I am trying to get Bria and Snom to use the same XCAP documents. I am
having issues getting to play well with together with OpenXCAP.
Currently the only way to get Bria xcap config to authenticate with
OpenXCAP you have to manually set the username to be the OpenSIPS
subscriber. If you tell Bria to "Use SIP credentials" OpenXCAP thinks the
username is actually "sip" because it is taking the "sip" from the
uri "sip:[email protected]". Yet for some reason when a Snom phone sends its
username info OpenXCAP takes the whole sip uri as the username
successfully, but the authentication still fails because no user exists
that has the full uri "sip:[email protected]"
I am wondering what can be done when it comes to OpenXCAP user
authentication. Below you will see 3 displays.
The first is a Bria client that can authenticate when the username is
manually entered (works fine).
The second is a Snom client that tries to authenticate with the sip uri (no
good)
The third is a Bria client that tries to authenticate when the "Use SIP
credentials" is set (no good)
Good Bria Auth
--------------------------------------------------------------------------------------------
####
T 2010/11/27 23:13:49.740070 75.XX.XX.XX:51638 -> 173.XX.XX.XX:80 [AP]
GET
/[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml
HTTP/1.1.
Host: xcap.ae.com.
Accept: */*.
.
##
T 2010/11/27 23:13:49.742264 173.XX.XX.XX:80 -> 75.XX.XX.XX:51638 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:13:49 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest
nonce="200168871397238953776527501139563679082698914645735932561",
opaque="4da449c730ab8be594dffa4095ea7f30-MjAwMTY4ODcxMzk3MjM4OTUzNzc2NTI3NTAxMTM5NTYzNjc5MDgyNjk4OTE0NjQ1NzM1OTMyNTYxLDc1LjY1LjguMTU4LDEyOTA5MjEyMjk=",
realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You
are
not authorized to access this resource.</p></body></html>
#
T 2010/11/27 23:13:49.808204 75.XX.XX.XX:51638 -> 173.XX.XX.XX:80 [AP]
GET
/[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml
HTTP/1.1.
Authorization: Digest username="9012XX2XX", realm="irock.com",
nonce="200168871397238953776527501139563679082698914645735932561",
uri="/[email protected]/resource-lists/users/9012XX2XX/contacts-resource-list.xml",
cnonce="Mjg0NjI2", nc=00000001, qop="auth",
response="e8236a7d007ddab5f22d862dad939f02",
opaque="4da449c730ab8be594dffa4095ea7f30-MjAwMTY4ODcxMzk3MjM4OTUzNzc2NTI3NTAxMTM5NTYzNjc5MDgyNjk4OTE0NjQ1NzM1OTMyNTYxLDc1LjY1LjguMTU4LDEyOTA5MjEyMjk=",
algorithm="MD5".
Host: xcap.ae.com.
Accept: */*.
.
#
T 2010/11/27 23:13:49.811928 173.XX.XX.XX:80 -> 75.XX.XX.XX:51638 [A]
HTTP/1.1 200 OK.
Content-Length: 1277.
Accept-Ranges: bytes.
Server: OpenXCAP/2.0.0.
ETag: "0a777fc8e2fa5738dac84cd37a09728e".
Date: Sun, 28 Nov 2010 05:13:49 GMT.
Content-Type: application/resource-lists+xml.
--------------------------------------------------------------------------------------------
Bad Snom Request
--------------------------------------------------------------------------------------------
GET
/xcap-root%40irock.com/resource-lists/users/sip%3a9012XX2XX%40irock.com/contacts-resource-list.xml
HTTP/1.1.
Host: xcap.ae.com.
Content-Length: 0.
Authorization: Digest
username="sip:[email protected]",realm="irock.com",nonce="706537289489428161442329100350740932242275198240602726865",uri="/xcap-root%40irock.com/resource-lists/users/sip%3a9012XX2XX%40irock.com/contacts-resource-list.xml",qop=auth,nc=00000001,cnonce="72a71f02",response="f60f4577371ec3cf8e3fdfdc194df2ac",opaque="36dd9c567f00c16f8bc118f0817ba07b-NzA2NTM3Mjg5NDg5NDI4MTYxNDQyMzI5MTAwMzUwNzQwOTMyMjQyMjc1MTk4MjQwNjAyNzI2ODY1LDc1LjY1LjguMTU4LDEyOTA5MjE4MjQ=".
Accept-Language: en.
Connection: Keep-Alive.
Keep-Alive: 5.
User-Agent: Mozilla/4.0 (compatible; snom360-SIP 8.4.18 1.1.3-m).
.
##
T 2010/11/27 23:23:44.144617 173.XX.XX.XX:80 -> 75.XX.XX.XX:2076 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:23:44 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest
nonce="139414618774781493440636305424629766704451120358098653186",
opaque="d930569724b82196640444742ca8683b-MTM5NDE0NjE4Nzc0NzgxNDkzNDQwNjM2MzA1NDI0NjI5NzY2NzA0NDUxMTIwMzU4MDk4NjUzMTg2LDc1LjY1LjguMTU4LDEyOTA5MjE4MjQ=",
realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You
are
not authorized to access this resource.</p></body></html>
--------------------------------------------------------------------------------------------
Bad Bria Request
--------------------------------------------------------------------------------------------
GET
/[email protected]/resource-lists/users/sip:[email protected]/resource-list.xml
HTTP/1.1.
Authorization: Digest username="sip", realm="irock.com",
nonce="50095226763860567326458028738337048298233814822458738089",
uri="/[email protected]/resource-lists/users/sip:[email protected]/resource-list.xml",
cnonce="Mjg1NzE2", nc=00000001, qop="auth",
response="089dd6ca050f6212c6803d74a032009a",
opaque="7a655f7cb5ce8376f21b8fdaf8a3ffe5-NTAwOTUyMjY3NjM4NjA1NjczMjY0NTgwMjg3MzgzMzcwNDgyOTgyMzM4MTQ4MjI0NTg3MzgwODksNzUuNjUuOC4xNTgsMTI5MDkyMjMyMA==",
algorithm="MD5".
Host: xcap.ae.com.
Accept: */*.
If-None-Match: "44a8ee0920c465b4397a1de5f3518b5d".
.
#
T 2010/11/27 23:32:00.468693 173.XX.XX.XX:80 -> 75.XX.XX.XX:51739 [AP]
HTTP/1.1 401 Unauthorized.
Date: Sun, 28 Nov 2010 05:32:00 GMT.
Content-Length: 141.
Content-Type: text/html.
WWW-Authenticate: digest
nonce="331761275047467742060996448408084816202194629691680164782",
opaque="4e6f75781025f661095515876322a7c6-MzMxNzYxMjc1MDQ3NDY3NzQyMDYwOTk2NDQ4NDA4MDg0ODE2MjAyMTk0NjI5NjkxNjgwMTY0NzgyLDc1LjY1LjguMTU4LDEyOTA5MjIzMjA=",
realm="irock.com", algorithm=MD5, qop="auth".
Server: OpenXCAP/2.0.0.
.
<html><head><title>Unauthorized</title></head><body><h1>Unauthorized</h1><p>You
are
not authorized to access this resource.</p></body></html>
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users