Re: [Serusers] Multiple Domain Problem ser0.9.2 - sr-users

12 Jun 2005


      Another strange thing:
I have same user on two different domains:
user@domain(a) passw(a)
user@domani(b) passw(b)
and only user on domain(a) has the credentials.
Some time i get authenticated user@domain(b) with pass(b) and I am able to 
call evean if user@domain(b) doesn't have the appropriate credentials.
Another simptoms that SER is not differentiating the domains.
Rosario
----- Original Message ----- 
From: "Juan Priotti" jpriotti@gmail.com
To: "Rosario Pingaro" rpingar@italycom.it
Sent: Sunday, June 12, 2005 12:49 PM
Subject: Re: [Serusers] Multiple Domain Problem ser0.9.2
...
I think you would need to add aliases in ser.cfg in this way:
fifo="/tmp/ser_fifo"
alias=domain1.com domain2.com
so authentication will not fail.
also when adding users:
serctl add user1@domain1.com "passwd" "email"
----- Original Message ----- 
From: Rosario Pingaro
To: serusers@lists.iptel.org
Sent: Sunday, June 12, 2005 1:34 PM
Subject: Fw: [Serusers] Multiple Domain Problem ser0.9.2
I'd like to add that I have added:

domains using serctl domain add
added users for domain a and users for domain b
each user is authenticated without relation with the domain
each user that is present in domain a and domain b get authentication

failed (registering in domain a and registrering in doamin b);
thanks again.
Rosario
----- Original Message ----- 
From: Rosario Pingaro
To: serusers@lists.iptel.org
Sent: Sunday, June 12, 2005 5:04 PM
Subject: [Serusers] Multiple Domain Problem ser0.9.2
I'd like to configure SER to host two different domains; the domains are
into the hst file of the linux machine.
The problem is that SER autheticates the users indifferently from the 
domain
(I have enabled use_domain on both registrar and userloc), also if an user
is present on both domains i got an authentication failed.
I don't have alias because the doamin ar einto the linux' host file.
If I remove a domain from the file and don't make an alias I get an error
about "too many hops" because ser doesn't recognize as myself.
Please may you halp me to debug?
Thanks
Rosario
These are some part of my ser.cfg
#debug=6
fork=yes
log_stderror=no
check_via=no    # (cmd. line: -v)
dns=no           # (cmd. line: -r)
rev_dns=no      # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
fifo_mode=0666
fifo_db_url="mysql://ser:hesloimgs@ns2.italycomnet.it/ser"
listen=213.178.216.45
modparam("domain", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("domain", "db_mode", 1)
modparam("domain", "domain_table", "domain")
modparam("domain", "domain_col", "domain")
modparam("permissions", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("permissions", "db_mode", 1)
modparam("permissions", "trusted_table", "trusted")
modparam("uri_db", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("usrloc", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("usrloc", "db_mode", 1)
modparam("usrloc", "use_domain",1)
modparam("auth_db", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("registrar", "nat_flag", 6)
modparam("registrar", "use_domain",1)
modparam("nathelper", "natping_interval", 0)
modparam("nathelper", "rtpproxy_disable", 1)
modparam("mediaproxy","natping_interval",30)
modparam("acc", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
modparam("acc", "db_flag", 1)
modparam("acc", "db_missed_flag", 1)
modparam("acc", "failed_transactions", 1)
modparam("acc", "report_cancels", 1)
modparam("acc", "log_fmt", "cdfimorstup")
modparam("acc", "log_level", 1)
modparam("acc", "report_ack", 1)
modparam("rr", "enable_full_lr", 1)
modparam("tm", "fr_timer", 40)
modparam("tm", "fr_inv_timer", 60)
modparam("tm", "fr_inv_timer_avp", "inv_timeout")
modparam("tm", "wt_timer", 5)
modparam("group", "db_url", "mysql://ser:heslo@xxx.xxxxxx.it/ser")
#
route[2] {
       sl_send_reply("100", "ci provo...");
       if (!search("^Contact:\ +*") && client_nat_test("7"))  {
               setflag(6);
               fix_nated_register();
               force_rport();
       };
   if (!www_authorize("", "subscriber")) {
           www_challenge("", "0");
           break;
   };


route[3] {
       if (client_nat_test("3")){
               setflag(7);
               force_rport();
               fix_nated_contact();
       };
       if (method=="INVITE" && !allow_trusted()) {
               if (!proxy_authorize("", "subscriber")) {
                       proxy_challenge("", "0");
                       break;
               } else if (!check_from()) {
                       sl_send_reply("403","Setta From=ID");
                       break;
               };
               consume_credentials();
       };
       lookup("aliases");
       if (uri!=myself) {
               route(5);
               route(1);
               break;
       };
   if (!lookup("location") && !isflagset(4)) {


Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers

Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers