[SR-Users] 407 Proxy Authentication Required with Cisco

Wed Jul 23 21:52:22 CEST 2014

Hello,
I am using Kamailio as SIP register with asterisk integration describe from hire: http://kb.asipto.com/asterisk:realtime:kamailio-4.0.x-asterisk-11.3.0-astdb .
asterisk is listen on public ip: 2.3.4.5:5060
kamailio is listen on public ip: 1.2.3.4:5060

everything is working well except some software VoIP clients (like Yate) and CISCO phone like Cisco-CP7940G/8.0 and the new one from Cisco series. I’m testing now with Yate client and Cisco. They are register OK but when a call is made Kamailio is answer back with 407 Proxy Authentication Required. When I register Yate or Cisco to asterisk directly the call is passing normaly. I was trying to manipulate kamailio.cfg and more specifically the part: 
#!ifdef WITH_ASTERISK
                if (!auth_check("$fd", "sipusers", "1")) {
#!else
                if (!auth_check("$fd", "subscriber", "1")) {
#!endif
                        auth_challenge("$fd", "0");
                        exit;

If i commented out this part the call is passing, but I do not have auth anymore (everyone can register) 

Here is ngrep:
U 2014/07/23 19:17:08.108458 192.168.0.40:5060 -> 1.2.3.4:5060
INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
Max-Forwards: 20.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK1899510692.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 13 INVITE.
User-Agent: YATE/5.3.0.
Contact: <sip:10891 at 192.168.0.40:5060>.
Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
Content-Type: application/sdp.
Content-Length: 481.
.
v=0.
o=yate 1406132227 1406132227 IN IP4 192.168.0.40.
s=SIP Call.
c=IN IP4 192.168.0.40.
t=0 0.
m=audio 29696 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
a=rtpmap:0 PCMU/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:11 L16/8000.
a=rtpmap:98 iLBC/8000.
a=fmtp:98 mode=20.
a=rtpmap:97 iLBC/8000.
a=fmtp:97 mode=30.
a=rtpmap:102 SPEEX/8000.
a=rtpmap:103 SPEEX/16000.
a=rtpmap:104 SPEEX/32000.
a=rtpmap:105 iSAC/16000.
a=rtpmap:106 iSAC/32000.
a=rtpmap:101 telephone-event/8000.
a=ptime:30.

U 2014/07/23 19:17:08.108805 1.2.3.4:5060 -> 192.168.0.40:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK1899510692.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=6be166fd53062bbc5b6dd79656b620cd.1950.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 13 INVITE.
Proxy-Authenticate: Digest realm="1.2.3.4", nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I".
Server: kamailio (4.0.6 (x86_64/linux)).
Content-Length: 0.
.

U 2014/07/23 19:17:08.128626 192.168.0.40:5060 -> 1.2.3.4:5060
ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK1899510692.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=6be166fd53062bbc5b6dd79656b620cd.1950.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 13 ACK.
Max-Forwards: 20.
Contact: <sip:10891 at 192.168.0.40:5060>.
User-Agent: YATE/5.3.0.
Content-Length: 0.
.

U 2014/07/23 19:17:08.129076 192.168.0.40:5060 -> 1.2.3.4:5060
INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
Max-Forwards: 20.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>.
Call-ID: 931919626 at 1.2.3.4.
User-Agent: YATE/5.3.0.
Contact: <sip:10891 at 192.168.0.40:5060>.
Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
CSeq: 14 INVITE.
Proxy-Authorization: Digest username="10891", realm="1.2.3.4", nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I", uri="sip:0896995837 at 1.2.3.4", response="b96eebd48b3734e1d018a970fa3a2283", algorithm=MD5.
Content-Type: application/sdp.
Content-Length: 481.
.
v=0.
o=yate 1406132227 1406132227 IN IP4 192.168.0.40.
s=SIP Call.
c=IN IP4 192.168.0.40.
t=0 0.
m=audio 29696 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
a=rtpmap:0 PCMU/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:11 L16/8000.
a=rtpmap:98 iLBC/8000.
a=fmtp:98 mode=20.
a=rtpmap:97 iLBC/8000.
a=fmtp:97 mode=30.
a=rtpmap:102 SPEEX/8000.
a=rtpmap:103 SPEEX/16000.
a=rtpmap:104 SPEEX/32000.
a=rtpmap:105 iSAC/16000.
a=rtpmap:106 iSAC/32000.
a=rtpmap:101 telephone-event/8000.
a=ptime:30.

U 2014/07/23 19:17:08.129622 1.2.3.4:5060 -> 192.168.0.40:5060
SIP/2.0 100 trying -- your call is important to us.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 14 INVITE.
Server: kamailio (4.0.6 (x86_64/linux)).
Content-Length: 0.
.

U 2014/07/23 19:17:08.130107 1.2.3.4:5060 -> 2.3.4.5:5060
INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
Record-Route: <sip:1.2.3.4;lr=on;ftag=838449717;nat=yes>.
Max-Forwards: 16.
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>.
Call-ID: 931919626 at 1.2.3.4.
User-Agent: YATE/5.3.0.
Contact: <sip:10891 at 192.168.0.40:5060>.
Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
CSeq: 14 INVITE.
Content-Type: application/sdp.
Content-Length: 499.
.
v=0.
o=yate 1406132227 1406132227 IN IP4 1.2.3.4.
s=SIP Call.
c=IN IP4 1.2.3.4.
t=0 0.
m=audio 21888 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
a=rtpmap:0 PCMU/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:11 L16/8000.
a=rtpmap:98 iLBC/8000.
a=fmtp:98 mode=20.
a=rtpmap:97 iLBC/8000.
a=fmtp:97 mode=30.
a=rtpmap:102 SPEEX/8000.
a=rtpmap:103 SPEEX/16000.
a=rtpmap:104 SPEEX/32000.
a=rtpmap:105 iSAC/16000.
a=rtpmap:106 iSAC/32000.
a=rtpmap:101 telephone-event/8000.
a=ptime:30.
a=nortpproxy:yes.

U 2014/07/23 19:17:08.130593 2.3.4.5:5060 -> 1.2.3.4:5060
SIP/2.0 401 Unauthorized.
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0;received=1.2.3.4;rport=5060.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 14 INVITE.
Server: Asterisk PBX 1.8.29.0.
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE.
Supported: replaces, timer.
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="7531867c".
Content-Length: 0.
.

U 2014/07/23 19:17:08.130770 1.2.3.4:5060 -> 2.3.4.5:5060
ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
Max-Forwards: 16.
Via: SIP/2.0/UDP 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 14 ACK.
Content-Length: 0.
.

U 2014/07/23 19:17:08.131361 1.2.3.4:5060 -> 192.168.0.40:5060
SIP/2.0 401 Unauthorized.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 14 INVITE.
Server: Asterisk PBX 1.8.29.0.
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE.
Supported: replaces, timer.
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="7531867c".
Content-Length: 0.
.

U 2014/07/23 19:17:08.149847 192.168.0.40:5060 -> 1.2.3.4:5060
ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK302777344.
From: <sip:10891 at 1.2.3.4>;tag=838449717.
To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
Call-ID: 931919626 at 1.2.3.4.
CSeq: 14 ACK.
Max-Forwards: 20.
Contact: <sip:10891 at 192.168.0.40:5060>.
Proxy-Authorization: Digest username="10891", realm="1.2.3.4", nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I", uri="sip:0896995837 at 1.2.3.4", response="b96eebd48b3734e1d018a970fa3a2283", algorithm=MD5.
User-Agent: YATE/5.3.0.
Content-Length: 0.
— 

And kamailio.cfg attached:

proLogika
Sent with Airmail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20140723/73d42d97/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kamailio.cfg
Type: application/octet-stream
Size: 29507 bytes
Desc: not available
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20140723/73d42d97/attachment.obj>