[Serusers] INVITE authentication false
Tung Tran
tr.tung at gmail.com
Fri Sep 14 05:16:13 CEST 2007
Hi all,
I am trying to do workaorund of my issue with how to check the FROM user in INVITE message, I am doing radius_proxy_authenticate for INVITE message, but I got new trouble:
- Radius server reply with Access-Accept.
- But SER always understands the authentication is false and do proxy_challeng again and again (althrough all the debug I see on the debug >>radius_authorize_sterman(): Success..)
Please tell me what I am wrong ( I am using SER 0.8).
Thanks in advance, Tung
Here is my conf for radius_proxy_authenticate.
if (method == "INVITE" && (uri=~"^sip:00"))
{
if (!radius_proxy_authorize(""))
{
xlog("L_INFO", "Radius proxy authorized false, Challenging .. \n");
proxy_challenge("", "0");
break;
};
xlog("L_INFO", "Radius proxy authorized OK, process call routing .. \n");
consume_credentials();
log (1, "************* PC2Phone Using AsteriskB2UBA, Rewriting the host:port **************");
rewritehostport ("x.x.x.x:5071");
use_media_proxy();
t_on_reply("1");
.............
}
And here is the debug on SER
0(2828) method: <INVITE>
0(2828) uri: <sip:0012127773456 at sip3.thequocte.com:5060>
0(2828) version: <SIP/2.0>
0(2828) parse_headers: flags=1
0(2828) Found param type 235, <rport> = <n/a>; state=6
0(2828) Found param type 232, <branch> = <z9hG4bKPjdc616205bf324ab996179b219e5986b9>; state=16
0(2828) end of header reached, state=5
0(2828) parse_headers: Via found, flags=1
0(2828) parse_headers: this is the first via
0(2828) After parse_msg...
0(2828) preparing to run routing scripts...
0(2828) DEBUG : is_maxfwd_present: searching for max_forwards header
0(2828) parse_headers: flags=128
0(2828) DEBUG: is_maxfwd_present: value = 70
0(2828) parse_headers: flags=8
0(2828) DEBUG: add_param: tag=e9d3c1dcadf44089b4bd19407187c6dc
0(2828) end of header reached, state=29
0(2828) parse_headers: flags=256
0(2828) end of header reached, state=8
0(2828) DEBUG: get_hdr_field: <To> [38]; uri=[sip:0012127773456 at sip3.xxxxx.com]
0(2828) DEBUG: to body [sip:0012127773456 at sip3.xxxxx.com
]
0(2828) get_hdr_field: cseq <CSeq>: <2> <INVITE>
0(2828) DEBUG: get_hdr_body : content_length=405
0(2828) found end of header
0(2828) find_first_route(): No Route headers found
0(2828) loose_route(): There is no Route HF
0(2828) parse_headers: flags=64
0(2828) parse_headers: flags=64
0(2828) parse_headers: flags=33554432
0(2828) check_nonce(): comparing [46e97a6ac3463940efca3302e91c79bea2a80448] and [46e97a6ac3463940efca3302e91c79bea2a80448]
0(2828) to: 0012127773456
0(2828) radius_authorize_sterman(): Success
0(2828) XLOG: xl_print_log: final buffer length 47
0(2828) Radius proxy authorized false, Challenging ..
0(2828) build_auth_hf(): 'Proxy-Authenticate: Digest realm="xxxxxxx", nonce="46e97a6ac3463940efca3302e91c79bea2a80448"
More information about the sr-users
mailing list