Re: [Freeswitch-users] Log of Authentication Attempts/Failures

15 Jun 2015

      I have checked in the sofia_reg.c code of the freeswitch 1.2.11 version, 
and this is available for this version.

if (auth_res != AUTH_OK && auth_res != AUTH_RENEWED && !stale) {
                         if (auth_res == AUTH_FORBIDDEN) {
                                 nua_respond(nh, SIP_403_FORBIDDEN, 
NUTAG_WITH_THIS_MSG(de->data->e_msg), TAG_END());
                                 forbidden = 1;
                         } else {
                                 nua_respond(nh, SIP_401_UNAUTHORIZED, 
NUTAG_WITH_THIS_MSG(de->data->e_msg), TAG_END());
                         }

                         if (profile->debug) {
switch_log_printf(SWITCH_CHANNEL_LOG, SWITCH_LOG_DEBUG, "Send %s for 
[%s@%s]\n",
forbidden ? "forbidden" : "challenge", to_user, to_host);
                         }
                         /* Log line added to support Fail2Ban */
                         if (sofia_test_pflag(profile, 
PFLAG_LOG_AUTH_FAIL)) {
switch_log_printf(SWITCH_CHANNEL_LOG, SWITCH_LOG_WARNING, "SIP auth %s 
(%s) on sofia profile '%s' "
"for [%s@%s] from ip %s\n", forbidden ? "failure" : "challenge",
(regtype == REG_INVITE) ? "INVITE" : "REGISTER", profile->name, to_user, 
to_host, network_ip);
                         }

I am just getting this in the log file. I am avoiding to update cause 
this server is in production environment.

Somehow it is not processing the last "if" statement.

On 11.06.2015 17:19, Michael Jerris wrote:
...
You should start with trying our most recent release 1.4.19
On Thursday, June 11, 2015, Густаво Силва <gfs@etherway.ru 
<mailto:gfs@etherway.ru>> wrote:
Hello Guys,
I am trying to log the attempts and failures of the authentication
    process but I am not able to get the log as described in the
    freeswitch site.
I have already set my profile to log it by doing:
<param name="log-auth-failures" value="true"/>
and I reloaded the sofia mod.
I should get in the freeswitch log, "SIP auth challenge" or "SIP
    auth failure", but I am getting only "Send challenge for" and
    "Send forbidden for" if the authentication fails.
I am using the freeswitch version 1.2.11.
What else should I do?
Regards,
    Gustavo
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org