hi!
When I invoke the radius_load_attrs() the message send to radius has the following shape:
Thu Mar 8 10:50:46 2007
Packet-Type = Access-Request
User-Name = "sip:hellboy@voip.rd.touk.pl"
SER-Service-Type = Get-User-Attrs
NAS-Port = 0
NAS-IP-Address = 127.0.0.1
the message doesn't contain any authentication data like password.
so do I understand right that radius in such case should be configured in such a way to accept any message of the SER-Service-Type = Get-User-Attrs?
Are still the avp loaded from radius prefixed or they are just put into the particular track and class?
Could You please give me one example of the radius one avp record and the shape in which it will appear in ser after loading.
Thank you in advance
Best
Tomasz
Hi All!
i'm trying to use regular expression that is a value of AVP.
for example:
$avp(s:regexp) = '^([1-9][0-9]{6})';
$avp(s:value) = '8881\1';
subst_user('/$avp(s:regexp)/$avp(s:value)/');
and it doesn't work. meanwhile this works properly:
subst_user('/^([0-9]{7})/888\1/');
Does anybody know how can i resolve this question?
Best regards,
Savolainen Dmitri
Hello Samuel,
Many thanks for your quick and useful response. It has done the trick!!!.
Thanks again,
Cyp.
-----
----- Original Message ----
From: samuel <samu60(a)gmail.com>
To: Cyprian Clement <cyprian_clement(a)yahoo.co.uk>
Cc: serusers(a)lists.iptel.org
Sent: Thursday, 7 June, 2007 8:45:06 AM
Subject: Re: [Serusers] SER's MySql Tables display
mysql>DESC <tablename>
so, in the mysql prompt, typing DESC user_preferences will return the table columns.
Samuel
2007/6/7, Cyprian Clement < cyprian_clement(a)yahoo.co.uk>:
Hi,
With regard to the built in SER tables of the Mysql database, as most of them are empty(unless you insert rows) I would like to know first what columns are there already before I insert anything.
Does anyone know what command I can use to display columns of the empty table(say "usr_preferences" empty table) ?.
Thanks in advance.
Cyp.
---------
Yahoo! Answers - Get better answers from someone who knows. Try it now.
_______________________________________________
Serusers mailing list
Serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
___________________________________________________________
New Yahoo! Mail is the ultimate force in competitive emailing. Find out more at the Yahoo! Mail Championships. Plus: play games and win prizes.
http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk
Hi,
With regard to the built in SER tables of the Mysql database, as most of them are empty(unless you insert rows) I would like to know first what columns are there already before I insert anything.
Does anyone know what command I can use to display columns of the empty table(say "usr_preferences" empty table) ?.
Thanks in advance.
Cyp.
---------
___________________________________________________________
Yahoo! Mail is the world's favourite email. Don't settle for less, sign up for
your free account today http://uk.rd.yahoo.com/evt=44106/*http://uk.docs.yahoo.com/mail/winter07.ht…
Hey everyone,
I was wondering about altering a little bit the mysql table 'trusted' for
openser to add
a column at the end which I will use as a description for the trusted
server.
Should it pose any problems in the way openser makes use of that table?
I wouldn't want to break anything :)
Sincerely,
Liri.
I've got a new openser config I'm testing with a secondary server (1.1.1
on Centos5), but I'm having a few problems getting some clients, X-lite
3.0 and an ATA from draytek, who are unable to register with the server.
Watching with ngrep on the server and wireshark locally I see the server
and the client communicating, the client sends a register to the server,
the server says 401 Unauthorized and generates a realm and nonce, but
instead of going on with the next step in the register process (adding
one to the Cseq and generating a nonce of its own) the client just
doesn't seem to notice that the 401 was sent (could they possibly be
expecting a 407?) they just keep trying with the first step in the process.
Is this an error in my config (sending a 401 instead of something else)
or a deficiency in the client ( I have a few grandstream phones which
work perfectly)...
Here's a few lines from the ngrep output...
U X.X.X.30:5061 -> X.X.X.17:5061
REGISTER sip:logycs.it SIP/2.0.
Via: SIP/2.0/UDP X.X.X.30:5061;branch=z9hG4bK-Rgr-15494;rport.
From: Test User <sip:testuser@logycs.it>;tag=dio-18539.
To: <sip:testuser@logycs.it>.
Call-ID: lpB-27408(a)X.X.X.30.
CSeq: 100 REGISTER.
Contact: <sip:testuser@X.X.X.30:5061>.
Max-Forwards: 70.
Expires: 600.
User-Agent: DrayTek UA-1.2.1 Vigor2100V series.
Content-Length: 0.
.
#
U X.X.X.17:5061 -> X.X.X.30:5061
SIP/2.0 100 Trying.
Via: SIP/2.0/UDP X.X.X.30:5061;branch=z9hG4bK-Rgr-15494;rport=5061.
From: Test User <sip:testuser@logycs.it>;tag=dio-18539.
To: <sip:testuser@logycs.it>.
Call-ID: lpB-27408(a)X.X.X.30.
CSeq: 100 REGISTER.
Mobilia SIP Server.
Content-Length: 0.
Warning: 392 X.X.X.17:5061 "Noisy feedback tells: pid=11509
req_src_ip=X.X.X.30 req_src_port=5061 in_uri=sip:logycs.it
out_uri=sip:logycs.it via_cnt==1".
.
#
U X.X.X.17:5061 -> X.X.X.30:5061
SIP/2.0 401 Unauthorized.
Via: SIP/2.0/UDP X.X.X.30:5061;branch=z9hG4bK-Rgr-15494;rport=5061.
From: Test User <sip:testuser@logycs.it>;tag=dio-18539.
To: <sip:testuser@logycs.it>;tag=e39f848b5629fc672733e67aefa3e192.f4af.
Call-ID: lpB-27408(a)X.X.X.30.
CSeq: 100 REGISTER.
WWW-Authenticate: Digest realm="logycs.it",
nonce="4666de896a20a47ce567604e015d96a9f7b93027".
Mobilia SIP Server.
Content-Length: 0.
Warning: 392 X.X.X.17:5061 "Noisy feedback tells: pid=11509
req_src_ip=X.X.X.30 req_src_port=5061 in_uri=sip:logycs.it
out_uri=sip:logycs.it via_cnt==1".
The ATA is .30 and has a public IP, as does the Server (.17)
I personally can't see any errors in terms of where the replies are
being sent, but I may be overlooking something quite obvious.
The useful parts of my openser.cfg (I have use domain as 1 in auth,
auth_db, etc, but the registration isn't even getting that far yet).
listen = udp:X.X.X.17:5061
mpath = "/usr/lib/openser/modules"
alias = siptest.logycs.it
children = 8
debug = 6
fork = yes
disable_tcp = no
log_facility = LOG_LOCAL6
log_stderror = no
tcp_children = 4
mhomed = no
server_header = "Mobilia SIP Server"
server_signature = yes
sock_mode = 0600
user_agent_header = "Mobilia SIP Server"
reply_to_via = no
sip_warning = yes
check_via = yes
dns = no
rev_dns = no
syn_branch = yes
disable_core_dump = yes
dns_try_ipv6 = no
dns_use_search_list = yes
route[0]
{
xlog("L_INFO", "New request - M=$rm RURI=$ru F=$fu T=$tu IP=$si
ID=$ci\n");
force_rport();
if(msg:len > max_len)
{
xlog("L_INFO", "Message too big - M=$rm RURI=$ru F=$fu T=$tu IP=$si
ID=$ci\n");
sl_send_reply("513", "Message Too Big");
exit;
}
if (!mf_process_maxfwd_header("10"))
{
xlog("L_INFO", "Too many hops - M=$rm RURI=$ru F=$fu T=$tu IP=$si
ID=$ci\n");
sl_send_reply("483", "Too Many Hops");
exit;
}
if(!is_method("REGISTER"))
{
if(nat_uac_test("3"))
{
record_route(";nat=yes");
}
else
{
record_route();
}
}
if(loose_route())
{
if(!has_totag())
{
xlog("L_INFO", "Initial loose-routing rejected - M=$rm
RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n");
sl_send_reply("403", "Initial Loose-Routing Rejected");
exit;
}
if(nat_uac_test("19") || search("^Route:.*;nat=yes"))
{
fix_nated_contact();
if(!search("^Content-Length:[ ]*0"))
{
fix_nated_sdp("3");
setflag(6);
}
}
if(is_method("BYE"))
{
setflag(24); # account failed transactions
setflag(25); # account successful transactions
}
# mark as loose-routed for acc
setflag(26);
route(1);
}
if(is_method("REGISTER"))
{
route(2);
}
setflag(24); # account failed transactions
setflag(25); # account successful transactions
if(is_method("INVITE"))
{
route(3);
}
if(is_method("CANCEL") || is_method("ACK"))
{
route(4);
}
route(5);
}
route[2]
{
sl_send_reply("100", "Trying");
if(!www_authorize("", "subscriber"))
{
xlog("L_INFO", "Register authentication failed - M=$rm RURI=$ru F=$fu
T=$tu IP=$si ID=$ci\n");
www_challenge("", "0");
exit;
}
if(!check_to())
{
xlog("L_INFO", "Spoofed To-URI detected - M=$rm RURI=$ru F=$fu T=$tu
IP=$si ID=$ci\n");
sl_send_reply("403", "Spoofed To-URI Detected");
exit;
}
consume_credentials();
if(!search("^Contact:[ ]*\*") && nat_uac_test("19"))
{
fix_nated_register();
setflag(6);
}
if(!save("location"))
{
xlog("L_ERR", "Saving contact failed - M=$rm RURI=$ru F=$fu T=$tu
IP=$si ID=$ci\n");
sl_reply_error();
}
xlog("L_INFO", "Registration successful - M=$rm RURI=$ru F=$fu T=$tu
IP=$si ID=$ci\n");
exit;
}
Has anyone managed to restrict the number of concurrent calls on an
openser box?
I'm using openser 1.1.1 and found on the web that this was needed.
I've included the dialog.so and avpops.so modules.
if ( avp_check("$DLG_count", "gt/i:10") ) {
sl_send_reply("403","no more calls accepted");
exit;
}
I'm not sure if I've configured the dialog.so module correctly, the
documentation tells you what each function does, but not what the
parameters mean (for example the documentation says dlg_flg default
value is "none" and they give an example of it set to 4 - but what do
these values mean?)
Has anyone got this working or does anyone know how I should be
configuring the dialog.so module?
Thanks,
-Axel
Hi!
I'm experiencing problems using openser and rtpproxy on a multihomed box
(IP addresses are 137.208.89.45 and 137.208.89.65).
The client (firewalled) contacts the server via the first IP address
(137.208.89.45) but rtpproxy sometimes uses it's second IP
(137.208.89.65) in the "c=" SDP-information. (See below.)
However it _sends_ RTP packets from the _first_ IP address. Those
packets will never pass through the firewall, of course, since the
clients outgoing RTP traffic is sent to another IP address than the
incoming traffic is hitting the firewall from.
Is there a way to tell rtpproxy to use the same IP-address both for the
c= SDP header and as source address?
-------------------- 8< --------------------
##
T 2007/06/05 15:57:36.041537 137.208.89.45:5060 -> 137.208.90.164:3099 [AP]
SIP/2.0 183 Session Progress.
Via: SIP/2.0/TCP
137.208.90.164:56136;branch=z9hG4bK-d87543-a107a77a6311422d-1--d87543-;rport=3099.
From: "Alexander Bergolth"<sip:30001@wu-wien.ac.at>;tag=5b6d7b31.
To: "996050"<sip:996050@wu-wien.ac.at>;tag=as2e40807f.
Call-ID: MTVjYzlhMDdjMjAwODExZDEyNzk5M2IwN2UxNjhlYTc..
CSeq: 2 INVITE.
User-Agent: Asterisk PBX.
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY.
Supported: replaces.
Contact: <sip:996050@137.208.89.135>.
Content-Type: application/sdp.
Content-Length: 283.
.
v=0.
o=root 6978 6978 IN IP4 137.208.89.135.
s=session.
c=IN IP4 137.208.89.65.
t=0 0.
m=audio 35064 RTP/AVP 0 8 101.
a=rtpmap:0 PCMU/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-16.
a=silenceSupp:off - - - -.
a=ptime:20.
a=sendrecv.
a=nortpproxy:yes.
-------------------- 8< --------------------
-------------------- 8< --------------------
15:57:35.814136 IP 137.208.90.164.3099 > 137.208.89.45.5060: P
4236850032:4236851080(1048) ack 224540451 win 64256
15:57:35.814147 IP 137.208.89.45.5060 > 137.208.90.164.3099: . ack 1048
win 2003
15:57:35.814351 IP 137.208.89.45.5060 > 137.208.90.164.3099: P
1:550(549) ack 1048 win 2003
15:57:35.814430 IP 137.208.89.45.5060 > 137.208.90.164.3099: P
550:1264(714) ack 1048 win 2003
15:57:35.814850 IP 137.208.90.164.3099 > 137.208.89.45.5060: . ack 1264
win 64177
15:57:35.915829 IP 137.208.90.164.3099 > 137.208.89.45.5060: P
1048:1418(370) ack 1264 win 64177
15:57:35.955948 IP 137.208.89.45.5060 > 137.208.90.164.3099: . ack 1418
win 2003
15:57:36.017309 IP 137.208.90.164.3099 > 137.208.89.45.5060: P
1418:2672(1254) ack 1264 win 64177
15:57:36.017320 IP 137.208.89.45.5060 > 137.208.90.164.3099: . ack 2672
win 2003
15:57:36.017397 IP 137.208.89.45.5060 > 137.208.90.164.3099: P
1264:1813(549) ack 2672 win 2003
15:57:36.018604 IP 137.208.89.45.5060 > 137.208.90.164.3099: P
1813:2388(575) ack 2672 win 2003
15:57:36.019170 IP 137.208.90.164.3099 > 137.208.89.45.5060: . ack 2388
win 64256
15:57:36.041454 IP 137.208.89.45.35064 > 137.208.90.164.10676: UDP,
length 172
15:57:36.041537 IP 137.208.89.45.5060 > 137.208.90.164.3099: P
2388:3200(812) ack 2672 win 2003
15:57:36.046899 IP 137.208.90.164.10677 > 137.208.89.65.35065: UDP,
length 132
15:57:36.061155 IP 137.208.89.45.35064 > 137.208.90.164.10676: UDP,
length 172
15:57:36.080128 IP 137.208.90.164.10676 > 137.208.89.65.35064: UDP,
length 172
15:57:36.081157 IP 137.208.89.45.35064 > 137.208.90.164.10676: UDP,
length 172
[...]
-------------------- 8< --------------------
Thanks in advance,
--leo
P.S.: I'm using openser-1.2 and rtpproxy-cvs20070222.
--
e-mail ::: Alexander.Bergolth (at) wu-wien.ac.at
fax ::: +43-1-31336-906050
location ::: Computer Center | Vienna University of Economics | Austria
