On Nov 07, 2003 at 12:46, Tristan Colgate <tristan(a)inuxtech.co.uk> wrote: You want to authenticate twice? Once on the "main" proxy on once on the asterisk box? It's easier just to trust you "main" proxy (leave auth. to it) and drop all connections comming from different ips on the asterisk box. TLS would also help a lot, but it's not freely available. Yes, you could use the same db for the auth. stuff, but in your place I would run only one ser doing the auth. If you want to use 2 sers and auth. to both (not recommended since it's easier to trust the main ser ip), it will work if both of them accept the same nonce and you don't have any consume_credentials in your script. To have the same nonce you will have to set the secret parameter of the auth module to the same thing on both sers (if you don't set it it would be random and they will expect different nonces). Also the clocks should be synchronized. This is if you use same auth. db and auth. realm on both of them. If you want to use different realms then make sure your UAs support this and disregard the stuff about nonces. Andrei