[Serusers] Strange problems

[Klaus Darilion]

AFAIK new ser requires new radiusclient-ng

regards,
klaus

Alex wrote:
> Hi guys thanks for any help, i got a lot of useful information from this list.
> 
> I will try to explain my problem.
> i have 2 linux servers :
> 
> 1- server
> Red Hat Linux release 9
> ser + freeradius 0.9.3 + radius client
> 
> 2-server
> Red Hat Enterprise Linux AS release 3
> ser + freeradius 1.2 + radius client 4.8
> 
> I trying to register my ip phone  through ser + radius .
> On the 1 server it's working fine i receiving register requests, i can
> see that in the logs, and the request is going through the
> authentication process.
> 
> On the 2 server  i receiving register requests, but it's not going to
> the radius authentication, i don't see anything inside the radius
> logs.
> 
> Here is the ngrep on port 5060: from the 2 server
> -------------------------------------------------------------------------------------------------
> U telephoneip:10739 -> xxx.xxx.xxx.xxx:5060
>  REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
>  sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
>  :Phonenumber at telephoneip:10000;user=phone>..Call-ID:
> 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106 REGISTER..Expires:
> 3600..User-Agent
>  : Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
> INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
>  h: 0....
> #
> U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
>  8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106
> REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
>  e="425e3ac34dc9509392435c11fb260f41420049c7"..Server: Sip EXpress
> router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
>   xxx.xxx.xxx.xxx:5060 "Noisy feedback tells:  pid=1912
> req_src_ip=telephoneip req_src_port=10739 in_uri=sip:xxx.xxx.xxx.xxx
>  out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
> #
> 
> U telephoneip:10740 -> xxx.xxx.xxx.xxx:5060
>  REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
>  sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
>  :Phonenumber at telephoneip:10000;user=phone>..Call-ID:
> 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106 REGISTER..Expires:
> 3600..User-Agent
>  : Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
> INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
>  h: 0....
> #
> U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
>  8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106
> REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
>  e="425e3acb812b5b2e8aa023e3fcffc618dc4cf661"..Server: Sip EXpress
> router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
>   xxx.xxx.xxx.xxx:5060 "Noisy feedback tells:  pid=1885
> req_src_ip=telephoneip req_src_port=10740 in_uri=sip:xxx.xxx.xxx.xxx
>  out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
> #
> 
> here is the debug from ser :
> ---------------------------------------------------------------------------------------------
> 14(1036) parse_headers: flags=-1
> 14(1036) check_via_address(62.219.158.191, 62.219.158.191, 1)
> 14(1036) DEBUG:destroy_avp_list: destroing list (nil)
> 14(1036) receive_msg: cleaning up
> 9(1012) SIP Request:
> 9(1012)  method:  <REGISTER>
> 9(1012)  uri:     <sip:xxx.xxx.xxx.xxx>
> 9(1012)  version: <SIP/2.0>
> 9(1012) parse_headers: flags=1
> 9(1012) Found param type 232, <branch> = <z9hG4bKfc5751413c832e6d>; state=16
> 9(1012) end of header reached, state=5
> 9(1012) parse_headers: Via found, flags=1
> 9(1012) parse_headers: this is the first via
> 9(1012) After parse_msg...
> 9(1012) preparing to run routing scripts...
> 9(1012) REGISTER: Authenticating user
> 9(1012) parse_headers: flags=4
> 9(1012) end of header reached, state=9
> 9(1012) DEBUG: get_hdr_field: <To> [45];
> uri=[sip:phonenumber at xxx.xxx.xxx.xxx;user=phone]
> 9(1012) DEBUG: to body [<sip:phonenumber at xxx.xxx.xxx.xxx;user=phone>
> ]
> 
> 9(1012) parse_headers: flags=4096
> 9(1012) get_hdr_field: cseq <CSeq>: <103> <REGISTER>
> 9(1012) DEBUG: get_hdr_body : content_length=0
> 9(1012) found end of header
> 9(1012) pre_auth(): Credentials with given realm not found
> 9(1012) REGISTER: challenging user
> 9(1012) build_auth_hf(): 'WWW-Authenticate: Digest
> realm="xxx.xxx.xxx.xxx",
> nonce="425e063022afc1142ed6730d46da41692ff3ed57"
> 
> 
> Daniel and Alex send some explanations i really appreciate that, but i
> don't know where to start to fix that problem, i am trying to
> understand why on the first server it's working , but on the second
> it's not working . both of them have the same configuration only the
> versions are different.
> 
> I tried to connect different ip phone and it's sending the packets to
> the 2 server and it's working, but the 1 ip phone not working with the
> 2 server, but with the 1 one it's working fine, i just changing the
> sip proxy ip.
> 
> Thanks for any help.
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>