sip-ip" value="71.133.39.219"/> <param name="rtp-timeout-sec" value="300"/> <param name="rtp-hold-timeout-sec" value="1800"/> </settings> </profile>
I did a siptrace on the incoming connection attempt
------------------------------------------------------------------------ REGISTER sip:71.133.39.219:5090 SIP/2.0 Via: SIP/2.0/UDP x.x.x.x:5090;branch=z9hG4bKvvaun9r6.1u8ej Max-Forwards: 70 From: <sip:1001@71.133.39.219>;tag=i9w3pt4bm4tpsl To: <sip:1001@71.133.39.219> Call-ID: fo33ia7sk6qy9vnk6h CSeq: 75203 REGISTER Contact: <sip:1001@x.x.x.x:5090;line=20880> Allow: INVITE, CANCEL, BYE, ACK, REGISTER, OPTIONS, REFER, SUBSCRIBE, NOTIFY, MESSAGE, INFO, PRACK Expires: 600 User-Agent: snom-m3-SIP/02.02 (MAC=0004132AD0BE; HW=255) Content-Length: 0
------------------------------------------------------------------------ send 591 bytes to udp/[x.x.x.x]:5090 at 01:26:47.109165:
------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 10.0.10.231:5090;branch=z9hG4bKvvaun9r6.1u8ej;received=207.47.31.108 From: <sip:1001@71.133.39.219>;tag=i9w3pt4bm4tpsl To: <sip:1001@71.133.39.219>;tag=Zc7mBaBN723Bp Call-ID: fo33ia7sk6qy9vnk6h CSeq: 75203 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY Supported: timer, precondition, path, replaces WWW-Authenticate: Digest realm="71.133.39.219", nonce="bd1ecf94-5589-11df-b3f4-c1a375adf51a", algorithm=MD5, qop="auth" Content-Length: 0
------------------------------------------------------------------------
Thoughts? Thanks Sean _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org