Hello, I want to have FreeSWITCH request authentication for INVITES sent to some extensions and not others. For example, these URIs are public and should not require authentication: sip:simon.perreault@viagenie.ca sip:marc.blanchet@viagenie.ca These are private and should require authentication: sip:10@viagenie.ca sip:500@viagenie.ca I've seen the "auth-calls" param in sofia.conf.xml, but this would require that I use two Sofia instances (i.e. two IP-port pairs), which is ugly and I shouldn't have to do this anyway. Anything I've missed? Thanks, Simon -- Please try Numb, a STUN/TURN server implementation. Free access at http://numb.viagenie.ca/.
Step 1. auth-calls=false Step 2. Put the public extensions first in the dialplan. Step 3. After those put a condition if sip_authorized=false respond 407 else continue on. Similar to the global in the default.xml dialplan in SVN. Step 4. All private stuff goes after the condition of checking for sip_authorized variable. /b On Jun 10, 2008, at 10:32 AM, Simon Perreault wrote:
Hello,
I want to have FreeSWITCH request authentication for INVITES sent to some extensions and not others. For example, these URIs are public and should not require authentication:
sip:simon.perreault@viagenie.ca sip:marc.blanchet@viagenie.ca
These are private and should require authentication:
sip:10@viagenie.ca sip:500@viagenie.ca
I've seen the "auth-calls" param in sofia.conf.xml, but this would require that I use two Sofia instances (i.e. two IP-port pairs), which is ugly and I shouldn't have to do this anyway.
Anything I've missed?
Thanks, Simon
-- Please try Numb, a STUN/TURN server implementation. Free access at http://numb.viagenie.ca/.
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
On Tuesday 10 June 2008 12:00:53 Brian West wrote:
Step 1. auth-calls=false Step 2. Put the public extensions first in the dialplan. Step 3. After those put a condition if sip_authorized=false respond 407 else continue on. Similar to the global in the default.xml dialplan in SVN. Step 4. All private stuff goes after the condition of checking for sip_authorized variable.
Thanks. Here's my auth stanza: <extension name="auth" continue="true"> <condition field="${sip_authorized}" expression="true"> <anti-action application="reject" data="407"/> </condition> </extension> However, I get hit with "Invalid Application reject". I grepped the source but couldn't find it. Does it even exist? -- Please try Numb, a STUN/TURN server implementation. Free access at http://numb.viagenie.ca/.
Thats because its "respond" not reject... reject was too specific so it was changed long before 1.0 and reject was removed finally before 1.0. /b On Jun 10, 2008, at 11:41 AM, Simon Perreault wrote:
On Tuesday 10 June 2008 12:00:53 Brian West wrote:
Step 1. auth-calls=false Step 2. Put the public extensions first in the dialplan. Step 3. After those put a condition if sip_authorized=false respond 407 else continue on. Similar to the global in the default.xml dialplan in SVN. Step 4. All private stuff goes after the condition of checking for sip_authorized variable.
Thanks. Here's my auth stanza:
<extension name="auth" continue="true"> <condition field="${sip_authorized}" expression="true"> <anti-action application="reject" data="407"/> </condition> </extension>
However, I get hit with "Invalid Application reject". I grepped the source but couldn't find it. Does it even exist?
-- Please try Numb, a STUN/TURN server implementation. Free access at http://numb.viagenie.ca/.
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
On Tuesday 10 June 2008 13:03:39 Brian West wrote:
Thats because its "respond" not reject... reject was too specific so it was changed long before 1.0 and reject was removed finally before 1.0.
Ah, thanks. I found that in scripts/contrib/trixter/xml-curl/templates/switch1/configuration/default_context.tpl, I thought it was exactly what you were referring to. Thanks again! -- Please try Numb, a STUN/TURN server implementation. Free access at http://numb.viagenie.ca/.
participants (2)
-
Brian West
-
Simon Perreault