I did debug the radius server and it doesn’t even get a hit from SER when this happens. The phones can register with radius just fine too, but just not make calls. They can receive calls.

It looks like I am getting the same error as the other guy who just emailed the list…

Re: pre_auth(): Credentials with given realm not found.

Aug 31 08:40:57 laplata ser[26185]: SIP Request:

Aug 31 08:40:57 laplata ser[26185]: method: <INVITE>

Aug 31 08:40:57 laplata ser[26185]: uri: <sip:311@voip.fasttrackcomm.net;user=phone>

Aug 31 08:40:57 laplata ser[26185]: version: <SIP/2.0>

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1

Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> = <z9hG4bK7faba9a88AEB41B5>; state=16

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5

Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1

Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via

Aug 31 08:40:57 laplata ser[26185]: After parse_msg...

Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts...

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9

Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45]; uri=[sip:311@voip.fasttrackcomm.net;user=phone]

] 31 08:40:57 laplata ser[26185]: DEBUG: to body [<sip:311@voip.fasttrackcomm.net;user=phone>

Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1> <INVITE>

Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present: value = 70

Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header: value 70 decreased to 16

Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param: tag=7B99ABF2-4A7C3F1

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256

Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body : content_length=251

Aug 31 08:40:57 laplata ser[26185]: found end of header

Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers found

Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF

Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm 'voip.fasttrackcomm.net' is local

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096

Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given realm not found

Aug 31 08:40:57 laplata ser[26185]: build_auth_hf(): 'WWW-Authenticate: Digest realm="voip.fasttrackcomm.net", nonce="44f6f625418a8 ' f0398a4c9e73850fef979dbf"

Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1

Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194, 192.168.1.195, 0)

Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying list (nil)

Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up

Natambu Obleton

Network Engineer

FastTrack Communications

nobleton@fasttrackcomm.net

(970) 247-3366 office

(970) 247-2426 fax

From: Greger V. Teigre [mailto:greger@teigre.com]
Sent: Wednesday, August 30, 2006 11:57 PM
To: Natambu Obleton
Cc: serusers@lists.iptel.org
Subject: Re: [Serusers] extra things confusing auth_radius?

user=phone does not have anything to do with it. I think I remember polycom being a bit ticklish when it comes to settings. Something about a non-intuitive name on a setting related to domain? You see, the calculation in the digest algorithm is based on both sides using the same data... I don't have the polycom setup here, sorry. Take a look at the authorization header in the challenge and reply.
If you debug your radius server, you will probably see wrong password (i.e. wrong digest).
g-)

Natambu Obleton wrote:

Ok. I have two clients setup. One is X-Lite and the other is a polycom 601. I am doing radius authentication, but for some reason it doesn’t work with the polycom 601 phone. In the debug the only thing that is different about them is something in the uri.

Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72]; uri=[sip:311@voip.fasttrackcomm.net]

Works, but..

Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45]; uri=[sip:311@voip.fasttrackcomm.net;user=phone]

Doesn’t. Like it doesn’t even send an authentication request to my radius server. I think it is the ‘;user=phone’ part that is confusing it? So what I want to do is remove that part from the URI as a test. I just added a subst to remove it, but still isn’t working with radius. It acts like the realm is no longer local.

Here is my config file:

http://www.natambu.com/serconf.html