:OpenXCAP on Debian 64 bit

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

:OpenXCAP on Debian 64 bit

aby azid
Hi,

We are having problem with our OpenXCAP(1.0.7, Debian Lenny 64 bit) server. The problem is when we change the Authentication configuration to Digest. Below are the trace from client to OpenXCAP server.

Authorization: Digest username="<username>", realm="(nil)", nonce="593115322637208955488944670201663923195045610567807317020", uri="/xcap-root/pres-rules/users/<username>/index.xml", response="55b12294755f4663a1d2b8b0f306fde4", opaque="043075068332a06fdc80559933b13d54-NTkzMTE1MzIyNjM3MjA4OTU1NDg4OTQ0NjcwMjAxNjYzOTIzMTk1MDQ1NjEwNTY3ODA3MzE3MDIw

from the trace the realm value is 'nil' and as expected the client received 401 unauthorized message even though the client is responding with a correct username and password. AFAIK we need the realm value for HA1 digest authentication scheme e.g HA1 = MD5(username:realm:password).

Here is the config.ini for our OpenXCAP server:

[Server]
address = 0.0.0.0
port = 8000
root = <openxcap url>
backend =  OpenSER
document_validation = Yes

[Logging]
directory=/tmp
; * log stack trace for 500 Internal Error only (default)
;log_stacktrace=500
; * log stack trace (if available) for any error
log_stacktrace=any
; * log responses sent to the client for 400 and 409 errors (default is none)
log_response_body=yes
; * log headers sent by the client for 401 errors (default is none)
log_request_headers=yes


[Authentication]
;type = basic
type = digest
cleartext_passwords = Yes
default_realm = <opensips ip>
trusted_peers =


;[TLS]
;certificate = tls/server.crt
;private_key = tls/server.key


[Database]
authentication_db_uri = <dbase url>
storage_db_uri = <dbase url>
subscriber_table = subscriber
xcap_table = xcap

[OpenSER]
xmlrpc_url = http://<opensips server>:8080
; enable_publish_xcapdiff = yes

If we change the OpenXCAP authentication to Basic, everything works fine but we need to use Digest for our solution. Really appreciate if someone can explain / show the cause of this problem

Thank you,
Aby Azid

_______________________________________________
Users mailing list
[hidden email]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users