It's not what you think... part of the 401 unauthorized attempt is that it sends back a nonce key that you use to encrypt your password. That way, SIP has built-in protection against replay attacks even over unencrypted connections. (If someone is watching though, they can try to brute force your passwords based on the nonce key...) -Avi On Sun, Jul 29, 2012 at 8:05 PM, Mi Ke <mi.ke@null.net> wrote:
Hi All,
I use the following bridge params to originate call:
{sip_auth_username=xxx,sip_auth_password=yyy,effective_caller_id_name=xxx,effective_caller_id_number=xxx}sofia/external/ 1111@1.1.1.1
Since my remote carrier supports only digest authentication, it replies with 401 (Unauthorized) for my first INVITE, and then FS falls back to digest auth and my calls goes OK.
Is it possible to change auth type priority for sip profile/globally so digest auth will be used first or disable plain auth completely ?
WBR / Mike
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org