Call to unregister endpoint with auth=true after endpoint password change
Hi, I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints: 1. Auth the endpoint and "registration" (ok) 2. Call to endpoint and call arrives (ok) 3. Change the endpoint password in FS DB and endpoint "fail registration" 4. Call to endpoint and call arrives (ERROR, call must be ignored) The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration. If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):
sofia profile external flush_inbound_reg all sofia profile external flush_inbound_reg reboot sofia profile external check_sync
I have not tested if all the commands are necessary or not. Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint? Relevant configuration is: vars.xml: <!-- Internal SIP Profile --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/> <!-- External SIP Profile --> <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/> sip_profile "external.xml" (i use it): <param name="manage-presence" value="false"/> <param name="auth-calls" value="true"/> <param name="multiple-registrations" value="true"/> I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0". Thanks! José David Jurado Alonso.
Hi, FreeSWITCH will not send a call to an unregistered endpoint. Registration will not expire because of password changing. Try to reduce expire or flush registration via ESL on password change. Regards, Alex Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor, Palo Alto, CA 94303 Email: alex@freeswitch.com Website: https://www.signalwire.com On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso < josedavid@zennio.com> wrote:
Hi,
I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints:
1. Auth the endpoint and "registration" (ok) 2. Call to endpoint and call arrives (ok) 3. Change the endpoint password in FS DB and endpoint "fail registration" 4. Call to endpoint and call arrives (ERROR, call must be ignored)
The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration.
If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):
sofia profile external flush_inbound_reg all sofia profile external flush_inbound_reg reboot sofia profile external check_sync
I have not tested if all the commands are necessary or not.
Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint?
Relevant configuration is:
vars.xml:
<!-- Internal SIP Profile --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
<!-- External SIP Profile --> <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
sip_profile "external.xml" (i use it):
<param name="manage-presence" value="false"/> <param name="auth-calls" value="true"/> <param name="multiple-registrations" value="true"/>
I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0".
Thanks!
José David Jurado Alonso. _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Hi, Yes, I had already reached that conclusion. Thank you very much for the reply. The solution that is going to give is to execute a script with these commands after the change of password since this change is done from an external app outside of FS context so it is not viable through ESL. Thanks again. José David Jurado Alonso El vie., 10 may. 2019 a las 11:41, Alexey Sibyakin (<alex@freeswitch.com>) escribió:
Hi,
FreeSWITCH will not send a call to an unregistered endpoint. Registration will not expire because of password changing.
Try to reduce expire or flush registration via ESL on password change.
Regards,
Alex
Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor, Palo Alto, CA 94303 Email: alex@freeswitch.com Website: https://www.signalwire.com
On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso < josedavid@zennio.com> wrote:
Hi,
I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints:
1. Auth the endpoint and "registration" (ok) 2. Call to endpoint and call arrives (ok) 3. Change the endpoint password in FS DB and endpoint "fail registration" 4. Call to endpoint and call arrives (ERROR, call must be ignored)
The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration.
If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):
sofia profile external flush_inbound_reg all sofia profile external flush_inbound_reg reboot sofia profile external check_sync
I have not tested if all the commands are necessary or not.
Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint?
Relevant configuration is:
vars.xml:
<!-- Internal SIP Profile --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
<!-- External SIP Profile --> <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
sip_profile "external.xml" (i use it):
<param name="manage-presence" value="false"/> <param name="auth-calls" value="true"/> <param name="multiple-registrations" value="true"/>
I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0".
Thanks!
José David Jurado Alonso. _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
I think there ma be a misunderstanding here. auth-calls has nothing to do with incoming calls, the password is irrelevant in this situation. The calls will always go to the endpoint until the registration times out. On Fri, 10 May 2019 at 14:42, Jose David Jurado Alonso <josedavid@zennio.com> wrote:
Hi,
Yes, I had already reached that conclusion. Thank you very much for the reply.
The solution that is going to give is to execute a script with these commands after the change of password since this change is done from an external app outside of FS context so it is not viable through ESL.
Thanks again.
José David Jurado Alonso
El vie., 10 may. 2019 a las 11:41, Alexey Sibyakin (<alex@freeswitch.com>) escribió:
Hi,
FreeSWITCH will not send a call to an unregistered endpoint. Registration will not expire because of password changing.
Try to reduce expire or flush registration via ESL on password change.
Regards,
Alex
Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor, Palo Alto, CA 94303 Email: alex@freeswitch.com Website: https://www.signalwire.com
On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso < josedavid@zennio.com> wrote:
Hi,
I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints:
1. Auth the endpoint and "registration" (ok) 2. Call to endpoint and call arrives (ok) 3. Change the endpoint password in FS DB and endpoint "fail registration" 4. Call to endpoint and call arrives (ERROR, call must be ignored)
The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration.
If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):
sofia profile external flush_inbound_reg all sofia profile external flush_inbound_reg reboot sofia profile external check_sync
I have not tested if all the commands are necessary or not.
Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint?
Relevant configuration is:
vars.xml:
<!-- Internal SIP Profile --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
<!-- External SIP Profile --> <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
sip_profile "external.xml" (i use it):
<param name="manage-presence" value="false"/> <param name="auth-calls" value="true"/> <param name="multiple-registrations" value="true"/>
I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0".
Thanks!
José David Jurado Alonso. _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
To be explicit, auth call is authorization to make a call, not to answer a call. On Fri, May 10, 2019, 15:24 Darren Williams <support@directvoip.co.uk> wrote:
I think there ma be a misunderstanding here. auth-calls has nothing to do with incoming calls, the password is irrelevant in this situation.
The calls will always go to the endpoint until the registration times out.
On Fri, 10 May 2019 at 14:42, Jose David Jurado Alonso < josedavid@zennio.com> wrote:
Hi,
Yes, I had already reached that conclusion. Thank you very much for the reply.
The solution that is going to give is to execute a script with these commands after the change of password since this change is done from an external app outside of FS context so it is not viable through ESL.
Thanks again.
José David Jurado Alonso
El vie., 10 may. 2019 a las 11:41, Alexey Sibyakin (<alex@freeswitch.com>) escribió:
Hi,
FreeSWITCH will not send a call to an unregistered endpoint. Registration will not expire because of password changing.
Try to reduce expire or flush registration via ESL on password change.
Regards,
Alex
Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor, Palo Alto, CA 94303 Email: alex@freeswitch.com Website: https://www.signalwire.com
On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso < josedavid@zennio.com> wrote:
Hi,
I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints:
1. Auth the endpoint and "registration" (ok) 2. Call to endpoint and call arrives (ok) 3. Change the endpoint password in FS DB and endpoint "fail registration" 4. Call to endpoint and call arrives (ERROR, call must be ignored)
The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration.
If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):
sofia profile external flush_inbound_reg all sofia profile external flush_inbound_reg reboot sofia profile external check_sync
I have not tested if all the commands are necessary or not.
Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint?
Relevant configuration is:
vars.xml:
<!-- Internal SIP Profile --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
<!-- External SIP Profile --> <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
sip_profile "external.xml" (i use it):
<param name="manage-presence" value="false"/> <param name="auth-calls" value="true"/> <param name="multiple-registrations" value="true"/>
I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0".
Thanks!
José David Jurado Alonso.
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
participants (4)
-
Alexey Sibyakin
-
Darren Williams
-
Giovanni Maruzzelli
-
Jose David Jurado Alonso