I am trying to get Bria and Snom to use the same XCAP documents. I am having issues getting to play well with together with OpenXCAP.

Currently the only way to get Bria xcap config to authenticate with OpenXCAP you have to manually set the username to be the OpenSIPS subscriber. If you tell Bria to "Use SIP credentials" OpenXCAP thinks the username is actually "sip" because it is taking the "sip" from the uri "sip:[email protected]". Yet for some reason when a Snom phone sends its username info OpenXCAP takes the whole sip uri as the username successfully, but the authentication still fails because no user exists that has the full uri "sip:[email protected]"

I am wondering what can be done when it comes to OpenXCAP user authentication. Below you will see 3 displays.

The first is a Bria client that can authenticate when the username is manually entered (works fine). The second is a Snom client that tries to authenticate with the sip uri (no good) The third is a Bria client that tries to authenticate when the "Use SIP credentials" is set (no good)


Good Bria Auth
--------------------------------------------------------------------------------------------

####
T 2010/11/27 23:13:49.740070 75.XX.XX.XX:51638 -> 173.XX.XX.XX:80 [AP]
GET /[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml HTTP/1.1.
Host: xcap.ae.com.
Accept: */*.
.

##
T 2010/11/27 23:13:49.742264 173.XX.XX.XX:80 -> 75.XX.XX.XX:51638 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:13:49 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest nonce="200168871397238953776527501139563679082698914645735932561", opaque="4da449c730ab8be594dffa4095ea7f30-MjAwMTY4ODcxMzk3MjM4OTUzNzc2NTI3NTAxMTM5NTYzNjc5MDgyNjk4OTE0NjQ1NzM1OTMyNTYxLDc1LjY1LjguMTU4LDEyOTA5MjEyMjk=", realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource.</p></body></html>
#
T 2010/11/27 23:13:49.808204 75.XX.XX.XX:51638 -> 173.XX.XX.XX:80 [AP]
GET /[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml HTTP/1.1. Authorization: Digest username="9012XX2XX", realm="irock.com", nonce="200168871397238953776527501139563679082698914645735932561", uri="/[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml", cnonce="Mjg0NjI2", nc=00000001, qop="auth", response="e8236a7d007ddab5f22d862dad939f02", opaque="4da449c730ab8be594dffa4095ea7f30-MjAwMTY4ODcxMzk3MjM4OTUzNzc2NTI3NTAxMTM5NTYzNjc5MDgyNjk4OTE0NjQ1NzM1OTMyNTYxLDc1LjY1LjguMTU4LDEyOTA5MjEyMjk=", algorithm="MD5".
Host: xcap.ae.com.
Accept: */*.
.

#
T 2010/11/27 23:13:49.811928 173.XX.XX.XX:80 -> 75.XX.XX.XX:51638 [A]
HTTP/1.1 200 OK.
Content-Length: 1277.
Accept-Ranges: bytes.
Server: OpenXCAP/2.0.0.
ETag: "0a777fc8e2fa5738dac84cd37a09728e".
Date: Sun, 28 Nov 2010 05:13:49 GMT.
Content-Type: application/resource-lists+xml.


--------------------------------------------------------------------------------------------


Bad Snom Request
--------------------------------------------------------------------------------------------

GET /xcap-root%40irock.com/resource-lists/users/sip%3a9012XX2XX%40irock.com/contacts-resource-list.xml HTTP/1.1.
Host: xcap.ae.com.
Content-Length: 0.
Authorization: Digest username="sip:[email protected]",realm="irock.com",nonce="706537289489428161442329100350740932242275198240602726865",uri="/xcap-root%40irock.com/resource-lists/users/sip%3a9012XX2XX%40irock.com/contacts-resource-list.xml",qop=auth,nc=00000001,cnonce="72a71f02",response="f60f4577371ec3cf8e3fdfdc194df2ac",opaque="36dd9c567f00c16f8bc118f0817ba07b-NzA2NTM3Mjg5NDg5NDI4MTYxNDQyMzI5MTAwMzUwNzQwOTMyMjQyMjc1MTk4MjQwNjAyNzI2ODY1LDc1LjY1LjguMTU4LDEyOTA5MjE4MjQ=".
Accept-Language: en.
Connection: Keep-Alive.
Keep-Alive: 5.
User-Agent: Mozilla/4.0 (compatible; snom360-SIP 8.4.18 1.1.3-m).
.

##
T 2010/11/27 23:23:44.144617 173.XX.XX.XX:80 -> 75.XX.XX.XX:2076 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:23:44 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest nonce="139414618774781493440636305424629766704451120358098653186", opaque="d930569724b82196640444742ca8683b-MTM5NDE0NjE4Nzc0NzgxNDkzNDQwNjM2MzA1NDI0NjI5NzY2NzA0NDUxMTIwMzU4MDk4NjUzMTg2LDc1LjY1LjguMTU4LDEyOTA5MjE4MjQ=", realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource.</p></body></html>



--------------------------------------------------------------------------------------------





Bad Bria Request
--------------------------------------------------------------------------------------------


GET /[email protected]/resource-lists/users/sip:[email protected]/resource-list.xml HTTP/1.1. Authorization: Digest username="sip", realm="irock.com", nonce="50095226763860567326458028738337048298233814822458738089", uri="/[email protected]/resource-lists/users/sip:[email protected]/resource-list.xml", cnonce="Mjg1NzE2", nc=00000001, qop="auth", response="089dd6ca050f6212c6803d74a032009a", opaque="7a655f7cb5ce8376f21b8fdaf8a3ffe5-NTAwOTUyMjY3NjM4NjA1NjczMjY0NTgwMjg3MzgzMzcwNDgyOTgyMzM4MTQ4MjI0NTg3MzgwODksNzUuNjUuOC4xNTgsMTI5MDkyMjMyMA==", algorithm="MD5".
Host: xcap.ae.com.
Accept: */*.
If-None-Match: "44a8ee0920c465b4397a1de5f3518b5d".
.

#
T 2010/11/27 23:32:00.468693 173.XX.XX.XX:80 -> 75.XX.XX.XX:51739 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:32:00 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest nonce="331761275047467742060996448408084816202194629691680164782", opaque="4e6f75781025f661095515876322a7c6-MzMxNzYxMjc1MDQ3NDY3NzQyMDYwOTk2NDQ4NDA4MDg0ODE2MjAyMTk0NjI5NjkxNjgwMTY0NzgyLDc1LjY1LjguMTU4LDEyOTA5MjIzMjA=", realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You are not authorized to access this resource.</p></body></html>
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to