[Spce-user] Stale Nonce Workarround in 4.5.1

[Matthias Hohl]

Aaah i found it.

 

In 4.5.1 there is a new auth.cfg.tt2 file.

 

So the new work-a-round is this:

 

# cp /etc/ngcp-config/templates/etc/kamailio/proxy/auth.cfg.tt2
/etc/ngcp-config/templates/etc/kamailio/proxy/auth.cfg.customtt.tt2

# nano /etc/ngcp-config/templates/etc/kamailio/proxy/auth.cfg.customtt.tt2

Searching for:

                case -4:

                               xlog("L_NOTICE", "Authentication failed,
stale nonce - [% logreq-%]\n");

                               break;

edit it to:

                case -4:

                               xlog("L_NOTICE", "Authentication failed,
stale nonce - [% logreq-%]\n");

                               append_to_reply("P-NGCP-Stale: yes\r\n");

                               break;

 

 

# cp /etc/ngcp-config/templates/etc/kamailio/lb/kamailio.cfg.tt2
/etc/ngcp-config/templates/etc/kamailio/lb/kamailio.cfg.customtt.tt2

# nano /etc/ngcp-config/templates/etc/kamailio/lb/kamailio.cfg.customtt.tt2

Searching for:

                #!ifdef ENABLE_AUTHCHECK

                               if((status == "401" || status == "407") &&
is_present_hf("P-NGCP-Authorization"))

edit it to:

                               if((status == "401" || status == "407") &&
is_present_hf("P-NGCP-Authorization") && !is_present_hf("P-NGCP-Stale"))

 

 

 

 

Von: Spce-user [mailto:spce-user-bounces at lists.sipwise.com] Im Auftrag von
Matthias Hohl
Gesendet: Donnerstag, 8. September 2016 01:38
An: spce-user at lists.sipwise.com
Betreff: [Spce-user] Stale Nonce Workarround in 4.5.1

 

Hello,

 

the stale nonce work-a-round in 4.5.1 is not possible:

 

the file nano
/etc/ngcp-config/templates/etc/kamailio/proxy/kamailio.cfg.customtt.tt2 have
totally different content and doesn't content 

                case -4:

                               xlog("L_NOTICE", "Authentication failed,
stale nonce - [% logreq-%]\n");

                               break;

 

how to fix the stale nonce problem in 4.5.1?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160908/d8c343c0/attachment-0001.html>