[Freeswitch-users] Digest-realm for hidden caller-id

Volodymyr Fedorov lexxua at gmail.com
Mon Jan 4 23:34:12 MSK 2016


Hi community,
I experience interesting issue. Freeswitch running in multi-domain
environment.
UA generates invite with anonymous at anonymous.invalid in FROM  which is
quite normal according to rfc3325.
Sample bellow:
===
INVITE sip:44264 at pbx-sumy.co.ia.com SIP/2.0
Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport
From: "Anonymous" <sip:anonymous at anonymous.invalid>;tag=1989469488
To: <sip:44264 at pbx-sumy.co.ia.com>
Call-ID: 1409580995-5062-3 at BA.BA.G.BHA
CSeq: 20 INVITE
Contact: "Anonymous" <sip:54240 at 10.10.6.170:5062>
Max-Forwards: 70
User-Agent: Grandstream GXP1625 1.0.3.6
Privacy: id
P-Preferred-Identity: <sip:54240 at pbx-sumy.co.ia.com>
Supported: replaces, path, timer
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER,
UPDATE, MESSAGE
Content-Type: application/sdp
Accept: application/sdp, application/dtmf-relay
Content-Length:   332
===
Freeswitch sends 407 and uses as Digest-realm domain part from FROM :
"Proxy-Authenticate: Digest realm="anonymous.invalid""

Example:
===
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 10.10.6.170:5062;branch=z9hG4bK1491276326;rport=5062
From: "Anonymous" <sip:anonymous at anonymous.invalid>;tag=1989469488
To: <sip:44264 at pbx-sumy.co.ia.com>;tag=ZamrKr7UecpNp
Call-ID: 1409580995-5062-3 at BA.BA.G.BHA
CSeq: 20 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.4.26-37~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER,
REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog,
line-seize, call-info, sla, include-session-description, presence.win
, message-summary, refer
Proxy-Authenticate: Digest realm="anonymous.invalid",
nonce="917b30c9-9070-4ae5-87e6-1814b379fd94", algorithm=MD5, qop="auth"
Content-Length: 0
===

And call fails 403 Forbidden. So main question how to rid this. And is it
feature or bug. Maybe I can use domain part from P-Preferred-Identity
header ?

Thank you in advance.

-- 
Best regards,
Volodymyr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160104/50870277/attachment.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list