Hi Klaus,

TLS: Is this feature already tested with version 0.10.x? Is it necessary that
both proxies are under the same root-CA or is it possible to define different
trust anchors by distributing root certificates? Or do I need a cross-path
mechanism to deal with this problem?

proxy2proxy authentication is usually done by TLS.

The problem is that both proxies use different nonce to authenticate. You can try to set the secret on both proxies:
http://openser.org/docs/modules/0.10.x/auth.html#AEN62

regards
klaus

Taras Bendik wrote:
Situation:
client1 ----->openser1 ----> openser2 ---->client2
Both openser have same accounts (user/pass)

When im not using proxy authentification it works ok.
If i use it it gives me 407

i have tried to use following
http://www.voice-system.ro/docs/uac/ar01s06.html#ex_auth

and always goes executing this part
if (isflagset(7)) {
   t_reply("503","Authentication failed");
   break;
}

I look at ngrep log, and it is some thing like this
 ser1 -> ser2 INVITE
 ser2 -> ser1 AUTH Required
 ser1 -> ser2 INVITE with auth
 ser2 -> ser1 AUTH Required
 ser1 -> ser2 INVITE with auth
 ser2 -> ser1 AUTH Required
It seems to me that openser1 cannot authentificate on openser2.


Thanks in advance



_______________________________________________
Users mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/users




_______________________________________________
Users mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/users






_______________________________________________
Users mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/users

Reply via email to