Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Andreas Granig
Hi Carsten, On 11/19/2012 03:38 PM, Carsten Bock wrote: > I am using it with 3.2 in production for exactly that purpose Seems to work like charm, thanks! Andreas signature.asc Description: OpenPGP digital signature ___ SIP Express Router (SER) and

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Olle E. Johansson
19 nov 2012 kl. 15:40 skrev Carsten Bock : > Maybe we should merge the docs from 1.5, the docs are much better: > > "Secret phrase used to calculate the nonce value. > > The default is to use a random value generated from the random source > in the core. > > If you use multiple servers in your

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Carsten Bock
Maybe we should merge the docs from 1.5, the docs are much better: "Secret phrase used to calculate the nonce value. The default is to use a random value generated from the random source in the core. If you use multiple servers in your installation, and would like to authenticate on the second s

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Carsten Bock
I am using it with 3.2 in production for exactly that purpose - for years now. We did use it to synchronize the nonce in the Telefonica/O2 DSL project. Kind regards, Carsten 2012/11/19 Andreas Granig : > Thanks Olle and Carsten, > > On 11/19/2012 03:27 PM, Carsten Bock wrote: >> short question: >

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Andreas Granig
Thanks Olle and Carsten, On 11/19/2012 03:27 PM, Carsten Bock wrote: > short question: > Why don't you use a shared secret to create a nonce value? > > http://kamailio.org/docs/modules/devel/modules/auth.html#auth.secret I've noticed this "secret" parameter, but the documentation is a bit brief

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Carsten Bock
Hi Andreas, short question: Why don't you use a shared secret to create a nonce value? http://kamailio.org/docs/modules/devel/modules/auth.html#auth.secret Something like: # - Settings for Auth-DB --- modparam("auth", "secret", "sipwise-is-great") If you set a common

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Olle E. Johansson
19 nov 2012 kl. 15:06 skrev Andreas Granig : > Hi David, > > On 11/19/2012 02:54 PM, David J wrote: >> Is the database shared? If so maybe when they authenticate add a secure >> token to the header that the second proxy can use for auth? > > No, the DBs are explicitely NOT shared in this scenar

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread Andreas Granig
Hi David, On 11/19/2012 02:54 PM, David J wrote: > Is the database shared? If so maybe when they authenticate add a secure > token to the header that the second proxy can use for auth? No, the DBs are explicitely NOT shared in this scenario. > Just a suggestion not sure if its the answer your lo

Re: [SR-Users] Sync nonce between various servers

2012-11-19 Thread David J
Is the database shared? If so maybe when they authenticate add a secure token to the header that the second proxy can use for auth? Just a suggestion not sure if its the answer your looking for or perhaps I didn't understand the scenario well enough. On Nov 19, 2012 7:53 AM, "Andreas Granig" wrot