[SR-Users] Re:  How to proxy/authenticate on third...

On 7/10/12 11:50 AM, intel(a)intrans.baku.az wrote: > Daniel-Constantin Mierla said: >> Hello, >> >> On 7/6/12 7:59 PM, intel(a)intrans.baku.az wrote: >>> Can anybody help me with configuration kamailio to authenticate >>> call >>> on >>> 3rd party server? >>> >>> I want to authenticate(and proxy) call's on other server. >>> >>> for example, user A have account on my server(let it be >>> A(a)myserver.com) >>> and account on other server (let it be AA(a)hisserver.com) >>> myserver.com keeps A's credentials for AA(a)hisserver.com >>> when A is registered on myserver.com, he make call to >>> B(a)othersip.com >>> (using myserver.com as a proxy) >>> Kamailio on myserver authenticate itself on hisserver as >>> AA(a)hisserver.com, >>> makes call to destination, and connect it to A. >>> >>> How can I setup kamailio for such behavior? >>> Which module should I use? >>> UAC seems can authenticate on another server, but I don't sure that >>> it >>> do >>> what I want. (I've tried it, but without much success) >> indeed, the uac module is the one that can provide what you want, >> with >> some limitations in regard to cseq incrementation. You have to set a >> failure route and if the reply code is 407, the sent the >> realm/username >> and password to the avps specified by the appropriate module >> parameters >> -- the next tree at: >> >> * >> http://kamailio.org/docs/modules/stable/modules_k/uac.html#auth-realm-avp-id >> >> Then call uac_auth() and relay again. > You mean, i need set auth_*_avp with credentials. set failure route, > send > request to auth_proxy (btw, how? ) and call uac_auth() in failure > route, > correct? t_relay() is one of the functions to sent the request further.

> I've tried to use uacreg sql table and uac_reg_request_to, but there > was > some problems: > 1) in uac_reg_request_to with mode 1 mistake (it found credentials > only > if > l_uuid==l_username) > i've opened ticket on bugtracker > http://sourceforge.net/tracker/?func=detail&aid=3540479&group_id=13… > 2) uac_reg_request_to changes uri in request and instead INVITE > sip:B@othersip.com makes INVITE sip:AA@hisserver.com > if comment out > snprintf(ruri, MAX_URI_SIZE, "sip:%.*s@%.*s", > reg->r_username.len, reg->r_username.s, > reg->r_domain.len, reg->r_domain.s); > and so on seems working, but I'm don't sure that such modification > don't > break something else > (pretty sure that breaks, but don't know where exactly :) > 3)uacreg table loaded on startup, and AFAIK there is no way to modify > it > dynamically, > so if you change something in this table you MUST restart kamailio > (not > convinient) > I've tried to make RPC for adding new record in htable (using > reg_ht_add()), but it returns error and in log I can see > ERROR: uac [uac_reg.c:313]: no more shm If you have a lot of records, you need to allocate more shared memory, via -m command line parameter.