From cerien.jean@gmail.com Tue Sep 26 15:08:34 2017
From: Jean =?utf-8?q?C=C3=A9rien?= <cerien.jean@gmail.com>
To: sr-users@lists.kamailio.org
Subject: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 09:08:26 -0400
Message-ID:
 <CAL_ph0LdgSyB0PRAjx+SEQ72py9_NJ_wzvchBKZyjD1EpgVB1A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0801433047=="

--===============0801433047==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hello

I'm using Kamailio 5.0.1

With the UACREG module, I am registering to a remote provider. Register
goes out, 401 back, Register goes out with nonce & co, OK

Later, when I send an invite, the provider issues an 401 Unauthorized. I
guess it expects me to resubmit an INVITE with the authentication data, but
I dont see how to do that.

Any help would be appreciated !

J.



--===============0801433047==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0

PGRpdiBkaXI9Imx0ciI+PGJyPjxkaXY+SGVsbG88L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pkkm
IzM5O20gdXNpbmcgS2FtYWlsaW8gNS4wLjE8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PldpdGgg
dGhlIFVBQ1JFRyBtb2R1bGUsIEkgYW0gcmVnaXN0ZXJpbmcgdG8gYSByZW1vdGUgcHJvdmlkZXIu
IFJlZ2lzdGVyIGdvZXMgb3V0LCA0MDEgYmFjaywgUmVnaXN0ZXIgZ29lcyBvdXQgd2l0aCBub25j
ZSAmYW1wOyBjbywgT0s8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkxhdGVyLCB3aGVuIEkgc2Vu
ZCBhbiBpbnZpdGUsIHRoZSBwcm92aWRlciBpc3N1ZXMgYW4gNDAxIFVuYXV0aG9yaXplZC4gSSBn
dWVzcyBpdCBleHBlY3RzIG1lIHRvIHJlc3VibWl0IGFuIElOVklURSB3aXRoIHRoZSBhdXRoZW50
aWNhdGlvbiBkYXRhLCBidXQgSSBkb250IHNlZSBob3cgdG8gZG8gdGhhdC48L2Rpdj48ZGl2Pjxi
cj48L2Rpdj48ZGl2PkFueSBoZWxwIHdvdWxkIGJlIGFwcHJlY2lhdGVkICE8L2Rpdj48ZGl2Pjxi
cj48L2Rpdj48ZGl2PkouPC9kaXY+PC9kaXY+Cg==

--===============0801433047==--


From d.tryba@pocos.nl Tue Sep 26 15:27:38 2017
From: Daniel Tryba <d.tryba@pocos.nl>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 15:27:31 +0200
Message-ID: <20170926132731.GL13309@office.pocos.nl>
In-Reply-To:
 <CAL_ph0LdgSyB0PRAjx+SEQ72py9_NJ_wzvchBKZyjD1EpgVB1A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0375776508=="

--===============0375776508==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

On Tue, Sep 26, 2017 at 09:08:26AM -0400, Jean Cérien wrote:
> With the UACREG module, I am registering to a remote provider. Register
> goes out, 401 back, Register goes out with nonce & co, OK
> 
> Later, when I send an invite, the provider issues an 401 Unauthorized. I
> guess it expects me to resubmit an INVITE with the authentication data, but
> I dont see how to do that.

Are you saying the 401 doesn't contain a challenge? Otherwise you
should just use uac_auth() (just like you probably already do for the
REGISTER), following URL contains an example for an INVITE:
https://www.kamailio.org/docs/modules/stable/modules/uac.html#uac.f.uac_auth



--===============0375776508==--


From cerien.jean@gmail.com Tue Sep 26 15:36:28 2017
From: Jean =?utf-8?q?C=C3=A9rien?= <cerien.jean@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 09:36:19 -0400
Message-ID:
 <CAL_ph0LezVvGbq3DADds=QPPx-W4+_bv1T10hTscY1DVFF8n4g@mail.gmail.com>
In-Reply-To: <20170926132731.GL13309@office.pocos.nl>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0036986299=="

--===============0036986299==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Thanks Daniel for your usual help, it is really appreciated !

I've inserted the following block on the failure route:
        if (t_check_status("401|407")) {
                xlog("L_INFO","failure_route(ROUTEFAIL) @@ call to
uac_auth()\n");
                uac_auth();
                t_relay();
                exit;
        }


Logs show:
Sep 26 15:29:08 kamailio /usr/sbin/kamailio[108044]: INFO: <script>:
failure_route(ROUTEFAIL) @@ call to uac_auth()
Sep 26 15:29:08 kamailio /usr/sbin/kamailio[108044]: ERROR: tm
[t_fwd.c:1723]: t_forward_nonack(): no branches for forwarding
Sep 26 15:29:08 kamailio /usr/sbin/kamailio[108044]: ERROR: tm [tm.c:1433]:
_w_t_relay_to(): t_forward_noack failed

Here is the 401 received - to me, there is the challenge:

2017/09/26 15:32:16.410800  pro.vid.er.ip:5060 ->  my.kam.ailio.ip:5060
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP
my.kam.ailio.ip;branch=3Dz9hG4bK2edf.049073b8bcb252b5f7b5e6fffcd8b498.0;recei=
ved=3D
my.kam.ailio.ip;rport=3D5060
Via: SIP/2.0/UDP 46.105.145.36:5060;branch=3Dz9hG4bK53167350
From: <sip:0600000000(a)46.105.145.36>;tag=3Das6fb1c402
To: <sip:100622222222@ my.kam.ailio.ip>;tag=3Das61ddd570
Call-ID: 242842785528c07b7fd56dc660b8c377(a)my.asterisk.ip:5060
CSeq: 102 INVITE
Server: OpenVoice-8
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH
Supported: replaces
WWW-Authenticate: Digest algorithm=3DMD5, realm=3D"sip8.voip-centrex.net",
nonce=3D"6b04a972"
Content-Length: 0





On Tue, Sep 26, 2017 at 9:27 AM, Daniel Tryba <d.tryba(a)pocos.nl> wrote:

> On Tue, Sep 26, 2017 at 09:08:26AM -0400, Jean C=C3=A9rien wrote:
> > With the UACREG module, I am registering to a remote provider. Register
> > goes out, 401 back, Register goes out with nonce & co, OK
> >
> > Later, when I send an invite, the provider issues an 401 Unauthorized. I
> > guess it expects me to resubmit an INVITE with the authentication data,
> but
> > I dont see how to do that.
>
> Are you saying the 401 doesn't contain a challenge? Otherwise you
> should just use uac_auth() (just like you probably already do for the
> REGISTER), following URL contains an example for an INVITE:
> https://www.kamailio.org/docs/modules/stable/modules/uac.
> html#uac.f.uac_auth
>
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users(a)lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>



--===============0036986299==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0

PGRpdiBkaXI9Imx0ciI+PGJyPjxkaXY+VGhhbmtzIERhbmllbCBmb3IgeW91ciB1c3VhbCBoZWxw
LCBpdCBpcyByZWFsbHkgYXBwcmVjaWF0ZWQgITwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+SSYj
Mzk7dmUgaW5zZXJ0ZWQgdGhlIGZvbGxvd2luZyBibG9jayBvbiB0aGUgZmFpbHVyZSByb3V0ZTrC
oDwvZGl2PjxkaXY+PGRpdj7CoCDCoCDCoCDCoCBpZiAodF9jaGVja19zdGF0dXMoJnF1b3Q7NDAx
fDQwNyZxdW90OykpIHs8L2Rpdj48ZGl2PsKgIMKgIMKgIMKgIMKgIMKgIMKgIMKgIHhsb2coJnF1
b3Q7TF9JTkZPJnF1b3Q7LCZxdW90O2ZhaWx1cmVfcm91dGUoUk9VVEVGQUlMKSBAQCBjYWxsIHRv
IHVhY19hdXRoKClcbiZxdW90Oyk7PC9kaXY+PGRpdj7CoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCB1
YWNfYXV0aCgpOzwvZGl2PjxkaXY+wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgdF9yZWxheSgpOzwv
ZGl2PjxkaXY+wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgZXhpdDs8L2Rpdj48ZGl2PsKgIMKgIMKg
IMKgIH08L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkxvZ3Mg
c2hvdzo8L2Rpdj48ZGl2PjxkaXY+U2VwIDI2IDE1OjI5OjA4IGthbWFpbGlvIC91c3Ivc2Jpbi9r
YW1haWxpb1sxMDgwNDRdOiBJTkZPOiAmbHQ7c2NyaXB0Jmd0OzogZmFpbHVyZV9yb3V0ZShST1VU
RUZBSUwpIEBAIGNhbGwgdG8gdWFjX2F1dGgoKTwvZGl2PjxkaXY+U2VwIDI2IDE1OjI5OjA4IGth
bWFpbGlvIC91c3Ivc2Jpbi9rYW1haWxpb1sxMDgwNDRdOiBFUlJPUjogdG0gW3RfZndkLmM6MTcy
M106IHRfZm9yd2FyZF9ub25hY2soKTogbm8gYnJhbmNoZXMgZm9yIGZvcndhcmRpbmc8L2Rpdj48
ZGl2PlNlcCAyNiAxNToyOTowOCBrYW1haWxpbyAvdXNyL3NiaW4va2FtYWlsaW9bMTA4MDQ0XTog
RVJST1I6IHRtIFt0bS5jOjE0MzNdOiBfd190X3JlbGF5X3RvKCk6IHRfZm9yd2FyZF9ub2FjayBm
YWlsZWQ8L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkhlcmUgaXMgdGhlIDQwMSByZWNl
aXZlZCAtIHRvIG1lLCB0aGVyZSBpcyB0aGUgY2hhbGxlbmdlOjwvZGl2PjxkaXY+PGRpdj48YnI+
PC9kaXY+PC9kaXY+PGRpdj48ZGl2Pjxmb250IGZhY2U9Im1vbm9zcGFjZSwgbW9ub3NwYWNlIj4y
MDE3LzA5LzI2IDE1OjMyOjE2LjQxMDgwMMKgIHByby52aWQuZXIuaXA6NTA2MCAtJmd0O8KgIG15
LmthbS5haWxpby5pcDo1MDYwPC9mb250PjwvZGl2PjxkaXY+PGZvbnQgZmFjZT0ibW9ub3NwYWNl
LCBtb25vc3BhY2UiPlNJUC8yLjAgNDAxIFVuYXV0aG9yaXplZDwvZm9udD48L2Rpdj48ZGl2Pjxm
b250IGZhY2U9Im1vbm9zcGFjZSwgbW9ub3NwYWNlIj5WaWE6IFNJUC8yLjAvVURQwqAgbXkua2Ft
LmFpbGlvLmlwO2JyYW5jaD16OWhHNGJLMmVkZi4wNDkwNzNiOGJjYjI1MmI1ZjdiNWU2ZmZmY2Q4
YjQ5OC4wO3JlY2VpdmVkPSBteS5rYW0uYWlsaW8uaXA7cnBvcnQ9NTA2MDwvZm9udD48L2Rpdj48
ZGl2Pjxmb250IGZhY2U9Im1vbm9zcGFjZSwgbW9ub3NwYWNlIj5WaWE6IFNJUC8yLjAvVURQIDQ2
LjEwNS4xNDUuMzY6NTA2MDticmFuY2g9ejloRzRiSzUzMTY3MzUwPC9mb250PjwvZGl2PjxkaXY+
PGZvbnQgZmFjZT0ibW9ub3NwYWNlLCBtb25vc3BhY2UiPkZyb206ICZsdDs8YSBocmVmPSJtYWls
dG86c2lwJTNBMDYwMDAwMDAwMEA0Ni4xMDUuMTQ1LjM2Ij5zaXA6MDYwMDAwMDAwMEA0Ni4xMDUu
MTQ1LjM2PC9hPiZndDs7dGFnPWFzNmZiMWM0MDI8L2ZvbnQ+PC9kaXY+PGRpdj48Zm9udCBmYWNl
PSJtb25vc3BhY2UsIG1vbm9zcGFjZSI+VG86ICZsdDtzaXA6MTAwNjIyMjIyMjIyQCBteS5rYW0u
YWlsaW8uaXAmZ3Q7O3RhZz1hczYxZGRkNTcwPC9mb250PjwvZGl2PjxkaXY+PGZvbnQgZmFjZT0i
bW9ub3NwYWNlLCBtb25vc3BhY2UiPkNhbGwtSUQ6IDI0Mjg0Mjc4NTUyOGMwN2I3ZmQ1NmRjNjYw
YjhjMzc3QG15LmFzdGVyaXNrLmlwOjUwNjA8L2ZvbnQ+PC9kaXY+PGRpdj48Zm9udCBmYWNlPSJt
b25vc3BhY2UsIG1vbm9zcGFjZSI+Q1NlcTogMTAyIElOVklURTwvZm9udD48L2Rpdj48ZGl2Pjxm
b250IGZhY2U9Im1vbm9zcGFjZSwgbW9ub3NwYWNlIj5TZXJ2ZXI6IE9wZW5Wb2ljZS04PC9mb250
PjwvZGl2PjxkaXY+PGZvbnQgZmFjZT0ibW9ub3NwYWNlLCBtb25vc3BhY2UiPkFsbG93OiBJTlZJ
VEUsIEFDSywgQ0FOQ0VMLCBPUFRJT05TLCBCWUUsIFJFRkVSLCBTVUJTQ1JJQkUsIE5PVElGWSwg
SU5GTywgUFVCTElTSDwvZm9udD48L2Rpdj48ZGl2Pjxmb250IGZhY2U9Im1vbm9zcGFjZSwgbW9u
b3NwYWNlIj5TdXBwb3J0ZWQ6IHJlcGxhY2VzPC9mb250PjwvZGl2PjxkaXY+PGZvbnQgZmFjZT0i
bW9ub3NwYWNlLCBtb25vc3BhY2UiPldXVy1BdXRoZW50aWNhdGU6IERpZ2VzdCBhbGdvcml0aG09
TUQ1LCByZWFsbT0mcXVvdDs8YSBocmVmPSJodHRwOi8vc2lwOC52b2lwLWNlbnRyZXgubmV0Ij5z
aXA4LnZvaXAtY2VudHJleC5uZXQ8L2E+JnF1b3Q7LCBub25jZT0mcXVvdDs2YjA0YTk3MiZxdW90
OzwvZm9udD48L2Rpdj48ZGl2Pjxmb250IGZhY2U9Im1vbm9zcGFjZSwgbW9ub3NwYWNlIj5Db250
ZW50LUxlbmd0aDogMDwvZm9udD48L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxicj48
L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJnbWFp
bF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBUdWUsIFNlcCAyNiwgMjAx
NyBhdCA5OjI3IEFNLCBEYW5pZWwgVHJ5YmEgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJt
YWlsdG86ZC50cnliYUBwb2Nvcy5ubCIgdGFyZ2V0PSJfYmxhbmsiPmQudHJ5YmFAcG9jb3Mubmw8
L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJyPjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIg
c3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRp
bmctbGVmdDoxZXgiPjxzcGFuIGNsYXNzPSIiPk9uIFR1ZSwgU2VwIDI2LCAyMDE3IGF0IDA5OjA4
OjI2QU0gLTA0MDAsIEplYW4gQ8OpcmllbiB3cm90ZTo8YnI+CiZndDsgV2l0aCB0aGUgVUFDUkVH
IG1vZHVsZSwgSSBhbSByZWdpc3RlcmluZyB0byBhIHJlbW90ZSBwcm92aWRlci4gUmVnaXN0ZXI8
YnI+CiZndDsgZ29lcyBvdXQsIDQwMSBiYWNrLCBSZWdpc3RlciBnb2VzIG91dCB3aXRoIG5vbmNl
ICZhbXA7IGNvLCBPSzxicj4KJmd0Ozxicj4KJmd0OyBMYXRlciwgd2hlbiBJIHNlbmQgYW4gaW52
aXRlLCB0aGUgcHJvdmlkZXIgaXNzdWVzIGFuIDQwMSBVbmF1dGhvcml6ZWQuIEk8YnI+CiZndDsg
Z3Vlc3MgaXQgZXhwZWN0cyBtZSB0byByZXN1Ym1pdCBhbiBJTlZJVEUgd2l0aCB0aGUgYXV0aGVu
dGljYXRpb24gZGF0YSwgYnV0PGJyPgomZ3Q7IEkgZG9udCBzZWUgaG93IHRvIGRvIHRoYXQuPGJy
Pgo8YnI+Cjwvc3Bhbj5BcmUgeW91IHNheWluZyB0aGUgNDAxIGRvZXNuJiMzOTt0IGNvbnRhaW4g
YSBjaGFsbGVuZ2U/IE90aGVyd2lzZSB5b3U8YnI+CnNob3VsZCBqdXN0IHVzZSB1YWNfYXV0aCgp
IChqdXN0IGxpa2UgeW91IHByb2JhYmx5IGFscmVhZHkgZG8gZm9yIHRoZTxicj4KUkVHSVNURVIp
LCBmb2xsb3dpbmcgVVJMIGNvbnRhaW5zIGFuIGV4YW1wbGUgZm9yIGFuIElOVklURTo8YnI+Cjxh
IGhyZWY9Imh0dHBzOi8vd3d3LmthbWFpbGlvLm9yZy9kb2NzL21vZHVsZXMvc3RhYmxlL21vZHVs
ZXMvdWFjLmh0bWwjdWFjLmYudWFjX2F1dGgiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxh
bmsiPmh0dHBzOi8vd3d3LmthbWFpbGlvLm9yZy9kb2NzLzx3YnI+bW9kdWxlcy9zdGFibGUvbW9k
dWxlcy91YWMuPHdicj5odG1sI3VhYy5mLnVhY19hdXRoPC9hPjxicj4KPGJyPgo8YnI+Cl9fX19f
X19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188YnI+CkthbWFp
bGlvIChTRVIpIC0gVXNlcnMgTWFpbGluZyBMaXN0PGJyPgo8YSBocmVmPSJtYWlsdG86c3ItdXNl
cnNAbGlzdHMua2FtYWlsaW8ub3JnIj5zci11c2Vyc0BsaXN0cy5rYW1haWxpby5vcmc8L2E+PGJy
Pgo8YSBocmVmPSJodHRwczovL2xpc3RzLmthbWFpbGlvLm9yZy9jZ2ktYmluL21haWxtYW4vbGlz
dGluZm8vc3ItdXNlcnMiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v
bGlzdHMua2FtYWlsaW8ub3JnLzx3YnI+Y2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3NyLTx3YnI+
dXNlcnM8L2E+PGJyPgo8L2Jsb2NrcXVvdGU+PC9kaXY+PGJyPjwvZGl2Pgo=

--===============0036986299==--


From d.tryba@pocos.nl Tue Sep 26 16:03:29 2017
From: Daniel Tryba <d.tryba@pocos.nl>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 16:03:23 +0200
Message-ID: <20170926140323.GM13309@office.pocos.nl>
In-Reply-To:
 <CAL_ph0LezVvGbq3DADds=QPPx-W4+_bv1T10hTscY1DVFF8n4g@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1968818499=="

--===============1968818499==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

On Tue, Sep 26, 2017 at 09:36:19AM -0400, Jean Cérien wrote:
> I've inserted the following block on the failure route:
>         if (t_check_status("401|407")) {
>                 xlog("L_INFO","failure_route(ROUTEFAIL) @@ call to
> uac_auth()\n");
>                 uac_auth();
>                 t_relay();
>                 exit;
>         }
 
Unlike when calling uac_reg_request_to, you'll have to fill the
auth_*_avp pvs yourself. So in the example you have to fill $avp(auser)
and $avp(apass).

modparam("uac","auth_username_avp","$avp(auser)")
modparam("uac","auth_password_avp","$avp(apass)")
modparam("uac","auth_realm_avp","$avp(arealm)")

...

if(t_check_status("401|407")) {
	$avp(auser) = "test";
	$avp(apass) = "test";
	uac_auth();
	t_relay();
	exit;
}

So next problem is how to get those credentials. You already know the
user making the call. So either have a custom query to a custom table
(sqlops/avpops) to retrieve the external user/pass for current user, or
try to store that information with the subscriber data (saw some
suggestions for this a while back on the list).




--===============1968818499==--


From cerien.jean@gmail.com Tue Sep 26 17:03:05 2017
From: Jean =?utf-8?q?C=C3=A9rien?= <cerien.jean@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 11:02:51 -0400
Message-ID:
 <CAL_ph0JTNeV+fXiOhGDK+O4NvKdhrdHi3XX5qT7cxdP85akKJg@mail.gmail.com>
In-Reply-To: <20170926140323.GM13309@office.pocos.nl>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0267804281=="

--===============0267804281==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Thanks - I've done some progress - I've hard coded temporarily the user,
pass & realm, and authentication goes out now.

However, the provider is answering with a 401 & a new nonce.

here is what I have

INVITE --->
<---- 401 (with nonce)
ACK --->
INVITE ---> with correct nonce & response, I've recalculated the response,
it is ok
<--- 401 (with new nonce)
ACK -->

When I configure another box with a plain asterisk and same credentials,
the call goes through fine - so it is not because my ip is wrong or not
whitelisted.

Why would the remote send me a 401 ??? I've tried to contact them but no
answer

J.


On Tue, Sep 26, 2017 at 10:03 AM, Daniel Tryba <d.tryba(a)pocos.nl> wrote:

> On Tue, Sep 26, 2017 at 09:36:19AM -0400, Jean Cérien wrote:
> > I've inserted the following block on the failure route:
> >         if (t_check_status("401|407")) {
> >                 xlog("L_INFO","failure_route(ROUTEFAIL) @@ call to
> > uac_auth()\n");
> >                 uac_auth();
> >                 t_relay();
> >                 exit;
> >         }
>
> Unlike when calling uac_reg_request_to, you'll have to fill the
> auth_*_avp pvs yourself. So in the example you have to fill $avp(auser)
> and $avp(apass).
>
> modparam("uac","auth_username_avp","$avp(auser)")
> modparam("uac","auth_password_avp","$avp(apass)")
> modparam("uac","auth_realm_avp","$avp(arealm)")
>
> ...
>
> if(t_check_status("401|407")) {
>         $avp(auser) = "test";
>         $avp(apass) = "test";
>         uac_auth();
>         t_relay();
>         exit;
> }
>
> So next problem is how to get those credentials. You already know the
> user making the call. So either have a custom query to a custom table
> (sqlops/avpops) to retrieve the external user/pass for current user, or
> try to store that information with the subscriber data (saw some
> suggestions for this a while back on the list).
>
>
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users(a)lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>



--===============0267804281==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============0267804281==--


From cerien.jean@gmail.com Tue Sep 26 21:35:00 2017
From: Jean =?utf-8?q?C=C3=A9rien?= <cerien.jean@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 15:34:52 -0400
Message-ID:
 <CAL_ph0JNbTAm2+mP4XhoDH39c3c2V-GuR4p-CLsvHmdsvZzQ4A@mail.gmail.com>
In-Reply-To:
 <CAL_ph0JTNeV+fXiOhGDK+O4NvKdhrdHi3XX5qT7cxdP85akKJg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1766271037=="

--===============1766271037==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi

Still searching on that one. My guess now is that I am receiving another
401 because the CSEQ does not get incremented.

INVITE cseq 102--->
<---- 401 (with nonce) cseq 102
ACK cseq 102 --->

INVITE ---> with correct nonce & response, I've recalculated the response,
it is ok -- cseq 102
<--- 401 (with new nonce) cseq 102
ACK -->cseq 102

I think the 2nd exchange should have a cseq of 103 or higher.

How can I increase it ?

J.

// Here is the section  generating the reply with the wrong cseq

if(t_check_status("401|407")) {
        $avp(auser) =3D "test";
        $avp(apass) =3D "test";
        uac_auth();
        t_relay();
        exit;
}





On Tue, Sep 26, 2017 at 11:02 AM, Jean C=C3=A9rien <cerien.jean(a)gmail.com> =
wrote:

>
> Thanks - I've done some progress - I've hard coded temporarily the user,
> pass & realm, and authentication goes out now.
>
> However, the provider is answering with a 401 & a new nonce.
>
> here is what I have
>
> INVITE --->
> <---- 401 (with nonce)
> ACK --->
> INVITE ---> with correct nonce & response, I've recalculated the response,
> it is ok
> <--- 401 (with new nonce)
> ACK -->
>
> When I configure another box with a plain asterisk and same credentials,
> the call goes through fine - so it is not because my ip is wrong or not
> whitelisted.
>
> Why would the remote send me a 401 ??? I've tried to contact them but no
> answer
>
> J.
>
>
> On Tue, Sep 26, 2017 at 10:03 AM, Daniel Tryba <d.tryba(a)pocos.nl> wrote:
>
>> On Tue, Sep 26, 2017 at 09:36:19AM -0400, Jean C=C3=A9rien wrote:
>> > I've inserted the following block on the failure route:
>> >         if (t_check_status("401|407")) {
>> >                 xlog("L_INFO","failure_route(ROUTEFAIL) @@ call to
>> > uac_auth()\n");
>> >                 uac_auth();
>> >                 t_relay();
>> >                 exit;
>> >         }
>>
>> Unlike when calling uac_reg_request_to, you'll have to fill the
>> auth_*_avp pvs yourself. So in the example you have to fill $avp(auser)
>> and $avp(apass).
>>
>> modparam("uac","auth_username_avp","$avp(auser)")
>> modparam("uac","auth_password_avp","$avp(apass)")
>> modparam("uac","auth_realm_avp","$avp(arealm)")
>>
>> ...
>>
>> if(t_check_status("401|407")) {
>>         $avp(auser) =3D "test";
>>         $avp(apass) =3D "test";
>>         uac_auth();
>>         t_relay();
>>         exit;
>> }
>>
>> So next problem is how to get those credentials. You already know the
>> user making the call. So either have a custom query to a custom table
>> (sqlops/avpops) to retrieve the external user/pass for current user, or
>> try to store that information with the subscriber data (saw some
>> suggestions for this a while back on the list).
>>
>>
>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> sr-users(a)lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
>



--===============1766271037==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0

PGRpdiBkaXI9Imx0ciI+PGJyPjxkaXY+SGk8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PlN0aWxs
IHNlYXJjaGluZyBvbiB0aGF0IG9uZS4gTXkgZ3Vlc3Mgbm93IGlzIHRoYXQgSSBhbSByZWNlaXZp
bmcgYW5vdGhlciA0MDEgYmVjYXVzZSB0aGUgQ1NFUSBkb2VzIG5vdCBnZXQgaW5jcmVtZW50ZWQu
PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij5J
TlZJVEUgY3NlcSAxMDItLS0mZ3Q7PC9kaXY+PGRpdiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+
Jmx0Oy0tLS0gNDAxICh3aXRoIG5vbmNlKcKgPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgi
PmNzZXEgMTAyPC9zcGFuPjwvZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPkFDS8Kg
PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPmNzZXEgMTAywqA8L3NwYW4+PHNwYW4gc3R5
bGU9ImZvbnQtc2l6ZToxMi44cHgiPi0tLSZndDs8L3NwYW4+PC9kaXY+PGRpdiBzdHlsZT0iZm9u
dC1zaXplOjEyLjhweCI+PGJyPjwvZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPklO
VklURSAtLS0mZ3Q7IHdpdGggY29ycmVjdCBub25jZSAmYW1wOyByZXNwb25zZSwgSSYjMzk7dmUg
cmVjYWxjdWxhdGVkIHRoZSByZXNwb25zZSwgaXQgaXMgb2sgLS3CoDxzcGFuIHN0eWxlPSJmb250
LXNpemU6MTIuOHB4Ij5jc2VxIDEwMjwvc3Bhbj48L2Rpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6
MTIuOHB4Ij4mbHQ7LS0tIDQwMSAod2l0aCBuZXcgbm9uY2UpwqA8c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEyLjhweCI+Y3NlcSAxMDI8L3NwYW4+PC9kaXY+PGRpdiBzdHlsZT0iZm9udC1zaXplOjEy
LjhweCI+QUNLIC0tJmd0OzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij5jc2VxIDEwMjwv
c3Bhbj48L2Rpdj48L2Rpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjEyLjhweCI+PGJyPjwvc3Bhbj48L2Rpdj48ZGl2IHN0eWxlPSJmb250LXNp
emU6MTIuOHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+SSB0aGluayB0aGUgMm5k
IGV4Y2hhbmdlIHNob3VsZCBoYXZlIGEgY3NlcSBvZiAxMDMgb3IgaGlnaGVyLsKgPC9zcGFuPjwv
ZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
MTIuOHB4Ij48YnI+PC9zcGFuPjwvZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij5Ib3cgY2FuIEkgaW5jcmVhc2UgaXQgPzwvc3Bh
bj48L2Rpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEyLjhweCI+PGJyPjwvc3Bhbj48L2Rpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTIuOHB4
Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+Si48L3NwYW4+PC9kaXY+PGRpdiBzdHls
ZT0iZm9udC1zaXplOjEyLjhweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxicj48
L3NwYW4+PC9kaXY+PGRpdiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMi44cHgiPi8vIEhlcmUgaXMgdGhlIHNlY3Rpb27CoCBnZW5lcmF0aW5nIHRoZSBy
ZXBseSB3aXRoIHRoZSB3cm9uZyBjc2VxPC9zcGFuPjwvZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6
ZToxMi44cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij48YnI+PC9zcGFuPjwvZGl2
PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu
OHB4Ij5pZih0X2NoZWNrX3N0YXR1cygmcXVvdDs0MDF8NDA3JnF1b3Q7KSkgezwvc3Bhbj48YnIg
c3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij7C
oCDCoCDCoCDCoCAkYXZwKGF1c2VyKSA9ICZxdW90O3Rlc3QmcXVvdDs7PC9zcGFuPjxiciBzdHls
ZT0iZm9udC1zaXplOjEyLjhweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPsKgIMKg
IMKgIMKgICRhdnAoYXBhc3MpID0gJnF1b3Q7dGVzdCZxdW90Ozs8L3NwYW4+PGJyIHN0eWxlPSJm
b250LXNpemU6MTIuOHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+wqAgwqAgwqAg
wqAgdWFjX2F1dGgoKTs8L3NwYW4+PGJyIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij48c3BhbiBz
dHlsZT0iZm9udC1zaXplOjEyLjhweCI+wqAgwqAgwqAgwqAgdF9yZWxheSgpOzwvc3Bhbj48YnIg
c3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij7C
oCDCoCDCoCDCoCBleGl0Ozwvc3Bhbj48YnIgc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxzcGFu
IHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij59PC9zcGFuPjxiciBzdHlsZT0iZm9udC1zaXplOjEy
LjhweCI+PC9kaXY+PGRpdiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMi44cHgiPjxicj48L3NwYW4+PC9kaXY+PGRpdiBzdHlsZT0iZm9udC1zaXplOjEy
LjhweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPjxicj48L3NwYW4+PC9kaXY+PGRp
dj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iZ21haWxfZXh0cmEi
Pjxicj48ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gVHVlLCBTZXAgMjYsIDIwMTcgYXQgMTE6
MDIgQU0sIEplYW4gQ8OpcmllbiA8c3BhbiBkaXI9Imx0ciI+Jmx0OzxhIGhyZWY9Im1haWx0bzpj
ZXJpZW4uamVhbkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5jZXJpZW4uamVhbkBnbWFpbC5j
b208L2E+Jmd0Ozwvc3Bhbj4gd3JvdGU6PGJyPjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90
ZSIgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3Bh
ZGRpbmctbGVmdDoxZXgiPjxkaXYgZGlyPSJsdHIiPjxicj48ZGl2PlRoYW5rcyAtIEkmIzM5O3Zl
IGRvbmUgc29tZSBwcm9ncmVzcyAtIEkmIzM5O3ZlIGhhcmQgY29kZWQgdGVtcG9yYXJpbHkgdGhl
IHVzZXIsIHBhc3MgJmFtcDsgcmVhbG0sIGFuZCBhdXRoZW50aWNhdGlvbiBnb2VzIG91dCBub3cu
PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5Ib3dldmVyLCB0aGUgcHJvdmlkZXIgaXMgYW5zd2Vy
aW5nIHdpdGggYSA0MDEgJmFtcDsgYSBuZXcgbm9uY2UuPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRp
dj5oZXJlIGlzIHdoYXQgSSBoYXZlwqA8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PklOVklURSAt
LS0mZ3Q7PC9kaXY+PGRpdj4mbHQ7LS0tLSA0MDEgKHdpdGggbm9uY2UpPC9kaXY+PGRpdj5BQ0sg
LS0tJmd0OzwvZGl2PjxkaXY+SU5WSVRFIC0tLSZndDsgd2l0aCBjb3JyZWN0IG5vbmNlICZhbXA7
IHJlc3BvbnNlLCBJJiMzOTt2ZSByZWNhbGN1bGF0ZWQgdGhlIHJlc3BvbnNlLCBpdCBpcyBvazwv
ZGl2PjxkaXY+Jmx0Oy0tLSA0MDEgKHdpdGggbmV3IG5vbmNlKTwvZGl2PjxkaXY+QUNLIC0tJmd0
OzwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+V2hlbiBJIGNvbmZpZ3VyZSBhbm90aGVyIGJveCB3
aXRoIGEgcGxhaW4gYXN0ZXJpc2sgYW5kIHNhbWUgY3JlZGVudGlhbHMsIHRoZSBjYWxsIGdvZXMg
dGhyb3VnaCBmaW5lIC0gc28gaXQgaXMgbm90IGJlY2F1c2UgbXkgaXAgaXMgd3Jvbmcgb3Igbm90
IHdoaXRlbGlzdGVkLsKgPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5XaHkgd291bGQgdGhlIHJl
bW90ZSBzZW5kIG1lIGEgNDAxID8/PyBJJiMzOTt2ZSB0cmllZCB0byBjb250YWN0IHRoZW0gYnV0
IG5vIGFuc3dlcjwvZGl2PjxzcGFuIGNsYXNzPSJIT0VuWmIiPjxmb250IGNvbG9yPSIjODg4ODg4
Ij48ZGl2Pjxicj48L2Rpdj48ZGl2PkouPC9kaXY+PGRpdj48YnI+PC9kaXY+PC9mb250Pjwvc3Bh
bj48L2Rpdj48ZGl2IGNsYXNzPSJIT0VuWmIiPjxkaXYgY2xhc3M9Img1Ij48ZGl2IGNsYXNzPSJn
bWFpbF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBUdWUsIFNlcCAyNiwg
MjAxNyBhdCAxMDowMyBBTSwgRGFuaWVsIFRyeWJhIDxzcGFuIGRpcj0ibHRyIj4mbHQ7PGEgaHJl
Zj0ibWFpbHRvOmQudHJ5YmFAcG9jb3MubmwiIHRhcmdldD0iX2JsYW5rIj5kLnRyeWJhQHBvY29z
Lm5sPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxicj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVv
dGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtw
YWRkaW5nLWxlZnQ6MWV4Ij48c3Bhbj5PbiBUdWUsIFNlcCAyNiwgMjAxNyBhdCAwOTozNjoxOUFN
IC0wNDAwLCBKZWFuIEPDqXJpZW4gd3JvdGU6PGJyPgomZ3Q7IEkmIzM5O3ZlIGluc2VydGVkIHRo
ZSBmb2xsb3dpbmcgYmxvY2sgb24gdGhlIGZhaWx1cmUgcm91dGU6PGJyPgomZ3Q7wqAgwqAgwqAg
wqAgwqBpZiAodF9jaGVja19zdGF0dXMoJnF1b3Q7NDAxfDQwNyZxdW90OykpIHs8YnI+CiZndDvC
oCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoHhsb2coJnF1b3Q7TF9JTkZPJnF1b3Q7LCZxdW90O2Zh
aWx1cmVfcm91dGUoPHdicj5ST1VURUZBSUwpIEBAIGNhbGwgdG88YnI+CiZndDsgdWFjX2F1dGgo
KVxuJnF1b3Q7KTs8YnI+CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoHVhY19hdXRoKCk7
PGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqB0X3JlbGF5KCk7PGJyPgomZ3Q7wqAg
wqAgwqAgwqAgwqAgwqAgwqAgwqAgwqBleGl0Ozxicj4KJmd0O8KgIMKgIMKgIMKgIMKgfTxicj4K
PGJyPgo8L3NwYW4+VW5saWtlIHdoZW4gY2FsbGluZyB1YWNfcmVnX3JlcXVlc3RfdG8sIHlvdSYj
Mzk7bGwgaGF2ZSB0byBmaWxsIHRoZTxicj4KYXV0aF8qX2F2cCBwdnMgeW91cnNlbGYuIFNvIGlu
IHRoZSBleGFtcGxlIHlvdSBoYXZlIHRvIGZpbGwgJGF2cChhdXNlcik8YnI+CmFuZCAkYXZwKGFw
YXNzKS48YnI+Cjxicj4KbW9kcGFyYW0oJnF1b3Q7dWFjJnF1b3Q7LCZxdW90O2F1dGhfdXNlcm5h
bWVfPHdicj5hdnAmcXVvdDssJnF1b3Q7JGF2cChhdXNlcikmcXVvdDspPGJyPgptb2RwYXJhbSgm
cXVvdDt1YWMmcXVvdDssJnF1b3Q7YXV0aF9wYXNzd29yZF88d2JyPmF2cCZxdW90OywmcXVvdDsk
YXZwKGFwYXNzKSZxdW90Oyk8YnI+Cm1vZHBhcmFtKCZxdW90O3VhYyZxdW90OywmcXVvdDthdXRo
X3JlYWxtX2F2cDx3YnI+JnF1b3Q7LCZxdW90OyRhdnAoYXJlYWxtKSZxdW90Oyk8YnI+Cjxicj4K
Li4uPGJyPgo8YnI+CmlmKHRfY2hlY2tfc3RhdHVzKCZxdW90OzQwMXw0MDcmcXVvdDspKSB7PGJy
PgrCoCDCoCDCoCDCoCAkYXZwKGF1c2VyKSA9ICZxdW90O3Rlc3QmcXVvdDs7PGJyPgrCoCDCoCDC
oCDCoCAkYXZwKGFwYXNzKSA9ICZxdW90O3Rlc3QmcXVvdDs7PGJyPgrCoCDCoCDCoCDCoCB1YWNf
YXV0aCgpOzxicj4KwqAgwqAgwqAgwqAgdF9yZWxheSgpOzxicj4KwqAgwqAgwqAgwqAgZXhpdDs8
YnI+Cn08YnI+Cjxicj4KU28gbmV4dCBwcm9ibGVtIGlzIGhvdyB0byBnZXQgdGhvc2UgY3JlZGVu
dGlhbHMuIFlvdSBhbHJlYWR5IGtub3cgdGhlPGJyPgp1c2VyIG1ha2luZyB0aGUgY2FsbC4gU28g
ZWl0aGVyIGhhdmUgYSBjdXN0b20gcXVlcnkgdG8gYSBjdXN0b20gdGFibGU8YnI+CihzcWxvcHMv
YXZwb3BzKSB0byByZXRyaWV2ZSB0aGUgZXh0ZXJuYWwgdXNlci9wYXNzIGZvciBjdXJyZW50IHVz
ZXIsIG9yPGJyPgp0cnkgdG8gc3RvcmUgdGhhdCBpbmZvcm1hdGlvbiB3aXRoIHRoZSBzdWJzY3Jp
YmVyIGRhdGEgKHNhdyBzb21lPGJyPgpzdWdnZXN0aW9ucyBmb3IgdGhpcyBhIHdoaWxlIGJhY2sg
b24gdGhlIGxpc3QpLjxicj4KPGRpdiBjbGFzcz0ibV8tMzQwNDM5MjM3Nzg3MjM2MTE1NEhPRW5a
YiI+PGRpdiBjbGFzcz0ibV8tMzQwNDM5MjM3Nzg3MjM2MTE1NGg1Ij48YnI+Cjxicj4KPGJyPgpf
X19fX19fX19fX19fX19fX19fX19fX19fX19fX188d2JyPl9fX19fX19fX19fX19fX19fPGJyPgpL
YW1haWxpbyAoU0VSKSAtIFVzZXJzIE1haWxpbmcgTGlzdDxicj4KPGEgaHJlZj0ibWFpbHRvOnNy
LXVzZXJzQGxpc3RzLmthbWFpbGlvLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNyLXVzZXJzQGxpc3Rz
LmthbWFpbGlvLm9yZzwvYT48YnI+CjxhIGhyZWY9Imh0dHBzOi8vbGlzdHMua2FtYWlsaW8ub3Jn
L2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9zci11c2VycyIgcmVsPSJub3JlZmVycmVyIiB0YXJn
ZXQ9Il9ibGFuayI+aHR0cHM6Ly9saXN0cy5rYW1haWxpby5vcmcvY2dpPHdicj4tYmluL21haWxt
YW4vbGlzdGluZm8vc3ItdXNlcnM8L2E+PGJyPgo8L2Rpdj48L2Rpdj48L2Jsb2NrcXVvdGU+PC9k
aXY+PGJyPjwvZGl2Pgo8L2Rpdj48L2Rpdj48L2Jsb2NrcXVvdGU+PC9kaXY+PGJyPjwvZGl2Pgo=

--===============1766271037==--


From cerien.jean@gmail.com Tue Sep 26 21:59:46 2017
From: Jean =?utf-8?q?C=C3=A9rien?= <cerien.jean@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] UACREG - answering to 401 on invite
Date: Tue, 26 Sep 2017 15:59:37 -0400
Message-ID:
 <CAL_ph0K0rGZeUECU6kJULeSqdQzVu+M2LJV_C7tkwOW_zyNCew@mail.gmail.com>
In-Reply-To:
 <CAL_ph0JNbTAm2+mP4XhoDH39c3c2V-GuR4p-CLsvHmdsvZzQ4A@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0036665389=="

--===============0036665389==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Ok - found it !!

I've managed to get the cseq incremented following the info in this post:
https://github.com/kamailio/kamailio/issues/679

Many thanks for your help,

J.

On Tue, Sep 26, 2017 at 3:34 PM, Jean Cérien <cerien.jean(a)gmail.com> wrote:

>
> Hi
>
> Still searching on that one. My guess now is that I am receiving another
> 401 because the CSEQ does not get incremented.
>
> INVITE cseq 102--->
> <---- 401 (with nonce) cseq 102
> ACK cseq 102 --->
>
> INVITE ---> with correct nonce & response, I've recalculated the response,
> it is ok -- cseq 102
> <--- 401 (with new nonce) cseq 102
> ACK -->cseq 102
>
> I think the 2nd exchange should have a cseq of 103 or higher.
>
> How can I increase it ?
>
> J.
>
> // Here is the section  generating the reply with the wrong cseq
>
> if(t_check_status("401|407")) {
>         $avp(auser) = "test";
>         $avp(apass) = "test";
>         uac_auth();
>         t_relay();
>         exit;
> }
>
>
>
>
>
> On Tue, Sep 26, 2017 at 11:02 AM, Jean Cérien <cerien.jean(a)gmail.com>
> wrote:
>
>>
>> Thanks - I've done some progress - I've hard coded temporarily the user,
>> pass & realm, and authentication goes out now.
>>
>> However, the provider is answering with a 401 & a new nonce.
>>
>> here is what I have
>>
>> INVITE --->
>> <---- 401 (with nonce)
>> ACK --->
>> INVITE ---> with correct nonce & response, I've recalculated the
>> response, it is ok
>> <--- 401 (with new nonce)
>> ACK -->
>>
>> When I configure another box with a plain asterisk and same credentials,
>> the call goes through fine - so it is not because my ip is wrong or not
>> whitelisted.
>>
>> Why would the remote send me a 401 ??? I've tried to contact them but no
>> answer
>>
>> J.
>>
>>
>> On Tue, Sep 26, 2017 at 10:03 AM, Daniel Tryba <d.tryba(a)pocos.nl> wrote:
>>
>>> On Tue, Sep 26, 2017 at 09:36:19AM -0400, Jean Cérien wrote:
>>> > I've inserted the following block on the failure route:
>>> >         if (t_check_status("401|407")) {
>>> >                 xlog("L_INFO","failure_route(ROUTEFAIL) @@ call to
>>> > uac_auth()\n");
>>> >                 uac_auth();
>>> >                 t_relay();
>>> >                 exit;
>>> >         }
>>>
>>> Unlike when calling uac_reg_request_to, you'll have to fill the
>>> auth_*_avp pvs yourself. So in the example you have to fill $avp(auser)
>>> and $avp(apass).
>>>
>>> modparam("uac","auth_username_avp","$avp(auser)")
>>> modparam("uac","auth_password_avp","$avp(apass)")
>>> modparam("uac","auth_realm_avp","$avp(arealm)")
>>>
>>> ...
>>>
>>> if(t_check_status("401|407")) {
>>>         $avp(auser) = "test";
>>>         $avp(apass) = "test";
>>>         uac_auth();
>>>         t_relay();
>>>         exit;
>>> }
>>>
>>> So next problem is how to get those credentials. You already know the
>>> user making the call. So either have a custom query to a custom table
>>> (sqlops/avpops) to retrieve the external user/pass for current user, or
>>> try to store that information with the subscriber data (saw some
>>> suggestions for this a while back on the list).
>>>
>>>
>>>
>>> _______________________________________________
>>> Kamailio (SER) - Users Mailing List
>>> sr-users(a)lists.kamailio.org
>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>>
>>
>



--===============0036665389==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============0036665389==--