Hi all,

I'm using ser-0.9.7 with mysql authentication.

This is the INVITE handling section of my ser.cfg

# -----------------------------------------------------------------

# INVITE Message Handler

# -----------------------------------------------------------------

if (nat_uac_test("19")) {

setflag(6);

}

if (!allow_trusted()) {

if (!proxy_authorize("sip.keeptelecom.com","subscriber")) {

proxy_challenge("sip.keeptelecom.com","0");

break;

} else if (!check_from()) {

sl_send_reply("403", "Use From=ID");

break;

};

consume_credentials();

};

# ------ Logging calls after succesfully auth -----------

if (isflagset(6)) {

xlog("L_INFO", "<%is> CH <%ct> R-URI <%ru> autenticato: NAT detected\n");

} else {

xlog("L_INFO", "<%is> CH <%ct> R-URI <%ru> autenticato: no NAT detected\n");

}

As you cas see, I've added just after authentication section some lines to log every succesfully authenticated attemp to make a call, with NAT detection info.

I'd like, in the same way, add a single line to log every wrong user or wrong password attempt.

My question is: which is the correct place to set this in the configuration file ?

My first idea was to place xlog instruction just inside the if(!proxy_authorize){ . , but this produces multiple line in log, because in a call first invite is sent without proxy_authorization section.

Is there a way, with xlog, to show the client sent password in clear for an easy troubleshoot ?

Many thanks for any suggestion.

Fabio