[SR-Users] 407 Proxy Authentication Required with Cisco

Daniel-Constantin Mierla miconda at gmail.com
Fri Jul 25 09:27:24 CEST 2014 

Hello,

it is asterisk that asks second time - kamailio is verifying the auth 
ok, then forwards to asterisk which asks again for authentication. Read 
the notes from the Asterisk Database section in the tuorial:

http://kb.asipto.com/asterisk:realtime:kamailio-4.0.x-asterisk-11.3.0-astdb#asterisk_database

You should not set the secret in asterisk table, but use another column 
to store the password.

Cheers,
Daniel

On 23/07/14 21:52, proLogika wrote:
> Hello,
> /I am using Kamailio as SIP register with asterisk integration describe from hire:/
> http://kb.asipto.com/asterisk:realtime:kamailio-4.0.x-asterisk-11.3.0-astdb  .
> asterisk is listen on public ip: 2.3.4.5:5060
> kamailio is listen on public ip: 1.2.3.4:5060
>
> everything is working well except some software VoIP clients (like 
> Yate) and CISCO phone like/ Cisco-CP7940G/8.0 /and the new one from 
> Cisco series. I’m testing now with Yate client and Cisco. They are 
> register OK but when a call is made Kamailio is answer back with 407 
> Proxy Authentication Required. When I register Yate or Cisco to 
> asterisk directly the call is passing normaly. I was trying to 
> manipulate kamailio.cfg and more specifically the part:
>
> #!ifdef WITH_ASTERISK
>
>                 if (!auth_check("$fd", "sipusers", "1")) {
>
> #!else
>
>                 if (!auth_check("$fd", "subscriber", "1")) {
>
> #!endif
>
>       auth_challenge("$fd", "0");
>
>       exit;
>
> If i commented out this part the call is passing, but I do not have 
> auth anymore (everyone can register)
>
> Here is ngrep:
>
> U 2014/07/23 19:17:08.108458 192.168.0.40:5060 -> 1.2.3.4:5060
>
> INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Max-Forwards: 20.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK1899510692.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 13 INVITE.
>
> User-Agent: YATE/5.3.0.
>
> Contact: <sip:10891 at 192.168.0.40:5060>.
>
> Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
>
> Content-Type: application/sdp.
>
> Content-Length: 481.
>
> .
>
> v=0.
>
> o=yate 1406132227 1406132227 IN IP4 192.168.0.40.
>
> s=SIP Call.
>
> c=IN IP4 192.168.0.40.
>
> t=0 0.
>
> m=audio 29696 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
>
> a=rtpmap:0 PCMU/8000.
>
> a=rtpmap:8 PCMA/8000.
>
> a=rtpmap:11 L16/8000.
>
> a=rtpmap:98 iLBC/8000.
>
> a=fmtp:98 mode=20.
>
> a=rtpmap:97 iLBC/8000.
>
> a=fmtp:97 mode=30.
>
> a=rtpmap:102 SPEEX/8000.
>
> a=rtpmap:103 SPEEX/16000.
>
> a=rtpmap:104 SPEEX/32000.
>
> a=rtpmap:105 iSAC/16000.
>
> a=rtpmap:106 iSAC/32000.
>
> a=rtpmap:101 telephone-event/8000.
>
> a=ptime:30.
>
>
>
> U 2014/07/23 19:17:08.108805 1.2.3.4:5060 -> 192.168.0.40:5060
>
> SIP/2.0 407 Proxy Authentication Required.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK1899510692.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=6be166fd53062bbc5b6dd79656b620cd.1950.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 13 INVITE.
>
> Proxy-Authenticate: Digest realm="1.2.3.4", 
> nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I".
>
> Server: kamailio (4.0.6 (x86_64/linux)).
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.128626 192.168.0.40:5060 -> 1.2.3.4:5060
>
> ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK1899510692.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=6be166fd53062bbc5b6dd79656b620cd.1950.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 13 ACK.
>
> Max-Forwards: 20.
>
> Contact: <sip:10891 at 192.168.0.40:5060>.
>
> User-Agent: YATE/5.3.0.
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.129076 192.168.0.40:5060 -> 1.2.3.4:5060
>
> INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Max-Forwards: 20.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> User-Agent: YATE/5.3.0.
>
> Contact: <sip:10891 at 192.168.0.40:5060>.
>
> Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
>
> CSeq: 14 INVITE.
>
> Proxy-Authorization: Digest username="10891", realm="1.2.3.4", 
> nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I", 
> uri="sip:0896995837 at 1.2.3.4", 
> response="b96eebd48b3734e1d018a970fa3a2283", algorithm=MD5.
>
> Content-Type: application/sdp.
>
> Content-Length: 481.
>
> .
>
> v=0.
>
> o=yate 1406132227 1406132227 IN IP4 192.168.0.40.
>
> s=SIP Call.
>
> c=IN IP4 192.168.0.40.
>
> t=0 0.
>
> m=audio 29696 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
>
> a=rtpmap:0 PCMU/8000.
>
> a=rtpmap:8 PCMA/8000.
>
> a=rtpmap:11 L16/8000.
>
> a=rtpmap:98 iLBC/8000.
>
> a=fmtp:98 mode=20.
>
> a=rtpmap:97 iLBC/8000.
>
> a=fmtp:97 mode=30.
>
> a=rtpmap:102 SPEEX/8000.
>
> a=rtpmap:103 SPEEX/16000.
>
> a=rtpmap:104 SPEEX/32000.
>
> a=rtpmap:105 iSAC/16000.
>
> a=rtpmap:106 iSAC/32000.
>
> a=rtpmap:101 telephone-event/8000.
>
> a=ptime:30.
>
>
>
> U 2014/07/23 19:17:08.129622 1.2.3.4:5060 -> 192.168.0.40:5060
>
> SIP/2.0 100 trying -- your call is important to us.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 14 INVITE.
>
> Server: kamailio (4.0.6 (x86_64/linux)).
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.130107 1.2.3.4:5060 -> 2.3.4.5:5060
>
> INVITE sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Record-Route: <sip:1.2.3.4;lr=on;ftag=838449717;nat=yes>.
>
> Max-Forwards: 16.
>
> Via: SIP/2.0/UDP 
> 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> User-Agent: YATE/5.3.0.
>
> Contact: <sip:10891 at 192.168.0.40:5060>.
>
> Allow: ACK, INVITE, BYE, CANCEL, OPTIONS, INFO.
>
> CSeq: 14 INVITE.
>
> Content-Type: application/sdp.
>
> Content-Length: 499.
>
> .
>
> v=0.
>
> o=yate 1406132227 1406132227 IN IP4 1.2.3.4.
>
> s=SIP Call.
>
> c=IN IP4 1.2.3.4.
>
> t=0 0.
>
> m=audio 21888 RTP/AVP 0 8 11 98 97 102 103 104 105 106 101.
>
> a=rtpmap:0 PCMU/8000.
>
> a=rtpmap:8 PCMA/8000.
>
> a=rtpmap:11 L16/8000.
>
> a=rtpmap:98 iLBC/8000.
>
> a=fmtp:98 mode=20.
>
> a=rtpmap:97 iLBC/8000.
>
> a=fmtp:97 mode=30.
>
> a=rtpmap:102 SPEEX/8000.
>
> a=rtpmap:103 SPEEX/16000.
>
> a=rtpmap:104 SPEEX/32000.
>
> a=rtpmap:105 iSAC/16000.
>
> a=rtpmap:106 iSAC/32000.
>
> a=rtpmap:101 telephone-event/8000.
>
> a=ptime:30.
>
> a=nortpproxy:yes.
>
>
>
> U 2014/07/23 19:17:08.130593 2.3.4.5:5060 -> 1.2.3.4:5060
>
> SIP/2.0 401 Unauthorized.
>
> Via: SIP/2.0/UDP 
> 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0;received=1.2.3.4;rport=5060.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 14 INVITE.
>
> Server: Asterisk PBX 1.8.29.0.
>
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, 
> INFO, PUBLISH, MESSAGE.
>
> Supported: replaces, timer.
>
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", 
> nonce="7531867c".
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.130770 1.2.3.4:5060 -> 2.3.4.5:5060
>
> ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Max-Forwards: 16.
>
> Via: SIP/2.0/UDP 
> 1.2.3.4;branch=z9hG4bK73f1.c43865a50d7a342a46dcebf824782de0.0.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 14 ACK.
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.131361 1.2.3.4:5060 -> 192.168.0.40:5060
>
> SIP/2.0 401 Unauthorized.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport=5060;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 14 INVITE.
>
> Server: Asterisk PBX 1.8.29.0.
>
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, 
> INFO, PUBLISH, MESSAGE.
>
> Supported: replaces, timer.
>
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", 
> nonce="7531867c".
>
> Content-Length: 0.
>
> .
>
>
>
> U 2014/07/23 19:17:08.149847 192.168.0.40:5060 -> 1.2.3.4:5060
>
> ACK sip:0896995837 at 1.2.3.4 SIP/2.0.
>
> Via: SIP/2.0/UDP 192.168.0.40:5060;rport;branch=z9hG4bK302777344.
>
> From: <sip:10891 at 1.2.3.4>;tag=838449717.
>
> To: <sip:0896995837 at 1.2.3.4>;tag=as31a58bb2.
>
> Call-ID: 931919626 at 1.2.3.4.
>
> CSeq: 14 ACK.
>
> Max-Forwards: 20.
>
> Contact: <sip:10891 at 192.168.0.40:5060>.
>
> Proxy-Authorization: Digest username="10891", realm="1.2.3.4", 
> nonce="U8/hMFPP4AR+N3A+ZccNiTw6rV9JTq1I", 
> uri="sip:0896995837 at 1.2.3.4", 
> response="b96eebd48b3734e1d018a970fa3a2283", algorithm=MD5.
>
> User-Agent: YATE/5.3.0.
>
> Content-Length: 0.
>
> —
>
> And kamailio.cfg attached:
>
> proLogika
> Sent with Airmail
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla - http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20140725/e76a9a8e/attachment.html>

More information about the sr-users mailing list