14 Apr
2005
14 Apr
'05
4:42 p.m.
Hi guys thanks for any help, i got a lot of useful information from this list.
I will try to explain my problem.
i have 2 linux servers :
1- server
Red Hat Linux release 9
ser + freeradius 0.9.3 + radius client
2-server
Red Hat Enterprise Linux AS release 3
ser + freeradius 1.2 + radius client 4.8
I trying to register my ip phone through ser + radius .
On the 1 server it's working fine i receiving register requests, i can
see that in the logs, and the request is going through the
authentication process.
On the 2 server i receiving register requests, but it's not going to
the radius authentication, i don't see anything inside the radius
logs.
Here is the ngrep on port 5060: from the 2 server
-------------------------------------------------------------------------------------------------
U telephoneip:10739 -> xxx.xxx.xxx.xxx:5060
REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
:Phonenumber@telephoneip:10000;user=phone>..Call-ID:
1cff1b8955b8fa5c@10.0.0.4..CSeq: 106 REGISTER..Expires:
3600..User-Agent
: Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
h: 0....
#
U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c@10.0.0.4..CSeq: 106
REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
e="425e3ac34dc9509392435c11fb260f41420049c7"..Server: Sip EXpress
router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
xxx.xxx.xxx.xxx:5060 "Noisy feedback tells: pid=1912
req_src_ip=telephoneip req_src_port=10739 in_uri=sip:xxx.xxx.xxx.xxx
out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
#
U telephoneip:10740 -> xxx.xxx.xxx.xxx:5060
REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
:Phonenumber@telephoneip:10000;user=phone>..Call-ID:
1cff1b8955b8fa5c@10.0.0.4..CSeq: 106 REGISTER..Expires:
3600..User-Agent
: Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
h: 0....
#
U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
<sip:Phonenumber@xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c@10.0.0.4..CSeq: 106
REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
e="425e3acb812b5b2e8aa023e3fcffc618dc4cf661"..Server: Sip EXpress
router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
xxx.xxx.xxx.xxx:5060 "Noisy feedback tells: pid=1885
req_src_ip=telephoneip req_src_port=10740 in_uri=sip:xxx.xxx.xxx.xxx
out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
#
here is the debug from ser :
---------------------------------------------------------------------------------------------
14(1036) parse_headers: flags=-1
14(1036) check_via_address(62.219.158.191, 62.219.158.191, 1)
14(1036) DEBUG:destroy_avp_list: destroing list (nil)
14(1036) receive_msg: cleaning up
9(1012) SIP Request:
9(1012) method: <REGISTER>
9(1012) uri: <sip:xxx.xxx.xxx.xxx>
9(1012) version: <SIP/2.0>
9(1012) parse_headers: flags=1
9(1012) Found param type 232, <branch> = <z9hG4bKfc5751413c832e6d>; state=16
9(1012) end of header reached, state=5
9(1012) parse_headers: Via found, flags=1
9(1012) parse_headers: this is the first via
9(1012) After parse_msg...
9(1012) preparing to run routing scripts...
9(1012) REGISTER: Authenticating user
9(1012) parse_headers: flags=4
9(1012) end of header reached, state=9
9(1012) DEBUG: get_hdr_field: <To> [45];
uri=[sip:phonenumber@xxx.xxx.xxx.xxx;user=phone]
9(1012) DEBUG: to body [<sip:phonenumber@xxx.xxx.xxx.xxx;user=phone>
]
9(1012) parse_headers: flags=4096
9(1012) get_hdr_field: cseq <CSeq>: <103> <REGISTER>
9(1012) DEBUG: get_hdr_body : content_length=0
9(1012) found end of header
9(1012) pre_auth(): Credentials with given realm not found
9(1012) REGISTER: challenging user
9(1012) build_auth_hf(): 'WWW-Authenticate: Digest
realm="xxx.xxx.xxx.xxx",
nonce="425e063022afc1142ed6730d46da41692ff3ed57"
Daniel and Alex send some explanations i really appreciate that, but i
don't know where to start to fix that problem, i am trying to
understand why on the first server it's working , but on the second
it's not working . both of them have the same configuration only the
versions are different.
I tried to connect different ip phone and it's sending the packets to
the 2 server and it's working, but the 1 ip phone not working with the
2 server, but with the 1 one it's working fine, i just changing the
sip proxy ip.
Thanks for any help.