Hi,

For me, you have the DIGEST USERNAME for REGISTRATION (mysql Account with a password) And the username "phone number" : for example : FROM sip:123145@domain.

And I want to do: One Digest USERNAME can make calls with 5 or 6 username for example or use another Security Authentification.

I have read in Ser Admin's Guide, page 29:

Even it authentication is turned on, there is no relationship between authentication username and address of record. That means that for example a user authenticating himself correctly with "john.doe" id may register contacts for "gw.bush". Site policy may wish to mandate authentication id to be equal to username claimed in To header field. check_to action from auth module can be used to enforce such a policy.

Because if i dont' use the function "check_from", a customer can make call with an other Phone Number of an other Customer. If I use Disget Auth with the function "check_from", only a custmer with Digest USERNAME == Contact ID can make call >> It's good.

But if I have a PABX with a GW sip who have only one DIGEST USERNAME,the phones who are behind teh PABX can't make calls because they are stopped by SER (FUNCTION "check_from",)

Thanks a lot for your help.

NICOLAS RUIZ

-----Message d'origine----- De : Marian Dumitru [mailto:marian.dumitru@voice-sistem.ro] Envoyé : mercredi 6 octobre 2004 12:53 À : Nicolas Ruiz Cc : serusers@lists.iptel.org Objet : Re: [Serusers] Associate an USERNAME with more than one Phone Number

Hi there,

What's exactly do you understand by "username" and "phone number"? AFAIK, in SIP, there is only the username (like sip:username@domain") and some possible aliases.

Best regards, Marian

Nicolas Ruiz wrote:

Hello,

Is it possible to associate an Username with more than one Phone Number ?

I have use this function to secure SER : if (!check_from()) { sl_send_reply("403", "Only registered users are allowed"); break; };

That's only good only when the customer send to SER his Username and the same Phone NUMBER.

Can i set a function, who says, with this Username, you are authorize with only this 5 Phone numbers (0155632311,0145265213,0133632211 etc...)

Thanks a lot

Regards

Nicolas RUIZ

---

---

Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

Marian,

Thanks a lot, that's OK!!!!!!!

I have set in the table "GRP", the Auth NAME of the PABX and the phone number of the phone behind the PABX. is it good????

mysql> select * from grp; +-----------+-------------------+-----------+---------------------+ | username | domain | grp | last_modified | +-----------+-------------------+-----------+---------------------+ | PABX | vivaction.net | VIVACTION | 0000-00-00 00:00:00 | | 170701234 | vivaction.net | VIVACTION | 0000-00-00 00:00:00 | | 170709999 | vivaction.net | VIVACTION | 0000-00-00 00:00:00 | +-----------+-------------------+-----------+---------------------+ 3 rows in set (0.00 sec)

BUT, when i receive an incomming call, what can I set on SER to relay to the PABX because only the NAME "pabx" is REGISTERED!!!

Thanks a lot

Best Regards

Nicolas RUIZ VIVACTION France, Paris

-----Message d'origine----- De : Marian Dumitru [mailto:marian.dumitru@voice-sistem.ro] Envoyé : mercredi 6 octobre 2004 13:45 À : Nicolas Ruiz Cc : serusers@lists.iptel.org Objet : Re: [Serusers] Associate an USERNAME with more than one Phone Number

Hi Nicolas,

Now is clear - it was just a matter of terminology, about what do you understand by username and by phone number.

So, you have a PBX serving multiple SIP IDs (phone numbers) but with only one username (auth username).

what you can try is to replace check_from() with is_user_in() - group checking. Make a group PBX1 and put in it the auth name and all phone numbers which are allowed. Instead of check_from(), do: if (is_user_in("Credentials","PBX1") && is_user_in("From","PBX1") ) { /*ok*/ }

By this you can check also the relationship between auth username and phone numbers and which phone numbers are allowed.

Best Regards Marian Dumitru

Nicolas Ruiz wrote:

Hi,

For me, you have the DIGEST USERNAME for REGISTRATION (mysql Account with a password) And the username "phone number" : for example : FROM sip:123145@domain.

And I want to do: One Digest USERNAME can make calls with 5 or 6 username for example or use another Security Authentification.

I have read in Ser Admin's Guide, page 29:

/Even it authentication is turned on, there is no relationship between authentication username and address of record. That means that for example a user authenticating himself correctly with *"john.doe"* id may register *contacts for "gw.bush".* Site policy may wish to mandate authentication id to be equal to username claimed in To header field. check_to action from auth module can be used to enforce such a policy./

Because if i dont' use the function "check_from", a customer can make call with an other Phone Number of an other Customer.

If I use Disget Auth with the function "check_from", only a custmer with Digest USERNAME == Contact ID can make call >> It's good.

But if I have a PABX with a GW sip who have only one DIGEST USERNAME,the phones who are behind teh PABX can't make calls because they are stopped by SER (FUNCTION "check_from",)

Thanks a lot for your help.

NICOLAS RUIZ

-----Message d'origine----- De : Marian Dumitru [mailto:marian.dumitru@voice-sistem.ro] Envoyé : mercredi 6 octobre 2004 12:53 À : Nicolas Ruiz Cc : serusers@lists.iptel.org Objet : Re: [Serusers] Associate an USERNAME with more than one Phone Number

Hi there,

What's exactly do you understand by "username" and "phone number"? AFAIK, in SIP, there is only the username (like sip:username@domain") and some possible aliases.

Best regards, Marian

Nicolas Ruiz wrote:

...

Hello,

Is it possible to associate an Username with more than one Phone Number

?

...

I have use this function to secure SER : if (!check_from()) { sl_send_reply("403", "Only registered users are allowed"); break; };

That's only good only when the customer send to SER his Username and

the

...

same Phone NUMBER.

Can i set a function, who says, with this Username, you are authorize with only this 5 Phone numbers (0155632311,0145265213,0133632211

etc...)

...

Thanks a lot

Regards

Nicolas RUIZ

---

...

---

Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

Hi Nicolas,

One question. Does it matter for the PBX what's the user part of RURI of incoming calls? I guess so, since it's use to trigger one specific phone behind PBX. If you want to keep the user part of RURI, AFAIK, there is no solution for what you are trying to do, but using hard coded address for PBX in SER script.

Best regards, Marian Dumitru

Nicolas Ruiz wrote:

But i already know the IP@ of the grp PABX1, how can i send it without write the IP@ on SER directly.

Thank you all for your assistance

Best Regards

Nicolas RUIZ

-----Message d'origine----- De : Jan Janak [mailto:jan@iptel.org] Envoyé : jeudi 7 octobre 2004 08:29 A : Nicolas Ruiz Cc : serusers@lists.iptel.org Objet : Re: [Serusers] Associate an USERNAME with more than one Phone Number

Yes, you can do it if you enable modparam("uri_db", "use_uri_table", 1) In this case SER will not just compare the username in digest credentials with the username in To/From, but it will use the uri table in the database to find out whether the username in digest credentials and the username in To/From match.

uri tables is a table enumerating all allowed usernames, thus a user can have several different usernames (which are different from digest username and it will still match).

Jan.

On 06-10 11:22, Nicolas Ruiz wrote:

...

Hello,

Is it possible to associate an Username with more than one Phone Number ?

I have use this function to secure SER : if (!check_from()) { sl_send_reply("403", "Only registered

users

...

are allowed"); break; };

That's only good only when the customer send to SER his Username and the same Phone NUMBER.

Can i set a function, who says, with this Username, you are authorize

with

...

only this 5 Phone numbers (0155632311,0145265213,0133632211 etc...)

Thanks a lot

Regards

Nicolas RUIZ

...

---

Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers