search for: realm1

...e the same. Instead, make TWO calls to krb5_kuserok, one for each ID. If both IDs are acceptable, allow the login. 2. Disable checking that the name is a GSS_KRB5_PRINCIPAL_NAME, as this doesn't appear to be always the case for the authz_name. If I create a .k5login listing both username at REALM1 and username at REALM2, and make that file follow the appropriate security restrictions (world read, user only write permissions), this lets me use GSSAPI logins with principals from either REALM1 or REALM2. This leaves untouched the behavior in the case where krb5_kuserok is not available. Bryan...

I have a group of users configured as extensions in *.These users are registered with a SIP Proxy Server and can receive calls very well. The problem happens when any user tries to make an outbound call. The proxy replies with a "401 Unauthorized" and * don't try another INVITE including credentials. Here is part of the content of sip.conf. [general] port = 5061 bindaddr = *.IP