18 Aug
2010
18 Aug
'10
12:37 a.m.
HEllo community,
I'm having some problems with my kamailio configuration, following is the
section of my authentication process on my /etc/kamailio/kamailio.cfg
route [3] {
if (is_method("REGISTER")) {
if (!www_authorize("", "subscriber")) {
www_challenge("", "0");
exit;
}
if ($au!=$tU) {
sl_send_reply("403", "Forbidden auth ID");
exit;
}
} else {
if (from_uri==myself) {
if(!proxy_authorize("", "subscriber")) {
proxy_challenge("", "0");
exit;
}
if (is_method("PUBLISH")) {
if ($au!=$tU) {
sl_send_reply("403", "Forbidden auth
ID");
exit;
}
} else {
if ($au!=$fU) {
sl_send_reply("403", "Forbidden auth
ID");
exit;
}
}
consume_credentials();
}
}
return;
}
I added a user with the following command:
# kamctl add 1102 123456
And then i checked on mysql, table subscriber:
mysql> select * from subscriber;
+----+----------+---------------+----------+---------------+----------------------------------+----------------------------------+------+
| id | username | domain | password | email_address | ha1
| ha1b | rpid |
+----+----------+---------------+----------+---------------+----------------------------------+----------------------------------+------+
| 3 | 1102 | dannydias.com | | |
fe7a80817383cfd90950dea03d37eccf | dbb9b6ef93d4f3417038a6bf5cd176db | NULL
|
+----+----------+---------------+----------+---------------+----------------------------------+----------------------------------+------+
1 row in set (0.00 sec)
By the way, the domain field does not exist (dannydias.com) i'm not sure how
this could affect the authentication process, this migh be the problem?
And finally, ngrep-sip to check what is going on:
#
U 2010/08/17 22:28:38.548357 80.26.81.96:26932 -> 212.230.19.191:5060
*REGISTER sip:212.230.19.191 SIP/2.0'*
Via: SIP/2.0/UDP 80.26.81.96:26932;branch=z9hG4bK-d2ee4e38'
From: "1102" <sip:1102@212.230.19.191 <sip%3A1102(a)212.230.19.191>
;tag=36dcc698cfc16210o1'
To: "1102"
<sip:1102@212.230.19.191 <sip%3A1102(a)212.230.19.191>>'
Call-ID: 4aab2f50-775b4d34(a)80.26.81.96'
CSeq: 10409 REGISTER'
Max-Forwards: 70'
Authorization: Digest
username="1102",realm="212.230.19.191",nonce="4c6b0d34000000c9c4e2068de2d41bec38c6d23029696501",uri="sip:212.230.19.191",algorithm=MD5,response="a09ea335a01051d714d2cbfe95e17820"'
Contact: "1102" <sip:1102@80.26.81.96:26932>;expires=180'
User-Agent: Linksys/SPA942-5.1.15(a)'
Content-Length: 0'
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER'
Supported: replaces'
'
#
U 2010/08/17 22:28:38.548357 212.230.19.191:5060 -> 80.26.81.96:26932
*SIP/2.0 401 Unauthorized'*
Via: SIP/2.0/UDP 80.26.81.96:26932;branch=z9hG4bK-d2ee4e38'
From: "1102" <sip:1102@212.230.19.191 <sip%3A1102(a)212.230.19.191>
;tag=36dcc698cfc16210o1'
To: "1102"
<sip:1102@212.230.19.191 <sip%3A1102(a)212.230.19.191>
;tag=00f209f5fddbfe1aa952cd699e41d531.97e5'
Call-ID: 4aab2f50-775b4d34(a)80.26.81.96'
CSeq: 10409 REGISTER'
WWW-Authenticate: Digest realm="212.230.19.191",
nonce="4c6b0d34000000caa164dcad25dbc5b4c6baefcef6dc84ae"'
Server: Kamailio (1.5.4-notls (x86_64/linux))'
Content-Length: 0'
'
Could somebody help me? i can't find the real problem
Thanks in advance
DD