[Serusers] sipsak authentication problem

Nils Ohlmeier nils at iptel.org
Mon Feb 2 22:51:58 CET 2004


Hi Klaus,

what you tried with a file is allready possible with the latested sipsak from 
CVS. It can use a given Contact for REGISTER.
But i have no real clue why you receive 401 twice. I'm pretty sure that the 
digest auth part of sipsak works fine. Can you try to run sipsak with -n to 
use IPs instead of hostnames in Via? Maybe this is related to the 
"NAT"-detection at iptel.

Greetings
  Nils

On Monday 02 February 2004 22:36, Klaus Darilion wrote:
> Hi!
>
> I tried sipsak to manually insert a contact (sorry for abusing iptel),
> but the proxy always responds with 401. I can't find the problem, except
> that the CSeq is in both requests the same - can this be the problem? Is
> it possible to let CSeq be increased by sipsak?
>
> thanks,
> klaus
>
>
> Here is the sipsak trace:
>
> C:\Software\VoIP\SIP\Tools>sipsak-0.8.7.exe -f
> register-klaus.darilion-iptel.txt -s sip:klaus3000 at iptel.org -a mypass -vv
> New message with Via-Line:
> REGISTER sip:iptel.org SIP/2.0
> Via: SIP/2.0/UDP MIRNIXDIRNIX.ict.tuwien.ac.at:3021;rport
> From: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> To: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> Contact: "Klaus Darilion iptel" <sip:darilion at obelix.ict.tuwien.ac.at:5060>
> Call-ID: 88836654752435A07DEC84E6A14121A91171B8996F6FC at iptel.org
> CSeq: 233 REGISTER
> Expires: 86400
> Max-Forwards: 70
> Content-Length: 0
>
>
> ** request **
> REGISTER sip:iptel.org SIP/2.0
> Via: SIP/2.0/UDP MIRNIXDIRNIX.ict.tuwien.ac.at:3021;rport
> From: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> To: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> Contact: "Klaus Darilion iptel" <sip:darilion at obelix.ict.tuwien.ac.at:5060>
> Call-ID: 88836654752435A07DEC84E6A14121A91171B8996F6FC at iptel.org
> CSeq: 233 REGISTER
> Expires: 86400
> Max-Forwards: 70
> Content-Length: 0
>
>
>
> message received:
> authorizing
> ** request **
> REGISTER sip:iptel.org SIP/2.0
> Authorization: Digest username="klaus3000", uri="sip:iptel.org",
> algorithm=MD5, realm="iptel.org",
> nonce="401ebfc379f39fde2aaa9d064db4aba38415c51a",
> response="d203e1d5ab318a427375ae6998600af5"
> Via: SIP/2.0/UDP MIRNIXDIRNIX.ict.tuwien.ac.at:3021;rport
> From: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> To: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> Contact: "Klaus Darilion iptel" <sip:darilion at obelix.ict.tuwien.ac.at:5060>
> Call-ID: 88836654752435A07DEC84E6A14121A91171B8996F6FC at iptel.org
> CSeq: 233 REGISTER
> Expires: 86400
> Max-Forwards: 70
> Content-Length: 0
>
>
>
> message received:
>
> request:
> REGISTER sip:iptel.org SIP/2.0
> Authorization: Digest username="klaus3000", uri="sip:iptel.org",
> algorithm=MD5, realm="iptel.org",
> nonce="401ebfc379f39fde2aaa9d064db4aba38415c51a",
> response="d203e1d5ab318a427375ae6998600af5"
> Via: SIP/2.0/UDP MIRNIXDIRNIX.ict.tuwien.ac.at:3021;rport
> From: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> To: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> Contact: "Klaus Darilion iptel" <sip:darilion at obelix.ict.tuwien.ac.at:5060>
> Call-ID: 88836654752435A07DEC84E6A14121A91171B8996F6FC at iptel.org
> CSeq: 233 REGISTER
> Expires: 86400
> Max-Forwards: 70
> Content-Length: 0
>
>
> response:
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP
> MIRNIXDIRNIX.ict.tuwien.ac.at:3021;rport=62621;received=62.178.216.203
> From: Klaus Darilion iptel <sip:klaus3000 at iptel.org>
> To: Klaus Darilion iptel
> <sip:klaus3000 at iptel.org>;tag=794fe65c16edfdf45da4fc39a5d2867c.1558
> Call-ID: 88836654752435A07DEC84E6A14121A91171B8996F6FC at iptel.org
> CSeq: 233 REGISTER
> P-Behind-NAT: Yes
> WWW-Authenticate: Digest realm="iptel.org",
> nonce="401ebfc379f39fde2aaa9d064db4aba38415c51a"
> Server: Sip EXpress router (0.8.12-tcp_nonb-tls (i386/linux))
> Content-Length: 0
> Warning: 392 195.37.77.101:5060 "Noisy feedback tells:  pid=26858
> req_src_ip=62.178.216.203 req_src_port=62621 in_uri=sip:iptel.org
> out_uri=sip:iptel.org via_cnt==1"
>
>
> error: authorization failed
>         request already contains (Proxy-) Authorization, but received
> 401, see above
>
> C:\Software\VoIP\SIP\Tools>
>
>
>
>
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers




More information about the sr-users mailing list