On Sat, Oct 30, 2010 at 6:30 PM, George Niculae <[email protected]> wrote:
> run in a problem where calls to sipxrest APIs (call resolver plugin in
> my case) failed with "Pin mismatch" even correct credentials. The
> problem occurred when domain name was different than authorization
> realm: BasicAuthenticationFilter generates hash to compare based on
> domain name while hashes within validusers.xml file are created using
> authorization realm. I am going to add a new element <sip-realm> in
> sipxrest-config.xml and use it instead domain name.

short answer:
yes. realm is the right answer.  I don't know if sipxrest-config.xml
is right file, but not sure if your asking about that.

long answer:
no, ideally, realm is not even used, because we're not serving
multiple realms and this pin is not used in any SIP contexts where
standard hash is md5(user:password:realm).  If we wiped out realm from
pin, things become a lot easier.

I would take short answer for 4.4 fix
_______________________________________________
sipx-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev/

Reply via email to