[OpenSIPS-Users] presence blf

Bogdan-Andrei Iancu bogdan at opensips.org
Mon Oct 29 08:29:16 EDT 2018


Hi Salva,

In failure route, you should check first for the 407 (btw, you do not 
have to go via the onreply route, you can use only failure_route, 
directly). If so, call uac_auth(), but be sure you the $avp(10), 
$avp(11) and $avp(12) *already* contain the values for realm, username 
and password. You can load that info from a DB for example.

Best regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
   http://www.opensips-solutions.com
OpenSIPS Bootcamp 2018
   http://opensips.org/training/OpenSIPS_Bootcamp_2018/

On 10/27/2018 06:42 AM, Slava Bendersky wrote:
> Hello Bogdan,
> The issue that opensips is not handling user authentication, password 
> is stored in 3cx. Is there are way set avp or into cache intial 
> credentials ?
> I come up with something like this.
> My though  was.
>
> modparam("uac_auth","auth_realm_avp","$avp(10)")
> modparam("uac_auth","auth_username_avp","$avp(11)")
> modparam("uac_auth","auth_password_avp","$avp(12)")
>
> route[PUBLISH_407] {
>         if(is_method("PUBLISH") && 
> has_body("application/dialog-info+xml") && $avp(DLG_dir)=="frompbx") {
>                 xlog("L_INFO", "[$rm] from $si\n");
>                 t_on_reply("6");
> }
>
> onreply_route[6] {
>         if(is_method("PUBLISH") && t_check_status("407")) {
>                 xlog("L_INFO", "OnReply_Route6: [$rm] Direction: [FS 
> ~> Client] asked for 407\n");
>                 t_on_failure("SUPPLY_AUTH");
>         }
> }
>
> failure_route[SUPPLY_AUTH] {
> *don't know how to supply credential  yet*
>         uac_auth();
> }
>
> volga629
>
> ------------------------------------------------------------------------
> *From: *"Bogdan-Andrei Iancu" <bogdan at opensips.org>
> *To: *"OpenSIPS users mailling list" <users at lists.opensips.org>, 
> "Slava Bendersky" <volga629 at networklab.ca>
> *Sent: *Friday, October 26, 2018 5:28:09 AM
> *Subject: *Re: [OpenSIPS-Users] presence blf
>
> Hi Slava,
>
> Sorry for the mistyping your name :D....one wrong character and 
> something a bit weird resulted :D.
>
> Regards,
> Bogdan-Andrei Iancu
>
> OpenSIPS Founder and Developer
>    http://www.opensips-solutions.com
> OpenSIPS Bootcamp 2018
>    http://opensips.org/training/OpenSIPS_Bootcamp_2018/
> On 10/26/2018 09:34 AM, Bogdan-Andrei Iancu wrote:
>
>     Hi Slave,
>
>     If you cannot do an IP authentication / whitelisting for OpenSIPS
>     in 3CX, you could use the uac_auth module and the uac_auth()
>     function to perform user side authentication in OpenSIPS. See
>     http://www.opensips.org/html/docs/modules/2.4.x/uac.html
>     http://www.opensips.org/html/docs/modules/2.4.x/uac_auth.html
>
>     Best regards,
>
>     Bogdan-Andrei Iancu
>
>     OpenSIPS Founder and Developer
>        http://www.opensips-solutions.com
>     OpenSIPS Bootcamp 2018
>        http://opensips.org/training/OpenSIPS_Bootcamp_2018/
>
>     On 10/25/2018 09:49 PM, Slava Bendersky wrote:
>
>         Hello Everyone,
>         I am trying make BLF working and how opensips should handle
>         PUBLISH where server reply 407 ?
>         Do we need forward to end point ?
>         Opensips send PUBLISH then 3CX send 407 and conversation done.
>         Here some trace
>
>         [root at aitossbc01 ~]# cat BLF.txt
>         2018/10/25 12:22:19.148093 10.100.104.10:5060 -> 10.2.24.124:5060
>         PUBLISH sip:120 at domain.tld:5060 SIP/2.0
>         Via: SIP/2.0/UDP 10.100.104.10:5060;branch=z9hG4bK9f23.99096732.0
>         To: sip:120 at domain.tld:5060
>         From:
>         <sip:120 at domain.tld:5060>;tag=4c20d2ebf66939afcc7c67fb6893f1be-672a
>         CSeq: 10 PUBLISH
>         Call-ID: 0324183200c79905-20534 at 10.100.104.10
>         Max-Forwards: 70
>         Content-Length: 549
>         User-Agent: OpenSIPS (3.0.0-dev (x86_64/linux))
>         Event: dialog
>         Expires: 3601
>         Content-Type: application/dialog-info+xml
>
>         <?xml version="1.0"?>
>         <dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info"
>         state="partial" entity="sip:120 at domain.tld:5060"><dialog
>         id="0_3095066305 at 192.168.88.146"
>         call-id="0_3095066305 at 192.168.88.146"
>         direction="recipient"><state>confirmed</state><remote><identity>sip:221 at domain.tld:5060</identity><target
>         uri="sip:221 at domain.tld:5060"/></remote><local><identity>sip:120 at domain.tld:5060</identity><target
>         uri="sip:120 at domain.tld:5060"/></local></dialog></dialog-info>
>
>
>         2018/10/25 12:22:19.198773 10.2.24.124:5060 -> 10.100.104.10:5060
>         SIP/2.0 407 Proxy Authentication Required
>         Via: SIP/2.0/UDP 10.100.104.10:5060;branch=z9hG4bK9f23.99096732.0
>         Proxy-Authenticate: Digest
>         nonce="414d53595bd1fbcb12:61835c52c28e8a89737c489e16fa5965",algorithm=MD5,realm="3CXPhoneSystem"
>         To: <sip:120 at domain.tld:5060>;tag=d9bb492f
>         From:
>         <sip:120 at domain.tld:5060>;tag=4c20d2ebf66939afcc7c67fb6893f1be-672a
>         Call-ID: 0324183200c79905-20534 at 10.100.104.10
>         CSeq: 10 PUBLISH
>         User-Agent: 3CXPhoneSystem 15.5.15502.6 (15502)
>         Content-Length: 0
>
>
>         _______________________________________________
>         Users mailing list
>         Users at lists.opensips.org
>         http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
>
>     _______________________________________________
>     Users mailing list
>     Users at lists.opensips.org
>     http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20181029/1eadf283/attachment-0001.html>


More information about the Users mailing list