<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.E-MailFormatvorlage18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.E-MailFormatvorlage20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE-AT link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Btw, we use mr 6.5.3<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=DE style='mso-fareast-language:DE-AT'>Von:</span></b><span lang=DE style='mso-fareast-language:DE-AT'> Spce-user <spce-user-bounces@lists.sipwise.com> <b>Im Auftrag von </b>Hohl Matthias<br><b>Gesendet:</b> Montag, 13. Mai 2019 13:46<br><b>An:</b> spce-user@lists.sipwise.com<br><b>Betreff:</b> [Spce-user] No ipauth id found, block registration if subscriber created via API<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>Hello,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>We created a new tool for creating subscribers via the SPCE API, but we found out, that created subscribers don’t use the “domain default” allowed_ips setting.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>We definitely create the subscribers without this value. So if we check the subscriber preferences via web gui the “allowed_ips setting is also blank, also via API GET we don’t get any value for “allowed_ips” back… so it normally should use the domain default settings.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>If we create a subscriber via web interface directly and leave this allowed_ips empty, if works like a charme with the “domain defaults allowed_ips” settings. So this problem is just there, if we create a subscriber via API and leave “allowed_ips” empty.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Subscriber settings:<o:p></o:p></span></p><p class=MsoNormal><img width=765 height=93 style='width:7.9666in;height:.9666in' id="Grafik_x0020_1" src="cid:image002.jpg@01D50993.8084FFA0"><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>If we check the API via GET it preferences looks like this:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> },</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "ac" : "720",</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "allowed_clis" : [</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'>"43720560060"</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> ],</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "cc" : "43",</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "cli" : "43720560060",</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "concurrent_max_per_account" : 4,</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "e164_to_ruri" : false,</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "emergency_suffix" : "invalidAC_",</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "id" : 933,</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br></span></i><i><span style='font-size:9.0pt;color:#333333;background:white'> </span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333;background:white'> "subscriber_id" : 933</span></i><i><span lang=EN-US style='font-size:9.0pt;color:#333333'><br><span style='background:white'>}</span></span></i><i><span lang=EN-US style='font-size:9.0pt'><o:p></o:p></span></i></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>But if we try to register we get this log entries:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><i><span lang=EN-US style='font-size:9.0pt'>May 13 13:27:39 spce proxy[2114]: NOTICE: <script>: New request on proxy - M=REGISTER R=sip:x.telematica.at F=sip:43720560060@x.telematica.at T=sip:43720560060@x.telematica.at IP=176.123.xxx.xxx:5060 (127.0.0.1:5060) <a href="mailto:ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1">ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1</a> UA='PBX v1.7 R6' DESTIP=127.0.0.1:5062<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-size:9.0pt'>May 13 13:27:39 spce proxy[2114]: NOTICE: <script>: Sending reply S=100 Trying fs='127.0.0.1:5062' du='127.0.0.1:5060' - R=sip:x.telematica.at <a href="mailto:ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1">ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1</a> UA='PBX v1.7 R6'<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-US style='font-size:9.0pt'>May 13 13:27:39 spce proxy[2114]: WARNING: <script>: No ipauth id found, block registration - R=sip:x.telematica.at <a href="mailto:ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1">ID=25da2ba63f1576e66b506a9918105d2a@127.0.0.1</a> UA='PBX v1.7 R6'<o:p></o:p></span></i></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>If we sent 0.0.0.0 or the registration IP via API for “allowed_ips” or set the “ignore_allowed_ips” setting to true, then we can register.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>So the problem is, that if this settings are not set via API, the subscriber didn’t use the domain default allowed ip list, where we defined our ip ranges.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Do you have any idea, how to fix that?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:DE-AT'>Mit freundlichen Grüßen,<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:DE-AT'>Matthias Hohl<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>