On Dec 15, 2008, at 9:59 PM, Eric PTAK wrote:

Well well, thanks for that great wiki page I didn't see.
What do you think to keep in integrated but use the xcap root module
parameter or other dedicated one to define allowed roots in the
resource-list node ?

Another thing, what about compliance with OMA specifications ?


Which ones more precisely?


Eric

2008/12/15, Adrian Georgescu <a...@ag-projects.com>:
I would discourage you do both, but this is my opinion. For some good
practices on using XCAP see this page:

http://openxcap.org/wiki/Running

Adrian

On Dec 15, 2008, at 6:02 PM, Eric PTAK wrote:

And what about if we ensure that the RL is on the same host than the
rls-services, for example an RLS which is configured like this :

integrated_xcap_server = 0
xcap_root = http://10.26.52.122/xcap-root:8080

In that circumstance, RLS may handle resource-list tag, check if the
host is equal to xcap_root, and then download the RL.
Do you agree ?

Regards,
Eric.

2008/12/15 Adrian Georgescu <a...@ag-projects.com>

 <service uri="sip:al...@domain;pres-list=Default">

The above should read sip:al...@domain.com


<resource-list>http://10.26.52.122:8080/xcap-root/resource-lists/users/sip%3aalice%40domain/index/

~~/resource-lists/list...@name=%22default%22%5d</resource-list>

I will not allow this document to be stored in the server as this
would open Pandera's box of foreign URLs that can be injected in the
system. The fact that RFC mentioned that is possible does not mean
is sane to do it as  Presence server operator.

Only <one> entries containing individual and valid SIP URIs will be
allowed in rls-services document.

Adrian


On Dec 15, 2008, at 4:53 PM, Eric PTAK wrote:

Thanks you Anca and Adrian for your answer.
Regading the issue with the parameter in the R-URI, I was asking if
the PS shouldn't use the To header, but I don't find references on
that any more...

I'll feed back to Mercuro developers in order to remove parameters
from services URI.

Adrian, when you're talking about external XCAP documents, do you
mean the use of resource-list tag in rls-services document ?

Eric.



2008/12/15 Adrian Georgescu <a...@ag-projects.com>
Hello Eric,

To avoid backdoors and possibility of exploiting the Presence
server code by end-user provisioning we will actually add checks in
OpenXCAP server for the actual content of RLS services document so
that it contins only routable sip uris, without any parameters.
Also pointers to external XCAP documents even if they are mentioned
in the RFC will no be allowed in our server as it could generate
endless loops.

So I encourage you not to use any SIP Uris different than
u...@domain as you will not be able to manipulate them in the next
version.

Regards,
Adrian

On Dec 12, 2008, at 6:13 PM, Eric PTAK wrote:

Hi all,

I'm currently integrating OpenSIPS with OpenXCAP.
After a lot a problem with ubuntu libraries in order to setup
openxcap, I'm now facing to another issue with RLS module.
I'm using Mercuro and it subsribes to sip:al...@domain;pres-list=Default

, but the RLS looks for a service at sip:al...@domain so it
response by a 404 Not Found error.

This is the xml files from xcap :

ep...@rd-srv-devlnx2:~$ xcapclient --app rls-services get
get
http://10.26.52.122:8080/xcap-root/rls-services/users/sip:al...@domain/index
etag: "d113935c4c7324c99077a925492251b2"
content-type: application/rls-services+xml
content-length: 467
<?xml version="1.0" encoding="utf-8"?>
<rls-services xmlns:rl="urn:ietf:params:xml:ns:resource-lists"
xmlns="urn:ietf:params:xml:ns:rls-services">
 <service uri="sip:al...@domain;pres-list=Default">

<resource-list>http://10.26.52.122:8080/xcap-root/resource-lists/users/sip%3aalice%40domain/index/

~~/resource-lists/list...@name=%22default%22%5d</resource-list>
   <packages>
     <package>presence</package>
   </packages>
 </service>
</rls-services>

ep...@rd-srv-devlnx2:~$ xcapclient --app resource-lists get
get
http://10.26.52.122:8080/xcap-root/resource-lists/users/sip:al...@domain/index
etag: "e153e7e4688122a04434b77cd1ecb5e1"
content-type: application/resource-lists+xml
content-length: 324
<?xml version="1.0" encoding="utf-8"?>
<resource-lists xmlns="urn:ietf:params:xml:ns:resource-lists">
 <list name="Default">
   <display-name>All Contacts</display-name>
 <entry uri="sip:b...@domain"
xmlns="urn:ietf:params:xml:ns:resource-lists
">
 <display-name>bob</display-name>
</entry></list>
</resource-lists>
and this is the stack trace :

Dec 12 15:17:15 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
SUBSCRIBE presence from sip:al...@domain to
sip:al...@domain;pres-list=Default
(Mercuro IMS Client Beta (4.0.1011.0))
Dec 12 15:17:15 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:core:parse_headers: flags=ffffffffffffffff
Dec 12 15:17:15 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:core:parse_headers: flags=ffffffffffffffff
Dec 12 15:17:15 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:presence:search_event: start event= [presence]
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:rls:rls_handle_subscribe: 'To' header ALREADY PARSED:
<sip:al...@domain;pres-list=Default

Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:rls:get_resource_list: Searched RL document for user
sip:al...@domain
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:core:db_new_result: allocate 28 bytes for result set at
0x81b52b0
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: 2 columns returned from the query
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:core:db_allocate_columns: allocate 8 bytes for result names at
0x81b5af8
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:core:db_allocate_columns: allocate 8 bytes for result types at
0x81b5360
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: allocate 8 bytes for
RES_NAMES[0] at 0x81b5820
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: RES_NAMES(0x81b5820)[0]=[doc]
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: use DB_BLOB result type
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: allocate 8 bytes for
RES_NAMES[1] at 0x81b5838
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: RES_NAMES(0x81b5838)[1]=[etag]
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_get_columns: use DB_STRING result type
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_convert_rows: allocate 8 bytes for rows at
0x81b5948
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_convert_row: allocate 40 bytes for row
values at 0x81b5860
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_str2val: converting BLOB [<?xml
version="1.0" encoding="utf-8"?>^M <rls-services
xmlns:rl="urn:ietf:params:xml:ns:resource-lists
" xmlns="urn:ietf:params:xml:ns:rls-services">^M   <service
uri="sip:al...@domain;pres-list=Default
">^M
<resource-list>http://10.26.52.122:8080/xcap-root/resource-lists/users/sip%3aalice%40domain/index/

~~/resource-lists/list...@name=%22default%22%5d</resource-
list>^M <packages>^M <package>presence</package>^M </
packages>^M   </service>^M </rls-services>]
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:db_mysql:db_mysql_str2val: converting STRING
[d113935c4c7324c99077a925492251b2]
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:rls:get_resource_list: rls_services document: <?xml
version="1.0" encoding="utf-8"?>^M <rls-services
xmlns:rl="urn:ietf:params:xml:ns:resource-lists
" xmlns="urn:ietf:params:xml:ns:rls-services">^M   <service
uri="sip:al...@domain;pres-list=Default
">^M
<resource-list>http://10.26.52.122:8080/xcap-root/resource-lists/users/sip%3aalice%40domain/index/

~~/resource-lists/list...@name=%22default%22%5d</resource-
list>^M <packages>^M <package>presence</package>^M </
packages>^M   </service>^M </rls-services>
Dec 12 15:17:16 rd-srv-devlnx2 /usr/local/sbin/opensips[25465]:
DBG:rls:get_resource_list: service uri sip:al...@domain not found
in rl document for user sip:al...@domain
_______________________________________________
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users







_______________________________________________
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to