[Serusers] extra things confusing auth_radius?
Greger V. Teigre
greger at teigre.com
Fri Sep 1 09:42:56 CEST 2006
I saw in another post that you had solved it with fix_nated_contact. Good!
g-)
Natambu Obleton wrote:
>
> I did debug the radius server and it doesn't even get a hit from SER
> when this happens. The phones can register with radius just fine too,
> but just not make calls. They can receive calls.
>
>
>
> It looks like I am getting the same error as the other guy who just
> emailed the list...
>
> Re: pre_auth(): Credentials with given realm not found.
>
>
>
> Aug 31 08:40:57 laplata ser[26185]: SIP Request:
>
> Aug 31 08:40:57 laplata ser[26185]: method: <INVITE>
>
> Aug 31 08:40:57 laplata ser[26185]: uri:
> <sip:311 at voip.fasttrackcomm.net;user=phone>
>
> Aug 31 08:40:57 laplata ser[26185]: version: <SIP/2.0>
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1
>
> Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> =
> <z9hG4bK7faba9a88AEB41B5>; state=16
>
> Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via
>
> Aug 31 08:40:57 laplata ser[26185]: After parse_msg...
>
> Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts...
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128
>
> Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9
>
> Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45];
> uri=[sip:311 at voip.fasttrackcomm.net;user=phone]
>
> ] 31 08:40:57 laplata ser[26185]: DEBUG: to body
> [<sip:311 at voip.fasttrackcomm.net;user=phone>
>
> Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1>
> <INVITE>
>
> Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present:
> value = 70
>
> Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header:
> value 70 decreased to 16
>
> Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param:
> tag=7B99ABF2-4A7C3F1
>
> Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256
>
> Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body :
> content_length=251
>
> Aug 31 08:40:57 laplata ser[26185]: found end of header
>
> Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers
> found
>
> Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF
>
> Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm
> 'voip.fasttrackcomm.net' is local
>
> Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096
>
> Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given
> realm not found
>
> Aug 31 08:40:57 laplata ser[26185]: build_auth_hf():
> 'WWW-Authenticate: Digest realm="voip.fasttrackcomm.net",
> nonce="44f6f625418a8 ' f0398a4c9e73850fef979dbf"
>
> Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1
>
> Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194,
> 192.168.1.195, 0)
>
> Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying
> list (nil)
>
> Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up
>
>
>
>
>
>
>
> Natambu Obleton
>
> Network Engineer
>
> FastTrack Communications
>
> nobleton at fasttrackcomm.net <mailto:nobleton at fasttrackcomm.net>
>
> (970) 247-3366 office
>
> (970) 247-2426 fax
>
>
>
> ------------------------------------------------------------------------
>
> *From:* Greger V. Teigre [mailto:greger at teigre.com]
> *Sent:* Wednesday, August 30, 2006 11:57 PM
> *To:* Natambu Obleton
> *Cc:* serusers at lists.iptel.org
> *Subject:* Re: [Serusers] extra things confusing auth_radius?
>
>
>
> user=phone does not have anything to do with it. I think I remember
> polycom being a bit ticklish when it comes to settings. Something
> about a non-intuitive name on a setting related to domain? You see,
> the calculation in the digest algorithm is based on both sides using
> the same data... I don't have the polycom setup here, sorry. Take a
> look at the authorization header in the challenge and reply.
> If you debug your radius server, you will probably see wrong password
> (i.e. wrong digest).
> g-)
>
> Natambu Obleton wrote:
>
> Ok. I have two clients setup. One is X-Lite and the other is a polycom
> 601. I am doing radius authentication, but for some reason it doesn't
> work with the polycom 601 phone. In the debug the only thing that is
> different about them is something in the uri.
>
>
>
>
>
> Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
> uri=[sip:311 at voip.fasttrackcomm.net
> <mailto:sip:311 at voip.fasttrackcomm.net>]
>
>
>
> Works, but..
>
>
>
> Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
> uri=[sip:311 at voip.fasttrackcomm.net;user=phone]
> <mailto:%5bsip:311 at voip.fasttrackcomm.net;user=phone%5d>
>
>
>
>
>
> Doesn't. Like it doesn't even send an authentication request to my
> radius server. I think it is the ';user=phone' part that is confusing
> it? So what I want to do is remove that part from the URI as a test. I
> just added a subst to remove it, but still isn't working with radius.
> It acts like the realm is no longer local.
>
>
>
>
>
> Here is my config file:
>
> http://www.natambu.com/serconf.html
>
>
>
>
>
> Natambu Obleton
>
> Network Engineer
>
> FastTrack Communications
>
> nobleton at fasttrackcomm.net <mailto:nobleton at fasttrackcomm.net>
>
> (970) 247-3366 office
>
> (970) 247-2426 fax
>
>
>
>
>
>
>
>
> ------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Serusers mailing list
> Serusers at lists.iptel.org <mailto:Serusers at lists.iptel.org>
> http://lists.iptel.org/mailman/listinfo/serusers
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20060901/56d29ed8/attachment.htm>
More information about the sr-users
mailing list