[asterisk-users] polycom with http/https basic authentication
Alexander Lopez
Alex.Lopez at OpSys.com
Fri Jun 27 13:07:58 CDT 2008
I could never get the http stuff to work, I tried Ftp like what you have
ftp://user:password@server/customomer
It worked fine for me the first time, and I just ran with it. Has worked
without an issue since day one. If FTP not an option for you????
Alex
> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-
> bounces at lists.digium.com] On Behalf Of Robert McNaught
> Sent: Friday, June 27, 2008 1:20 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: [asterisk-users] polycom with http/https basic authentication
>
> Hi,
>
> I apologize that this is not directly associated with Asterisk, I have
> been trying to solve this, but not having any luck.
>
> Does anyone have a setup with http or https with basic authentication
> for provisioning Polycom Phones. We use edgemarc 4500 routers and use
> Option 66 to auto-provision phones using DHCP. I am trying to set up
> an apache server with subdirectories for different customers protected
> by a username and password so that their phones can only access their
> own directory.
>
> The string I am putting in Option 66 is:
>
> "http://username:password@http.server.com/dir1/"
>
> This is packet dumps of the polycom phone trying to grab files from
> the server - using basic authentication - I have set up .htaccess
> files which work correctly when pulling down files using firefox.
>
> GET FILE WITH POLYCOM
> [root at server3 ~]# ngrep -q 'HTTP/1.[01]'
> interface: eth0 (XXX.XXX.XXX.XXX/255.255.254.0)
> match: HTTP/1.[01]
>
> T XXX.XXX.XXX.XXX:1024 -> XXX.XXX.XXX.XXX [AP]
> GET /dir1/2345-12200-002.bootrom.ld HTTP/1.1..Host:
> http.server.com..Accept: */*..U
> ser-Agent: FileTransport
PolycomSoundPointIP-SPIP_320-UA/4.0.0.0423....
>
> T XXX.XXX.XXX.XXX:80 -> XXX.XXX.XXX.XXX:1024 [AP]
> HTTP/1.1 401 Authorization Required..Date: Fri, 27 Jun 2008 16:46:59
> GMT..Server: A
> pache/2.0.61 (Unix) mod_ssl/2.0.61 OpenSSL/0.9.8b
> mod_auth_passthrough/2.1 mod_bwli
> mited/1.4 FrontPage/5.0.2.2635 PHP/5.2.5..WWW-Authenticate: Basic
> realm="Restricted
> Area"..Content-Length: 703..Content-Type: text/html;
> charset=iso-8859-1....<!DOCTY
> PE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>401
> Authorization R
> equired</title>.</head><body>.<h1>Authorization
> Required</h1>.<p>This server could
> not verify that you.are authorized to access the document.requested.
> Either you su
> pplied the wrong.credentials (e.g., bad password), or your.browser
> doesn't understa
> nd how to supply.the credentials required.</p>.<p>Additionally, a
> 404 Not Found.err
> or was encountered while trying to use an ErrorDocument to handle
> the request.</p>.
> <hr>.<address>Apache/2.0.61 (Unix) mod_ssl/2.0.61 OpenSSL/0.9.8b
> mod_auth_passthrou
> gh/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.5 Server at
> prov.xiptel.net P
> ort 80</address>.</body></html>.
>
> T XXX.XXX.XXX.XXX:1025 -> XXX.XXX.XXX.XXX:80 [AP]
> GET /dir1/bootrom.ld HTTP/1.1..Host: http.server.com..Accept:
> */*..User-Agent: File
> Transport PolycomSoundPointIP-SPIP_320-UA/4.0.0.0423....
>
>
>
> USING FIREFOX
> [root at server3 ~]# ngrep -q 'HTTP/1.[01]'
> interface: eth0 (69.73.146.0/255.255.254.0)
> match: HTTP/1.[01]
>
> T XXX.XXX.XXX.XXX:57773 -> XXX.XXX.XXX.XXX:80 [AP]
> GET /dir1/2345-11300-010.bootrom.ld HTTP/1.1..Host:
> http.server.com..User-Agent: Mo
> zilla/5.0 (X11; U; Linux i686; en-US; rv:1.9) Gecko/2008061015
> Firefox/3.0..Accept:
>
>
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8..Accept-
> Language:
> en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset:
> ISO-8859-1,utf-8;q=0
> .7,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer:
> http://prov.xiptel.ne
> t/dir1/..Cookie: logintheme=cpanel; cprelogin=no;
cpsession=closed....
>
> T XXX.XXX.XXX.XXX:80 -> XXX.XXX.XXX.XXX:57773 [AP]
> HTTP/1.1 401 Authorization Required..Date: Fri, 27 Jun 2008 16:36:20
> GMT..Server: A
> pache/2.0.61 (Unix) mod_ssl/2.0.61 OpenSSL/0.9.8b
> mod_auth_passthrough/2.1 mod_bwli
> mited/1.4 FrontPage/5.0.2.2635 PHP/5.2.5..WWW-Authenticate: Basic
> realm="Restricted
> Area"..Content-Length: 703..Keep-Alive: timeout=15,
> max=100..Connection: Keep-Aliv
> e..Content-Type: text/html; charset=iso-8859-1....<!DOCTYPE HTML
> PUBLIC "-//IETF//D
> TD HTML 2.0//EN">.<html><head>.<title>401 Authorization
> Required</title>.</head><bo
> dy>.<h1>Authorization Required</h1>.<p>This server could not verify
> that you.are au
> thorized to access the document.requested. Either you supplied the
> wrong.credentia
> ls (e.g., bad password), or your.browser doesn't understand how to
> supply.the crede
> ntials required.</p>.<p>Additionally, a 404 Not Found.error was
> encountered while t
> rying to use an ErrorDocument to handle the
> request.</p>.<hr>.<address>Apache/2.0.6
> 1 (Unix) mod_ssl/2.0.61 OpenSSL/0.9.8b mod_auth_passthrough/2.1
> mod_bwlimited/1.4 F
> rontPage/5.0.2.2635 PHP/5.2.5 Server at prov.xiptel.net Port
> 80</address>.</body></
> html>.
>
> T XXX.XXX.XXX.XXX:57773 -> XXX.XXX.XXX.XXX:80 [AP]
> GET /dir1/2345-11300-010.bootrom.ld HTTP/1.1..Host:
> http.server.com..User-Agent: Mo
> zilla/5.0 (X11; U; Linux i686; en-US; rv:1.9) Gecko/2008061015
> Firefox/3.0..Accept:
>
>
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8..Accept-
> Language:
> en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset:
> ISO-8859-1,utf-8;q=0
> .7,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer:
> http://prov.xiptel.ne
> t/dir1/..Cookie: logintheme=cpanel; cprelogin=no;
> cpsession=closed..Authorization:
> Basic ZGlyMTppcGd2MTMxNA==....
>
>
> As you can see, the server responds asking for authorization
> credentials, which are not responded to by the Polycom in its next
> HTTP message, whereas with a browser, when I type in my username and
> password in the dialog box, a response is made.
>
> I have been assured by Polycom that basic authentication works with
> their new models of phones - I am using a ip320. Further their admin
> guide states:
>
> "The protocol that will be used to transfer files from the boot server
> depends on
> several factors including the phone model and whether the bootROM or
SIP
> application stage of provisioning is in progress. By default, the
phones
> are
> shipped with FTP enabled as the provisioning protocol. If an
unsupported
> protocol is specified, this may result in a defined behavior (see the
> table below
> for details of which protocol the phone will use). The Specified
Protocol
> listed
> in the table can be selected in the Server Type field or the Server
> Address can
> include a transfer protocol, for example http://usr:pwd@server (refer
to
> Server Menu on page 3-9). The boot server address can be an IP
address,
> domain string name, or URL. The boot server address can also be
obtained
> through DHCP. Configuration file names in the <Ethernet address>.cfg
file
> can include a transfer protocol, for example
> https://usr:pwd@server/dir/file.cfg. If a user name and password are
> specified as part of the server address or file name, they will be
> used only if the
> server supports them."
>
>
> Anyone familiar with this situation, or have a different Option 66
> string? or any troubleshooting tips
>
> Thanks
>
> Robert
>
> _______________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> AstriCon 2008 - September 22 - 25 Phoenix, Arizona
> Register Now: http://www.astricon.net
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-users
More information about the asterisk-users
mailing list