[OpenSER-Users] Logging failed registration attempt
Edoardo Serra
edoardo.serra at webrainstorm.it
Tue Aug 14 15:32:52 CEST 2007
Ok, that's how I did
if (!proxy_authorize("exorsa", "openser_view")) {
if(search("Proxy-Authorization")) {
xlog("L_ERR", "REGISTER: Auth error from - $au");
}
proxy_challenge("exorsa", "0");
exit;
}
so, if the packet contains credentials but they're wrong the attempt is
logged
Now I'm facing the following problem...
When the nonce axpires and the client reREGISTER the packet will contain
wrong credential and the UA is challenged again.
This way that's logged as a bad authentication
I also tried to do
if(search("Proxy-Authorization")) {
if(!registered("location")) {
xlog("L_ERR", "REGISTER: Auth error from - $au");
}
}
...but without good results....
Any idea ?
Tnx in advance
Edoardo
Iñaki Baz Castillo ha scritto:
> El Monday 13 August 2007 22:11:34 Edoardo Serra escribió:
>> Hi all,
>> I'd like to log failed SIP REGISTER attempt either with xlog or with
>> sip_trace() but I cannot understand where to put related code to catch
>> the authentication error
>
>
> With XLOG is easy :)
>
>
>> Here is the part of my opensr.cfg dedicated to REGISTER handling
>>
>> if (method=="REGISTER") {
>> if (!proxy_authorize("exorsa", "openser_view")) {
> xlog("L_INFO", "REGISTER: auth required\n");
>> proxy_challenge("exorsa", "0");
>> exit;
>> }
>> if (!check_to()) {
> xlog("L_WARN", "REGISTER: !check_to()\n");
>> sl_send_reply("403", "Digest username and URI username
>> do NOT match! Stay away!");
>> exit;
>> }
> xlog("L_INFO", "REGISTER: authorized\n");
>> save("location");
>>
>> exit;
>> };
>
>
> Regards.
>
More information about the sr-users
mailing list