Topic: Incoming call Authentication [Comments: 9]
conraddewet

Wed, 08/18/2010 - 06:33 | Incoming call Authentication

Hi All
Using thirdlane (multitenant PBX Manager 6.0.1.72). Incoming calls are being rejected with:

NOTICE[17964]: chan_sip.c:17107 handle_request_invite: Failed to authenticate user "+XXXXXXX" ;tag=as7850bc6c

Looks like thirdlane is expect the dial string to be the login information.

My ISP is sending me calls over a broadband connection - it unlikely that they will change their setting to service me. They most likely are not going to send username and password - i have just given them my IP address.

Question: How can I get thridlane to accept any incoming call regardless or without authentication. I can always manage this using inbound routs, so long as Asterisk accepts the call.

Thanks

eeman

Wed, 08/18/2010 - 15:28 | in general of sip.conf set

in general of sip.conf set allowguest=no

under the trunk set insecure=port,invite

Erik Smith
CTO
BluegrassNet Voice
dCAP
Thirdlane Support by BluegrassNet Voice
eeman at bluegrassnetvoice dot com

conraddewet

Wed, 08/18/2010 - 16:01 | Did the trick!!

Thanks

gregshap

Sun, 09/19/2010 - 05:15 | Incoming call Authentication

OK,

This is BS, why isn't this dealt with out of the box?

I spent 14 hours chasing my tail looking for the reason why my calls wouldn't come in.

My STE didn't have this problem but as soon as I launch the MTE with 1.6, boom this problem, that no one tells you about, kicks your B and waste valueable time that no one has an excess of.

Yes, I am venting but no one should go through what I did today without any tech support or RECENT documentation.

I feel better now,

Greg

mattdarnell

Mon, 09/20/2010 - 03:15 | Greg, That is challenge b/c

Greg,

That is challenge b/c the issue had nothing to do with Thirdlane. Asterisk rejected the call before Thirdlane even saw it.

I would suggest integrating a trunk before you load Thirdlane. That way you can know where the problem lies.

-Matt

gregshap

Mon, 09/20/2010 - 03:05 | Inbound Reject

Matt,

I understand that it is a Asterisk issue. It would be helpful if these known issues were on a list somewhere with work-arounds provided as well so someone doesn't have to reinvent the wheel each time they buy the software.

Again, coming from STE with 1.4, I was blind sided with several issues that I don't normally deal with coming from STE.

I love the Thirdlane product but current documentation would probably soothe a lot of peoples frustration with having to "self-teach" themselves how it all works. Thats the least one could ask for from a paid product. Also, having a separate manual for STE and MTE as the old manual, when they put them both together, is hard to follow.

What did you mean by "integrating a trunk before you load Asterisk"?

Thanks

Greg (much calmer now)

mattdarnell

Mon, 09/20/2010 - 03:16 | I meant integrating the trunk

I meant integrating the trunk before you load thirdlane...made the edit - thanks.

Alex is working on docs, should be on the next couple of months.

gregshap

Mon, 09/20/2010 - 03:18 | integrating the trunk

Matt,

sorry, i am one of those lazy people that load from ISO, so that wouldn't work !

eeman

Mon, 10/11/2010 - 12:01 | gregshap, nothing changed in

gregshap, nothing changed in the way people were supposed to set up their trunks. What was happening before is there was an exploitable weakness in the config that allowed people to set their trunks up incorrectly yet still receive calls. This was creating an enormous headache trying to trouble shoot issues where they couldnt dial out and the assumption that the trunk was correct was wrong. Allowing guest sip calls is not only a flawed concept, it can impact you financially as well as be the butt-end of a telemarketing assault. Changing allowguest=no only helped identify those who needed to set insecure=port,invite all along. It should have _always_ been configured that way. There is no way to document this because how you peer with your upstream provider is a case-by-case issue. Only some upstream providers require insecure=port,invite. Those are systems that use IP-addresses as the mechanism of trust, not proxy authentication.

Erik Smith
CTO
BluegrassNet Voice
dCAP
Thirdlane Support by BluegrassNet Voice
eeman at bluegrassnetvoice dot com

gregshap

Tue, 10/12/2010 - 03:30 | Thanks Erik

Thanks Erik,

your insight is always appreciated here !

Greg