Hi, I'm trying to get auto answer working on my Gigaset N510 IP DECT system. I made the changes to the DECT config (enabled "Call Manager" for the extension I want to use_ and tried to call it using the default prefix (8xxxx). Unlike the other phones I work with, the Gigaset device requires authentication for that. Since it is a subscriber to the freeswitch system, the system does not have any information to fulfill it: [ERR] sofia_reg.c:2561 Cannot locate any authentication credentials to complete an authentication request for realm '"test"' The INVITE itself looks as I would expect it to look but the phone answers with: SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 46.38.244.168;rport=5060;branch=z9hG4bKK94yXK0rDUcXj From: "Nico" <sip:1000@xxxxx>;tag=6gtHSvy9p62HH To: <sip:1012@xxxxx:5060>;tag=2471884501 Call-ID: dee1f01e-2fc3-1236-8f91-52542680391a CSeq: 113890892 INVITE Contact: <sip:1012@xxxxx:5060> WWW-Authenticate: Digest realm="test", nonce="d0533fa35f7a53f86112305a818d732", algorithm=MD5, qop="auth" User-Agent: N510 IP PRO/42.243.00.000.000 Content-Length: 0 Does anyone have an idea how I can either get freeswitch to retry with authentication or how to get the Gigaset device to accept the call without further auth? Thanks Nico
Hi, You can define reverse-auth-user and reverse-auth-pass params in the user directory for the reverse authentication. Best Regards, -- Vallimamod Abdullah SIP Solutions vma@sipsolutions.fr .
On 20 Oct 2017, at 01:06, Nicola von Thadden <nico@vthadden.de> wrote:
Hi,
I'm trying to get auto answer working on my Gigaset N510 IP DECT system.
I made the changes to the DECT config (enabled "Call Manager" for the extension I want to use_ and tried to call it using the default prefix (8xxxx).
Unlike the other phones I work with, the Gigaset device requires authentication for that. Since it is a subscriber to the freeswitch system, the system does not have any information to fulfill it:
[ERR] sofia_reg.c:2561 Cannot locate any authentication credentials to complete an authentication request for realm '"test"'
The INVITE itself looks as I would expect it to look but the phone answers with:
SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 46.38.244.168;rport=5060;branch=z9hG4bKK94yXK0rDUcXj From: "Nico" <sip:1000@xxxxx>;tag=6gtHSvy9p62HH To: <sip:1012@xxxxx:5060>;tag=2471884501 Call-ID: dee1f01e-2fc3-1236-8f91-52542680391a CSeq: 113890892 INVITE Contact: <sip:1012@xxxxx:5060> WWW-Authenticate: Digest realm="test", nonce="d0533fa35f7a53f86112305a818d732", algorithm=MD5, qop="auth" User-Agent: N510 IP PRO/42.243.00.000.000 Content-Length: 0
Does anyone have an idea how I can either get freeswitch to retry with authentication or how to get the Gigaset device to accept the call without further auth?
Thanks
Nico
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, thanks for that hint. Unfortunately, I seem to miss something in my config. Starting from a vanilla config I set my domain in vars, change the default password and change directory/default/1012.xml to include the two lines in the params section: <param name="reverse-auth-user" value="1012"/> <param name="reverse-auth-pass" value="$${default_password}"/> That should be it, right? My freeswitch still complaines when I call 81012 from 1000 about missing credentials: 2017-10-22 18:24:42.318794 [ERR] sofia_reg.c:2616 Cannot locate any authentication credentials to complete an authentication request for realm '"mydomain"' eval $${domain} also shows the right domain. Should I be suspicious about the doubled quotation mark in the error message? Thanks Nico On 10/20/2017 04:01 PM, Vallimamod Abdullah wrote:
Hi,
You can define reverse-auth-user and reverse-auth-pass params in the user directory for the reverse authentication.
Best Regards,
Hi, It looks like the reverse lookup didn't work as expected. Is the To domain from the 401 reply the same as your $${domain}? You can also define sip_auth_username and sip_auth_password channel variables in the dialplan, they will be used for the reverse lookup. About the double quotation mark, the source code shows that the realm value is not unquoted when retrieved from the Authentication header. It looks like the sofia lib requires it so to compute the hash. Best Regards -- Vallimamod Abdullah SIP Solutions vma@sipsolutions.fr .
On 22 Oct 2017, at 18:31, Nicola von Thadden <nico@vthadden.de> wrote:
Hi,
thanks for that hint. Unfortunately, I seem to miss something in my config.
Starting from a vanilla config I set my domain in vars, change the default password and change directory/default/1012.xml to include the two lines in the params section:
<param name="reverse-auth-user" value="1012"/> <param name="reverse-auth-pass" value="$${default_password}"/>
That should be it, right?
My freeswitch still complaines when I call 81012 from 1000 about missing credentials:
2017-10-22 18:24:42.318794 [ERR] sofia_reg.c:2616 Cannot locate any authentication credentials to complete an authentication request for realm '"mydomain"'
eval $${domain} also shows the right domain.
Should I be suspicious about the doubled quotation mark in the error message?
Thanks
Nico
On 10/20/2017 04:01 PM, Vallimamod Abdullah wrote:
Hi,
You can define reverse-auth-user and reverse-auth-pass params in the user directory for the reverse authentication.
Best Regards,
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
HI, yes, the to domain is the right one. Defining the variables in the dialplan works as expected, FS authenticates to the phone when requested and intercom is working. Is there anything I can do to help solve the other implementation with the reverse lookup? Thanks for your help Nico On 10/24/2017 03:16 PM, Vallimamod Abdullah wrote:
Hi,
It looks like the reverse lookup didn't work as expected. Is the To domain from the 401 reply the same as your $${domain}? You can also define sip_auth_username and sip_auth_password channel variables in the dialplan, they will be used for the reverse lookup.
About the double quotation mark, the source code shows that the realm value is not unquoted when retrieved from the Authentication header. It looks like the sofia lib requires it so to compute the hash.
Best Regards
participants (2)
-
Nicola von Thadden
-
Vallimamod Abdullah