sr-dev April 2010

sr-dev@lists.kamailio.org

27 participants
495 discussions

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

[ http://tracker.iptel.org/browse/SER-40?page=all ] Pavel Kasparek updated SER-40: ------------------------------ Comment: was deleted > Remove passing of received socket to registrar from nathelper using avps. > ------------------------------------------------------------------------- > > Key: SER-40 > URL: http://tracker.iptel.org/browse/SER-40 > Project: SER > Issue Type: Improvement > Components: Registrar > Affects Versions: Wishlist > Reporter: Jan Janak > Assigned To: Jan Janak > Priority: Minor > Fix For: Wishlist > > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tracker.iptel.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-40) Remove passing of received socket to registrar from nathelper using avps.

by Pavel Kasparek (JIRA)

14 years, 7 months

[Tracker] Updated: (SER-25) auth checks too strict

by Pavel Kasparek (JIRA)

[ http://tracker.iptel.org/browse/SER-25?page=all ] Pavel Kasparek updated SER-25: ------------------------------ Comment: was deleted > auth checks too strict > ---------------------- > > Key: SER-25 > URL: http://tracker.iptel.org/browse/SER-25 > Project: SER > Issue Type: Bug > Reporter: Jan Janak > Assigned To: Jan Janak > > Hmm, maybe we should make this test configurable as in other > authentication modules, it might be to tight for situations like this. > Jan. > On 20-04 17:12, Cesar Hernandez wrote: > > Hello, > > > > We have found that the following code in > > modules/auth_radius/authorized.c in latest V0-8-12 is preventing > > anonymous calls to succeed: > > > > ================ > > static inline int authorize(struct sip_msg* _msg, str* _realm, int > > _hftype) > > { > > ... > > if (puri.host.len != cred->digest.realm.len) { > > DBG("authorize(): Credentials realm and URI host do not > > match\n"); > > return -1; > > } > > if (strncasecmp(puri.host.s, cred->digest.realm.s, > > puri.host.len) != 0) { > > DBG("authorize(): Credentials realm and URI host do not > > match\n"); > > return -1; > > } > > ... > > } > > =============== > > > > In our case anonymous calls (PSTN calls with blocked numbers) from > > AudioCode gateways appear as "From: anonymous at anonymous.invalid" > > SER then request authentication by sending a 401 with the appropriate > > realm (sip.babytel.ca), to which AudioCodes responds with the right > > authorization, but the above test prevents sending the radius request to > > the radius server for user validation since the realm (sip.babytel.ca) > > does not match the hostname (anonymous.invalid) in the from field. > > > > Temporary commenting the above code fixed the problem for us but I want > > to hear advises from the experts. > > > > Any reason for such strict authentication validation tests? > > > > -Cesar > > -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tracker.iptel.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 7 months

[Tracker] Updated: (SER-19) Improve Server Error Reporting

by Pavel Kasparek (JIRA)

[ http://tracker.iptel.org/browse/SER-19?page=all ] Pavel Kasparek updated SER-19: ------------------------------ Comment: was deleted > Improve Server Error Reporting > ------------------------------ > > Key: SER-19 > URL: http://tracker.iptel.org/browse/SER-19 > Project: SER > Issue Type: Improvement > Affects Versions: Wishlist > Reporter: Jan Janak > Assigned To: Jan Janak > Priority: Minor > Fix For: Wishlist > > > Improve server error reporting to be more verbose by adding some error description to the reply as some modules (registrar) do. It would be nice to have that integrated with the errno error in the core without polluting the core space with all module specific error codes. Some kind of delegation of error-description generation would be nice so that such a description gets added to replies generated by other modules. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tracker.iptel.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 7 months

[Tracker] Updated: (SER-36) Major deficiency of authentication module

by Pavel Kasparek (JIRA)

[ http://tracker.iptel.org/browse/SER-36?page=all ] Pavel Kasparek updated SER-36: ------------------------------ Comment: was deleted > Major deficiency of authentication module > ----------------------------------------- > > Key: SER-36 > URL: http://tracker.iptel.org/browse/SER-36 > Project: SER > Issue Type: Improvement > Components: Digest Authentication > Affects Versions: Wishlist > Reporter: Jan Janak > Assigned To: Jan Janak > Attachments: auth.diff > > > Folks, > I've found that in some cases auth module performs very poorly. Namely > in the cases when authentication is either time-consuming and/or > expensive to perform. For example in the case when authentication is > done using Radius while SER and Radius server is not on the same LAN. > In such cases it is quite possible that due to delay UA will make > several retransmits of REGISTER message, which due to the fact that > REGISTER transactions are processes statelessly will block appropriate > amount of SER childs and trigger appropriate amount of independent > Radius auth requests, thus considerably increasing load of SER and > Radius server. > The same will happen in the case of auth DB module with remote DB server > or even in the case when udp round-trip delay between SER and UA is more > than 400-500 ms. > It is logical to use statefull processing in such cases, but since usage > of sl_send_reply is currently hardcoded in the registrar and auth > modules, it is impossible to do that. > Attached patch solves this problem by introducing new variable use_tm, > which if set to 1 instructs those modules to use t_reply() instead of > sl_send_reply() for generating replies. If there are no objections, I > would like to commit it, as if possible merge into rel_0_9_0, since I > believe that it is very useful feature. Since it defaults to "off" it > should not create any new problems in the default installation. > Thanks! > Regards, > Maxim -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tracker.iptel.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 7 months

← Newer
1
...
28
29
30
31
32
33
34
...
50
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

sr-dev April 2010