On Fri, Dec 28, 2012 at 2:13 AM, Steven Ayre <steveayre@gmail.com> wrote:
This is incomplete. The normal flow is
-> REGISTER
<- 401
-> REGISTER
<- 200 or 403

I get it!  It's like an HTTP basic auth sequence.  The client does a GET, the server sends a 401 Authorization Required, and then the client prompts the user for login/password.


The digest includes the domain, if the user and password match perhaps the problem lies there...

Here is the entire header from the 2nd request:
   REGISTER sip:192.168.4.1:5060;transport=tcp SIP/2.0
   Via: SIP/2.0/TCP 192.168.4.254:4025;rport;branch=z9hG4bKPj3ewRQ6PZNlIanuwbxr2CmdFx1fK2BF0A
   Max-Forwards: 70
   From: "110" <sip:1001@192.168.4.1>;tag=fP-z0E14AtiuJz99qM1-4639EYKwlVjD
   To: "110" <sip:1001@192.168.4.1>
   Call-ID: TJDE1DQJNq40N64qIBpmll0KBNhezSyR
   CSeq: 22408 REGISTER
   User-Agent: Cisco-CP3905/9.2.1
   Contact: <sip:110@192.168.4.254:4025;transport=TCP>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-f47f353ce879>";+u.sip!devicename.ccm.cisco.com="SEPF47F353CE879";+u.sip!model.ccm.cisco.com="592"
   Expires: 3600
   Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS
   Content-Disposition: session;handling=optional
   Content-Type: application/x-cisco-remotecc-request+xml
   Content-Length: 413
   Reason: SIP;cause=200;text="cisco-alarm:25 Name=SEPF47F353CE879 Load=3905.9-2-1-0 Last=initialized"
   Supported: replaces,join,sdp-anat,norefersub,extended-refer,X-cisco-callinfo,X-cisco-serviceuri,X-cisco-escapecodes,X-cisco-service-control,X-cisco-monrec,X-cisco-config,X-cisco-sis-4.0.0,X-cisco-xsi-7.0.1
   Authorization: Digest username="1001", realm="192.168.4.1", nonce="ba548054-7dac-4cae-8939-076a2b438ee6", uri="sip:192.168.4.1:5060;transport=tcp", response="d9057b4ea439ce750e6b4e751cfc5e69", algorithm=MD5, cnonce="G4bay98LUnpnFmf.907akOTr60NEaeup", qop=auth, nc=00000001

The configuration file from /tftpboot includes:
<name>1001</name> 
...
<authName>1001</authName> 
<authPassword>654987</authPassword> 

...so I assume it's sending that password in the digest.

I think my problem is that I don't yet fully understand the FreeSwitch configuration.  The only place that password occurs is in conf/directory/1001.xml.  It it supposed to go somewhere else?

On Fri, Dec 28, 2012 at 2:52 AM, Erik Dekkers <erik.dekkers@certhon.com> wrote:

Seeing the firmware version in the User Agent header this phone is probably build on the same platform as the 79XX series phones and having the same sip-stack.

From experience I can tell you that sip-stack is really really horrible. I don’t know if you have bought a lot of these phone or just testing one.


Fortunately, I only purchased 2 for testing.

I also purchased 3 Polycom SoundPoint IP 320 SIP phones, also for testing.  I haven't gotten to them yet, because they need to boot with FTP instead of TFTP, and I need to figure out how to get vsftpd to work.

I also bought an ultra-cheap Zultys (their headquarters is 1 mile from my house) phone, but I haven't even powered it up yet, and I probably won't use many of them because it doesn't have PoE.

I'll try your suggestion on the SPA500 series.

-- 
Steve