Hi
thanks for your reply. When user from SER -B calls they get Auth. required error (call rejected). Actually I don't want to peer two SER server. I want any one can call my users on SER -A so I don't know the IP of calling sip service so I can't make use of trusted table.
please guide on this scenario.
thanks arun
On 5/28/07, Andrey Kuprianov andrey.kouprianov@gmail.com wrote:
You didnt specify, what happens to the call. Does it get rejected? Timeout?
Usually, if I want to peer 2 SERs, I use permissions module, i.e. allow_trusted() function must be used in order to allow incoming calls from a certain IP. Take a look at Getting Started doc inside the NAT handling section.
Anyway, SER-B doesnt use database, which means it does not care about authentication. This is why call from SER-A can go thorugh. On the other hand, SER-A uses database and so it will also use proper authentication methods. As long as SER-B's IP is not present in the 'trusted' table of MySQL, SER-A will keep on rejecting your calls.
On 5/28/07, Arun Kumar arunvoip@gmail.com wrote:
Hi
I've configure two ser box in my local network:
- one box with mysql auth (SER A)
- without any auth (just make install) (SER B)
in both boxes 2-2 users are registered and they are able to call each
other.
my SER A users are able to call SER B user (sip:2001@SER-B) but SER B
user
can't call SER A (sip:3001@SER-A) user. here is my config file for SER A box:
debug=5 fork=no log_stderror=yes listen=176.249.2.69 # INSERT YOUR IP ADDRESS HERE port=5060 children=4
dns=no rev_dns=no fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@localhost /ser"
loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" loadmodule "/usr/local/lib/ser/modules/domain.so" loadmodule "/usr/local/lib/ser/modules/nathelper.so" loadmodule "/usr/local/lib/ser/modules/avpops.so" loadmodule "/usr/local/lib/ser/modules/textops.so" loadmodule "/usr/local/lib/ser/modules/mediaproxy.so" loadmodule "/usr/local/lib/ser/modules/permissions.so" loadmodule "/usr/local/lib/ser/modules/acc.so" loadmodule "/usr/local/lib/ser/modules/xlog.so"
modparam("auth_db|uri_db|usrloc", "db_url", " mysql://ser:heslo@localhost/ser") modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("usrloc", "db_mode", 2) modparam("rr", "enable_full_lr", 1) route {
#
# Sanity Check Section
#
if (!mf_process_maxfwd_header("10")) { sl_send_reply("483", "Too Many Hops"); break; };
if (msg:len > max_len) { sl_send_reply("513", "Message Overflow"); break; };
#
# Record Route Section
#
if (method!="REGISTER") { record_route(); };
#
# Loose Route Section
#
if (loose_route()) {
if ((method=="INVITE" || method=="REFER") && !has_totag()) { sl_send_reply("403", "Forbidden Cant cross 1st bridge"); break; }; route(1); break;
};
#
# Call Type Processing Section
#
if (uri!=myself) { route(1); break; };
if (method=="ACK") { route(1); break; } if (method=="INVITE") { route(3); break; } else if (method=="REGISTER") { route(2); break; };
lookup("aliases"); if (uri!=myself) { route(1); break; };
if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; };
route(1); }
route[1] {
#
# Default Message Handler
#
if (!t_relay()) { sl_reply_error(); }; }
route[2] {
#
# REGISTER Message Handler
#
sl_send_reply("100", "Trying");
if (!www_authorize("","subscriber")) { www_challenge("","1"); break; };
if (!check_to()) { sl_send_reply("401", "Unauthorized"); break; };
consume_credentials();
if (!save("location")) { sl_reply_error(); }; }
route[3] {
#
# INVITE Message Handler
#
if (!proxy_authorize("","subscriber")) { proxy_challenge("","1"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; };
consume_credentials();
lookup("aliases"); if (uri!=myself) { route(1); break; };
if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; };
route(1); }
please guide me how to do this.
thanks
arun
Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers