<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
<br>
On 6/28/11 6:33 PM, laura testi wrote:
<blockquote
cite="mid:BANLkTim2D87vqzFy59OQ7iTeORMDrosAhg@mail.gmail.com"
type="cite">
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">Hello all,</font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">I’m using two Kamailio Presence Servers that
are also XCAP Servers for the presence and resources
management and the Kamailio Dispatcher in order to balance
the SIP requestes coming from SIP Client.</font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">Then I’m trying to configure a HTTP <span
style="mso-spacerun: yes"> </span>load–balancer for the
xcap/http traffic. <span style="mso-spacerun: yes"> </span></font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">I’m testing both Apache and INginx HTTP proxy
but I’m facing with a problem related with the Xcap
authentication: </font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">when a client sends the first xcap request to
the http load-balancer, it forwards the request to one of
the configured Xcap Server that replies with the 401
response in order to let the client authenticates. So, the
client sends the second request with the Digest
authentication to the http load-balancer. But, sometimes,
the http load-balancer forwards the authenticate request to
the second Xcap Server that is not able to authenticate the
request. <span style="mso-spacerun: yes"> </span>Then the
client receive the “Unauthorized” response… </font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri"><span style="mso-spacerun: yes"> </span><span
style="mso-spacerun: yes"> </span><span
style="mso-spacerun: yes"> </span><span
style="mso-spacerun: yes"> </span><span
style="mso-spacerun: yes"> </span><span
style="mso-spacerun: yes"> </span></font></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><font size="3"><font
face="Calibri">Could you please give us some hints about
this problem?</font></font></p>
</blockquote>
<br>
you have to set the same value to secret parameter of auth module:<br>
<a class="moz-txt-link-freetext" href="http://kamailio.org/docs/modules/stable/modules/auth.html#auth.secret">http://kamailio.org/docs/modules/stable/modules/auth.html#auth.secret</a><br>
<br>
Also be sure the two servers have the same time (use ntp or so) and
the one_time_nonce parameter to auth module is off (not enabled).<br>
<br>
Then it should work.<br>
<br>
Cheers,<br>
Daniel<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-freetext" href="http://www.asipto.com">http://www.asipto.com</a>
<a class="moz-txt-link-freetext" href="http://linkedin.com/in/miconda">http://linkedin.com/in/miconda</a> -- <a class="moz-txt-link-freetext" href="http://twitter.com/miconda">http://twitter.com/miconda</a></pre>
</body>
</html>