14 Aug
2007
14 Aug
'07
4:32 p.m.
Ok, that's how I did
if (!proxy_authorize("exorsa", "openser_view")) {
if(search("Proxy-Authorization")) {
xlog("L_ERR", "REGISTER: Auth error from - $au");
}
proxy_challenge("exorsa", "0");
exit;
}
so, if the packet contains credentials but they're wrong the attempt is
logged
Now I'm facing the following problem...
When the nonce axpires and the client reREGISTER the packet will contain
wrong credential and the UA is challenged again.
This way that's logged as a bad authentication
I also tried to do
if(search("Proxy-Authorization")) {
if(!registered("location")) {
xlog("L_ERR", "REGISTER: Auth error from - $au");
}
}
...but without good results....
Any idea ?
Tnx in advance
Edoardo
Iñaki Baz Castillo ha scritto:
El Monday 13 August 2007 22:11:34 Edoardo Serra
escribió:
Hi all,
I'd like to log failed SIP REGISTER attempt either with xlog or with
sip_trace() but I cannot understand where to put related code to catch
the authentication error
With XLOG is easy :)
Here is the part of my opensr.cfg dedicated to
REGISTER handling
if (method=="REGISTER") {
if (!proxy_authorize("exorsa", "openser_view")) {
xlog("L_INFO", "REGISTER: auth required\n");
proxy_challenge("exorsa", "0");
exit;
}
if (!check_to()) {
xlog("L_WARN",
"REGISTER: !check_to()\n");
sl_send_reply("403",
"Digest username and URI username
do NOT match! Stay away!");
exit;
}
xlog("L_INFO", "REGISTER:
authorized\n");
save("location");
exit;
};
Regards.