[Serusers] Strange problems

[Klaus Darilion]

http://lists.iptel.org/pipermail/serdev/2005-March/004040.html

Klaus Darilion wrote:
> AFAIK new ser requires new radiusclient-ng
> 
> regards,
> klaus
> 
> Alex wrote:
> 
>> Hi guys thanks for any help, i got a lot of useful information from 
>> this list.
>>
>> I will try to explain my problem.
>> i have 2 linux servers :
>>
>> 1- server
>> Red Hat Linux release 9
>> ser + freeradius 0.9.3 + radius client
>>
>> 2-server
>> Red Hat Enterprise Linux AS release 3
>> ser + freeradius 1.2 + radius client 4.8
>>
>> I trying to register my ip phone  through ser + radius .
>> On the 1 server it's working fine i receiving register requests, i can
>> see that in the logs, and the request is going through the
>> authentication process.
>>
>> On the 2 server  i receiving register requests, but it's not going to
>> the radius authentication, i don't see anything inside the radius
>> logs.
>>
>> Here is the ngrep on port 5060: from the 2 server
>> ------------------------------------------------------------------------------------------------- 
>>
>> U telephoneip:10739 -> xxx.xxx.xxx.xxx:5060
>>  REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
>> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
>>  sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
>>  :Phonenumber at telephoneip:10000;user=phone>..Call-ID:
>> 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106 REGISTER..Expires:
>> 3600..User-Agent
>>  : Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
>> INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
>>  h: 0....
>> #
>> U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
>>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
>> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
>>  8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106
>> REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
>>  e="425e3ac34dc9509392435c11fb260f41420049c7"..Server: Sip EXpress
>> router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
>>   xxx.xxx.xxx.xxx:5060 "Noisy feedback tells:  pid=1912
>> req_src_ip=telephoneip req_src_port=10739 in_uri=sip:xxx.xxx.xxx.xxx
>>  out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
>> #
>>
>> U telephoneip:10740 -> xxx.xxx.xxx.xxx:5060
>>  REGISTER sip:xxx.xxx.xxx.xxx SIP/2.0..Via: SIP/2.0/UDP
>> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex" <
>>  sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>..Contact: <sip
>>  :Phonenumber at telephoneip:10000;user=phone>..Call-ID:
>> 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106 REGISTER..Expires:
>> 3600..User-Agent
>>  : Grandstream HT286 1.0.5.18..Max-Forwards: 70..Allow:
>> INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE..Content-Lengt
>>  h: 0....
>> #
>> U xxx.xxx.xxx.xxx:5060 -> telephoneip:10000
>>  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP
>> telephoneip:10000;branch=z9hG4bK98514c3b052d7df6..From: "Test Alex"
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=50673f1baca1958c..To:
>> <sip:Phonenumber at xxx.xxx.xxx.xxx;user=phone>;tag=b27e1a1d33761e85846fc9
>>  8f5f3a7e58.f894..Call-ID: 1cff1b8955b8fa5c at 10.0.0.4..CSeq: 106
>> REGISTER..WWW-Authenticate: Digest realm="xxx.xxx.xxx.xxx", nonc
>>  e="425e3acb812b5b2e8aa023e3fcffc618dc4cf661"..Server: Sip EXpress
>> router (0.8.14 (i386/linux))..Content-Length: 0..Warning: 392
>>   xxx.xxx.xxx.xxx:5060 "Noisy feedback tells:  pid=1885
>> req_src_ip=telephoneip req_src_port=10740 in_uri=sip:xxx.xxx.xxx.xxx
>>  out_uri=sip:xxx.xxx.xxx.xxx via_cnt==1"....
>> #
>>
>> here is the debug from ser :
>> --------------------------------------------------------------------------------------------- 
>>
>> 14(1036) parse_headers: flags=-1
>> 14(1036) check_via_address(62.219.158.191, 62.219.158.191, 1)
>> 14(1036) DEBUG:destroy_avp_list: destroing list (nil)
>> 14(1036) receive_msg: cleaning up
>> 9(1012) SIP Request:
>> 9(1012)  method:  <REGISTER>
>> 9(1012)  uri:     <sip:xxx.xxx.xxx.xxx>
>> 9(1012)  version: <SIP/2.0>
>> 9(1012) parse_headers: flags=1
>> 9(1012) Found param type 232, <branch> = <z9hG4bKfc5751413c832e6d>; 
>> state=16
>> 9(1012) end of header reached, state=5
>> 9(1012) parse_headers: Via found, flags=1
>> 9(1012) parse_headers: this is the first via
>> 9(1012) After parse_msg...
>> 9(1012) preparing to run routing scripts...
>> 9(1012) REGISTER: Authenticating user
>> 9(1012) parse_headers: flags=4
>> 9(1012) end of header reached, state=9
>> 9(1012) DEBUG: get_hdr_field: <To> [45];
>> uri=[sip:phonenumber at xxx.xxx.xxx.xxx;user=phone]
>> 9(1012) DEBUG: to body [<sip:phonenumber at xxx.xxx.xxx.xxx;user=phone>
>> ]
>>
>> 9(1012) parse_headers: flags=4096
>> 9(1012) get_hdr_field: cseq <CSeq>: <103> <REGISTER>
>> 9(1012) DEBUG: get_hdr_body : content_length=0
>> 9(1012) found end of header
>> 9(1012) pre_auth(): Credentials with given realm not found
>> 9(1012) REGISTER: challenging user
>> 9(1012) build_auth_hf(): 'WWW-Authenticate: Digest
>> realm="xxx.xxx.xxx.xxx",
>> nonce="425e063022afc1142ed6730d46da41692ff3ed57"
>>
>>
>> Daniel and Alex send some explanations i really appreciate that, but i
>> don't know where to start to fix that problem, i am trying to
>> understand why on the first server it's working , but on the second
>> it's not working . both of them have the same configuration only the
>> versions are different.
>>
>> I tried to connect different ip phone and it's sending the packets to
>> the 2 server and it's working, but the 1 ip phone not working with the
>> 2 server, but with the 1 one it's working fine, i just changing the
>> sip proxy ip.
>>
>> Thanks for any help.
>>
>> _______________________________________________
>> Serusers mailing list
>> serusers at lists.iptel.org
>> http://lists.iptel.org/mailman/listinfo/serusers
>>
>>
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>