Relay 407 challenge to UE
Hello there. I'm working in a scenario in which FreeSWITCH acts as a media server and all SIP signaling is proxied through Kamailio. Every call that comes in to FreeSWITCH is simply bridged back to Kamailio and on to destination network. Registration bypasses FreeSWITCH, so 401 REGISTER challenges are dealt with by the UE directly. Now I need to talk to a network which demands INVITEs are authenticated as well. when the target network responds with a 407 Proxy Authentication Required, FreeSWITCH terminates the dialog and fs_cli shows the following error: [ERR] sofia_reg.c:2583 Cannot locate any authentication credentials to complete an authentication request for realm '"<whatever>"' Is there any way I can instruct FreeSWITCH to relay the 407 challenge back to the UE, so the authenticated INVITE can also be blindly bridged by FreeSWITCH? Thanks.
The problem with your description of your scenario is that it is not technically accurate. Conceptually, you may think that Freeswitch merely "acts as a media server" and "all SIP signalling is proxied through Kamailio", but in reality, all SIP signalling passes through FS, too, which generates a new call leg in the process, as it's a B2BUA. Viewed in that light, the question isn't so much whether you can "relay" a 407 challenge (you cannot) as whether you can obtain valid credentials from the caller and feed them as a response on your outgoing leg. -- Alex Balashov | Principal | Evariste Systems LLC 1447 Peachtree Street NE, Suite 700 Atlanta, GA 30309 United States Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ Sent from my BlackBerry.
Yes, I meant it acts as a media server as in a big picture description, and that all SIP signaling between FreeSWITCH and the UE and remote networks is proxied through Kamailio, which is the only entity able to reach FreeSWITCH's SIP ports. Thanks for clarifying that the challenge can't be repeated from one leg to the other. Is there any way I could obtain the credentials at runtime, on a per-call basis, or is that something I can only do in FreeSWITCH's configuration? Thanks. On Mon, Mar 28, 2016 at 9:17 AM Alex Balashov <abalashov@evaristesys.com> wrote:
The problem with your description of your scenario is that it is not technically accurate. Conceptually, you may think that Freeswitch merely "acts as a media server" and "all SIP signalling is proxied through Kamailio", but in reality, all SIP signalling passes through FS, too, which generates a new call leg in the process, as it's a B2BUA.
Viewed in that light, the question isn't so much whether you can "relay" a 407 challenge (you cannot) as whether you can obtain valid credentials from the caller and feed them as a response on your outgoing leg. -- Alex Balashov | Principal | Evariste Systems LLC 1447 Peachtree Street NE, Suite 700 Atlanta, GA 30309 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Alex Balashov
-
Fabio Margarido