<div>second register has a WWW-authenticate: Digest, a realm which matches that in ser.cfg, and a nonce.</div>
<div> </div>
<div>that, and the fact that the registers come in pairs makes me believe the client is recieving the first register.</div>
<div> </div>
<div>thanks for the help so far-</div>
<div>yair<br><br> </div>
<div><span class="gmail_quote">On 11/21/06, <b class="gmail_sendername">Jan Janak</b> <<a href="mailto:jan@iptel.org">jan@iptel.org</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Does the 2nd register message send by the client contain Authorization<br>or Proxy-Authorization header fields? It may happen that the client does
<br>not receive the first 401 sent by the server because the firewall blocks<br>it and then the second REGISTER message will be a retransmission of the<br>first one and the server will send the same reply, that means 401.
<br><br> Jan.<br><br>Yair Hakak wrote:<br>> hi all-<br>><br>> i have the following setup:<br>><br>> 1. ser running on 5060<br>> 2. nathelper/rtp<br>> 3. mysql database w/digest authentication<br>>
<br>> now, i have a client on a private network (NAT) behind a firewall. port<br>> 5060<br>> tcp is on the firewall is open as well as 35000 to 37000 UDP (rtpproxy is<br>> set to run between these ports).<br>> when i plug the client into a regular, non-firewalled home router, it
<br>> registers properly (register->401->register again->OK)<br>> when i put the same client behind the firewall, it 401's twice.<br>><br>> i am 100% sure the password is correct.<br>><br>> is there something else that needs to be open? I dont really understand the
<br>> authentication mechanism - does the password come via a different port or<br>> something like that?<br>><br>><br>> ------------------------------------------------------------------------<br>><br>> _______________________________________________
<br>> Serusers mailing list<br>> <a href="mailto:Serusers@lists.iptel.org">Serusers@lists.iptel.org</a><br>> <a href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers
</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Yair Hakak<br>-----------------------------------------------------<br>Yair Hakak, CEO<br>Go Telecom, Ltd., Israel<br>israel: (972) 54 5491266<br>usa: (212) 202 2340
<br><a href="mailto:yair@gotel.co.il">yair@gotel.co.il</a>