In default config challenge will be for "anonymous.invalid" domain.

To change this edit profile.

Sergey

On Mon, Jan 4, 2016 at 11:34 PM, Volodymyr Fedorov <lexxua@gmail.com> wrote:

Hi community,

I experience interesting issue. Freeswitch running in multi-domain environment. 

UA generates invite with anonymous@anonymous.invalid in FROM  which is quite normal according to rfc3325.

Sample bellow:

===

INVITE sip:44264@pbx-sumy.co.ia.com SIP/2.0

Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport

From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=1989469488

To: <sip:44264@pbx-sumy.co.ia.com>

Call-ID: 1409580995-5062-3@BA.BA.G.BHA

CSeq: 20 INVITE

Contact: "Anonymous" <sip:54240@10.10.6.170:5062>

Max-Forwards: 70

User-Agent: Grandstream GXP1625 1.0.3.6

Privacy: id

P-Preferred-Identity: <sip:54240@pbx-sumy.co.ia.com>

Supported: replaces, path, timer

Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE, MESSAGE

Content-Type: application/sdp

Accept: application/sdp, application/dtmf-relay

Content-Length:   332

===

Freeswitch sends 407 and uses as Digest-realm domain part from FROM :

"Proxy-Authenticate: Digest realm="anonymous.invalid""

Example:

===

SIP/2.0 407 Proxy Authentication Required

Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport=5062

From: "Anonymous" <sip:anonymous@anonymous.invalid>;tag=1989469488

To: <sip:44264@pbx-sumy.co.ia.com>;tag=ZamrKr7UecpNp

Call-ID: 1409580995-5062-3@BA.BA.G.BHA

CSeq: 20 INVITE

User-Agent: FreeSWITCH-mod_sofia/1.4.26-37~64bit

Accept: application/sdp

Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE

Supported: timer, path, replaces

Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.win

, message-summary, refer

Proxy-Authenticate: Digest realm="anonymous.invalid", nonce="917b30c9-9070-4ae5-87e6-1814b379fd94", algorithm=MD5, qop="auth"

Content-Length: 0

===

And call fails 403 Forbidden. So main question how to rid this. And is it feature or bug. Maybe I can use domain part from P-Preferred-Identity header ? 

Thank you in advance.

--

Best regards,

Volodymyr

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org