HTTP/1.1 403 Forbidden On get_conf

[iliarien]

Hello, After changing everything in get_config.curl i've got this error :

TCP_NODELAY set
* Connected to rpc.stb.sfr.fr (109.0.66.49) port 80 (#0)
> POST /Setup/getConfig/ HTTP/1.1
> Host: rpc.stb.sfr.fr
> User-Agent: libsetup/0.6.19 [SFR; SAGEM; 13.2.20]; [email protected]
> Content-Type: text/xml
> Accept-Charset: UTF-8
> Accept: */*
> Authorization: Token stbId="********", algoId=32, keyId=96, nonce="e283f2371cb44e1a3130d684096b1cf4", created="5d5eec74", sn="******", cnonce="36f9077fab5c16a6", ctoken="f15ba7534cd9fb6687ccede5f207f35c", uri="/Setup/getConfig/"
> Content-Length: 958
> 
} [958 bytes data]
* upload completely sent off: 958 out of 958 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 403 Forbidden
< Date: Thu, 22 Aug 2019 19:34:25 GMT
< Server: Apache
< WWW-Authenticate: Token stbId="*******", algoId=32, keyId=96, nonce="e283f2371cb44e1a3130d684096b1cf4", created="5d5eec74", sn="********"
< Content-Length: 0
< Content-Type: text/html; charset=UTF-8
< 
100   958    0     0  100   958      0   1838 --:--:-- --:--:-- --:--:--  1842
* Connection #0 to host rpc.stb.sfr.fr left intact

Kindly

[HugoPoi]

I'm not sure but try to just change the nonce in get_config.curl with the one you obtain with get_nonce.curl. Because it works for me, and I think it doesn't trigger some check one the SFR servers side.

[X-dark]

Hi, not sure what to change but I'm hitting the same error. I do use the nonce and created from get_nonce output. I have even tried with SN and stbID (the MAC address) from my box, but it has no impact.

❯ curl -v --config get_nonce.curl 
Note: Unnecessary use of -X or --request, POST is already inferred.
*   Trying 109.0.66.33:80...
* Connected to rpc.stb.sfr.fr (109.0.66.33) port 80 (#0)
> POST /Setup/getConfig/ HTTP/1.1
> Host: rpc.stb.sfr.fr
> User-Agent: libsetup/0.6.19 [SFR; SAGEM; 13.2.20]; [email protected]
> Content-Type: text/xml
> Accept-Charset: iso-8859-1
> Accept: text/xml
> Authorization: Token stbId="XXXXXXXXXXXX", sn="YYYYYYYYYYYYYYYYYYY"
> Content-Length: 958
> 
* upload completely sent off: 958 out of 958 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 401 Authorization Required
< Date: Tue, 03 Nov 2020 13:50:49 GMT
< Server: Apache
< X-LOG-UID: 0B7B6C278567670D60C76D32E6C230EB
< WWW-Authenticate: Token stbId="XXXXXXXXXXXX", algoId=32, keyId=96, nonce="802c1675d2680c21db52335cc4baba26", created="5fa16039", sn="YYYYYYYYYYYYYYYYYYY"
< Content-Length: 0
< Content-Type: text/html; charset=UTF-8
< 
* Connection #0 to host rpc.stb.sfr.fr left intact

❯ curl -v --config get_config.curl 
Note: Unnecessary use of -X or --request, POST is already inferred.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 109.0.66.33:80...
* Connected to rpc.stb.sfr.fr (109.0.66.33) port 80 (#0)
> POST /Setup/getConfig/ HTTP/1.1
> Host: rpc.stb.sfr.fr
> User-Agent: libsetup/0.6.19 [SFR; SAGEM; 13.2.20]; [email protected]
> Content-Type: text/xml
> Accept-Charset: UTF-8
> Accept: */*
> Authorization: Token stbId="XXXXXXXXXXXX", algoId=32, keyId=96, nonce="802c1675d2680c21db52335cc4baba26", created="5fa16039", sn="YYYYYYYYYYYYYYYYYYY", cnonce="aaaaaaaaaaaaaaaa", ctoken="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", uri="/Setup/getConfig/"
> Content-Length: 958
> 
} [958 bytes data]
* upload completely sent off: 958 out of 958 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 403 Forbidden
< Date: Tue, 03 Nov 2020 13:51:46 GMT
< Server: Apache
< X-LOG-UID: C6CCAED2D31099082A4E941148E6106E
< WWW-Authenticate: Token stbId="XXXXXXXXXXXX", algoId=32, keyId=96, nonce="802c1675d2680c21db52335cc4baba26", created="5fa16039", sn="YYYYYYYYYYYYYYYYYYY"
< Content-Length: 0
< Content-Type: text/html; charset=UTF-8
< 
100   958    0     0  100   958      0  12773 --:--:-- --:--:-- --:--:-- 12773
* Connection #0 to host rpc.stb.sfr.fr left intact

[HugoPoi]

You're pretty much on your own here, because I can't test, I don't have a SFR/neufbox anymore.

[fhocorp]

Hi @X-dark Same error here (sorry for the late reply). Maybe SFR added more security on the server