[SR-Users] [Solved] REGISTER OK but on send "407 Proxy Authentication Required" with no ACK

[Carsten Maass]

Hi Andrew,

problem solved. I changed the outbound CID in t38modem to match the
subscriber ID in Kamailio and now the authentication succeeds and the
calls pass through.

Thanks a lot for sending me on the right path and your valuable time.

Cheers,
Carsten.


On 29.01.2013 20:25, Carsten Maass wrote:
> Hi Andrew,
> 
> On 29.01.2013 17:52, Carsten Maass wrote:
>> On 29.01.2013 17:31, Andrew Pogrebennyk wrote:
>>> It looks like the challenge is generated by the config line 721 - could
>>> you post somewhere what is in there (or your whole config)?
>>>
>>>  5(31487) DEBUG: auth [api.c:218]: check_response: Authorization is OK
>>> [...]
>>>  5(31487) ERROR: *** cfgtrace: c=[//etc/kamailio/kamailio.cfg] l=721
>>> a=27 n=auth_challenge
> 
> if I comment out the offending code block around line 721
> 
>                 # authenticate requests
>                 if (!auth_check("$fd", "subscriber", "1")) {
>                         auth_challenge("$fd", "0");
>                         exit;
>                 }
> 
> the call indeed passes through.
> 
> What I learned from
> 
> http://kamailio.org/dokuwiki/doku.php/pseudovariables:3.1.x
> 
> the pseudo-variable $fd references to domain in URI of 'From' header,
> which in this case is
> 
> From: "root" <sip:030123456789 at 10.1.1.148:5123>
> 
> Does this mean, the authentication is rejected because the domain part
> of the URI is identical to the one from Kamailio?
> 
> Or does it mean, the authentication is rejected because the local part
> 030123456789 in URI does not match the subscriber 979?
> 
> 
> Greetings,
> Carsten.
> 
> 


-- 
Blinkenlichten (Maass & Sacha GbR) - Open Source Solutions
Weigandufer 45 - 12059 Berlin - http://www.blinkenlichten.de
FON: ++49 +30 13896247 - MAIL: cm at blinkenlichten.de
FAX: ++49 +30 13896249 - PGP:  Key Id 0x2CBCA806
St.Nr. 16/274/61636