Hi, In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events? For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events? Thanks for the hints
Hi Ricardo, I believe you can turn SUBSCRIBE authentication on which would require a user/password to complete SUBSCRIBE, but if they have a valid user/pass, they could probably still SUBSCRIBE to other users in other domains. I hope this helps. Thanks, /V On Mon, Jan 12, 2015 at 8:59 AM, Ricardo Barroetavena < rbarroetavena@gmail.com> wrote:
Hi, In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events?
For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events?
Thanks for the hints
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
We use a freeswitch as a relay between our carriers and other freeswitches, it has worked great until we upgraded to the latest freeswitch version recently We we receive a fax, inbound and relay it, the subsequent re invite we get back looks like the frist block below, then when the freeswitch relays it, it adds in " Media Description, name and address (m): audio 0 RTP/AVP 19". The originating carrier sees this and responds with audio instead of T38, the call drops. Any hints would be greatly appreaciated, I do not really want to go back to a previous release if I can avoid it. Connection Information (c): IN IP4 98.158.137.200 Time Description, active time (t): 0 0 Media Description, name and address (m): image 18392 udptl t38 Media Attribute (a): T38FaxVersion:0 Media Attribute (a): T38MaxBitRate:14400 Media Attribute (a): T38FaxFillBitRemoval Media Attribute (a): T38FaxRateManagement:transferredTCF Media Attribute (a): T38FaxMaxBuffer:2000 Media Attribute (a): T38FaxMaxDatagram:400 Media Attribute (a): T38FaxUdpEC:t38UDPRedundancy Connection Information (c): IN IP4 98.158.137.200 Time Description, active time (t): 0 0 Media Description, name and address (m): audio 0 RTP/AVP 19 Media Description, name and address (m): image 18392 udptl t38 Media Attribute (a): T38FaxVersion:0 Media Attribute (a): T38MaxBitRate:14400 Media Attribute (a): T38FaxFillBitRemoval Media Attribute (a): T38FaxRateManagement:transferredTCF Media Attribute (a): T38FaxMaxBuffer:2000 Media Attribute (a): T38FaxMaxDatagram:400 Media Attribute (a): T38FaxUdpEC:t38UDPRedundancy Darcy Voice2Net
This can be closed, I did a little more research and found this ws aknown problem in 1.4.13, I backed up to 1.4.12 and it is ok now. I shall track this before moving ahead again. It only affects certain devices and carriers, we just happen to have on of the carriers that did not deal with correctly. Incidentally the use yate as their tandem. Darcy ----- Original Message ----- From: Darcy Primrose To: FreeSWITCH Users Help Sent: Monday, January 12, 2015 5:59 PM Subject: [Freeswitch-users] fax relay question We use a freeswitch as a relay between our carriers and other freeswitches, it has worked great until we upgraded to the latest freeswitch version recently We we receive a fax, inbound and relay it, the subsequent re invite we get back looks like the frist block below, then when the freeswitch relays it, it adds in " Media Description, name and address (m): audio 0 RTP/AVP 19". The originating carrier sees this and responds with audio instead of T38, the call drops. Any hints would be greatly appreaciated, I do not really want to go back to a previous release if I can avoid it. Connection Information (c): IN IP4 98.158.137.200 Time Description, active time (t): 0 0 Media Description, name and address (m): image 18392 udptl t38 Media Attribute (a): T38FaxVersion:0 Media Attribute (a): T38MaxBitRate:14400 Media Attribute (a): T38FaxFillBitRemoval Media Attribute (a): T38FaxRateManagement:transferredTCF Media Attribute (a): T38FaxMaxBuffer:2000 Media Attribute (a): T38FaxMaxDatagram:400 Media Attribute (a): T38FaxUdpEC:t38UDPRedundancy Connection Information (c): IN IP4 98.158.137.200 Time Description, active time (t): 0 0 Media Description, name and address (m): audio 0 RTP/AVP 19 Media Description, name and address (m): image 18392 udptl t38 Media Attribute (a): T38FaxVersion:0 Media Attribute (a): T38MaxBitRate:14400 Media Attribute (a): T38FaxFillBitRemoval Media Attribute (a): T38FaxRateManagement:transferredTCF Media Attribute (a): T38FaxMaxBuffer:2000 Media Attribute (a): T38FaxMaxDatagram:400 Media Attribute (a): T38FaxUdpEC:t38UDPRedundancy Darcy Voice2Net ------------------------------------------------------------------------------ _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Vik, Thanks for the answer. We tested auth-subscriptions and as you've said it requires auth but it still allows subscriptions to different domains. On Mon, Jan 12, 2015 at 11:22 AM, Vik Killa <vipkilla@gmail.com> wrote:
Hi Ricardo, I believe you can turn SUBSCRIBE authentication on which would require a user/password to complete SUBSCRIBE, but if they have a valid user/pass, they could probably still SUBSCRIBE to other users in other domains. I hope this helps. Thanks, /V
On Mon, Jan 12, 2015 at 8:59 AM, Ricardo Barroetavena < rbarroetavena@gmail.com> wrote:
Hi, In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events?
For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events?
Thanks for the hints
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Do you have this on your (internal) profile? force-subscription-domain=$${domain} Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Ricardo Barroetavena Sent: Tuesday, January 13, 2015 8:59 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Multitenant subscription restriction Hi Vik, Thanks for the answer. We tested auth-subscriptions and as you've said it requires auth but it still allows subscriptions to different domains. On Mon, Jan 12, 2015 at 11:22 AM, Vik Killa <vipkilla@gmail.com<mailto:vipkilla@gmail.com>> wrote: Hi Ricardo, I believe you can turn SUBSCRIBE authentication on which would require a user/password to complete SUBSCRIBE, but if they have a valid user/pass, they could probably still SUBSCRIBE to other users in other domains. I hope this helps. Thanks, /V On Mon, Jan 12, 2015 at 8:59 AM, Ricardo Barroetavena <rbarroetavena@gmail.com<mailto:rbarroetavena@gmail.com>> wrote: Hi, In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events? For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events? Thanks for the hints _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, We're not using force-subscription-domain. We understood it's meant for specifying a given domain to all subscriptions. We'd need each tenant to use its own domain. Thanks On Tue, Jan 13, 2015 at 11:15 AM, Moishe Grunstein <max@nysolutions.com> wrote:
Do you have this on your (internal) profile?
force-subscription-domain=$${domain}
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US *Service Request Email: support@nysolutions.com <support@nysolutions.com> *
[image: cid:image001.jpg@01C72F94.9EE45D60] <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Ricardo Barroetavena *Sent:* Tuesday, January 13, 2015 8:59 AM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Multitenant subscription restriction
Hi Vik,
Thanks for the answer. We tested auth-subscriptions and as you've said it requires auth but it still allows subscriptions to different domains.
On Mon, Jan 12, 2015 at 11:22 AM, Vik Killa <vipkilla@gmail.com> wrote:
Hi Ricardo,
I believe you can turn SUBSCRIBE authentication on which would require a user/password to complete SUBSCRIBE, but if they have a valid user/pass, they could probably still SUBSCRIBE to other users in other domains.
I hope this helps.
Thanks,
/V
On Mon, Jan 12, 2015 at 8:59 AM, Ricardo Barroetavena < rbarroetavena@gmail.com> wrote:
Hi,
In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events?
For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events?
Thanks for the hints
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
That is correct, wanted to make sure you don’t have that set. Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Ricardo Barroetavena Sent: Wednesday, January 14, 2015 10:09 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Multitenant subscription restriction Hi, We're not using force-subscription-domain. We understood it's meant for specifying a given domain to all subscriptions. We'd need each tenant to use its own domain. Thanks On Tue, Jan 13, 2015 at 11:15 AM, Moishe Grunstein <max@nysolutions.com<mailto:max@nysolutions.com>> wrote: Do you have this on your (internal) profile? force-subscription-domain=$${domain} Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US<http://888.IPPBX.US> Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org> [mailto:freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org>] On Behalf Of Ricardo Barroetavena Sent: Tuesday, January 13, 2015 8:59 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Multitenant subscription restriction Hi Vik, Thanks for the answer. We tested auth-subscriptions and as you've said it requires auth but it still allows subscriptions to different domains. On Mon, Jan 12, 2015 at 11:22 AM, Vik Killa <vipkilla@gmail.com<mailto:vipkilla@gmail.com>> wrote: Hi Ricardo, I believe you can turn SUBSCRIBE authentication on which would require a user/password to complete SUBSCRIBE, but if they have a valid user/pass, they could probably still SUBSCRIBE to other users in other domains. I hope this helps. Thanks, /V On Mon, Jan 12, 2015 at 8:59 AM, Ricardo Barroetavena <rbarroetavena@gmail.com<mailto:rbarroetavena@gmail.com>> wrote: Hi, In a multitenant environment, is there a way to restrict one tenant UA from subscribing to another tenant events? For example, if I've got bob@domain1 and alice@domain2, is there a way to prevent bob from subscribing to let's say alice message-summary events? Thanks for the hints _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (4)
-
Darcy Primrose
-
Moishe Grunstein
-
Ricardo Barroetavena
-
Vik Killa