[SR-Users] Websocket INVITE 407 error

Tue Aug 21 13:24:27 CEST 2012

Hello,

I've just test a sip call from an X-Lite client to Ekiga client an
everything has gone ok.
It seems an issue with authentication over WebSockets but I have no
experience in this area so I can not say where the problem is (and
REGISTER auth works fine).

Any other idea or anything else to check?

I'm blocked since last week.

Thanks a lot.
Kind Regards,

--
     --DAVID--

2012/8/21 Peter Dunkley <peter.dunkley at crocodile-rcs.com>
>
> Hello,
>
> This does look like an issue with authentication rather than WebSockets.
> Have you tried using an ordinary SIP client (for example, Jitsi) with your
> Kamailio configuration to verify that the authentication part of
> kamailio.cfg is correct?
>
> Regards,
>
> Peter
>
>
> On Tue, 2012-08-21 at 10:59 +0200, David Patiño wrote:
>
> Hi there,
>
> I'm new on kamailio users list.
> Now I'm developing a client in javascript (using websockets) to SIP calls.
>
> I'm using last devel version of kamailio with websocket support. I've
> already get a correct REGISTER transaction but now I'm not able to get
> a correct INVITE transaction. Actually I'm not sure if this a kamailio
> error or a problem with my source code however I'm using the same
> function to get digest info from received nonce both REGISTER and
> INVITE transactions. The INVITE transaction always enters in an
> endless loop with 407 requests.
>
> Please, is there anybody who could help me?
>
> Those are the frames of my code (obtained from chrome browser console):
>
> wsUri: ws://10.1.20.40:80/
> SOCKET CREATED
> SOCKET OPENED
>
> SENT:
> REGISTER sip:10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bK1C36k8S3b0OobHUAOLLOae0SbsbEQg
> From: sip:101 at 10.1.20.40;tag=Me0arqDG6K8o7l32oJgR
> To: sip:101 at 10.1.20.40
> Call-ID: 0EQSBkoG9RGgfg3E
> CSeq: 1 REGISTER
> Max-Forwards: 70
> Supported: path, outbound, gruu
> Contact: <sip:101 at KMkjMf37lVeM.invalid;transport=ws>
> 	;reg-id=98
> 	;+sip.instance="<urn:uuid:beb-68a9-6396e5f4>"
>
>
> RESPONSE:
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/WS
>
> KMkjMf37lVeM.invalid;branch=z9hG4bK1C36k8S3b0OobHUAOLLOae0SbsbEQg;rport=50906;received=10.1.2.229
> From: sip:101 at 10.1.20.40;tag=Me0arqDG6K8o7l32oJgR
> To: sip:101 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.000c
> Call-ID: 0EQSBkoG9RGgfg3E
> CSeq: 1 REGISTER
> WWW-Authenticate: Digest realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re"
> Server: kamailio (3.4.0-dev3 (i386/linux))
> Content-Length: 0
>
>
> SENT:
> REGISTER sip:10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bKl521S8acS8nVEcejv2GOJ8r46Jb037
> From: sip:101 at 10.1.20.40;tag=Pb8d1gV8K5qJo1gOv612
> To: sip:101 at 10.1.20.40
> Call-ID: 0EQSBkoG9RGgfg3E
> CSeq: 2 REGISTER
> Max-Forwards: 70
> Supported: path, outbound, gruu
> Contact: <sip:101 at KMkjMf37lVeM.invalid;transport=ws>
> 	;reg-id=98
> 	;+sip.instance="<urn:uuid:beb-68a9-6396e5f4>"
> Authorization: Digest username="101", realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re", opaque="",
> uri="sip:10.1.20.40", response= "9b209eb35ee88192e2e0c468f8cf91da"
>
>
> RESPONSE:
> SIP/2.0 200 OK
> Via: SIP/2.0/WS
>
> KMkjMf37lVeM.invalid;branch=z9hG4bKl521S8acS8nVEcejv2GOJ8r46Jb037;rport=50906;received=10.1.2.229
> From: sip:101 at 10.1.20.40;tag=Pb8d1gV8K5qJo1gOv612
> To: sip:101 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.b2e4
> Call-ID: 0EQSBkoG9RGgfg3E
> CSeq: 2 REGISTER
> Contact:
> <sip:101 at KMkjMf37lVeM.invalid;transport=ws>;expires=120;received="sip:10.1.2.229:50906;transport=WS";pub-gruu="sip:101 at 10.1.20.40;gr=urn:uuid:beb-68a9-6396e5f4";temp-gruu="sip:uloc-5033344d-5211-1-1de173 at 10.1.20.40;gr";+sip.instance="<urn:uuid:beb-68a9-6396e5f4>";reg-id=98
> Server: kamailio (3.4.0-dev3 (i386/linux))
> Content-Length: 0
>
>
> SENT:
> INVITE sip:102 at 10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bKOIosJ8TMPgvfHme6NIm4GSn24Fu7f7
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 1 INVITE
> Max-Forwards: 70
> Supported: path, outbound, gruu
> Contact: <sip:101 at KMkjMf37lVeM.invalid;transport=ws
> 	;gr=urn:uuid:beb-68a9-6396e5f4;ob>
> Content-Type: application/sdp
>
>
> RESPONSE:
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/WS
>
> KMkjMf37lVeM.invalid;branch=z9hG4bKOIosJ8TMPgvfHme6NIm4GSn24Fu7f7;rport=50906;received=10.1.2.229
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.f545
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 1 INVITE
> Proxy-Authenticate: Digest realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re"
> Server: kamailio (3.4.0-dev3 (i386/linux))
> Content-Length: 0
>
>
> SENT:
> ACK sip:102 at 10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bKAmmLhK71tr2QoAiV9f5QmdKF9dGkke
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.f545
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 1 ACK
> Max-Forwards: 70
> Supported: path, outbound, gruu
>
>
> SENT:
> INVITE sip:102 at 10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bK1GRkmlTVo7Cb4fg8OMe9g39g096hmn
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 2 INVITE
> Max-Forwards: 70
> Supported: path, outbound, gruu
> Contact: <sip:101 at KMkjMf37lVeM.invalid;transport=ws
> 	;gr=urn:uuid:beb-68a9-6396e5f4;ob>
> Proxy-Authorization: Digest username="101", realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re", opaque="",
> uri="sip:102 at 10.1.20.40", response= "f4bbe128abf3acb3a4e11882749d8798"
> Content-Type: application/sdp
>
>
> RESPONSE:
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/WS
>
> KMkjMf37lVeM.invalid;branch=z9hG4bK1GRkmlTVo7Cb4fg8OMe9g39g096hmn;rport=50906;received=10.1.2.229
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.0007
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 2 INVITE
> Proxy-Authenticate: Digest realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re"
> Server: kamailio (3.4.0-dev3 (i386/linux))
> Content-Length: 0
>
>
> SENT:
> ACK sip:102 at 10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bKG9v5g7i1LNsoVGo18ULlgqdA1EcFGb
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.0007
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 2 ACK
> Max-Forwards: 70
> Supported: path, outbound, gruu
>
>
> SENT:
> INVITE sip:102 at 10.1.20.40 SIP/2.0
> Via: SIP/2.0/WS
> KMkjMf37lVeM.invalid;branch=z9hG4bK8cie6bGSG0eOGh7Ne08Ro4CS1hI0oJ
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 3 INVITE
> Max-Forwards: 70
> Supported: path, outbound, gruu
> Contact: <sip:101 at KMkjMf37lVeM.invalid;transport=ws
> 	;gr=urn:uuid:beb-68a9-6396e5f4;ob>
> Proxy-Authorization: Digest username="101", realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4Re", opaque="",
> uri="sip:102 at 10.1.20.40", response= "f4bbe128abf3acb3a4e11882749d8798"
> Content-Type: application/sdp
>
>
> RESPONSE:
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/WS
>
> KMkjMf37lVeM.invalid;branch=z9hG4bK8cie6bGSG0eOGh7Ne08Ro4CS1hI0oJ;rport=50906;received=10.1.2.229
> From: sip:101 at 10.1.20.40;tag=3U0osO4h3h2bgCrvnCqO
> To: sip:102 at 10.1.20.40;tag=9de7b31b15b69da019f867d4866ff286.b1f7
> Call-ID: 9KoKnFdh285k2jg4
> CSeq: 3 INVITE
> Proxy-Authenticate: Digest realm="10.1.20.40",
> nonce="UDND2VAzQq0Tz8wvIFWNh2eYRxdtu4
> Re"
> Server: kamailio (3.4.0-dev3 (i386/linux))
> Content-Length: 0
>
>
> .......and so on in an endless loop with 407 requests
>
> Thanks a lot
>
> Kind Regards
>
> --
>      --DAVID--
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>
> --
> Peter Dunkley
> Technical Director
> Crocodile RCS Ltd
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>