[OpenSIPS-Users] AUTH module HA hash question

Yury Kirsanov y.kirsanov at gmail.com
Sun Apr 9 14:27:15 UTC 2023


Hi all,
I'm trying to use the AUTH module without any DB to authenticate SIP
devices. I'm using OpenSIPS v3.3 and 'calculate_ha1' is set to '0', so I
put pre-generated hash into $var(password) field, according to the manual:

1.4.9. calculate_ha1 (integer)

This parameter tells the server whether it should expect plaintext
passwords in the pseudo-variable or a pre-calculated HA1 string.

If the parameter is set to 1 then the server will assume that the “
password_spec” pseudo-variable contains plaintext passwords and it will
calculate HA1 strings on the fly. If the parameter is set to 0 then the
server assumes the pseudo-variable contains the HA1 strings directly and
will not calculate them.

Default value of this parameter is 0.

Question is - how do I put TWO hashes into this variable if I'm trying to
do a 'SHA-256,MD5' authentication, or a 'SHA-256, SHA-512-256' or something
like that?

I tried putting these values with a comma, with a semicolon, with a '\r\n'
but all that leads to is a crash in OpenSIPS without a segfault, like this:

Apr 10 00:19:18 INFO:core:daemonize: pre-daemon process exiting with 0
Apr 10 00:19:23 [REGISTER]      No authentication credentials found,
challenging sip:123456 at sipdomain.com
Apr 10 00:19:23 [CACHE]         Got hash
[a359335dfeeda115c3d5f124a1762b35;b214e463cb1a9988078b52afa76ea7674ad114217e2b999c91be9b352f745735]
for 123456
Apr 10 00:19:23 [CACHE]         Got hash
[a359335dfeeda115c3d5f124a1762b35;b214e463cb1a9988078b52afa76ea7674ad114217e2b999c91be9b352f745735]
for 123456
Apr 10 00:19:23 INFO:core:handle_sigs: child process 19650 exited by a
signal 6
Apr 10 00:19:23 INFO:core:handle_sigs: core was generated
Apr 10 00:19:23 INFO:core:handle_sigs: terminating due to SIGCHLD
Apr 10 00:19:23 INFO:core:sig_usr: signal 15 received
Apr 10 00:19:23 INFO:core:sig_usr: signal 15 received
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 8(19654) [TCP
receiver] terminated, still waiting for 11 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 6(19652) [SIP receiver
udp:10.22.23.194:5060] terminated, still waiting for 10 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 12(19658) [Timer
handler] terminated, still waiting for 9 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 5(19651) [SIP receiver
udp:10.22.23.194:5060] terminated, still waiting for 8 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 1(19647) [MI FIFO]
terminated, still waiting for 7 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 9(19655) [TCP
receiver] terminated, still waiting for 6 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 13(19659) [TCP main]
terminated, still waiting for 5 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 2(19648) [time_keeper]
terminated, still waiting for 4 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 3(19649) [timer]
terminated, still waiting for 3 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 10(19656) [TCP
receiver] terminated, still waiting for 2 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 11(19657) [TCP
receiver] terminated, still waiting for 1 more
Apr 10 00:19:24 INFO:core:shutdown_opensips: process 7(19653) [SIP receiver
udp:10.22.23.194:5060] terminated, still waiting for 0 more
Apr 10 00:19:24 INFO:core:cleanup: cleanup
Apr 10 00:19:24 NOTICE:cachedb_redis:destroy: destroy module cachedb_redis
...
Apr 10 00:19:24 INFO:core:fix_poll_method: using epoll as the IO watch
method (auto detected)
Apr 10 00:19:24 NOTICE:core:main: version: opensips 3.3.2 (x86_64/linux)


Any ideas? Thanks!

Best regards,

Yury.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20230410/924be51f/attachment.html>


More information about the Users mailing list