sr-users March 2008

sr-users@lists.kamailio.org

169 participants
238 discussions

[OpenSER-Users] fail to authenticate INVITE messages
by antalsia＠free.fr 04 Mar '08

04 Mar '08

Hi all, I'm trying to authenticate INVITE messages with OpenSER 1.3.0 (SIP Proxy + RTPPROXY) and LDAP module. Although REGISTER authentication works well, I cannot check user authorization for INVITE messages. I'm using an openser.cfg configuration template from sipwise (see an extract below). pv_proxy_authorize() routine always returns false, even if my user is registered and authenticated through our OpenLDAP. Can you tell me what I'm doing wrong ? Many thks, --------------------------- openser.cfg --------------------------- route { ... if(is_method("REGISTER")) { route(2); } if(is_method("INVITE")) { route(4); } ... } ######################################################################## # Request route 'base-route-register' ######################################################################## route[2] { sl_send_reply("100", "Trying"); if(is_present_hf("Authorization")||is_present_hf("Proxy-Authorization")) { xlog("L_INFO", "is_present_hf Authorization or Proxy-Authorization\n"); if (!ldap_search("ldap://blabla/blabla?uid,userPassword?sub?(uid=$fU)")) { switch ($retcode) { case -1: # no LDAP entry found xlog("L_INFO", "Ldap user not found\n"); sl_send_reply("404", "User Not Found"); exit; case -2: # internal error xlog("L_INFO", "Internal server error during authentication\n"); sl_send_reply("500", "Internal server error"); exit; default: exit; } } ldap_result("uid/$avp(s:username)"); ldap_result("userPassword/$avp(s:password)"); } if(!pv_www_authorize("")) { xlog("L_INFO", "Register authentication failed - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); www_challenge("mydomain", "1"); exit; } if(!check_to()) { xlog("L_INFO", "Spoofed To-URI detected - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("403", "Spoofed To-URI Detected"); exit; } consume_credentials(); if(!search("^Contact:[ ]*\*") && nat_uac_test("19")) { fix_nated_register(); setbflag(6); } if(!save("location")) { xlog("L_ERR", "Saving contact failed - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_reply_error(); exit; } xlog("L_INFO", "Registration successful - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); exit; } ######################################################################## # Request route 'base-route-invite' ######################################################################## route[4] { sl_send_reply("100", "Trying"); if(nat_uac_test("19")) { fix_nated_contact(); setbflag(6); } route(5); } ######################################################################## # Request route 'invite-find-callee' ######################################################################## route[5] { if(!is_domain_local("$rd")) { setflag(20); route(7); } if(does_uri_exist()) { xlog("L_INFO", "Callee is local - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(6); } else { xlog("L_INFO", "Callee is not local - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(7); } exit; } ######################################################################## # Request route 'invite-to-external' ######################################################################## route[7] { if(isflagset(20)) { xlog("L_INFO", "Call to foreign domain - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); if (!pv_proxy_authorize("")) { xlog("L_INFO", "TESTING : NOT AUTHENTICATED !!!!\n"); } else { xlog("L_INFO", "TESTING : AUTHENTICATED !!!!\n"); } route(3); exit; } xlog("L_INFO", "Call to unknown user - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("404", "User Not Found"); exit; } --------------------- DEBUG LOGS --------------------- eb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: DBG:core:parse_headers: flags=80 Feb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: DBG:core:parse_headers: flags=80 Feb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: Call to foreign domain - M=INVITE RURI=sip:beacon@columbia.edu F=sip:test@xxxxxxxx T=sip:beacon@co lumbia.edu IP=xxxxxxx ID=282a363f-5be5-dc11-8272-0015c56ccfaa@xxxxxx Feb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: DBG:core:parse_headers: flags=10000 Feb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: DBG:auth:pre_auth: credentials with given realm not found Feb 29 15:33:14 proxy_sip /usr/sbin/openser[5444]: TESTING : NOT AUTHENTICATED

2 3

[OpenSER-Users] Openser sending BYE to itself.
by Daniel Cardoso Alves 04 Mar '08

04 Mar '08

Hi people... I am using the module dialog to finish a call. http://www.openser.org/docs/modules/1.3 ... tml#AEN461 It is working... I need that the openser send a BYE to CALLE, to CALLER and to itself... The BYE to endpoints(CALLE and CALLER) is ok, but it not sending BYE to itself... Somebody can help? Thanks in advance... --------------------------------- Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!

2 4

[Serusers] SIP Express Bundle. Step 1.
by SIP 03 Mar '08

03 Mar '08

Okay, It's time to get things going on the SIP Express Bundle. I'm stepping in to take the reins as project manager on this one so we can get things rolling. First please take a look at the project page: http://www.iptel.org/bundle/project Step 1 here, I'd like to verify a headcount of people working on this project as of now. This doesn't mean people can't join up later, and it certainly doesn't mean that I'm going to expect you to put more time into this than you can commit, but we need to know where we stand. Currently, on the project list, we have: * Jai: testing and installation work * ram: testing * SIP: testing (and now project management) * Jiri: debian, oob * Mike: testing and documentation * Stefan: SEMS Are the people listed here still available to do these particular tasks? Has anyone else volunteered time/resources on this project that hasn't been listed here? If so, shoot me an email, and I'll add you to the list. We need a people inventory so we know what roles we're missing. For instance, I've heard a few people mention that they'd be willing to donate a server to the cause so we have somewhere to test things upon. I don't have those people listed, but that's certainly an area we're going to need. Also, we've had varying reports of which direction we're going -- ISO or Virtual Machine. For now, I think we should concentrate on an ISO as that's going to be the most attractive to people for building a ready-to-go hardware appliance, and it will probably be a little less of a headache for creating a drop-in installation. However, I also think a virtual machine should be on the list in the future, and once we get an ISO ready, creating a virtual machine from that configuration should be relatively straightforward. However, on the list of people, I don't see anyone down for scripting an install -- a kickstart disc or what have you. That's another area we're lacking. If anyone has experience in that area, shoot me an email and I'll add you to the list. We need to focus. For this reason, we'll start small and work from there. Do NOT expect this first SER bundle to have every feature you could imagine in it, and don't get discouraged if your favourite feature is missing. As the project grows, we'll most certainly be adding capabilities and allowing a tailored install. But for now, the goal should be to get things running and working first in a simple format and then add on from there. Having a bundle like this is perhaps the biggest step we can take toward bringing SER to the masses and finally breaking down some of those barriers that have kept people out of the project. I'm looking forward to working with all of you on this project! Neil

9 13

[OpenSER-Users] "append_branch()" in "failure_route" after modify SDP
by Iñaki Baz Castillo 03 Mar '08

03 Mar '08

Hi, imagine OpenSer changes the SDP ("use_media_proxy()") and the call is rejected by the callee. Then a "faiure_route" is runned in which we want to send the INVITE to a voicemail server. When we do the "append_branch()" the SDP is not the original but the previously modified. Is it the expected behaviour? what about if I want to use the original SDP for the second branch? (imagine my voicemail server has comedia support for example). -- Iñaki Baz Castillo ibc(a)in.ilimit.es

3 2

[OpenSER-Users] TLS prob
by Ali Jawad 03 Mar '08

03 Mar '08

Hi all I got tls working fine..I can login without problems..I have udp working fine too...however when I enable TLS and I try to make a call through my PSTN gw I get a timout error..however this does not happen with udp.. Any hints please ? Thx

2 2

[OpenSER-Users] SMS module
by Jean Boite 03 Mar '08

03 Mar '08

Hello, I am using openser-1.2.2-notls. I want to send a sms thanks to a IM (I am using Eyebeam, but i don't know if it's possible to make that with this software). Thats why, i need your help to explain me how send a sms thanks to the sms module in openser. I put in my openser.cfg, following "if(!method==MESSAGE)" the function which is on the documentation : if (sms_send_msg_to_net("Orange")) { if (!t_reply("202", "yes sir, SMS sent over")) { # if replying failed, retry statelessly sl_reply_error(); }; } else { if (!t_reply("502", "Bad gateway - SMS error")) { # if replying failed, retry statelessly sl_reply_error(); }; exit; }; Openser is running good, my problem is thats I don't know how to formulate my message in Eyebeam to send correctly my sms. Thanks.

3 6

[OpenSER-Users] Why $rp (RURI port) is no writeable???
by Iñaki Baz Castillo 03 Mar '08

03 Mar '08

If I can do: $rU = ... $rd = ... why can't I do: $rp = ... ? -- Iñaki Baz Castillo ibc(a)in.ilimit.es

2 1

[OpenSER-Users] No RTCP generation
by Keyur Parikh 03 Mar '08

03 Mar '08

Hi, I am working on project involving SER, SEMS and MediaProxy. Things works OK as configured. I am curious to know how I can generate RTCP message towards caller if the called UA is not generating one. I appreciate your response. Thanks, Keyur Parikh

2 1

[OpenSER-Users] OpenSER prepaid CDRTool 6.2.3 problem with replacing '+' with '00'
by Marc LEURENT 03 Mar '08

03 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello I have trouble with number dialed starting with + CDRTool doesn' understand it. So I have to strip it from the request and replace it by 00! The problem is that even using this at the begenning of OpenSER script, it's not working (see CDRTool log below) Any idea how to solve it? Thanks # normalization to e164 if($ruri.user =~ "^\+[1-9][0-9]+") { xlog("STRIPING + For e164 NORMALIZATION \r\n"); strip(1); prefix("00"); subst('/^To:(.*)sip:\+(.*)$/To:\1sip:00\2/ig'); }; Mar 3 12:24:49 krusty CDRTool[15025]: MaxSessionTime From=mleurent(a)sip.wifirst.net To=sip:+33677832975@sip.wifirst.net Dura tion=10800 Lock=1 Mar 3 12:24:49 krusty CDRTool[15025]: Load last minute: 1 calls @ 0.00 cps, memory: 16.77 MB, uptime: 0.6 hours Mar 3 12:24:49 krusty CDRTool[15025]: Call to +33677832975(a)sip.wifirst.net, no limit imposed Mar 3 12:24:49 krusty CDRTool[15025]: GetBalance From=mleurent(a)sip.wifirst.net Mar 3 12:24:51 krusty /usr/sbin/openser[18637]: ACC: call missed: timestamp=1204543491;method=INVITE;from_tag=xirvq;to_tag= ;call_id=cpvrqboancqnuii(a)192.168.95.139;code=487;reason=Request Terminated Mar 3 12:24:51 krusty CDRTool[15025]: DebitBalance From=mleurent(a)sip.wifirst.net To=sip:0033677832975@sip.wifirst.net Durat ion=0 OpenSER config extract: # ATTENTION: DO NOT PUT ; at the end of the radius_extra attribute modparam("acc", "radius_extra", " Called-Station-Id=$tu; Calling-Station-Id=$fu; Canonical-URI=$avp(to_destination); User-Name=$avp(user_name); Billing-Party=$avp(billing_party); Sip-User-Realm=$ar; SIP-Proxy-IP=$Ri; Source-IP=$si; Source-Port=$sp; Acct-Authentic=$avp(s:authentic); From-Header=$hdr(from); User-Agent=$hdr(user-agent); Contact=$hdr(contact); Event=$hdr(event)") # Set the acc flags xlog("JUSTE BEFORE SETTING FLAGS FOR RADIUS\r\n"); if(is_method("INVITE") && !has_totag()) { xlog("L_INFO", "I AM SETTING THE FLAGS FOR RADIUS \r\n"); # $avp(s:authentic) = 1; # $avp(can_uri) = $ru; # SIP Request's URI $avp(user_name) = $au + "@" + $ar; $avp(billing_party) = $au + "@" + $ar; $avp(to_destination) = $tu; xlog("SETTING FLAGS 1 FOR RADIUS \r\n"); setflag(1); # radius_flag xlog("SETTING FLAGS 2 FOR RADIUS \r\n"); setflag(2); # radius_missed_flag }; -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHy+T8rxOjjFYWQtoRAjUzAJ9kUYZpNUEEcKO7aqRuD9Uob0myuQCdEUyU 67e6YOc9jVgzTPQk+A6ccec= =ZGdn -----END PGP SIGNATURE-----

3 7

[OpenSER-Users] Error starting Openser 1.3 with postgres
by Mauricio Viveros 03 Mar '08

03 Mar '08

Hello My name is Mauricio Viveros, I'm a Colombian programmer. I'm implementing VoIP system in a little company, so I'm installed OPENSER with POSTGRES module but when I try to run openser I get dis error message: Feb 27 01:05:53 [7788] DBG:core:find_cmd_export_t: found <sl_reply_error>(0) in module sl [/usr/local/lib/openser/modules/] Feb 27 01:05:53 [7788] CRITICAL:core:yyerror: parse error in config file, line 376, column 2-6: syntax error Feb 27 01:05:53 [7788] CRITICAL:core:yyerror: parse error in config file, line 376, column 2-6: Feb 27 01:05:53 [7788] ERROR:core:main: bad config file (2 errors) to see all trace, see the attached file openser_error_message.txt I attached too the config files: openser.cfg y openserctlrc I hope that you can help me with this problem. Thank you very much. Mauricio Viveros Programmer Cali-Colombia

4 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users March 2008