[Kamailio-Users] Problem with REGISTER

[Uriel Rozenbaum]

Hello guys,

I'm having a strange problem with my Kamailio 1.5.3 when trying to register
an Audiocodes Gateway. I'm using authentication for REGISTER messages.

The GW sends a REGISTER without credentials, so I do a proxy_challenge. Then
the GW sends a REGISTER with credentials but the proxy_authorize is
returning -4.

I did an NGREP to check the messages and they don't seem malformed, can you
tell me if there is something on the functions that might be loosing the
Proxy-Authorization header?
This happens only with this GW, not if i register a softphone (XLITE).

Within route block:
...
if (is_method("REGISTER"))
        {
                     route(11);
                     save("location");
                     exit();
                }
...

Route(11):
route[11] {

   # ----- AUTENTICACION DE UN MENSAJE -----
   if (!proxy_authorize("", "subscriber"))
   {
      switch($retcode)
      {
      case -1:
         xlog("L_INFO", "AUTH: Invalid username\n");
         sl_send_reply("403", "Forbidden");
         exit;
      case -2:
         xlog("L_INFO", "AUTH: Invalid password\n");
         sl_send_reply("403", "Forbidden");
         exit;
      case -3:
         xlog("L_INFO", "AUTH: Nonce ambiguo\n");
         break;
      case -4:
         xlog("L_INFO", "AUTH: No credentials\n");
         break;
      #default:
         #xlog("L_INFO", "AUTH: Unknown error\n");
         #break;
      }

      #xlog("L_DBG", "AUTH: -Data- Auth Username = $au\n");
      #xlog("L_DBG", "AUTH: -Data- Domain = $fd\n");
      #xlog("L_DBG", "AUTH: -Data- From Username = $fU\n");

      proxy_challenge("192.168.200.130","0");
      exit;
   };

   xlog("L_INFO", "AUTH: Valid username and credentials\n");
   consume_credentials();
}

NGREP:
#
U 10.0.1.200:5060 -> 192.168.200.130:5060
REGISTER sip:192.168.200.130 SIP/2.0.
Via: SIP/2.0/UDP 10.0.1.200;branch=z9hG4bKac26395445.
Max-Forwards: 70.
From: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=1c26389068.
To: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>>.
Call-ID: 154992670511200004613 at 10.0.1.200.
CSeq: 68 REGISTER.
Contact: <sip:testdevice at 10.0.1.200:5060>;expires=180.
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUBSCRIBE,UPDATE.
Expires: 180.
User-Agent: Audiocodes-Sip-Gateway-/v.5.80A.023.006.
Content-Length: 0.
.

#
U 192.168.200.130:5060 -> 10.0.1.200:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP 10.0.1.200;branch=z9hG4bKac26395445.
From: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=1c26389068.
To: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=f8f2ab2c1295e90ed7dbb499b30f44b2.ee1a.
Call-ID: 154992670511200004613 at 10.0.1.200.
CSeq: 68 REGISTER.
Proxy-Authenticate: Digest realm="192.168.200.130",
nonce="4b142e8900000000188436d32ee472791b706f36952f4162".
Server: Kamailio (1.5.3-notls (i386/linux)).
Content-Length: 0.
.

#
U 10.0.1.200:5060 -> 192.168.200.130:5060
REGISTER sip:192.168.200.130 SIP/2.0.
Via: SIP/2.0/UDP 10.0.1.200;branch=z9hG4bKac26766380.
Max-Forwards: 70.
From: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=1c26389068.
To: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>>.
Call-ID: 154992670511200004613 at 10.0.1.200.
CSeq: 69 REGISTER.
Proxy-Authorization: Digest
username="testdevice",realm="192.168.200.130",nonce="4b142e8900000000188436d32ee472791b706f36952f4162",uri="sip:192.168.200.130",algorithm=MD5,response="9fa0904b94f94152619a16c46ffa6485".
Contact: <sip:testdevice at 10.0.1.200:5060>;expires=180.
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUBSCRIBE,UPDATE.
Expires: 180.
User-Agent: Audiocodes-Sip-Gateway-/v.5.80A.023.006.
Content-Length: 0.
.

#
U 192.168.200.130:5060 -> 10.0.1.200:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP 10.0.1.200;branch=z9hG4bKac26766380.
From: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=1c26389068.
To: <sip:testdevice at 10.0.1.200 <sip%3Atestdevice at 10.0.1.200>
>;tag=f8f2ab2c1295e90ed7dbb499b30f44b2.b7c8.
Call-ID: 154992670511200004613 at 10.0.1.200.
CSeq: 69 REGISTER.
Proxy-Authenticate: Digest realm="192.168.200.130",
nonce="4b142e8900000001515ab7891a3d534cc3f15e5627322da3".
Server: Kamailio (1.5.3-notls (i386/linux)).
Content-Length: 0.
.

Thanks in advance!
Uriel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20091130/f707c622/attachment.htm>