Re: [SR-Users] What is the best SIP trunk authentication strategy

2015-03-23 Thread Olle E. Johansson
On 19 Mar 2015, at 18:38, canuck15 wrote: > It looks like auth_check() will work. It seems intelligent enough to scan all > instances of the same domain as long as the username is unique so that should > get things working. > > The problem here is that there is a fundamental difference betwee

Re: [SR-Users] What is the best SIP trunk authentication strategy

2015-03-19 Thread canuck15
It looks like auth_check() will work. It seems intelligent enough to scan all instances of the same domain as long as the username is unique so that should get things working. The problem here is that there is a fundamental difference between Asterisk and Kamailio authentication. Asterisk aut

Re: [SR-Users] What is the best SIP trunk authentication strategy

2015-03-19 Thread Juha Heinanen
canuck15 writes: > The vast majority do not allow me to do any of these things as far as I > know. This is something that needs to be solved in Kamailio with > standard user/pass/realm authentication. TLS is not an option for me. then the vast majority don't care a bit about security, which i

Re: [SR-Users] What is the best SIP trunk authentication strategy

2015-03-19 Thread canuck15
Please keep in mind that I have no control over SIP trunk providers. The vast majority do not allow me to do any of these things as far as I know. This is something that needs to be solved in Kamailio with standard user/pass/realm authentication. TLS is not an option for me. On 3/18/2015 11

[SR-Users] What is the best SIP trunk authentication strategy

2015-03-18 Thread Juha Heinanen
i suggest you use tls common names to identify servers behind your trunks, -- juha ___ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Re: [SR-Users] What is the best SIP trunk authentication strategy

2015-03-18 Thread Daniel Tryba
On Wednesday 18 March 2015 08:32:10 canuck15 wrote: > I can run a cron job every hour to DNS lookup and update the ip_addr > table as needed so I think this is a satisfactory solution for IP > authentication. Is there a mechanism to identify all originating servers for a hostname/domain? If the

[SR-Users] What is the best SIP trunk authentication strategy

2015-03-18 Thread canuck15
Been struggling with this for awhile now. So far I am finding it rather difficult to come up with way to authenticate SIP trunks taking into account all possible scenarios. My setup is Kamailio combined with Asterisk realtime. Everything is in a MySQL database. All authentication is done by