Radius auth based on IP without sending 407 Proxy authentication required
Hi Guys I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE. If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call. Any help would be most appreciated. Regards
You can try mod_xml_radius and generate directory record with cidr adribute. вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Also required to generate "domain" acl when freeswith starts, executed command "reloadacl" and updated client ip on radius server side вт, 20 июня 2017 г., 19:32 Sergey Safarov <s.safarov@gmail.com>:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute. вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
you can add cidr attribute for all users вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius! FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
mod_rad_auth if you want just to authenticate. its an application that you can trigger in dialplan regradless if its an incoming or outgoing call .. On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/ options/freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
i build that module few years ago and it still works as a charm :P have fun, Tihomir. On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga@gmail.com> wrote:
mod_rad_auth if you want just to authenticate.
its an application that you can trigger in dialplan regradless if its an incoming or outgoing call ..
On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/ freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/ freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/ freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
One question. the docs in confluence seem to indicate that it can only be used for user/pass authentication and not IP authentication. Is this correct?
On 20 Jun 2017, at 19:28, Tihomir Culjaga <tculjaga@gmail.com> wrote:
i build that module few years ago and it still works as a charm :P
have fun, Tihomir.
On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga@gmail.com <mailto:tculjaga@gmail.com>> wrote: mod_rad_auth if you want just to authenticate.
its an application that you can trigger in dialplan regradless if its an incoming or outgoing call ..
On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>> wrote: There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Joseph, if you are using mod_xml_radius , i am not sure how your Dialplan is , but if you are not missing you have to include file from mod_xml_radius source in your dialplan. 00_dialplan_auth.xml When we were using VCS , both ip/user authentication worked well . On Tue, Jun 20, 2017 at 11:46 PM, Joseph Waite <joelists@tm.net.uk> wrote:
One question. the docs in confluence seem to indicate that it can only be used for user/pass authentication and not IP authentication. Is this correct?
On 20 Jun 2017, at 19:28, Tihomir Culjaga <tculjaga@gmail.com> wrote:
i build that module few years ago and it still works as a charm :P
have fun, Tihomir.
On 20 June 2017 at 20:24, Tihomir Culjaga <tculjaga@gmail.com> wrote:
mod_rad_auth if you want just to authenticate.
its an application that you can trigger in dialplan regradless if its an incoming or outgoing call ..
On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Now that sounds like something along the line of what I’m looking for? Any example of how to configure it?
On 20 Jun 2017, at 19:24, Tihomir Culjaga <tculjaga@gmail.com <mailto:tculjaga@gmail.com>> wrote:
mod_rad_auth if you want just to authenticate.
its an application that you can trigger in dialplan regradless if its an incoming or outgoing call ..
On 20 June 2017 at 20:22, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>> wrote: There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Regards _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
the user directory lookup for auth is not done until after we send the 407. To do this without an acl you need to not do auth on the sip profile, and handle it in dial plan instead.
On Jun 20, 2017, at 2:22 PM, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Mike user IP may be added to ACL and then FreeSwitch will send directory lookup request. вт, 20 июн. 2017 г. в 21:31, Michael Jerris <mike@jerris.com>:
the user directory lookup for auth is not done until after we send the 407. To do this without an acl you need to not do auth on the sip profile, and handle it in dial plan instead.
On Jun 20, 2017, at 2:22 PM, Joseph Waite <joelists@tm.net.uk> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk>:
I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk>:
I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk>:
Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Yes, but he’s specifically said he doesn’t have the users in dir… this option has already been discussed, so what I pointed out is the only other option, and the only way to do this totally dynamically.
On Jun 20, 2017, at 2:44 PM, Sergey Safarov <s.safarov@gmail.com> wrote:
Mike user IP may be added to ACL and then FreeSwitch will send directory lookup request.
вт, 20 июн. 2017 г. в 21:31, Michael Jerris <mike@jerris.com <mailto:mike@jerris.com>>: the user directory lookup for auth is not done until after we send the 407. To do this without an acl you need to not do auth on the sip profile, and handle it in dial plan instead.
On Jun 20, 2017, at 2:22 PM, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>> wrote:
There are no users configured on FreeSwitch, all user config is done on JeraSoft VCS and FreeSwitch authenticates via radius!
FreeSwitch should allow an INVITE from any IP, not send 407, but authenticate via Radius
On 20 Jun 2017, at 19:12, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
you can add cidr attribute for all users
вт, 20 июн. 2017 г. в 20:25, Jospeh Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I don’t want to allow certain users, I want all calls that come in on this Sofia profile to not send the 407 but still authenticate via Radius based on the IP.
On 20 Jun 2017, at 18:15, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
When you generate manually ACL with trusted IP or via mod_xml_radius then you can accept call without 407 message. Also if you add cird attribute to user directory then FreeSwitch can map call to user via cidr attribute.
вт, 20 июн. 2017 г. в 19:43, Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: I am using mod_xml_radius, however my issue is that if I enable auth_calls in profile it sends a 407 Proxy Authentication Required sip message, and if I set auth_calls to false it doesn’t authenticate with Radius, it simply passes call straight into the dial plan.
On 20 Jun 2017, at 17:32, Sergey Safarov <s.safarov@gmail.com <mailto:s.safarov@gmail.com>> wrote:
You can try mod_xml_radius and generate directory record with cidr adribute.
вт, 20 июня 2017 г., 19:25 Joseph Waite <joelists@tm.net.uk <mailto:joelists@tm.net.uk>>: Hi Guys
I am trying to configure a Sofia Profile that will not send a 407 Proxy Authentication Required, but will still authenticate the incoming invite via Radius based on the IP address of the INVITE.
If I change the Auth_calls to false on the Sofia profile, it doesn’t send the 407, but then it doesn’t authenticate the call.
Any help would be most appreciated.
participants (6)
-
Ahmed Sboor
-
Joseph Waite
-
Jospeh Waite
-
Michael Jerris
-
Sergey Safarov
-
Tihomir Culjaga