[jitsi-users] SIP password forgotten, SIP logout


#1

I believe that other clients retry the same password at least two times. I
might even believe that it is an asterisk problem but why does jitsi erases
the old password?

···

On Wed, Jul 23, 2014 at 4:47 PM, Daniel Pocock <daniel@pocock.pro> wrote:

On 23/07/14 17:11, Ingo Bauersachs wrote:
> We have seen this a couple of times before. As far as I could tell
during my analysis, Asterisk messes the authentication challenges/replies
up.
>
> I dont't know though why only Jitsi seem to show up with this issue. Do
you know if the other clients ask the user for the password if they receive
an unauthorized reply or do they just go on and retry silently with the
same saved password?

The other clients answer each challenge with the password that they
know, e.g.

client sends INVITE
proxy challenges 407 and Proxy-Authenticate header
client sends INVITE with Proxy-Authorization header
PBX challenges 401 and WWW-Authenticate
clients sends INVITE with both Proxy-Authorization and Authorization
headers
proxy validates Proxy-Authorization header again, strips it from the
message, sends to the PBX with just Authorization header
PBX responds 180, 200, ...

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#2

I might be wrong but I don't believe we erase it. We just ask for a new one
if the one we had failed.

--sent from my mobile


#3

We do erase it - which causes the popup to ask for the password to appear at all.

Freundliche Grüsse,
Ingo Bauersachs

-- sent from my mobile

···

Le 09.08.2014 à 19:32, "Emil Ivov" <emcho@jitsi.org> a écrit :

I might be wrong but I don't believe we erase it. We just ask for a new one if the one we had failed.

--sent from my mobile

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#4

I assume you checked the code before responding so, in case you still have
it open could you please point me to it?

--sent from my mobile

···

On 09 Aug 2014 4:24 PM, "Ingo Bauersachs" <ingo@jitsi.org> wrote:

We do erase it - which causes the popup to ask for the password to appear
at all.

Freundliche Grüsse,
Ingo Bauersachs

-- sent from my mobile

Le 09.08.2014 à 19:32, "Emil Ivov" <emcho@jitsi.org> a écrit :

I might be wrong but I don't believe we erase it. We just ask for a new
one if the one we had failed.

--sent from my mobile

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#5

SipSecurityManager.handleForbiddenResponse

Freundliche Grüsse,
Ingo Bauersachs

-- sent from my mobile

···

Le 10.08.2014 à 03:23, "Emil Ivov" <emcho@jitsi.org> a écrit :

I assume you checked the code before responding so, in case you still have it open could you please point me to it?

--sent from my mobile

On 09 Aug 2014 4:24 PM, "Ingo Bauersachs" <ingo@jitsi.org> wrote:
We do erase it - which causes the popup to ask for the password to appear at all.

Freundliche Grüsse,
Ingo Bauersachs

-- sent from my mobile

Le 09.08.2014 à 19:32, "Emil Ivov" <emcho@jitsi.org> a écrit :

I might be wrong but I don't believe we erase it. We just ask for a new one if the one we had failed.

--sent from my mobile

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users