[SR-Users] Problem with MSRP AUTH

Daniel-Constantin Mierla miconda at gmail.com
Wed Jun 11 17:55:40 CEST 2014


Are those all the log messages? Previously there were parsing errors in 
the logs you sent to me.

Get them with debug=3 in kamailio.cfg.

Cheers, Daniel

On 11/06/14 17:51, Muhammad Shahzad wrote:
> Many thanks for your time and help.
>
> I just tried with msrp:// scheme, still get same result,
>
> --
>     MSRP nv755d8c AUTH
> To-Path: msrp://ms11.xyz.com <http://ms11.xyz.com>
> From-Path: msrp://xe4a9fqm.invalid:2855/bcuf2gk7co;ws
> -------nv755d8c$
>
>
> MSRP nv755d8c 401 Unauthorized
> To-Path: msrp://xe4a9fqm.invalid:2855/bcuf2gk7co;ws
> From-Path: msrp://ms11.xyz.com <http://ms11.xyz.com>
> WWW-Authenticate: Digest realm="ms11.xyz.com <http://ms11.xyz.com>", 
> nonce="U5h6tVOYeYl9e9/eI5iLI40pB4IJ4i+pE1crsYA="
> -------nv755d8c$
>
>
> MSRP 5bn8rwst AUTH
> To-Path: msrp://ms11.xyz.com <http://ms11.xyz.com>
> From-Path: msrp://xe4a9fqm.invalid:2855/bcuf2gk7co;ws
> Authorization: Digest username="233100001176", realm="ms11.xyz.com 
> <http://ms11.xyz.com>", 
> nonce="U5h6tVOYeYl9e9/eI5iLI40pB4IJ4i+pE1crsYA=", 
> uri="msrp://ms11.xyz.com <http://ms11.xyz.com>", 
> response="2e03beb2c438548e91a4a21fb2b68c19"
> -------5bn8rwst$
>
>
> MSRP 5bn8rwst 401 Unauthorized
> To-Path: msrp://xe4a9fqm.invalid:2855/bcuf2gk7co;ws
> From-Path: msrp://ms11.xyz.com <http://ms11.xyz.com>
> WWW-Authenticate: Digest realm="ms11.xyz.com <http://ms11.xyz.com>", 
> nonce="U5h6tVOYeYmtyBVYHDeFOHDsXxftwsG/E1cssoA="
> -------5bn8rwst$
>
> --
>
> Here are kamailio logs,
>
> --
> INFO: <script>: WS handshake successful for '/' from 'x.x.x.x:52014' 
> to null
> ERROR: auth [auth_mod.c:690]: pv_www_authenticate2(): failed to get 
> method value
> INFO: <script>: Generated www authenticate header for MSRP is 
> [WWW-Authenticate: Digest realm="ms11.xyz.com <http://ms11.xyz.com>", 
> nonce="U5h6blOYeULQKGB/8QT4j0beeyTp6uzME1chp4A="#015#012]
> ERROR: auth [auth_mod.c:690]: pv_www_authenticate2(): failed to get 
> method value
> INFO: <script>: Generated www authenticate header for MSRP is 
> [WWW-Authenticate: Digest realm="ms11.xyz.com <http://ms11.xyz.com>", 
> nonce="U5h6blOYeUI7nPMjnqlOXlFC0PbX5E71E1ciqIA="#015#012]
> INFO: <script>: WebSocket connection from x.x.x.x:52014 has closed
> --
>
> Thank you.
>
>
>
> On Wed, Jun 11, 2014 at 5:36 PM, Daniel-Constantin Mierla 
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     The MSRP request is brocken, the value of To-Path header is
>     missing msrp:// scheme, it is like:
>
>     To-Path: ms11.xyz.com <http://ms11.xyz.com>
>
>     Should be like:
>
>     To-Path: msrp://ms11.xyz.com <http://ms11.xyz.com>
>
>     See also the From-Path for comparison.
>
>     Cheers,
>     Daniel
>
>
>     On 11/06/14 17:16, Daniel-Constantin Mierla wrote:
>>     Caught by other stuff, I didn't have time to analyze it. On my
>>     way right now...
>>
>>     Cheers,
>>     Daniel
>>
>>     On 10/06/14 16:22, Muhammad Shahzad wrote:
>>>     Any update? Do you need any additional info?
>>>
>>>     Thank you.
>>>
>>>
>>>
>>>
>>>     On Fri, Jun 6, 2014 at 11:29 PM, Muhammad Shahzad
>>>     <shaheryarkh at gmail.com <mailto:shaheryarkh at gmail.com>> wrote:
>>>
>>>         I have sent you logs to your private email separately, did
>>>         you get them?
>>>
>>>         Thank you.
>>>
>>>
>>>
>>>
>>>         On Fri, Jun 6, 2014 at 3:48 PM, Muhammad Shahzad
>>>         <shaheryarkh at gmail.com <mailto:shaheryarkh at gmail.com>> wrote:
>>>
>>>             OK sure. I will provide it tonight.
>>>
>>>             Thank you.
>>>
>>>
>>>
>>>
>>>             On Fri, Jun 6, 2014 at 2:48 PM, Daniel-Constantin Mierla
>>>             <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>>>
>>>                 In the code I couldn't spot what can be wrong at a
>>>                 quick look.
>>>
>>>                 Can you send the log messages with debug=3 in
>>>                 kamailio.cfg?
>>>
>>>                 Cheers,
>>>                 Daniel
>>>
>>>
>>>                 On 06/06/14 11:55, Muhammad Shahzad wrote:
>>>>                 Nope, just WS handshake message,
>>>>
>>>>                 INFO: <script>: WS handshake successful for '/'
>>>>                 from 'x.x.x.x:49509' to null.
>>>>
>>>>                 No warning or error before this for last 100 lines
>>>>                 of logs.
>>>>
>>>>                 Thank you.
>>>>
>>>>
>>>>
>>>>
>>>>                 On Fri, Jun 6, 2014 at 11:01 AM, Daniel-Constantin
>>>>                 Mierla <miconda at gmail.com
>>>>                 <mailto:miconda at gmail.com>> wrote:
>>>>
>>>>                     Hello,
>>>>
>>>>                     is there any other error message before the one
>>>>                     from auth module?
>>>>
>>>>                     Cheers,
>>>>                     Daniel
>>>>
>>>>
>>>>                     On 06/06/14 10:50, Muhammad Shahzad wrote:
>>>>>                     Hi,
>>>>>
>>>>>                     I am trying to authentication MSRP connection
>>>>>                     using the example code of msrp event route in
>>>>>                     module documentation here,
>>>>>
>>>>>                     http://kamailio.org/docs/modules/4.1.x/modules/msrp.html#idp119248
>>>>>
>>>>>                     --
>>>>>                     ...
>>>>>                       }else if ($msrp(method)=="AUTH") {
>>>>>                     ...
>>>>>                     if (!pv_www_authenticate("WEBRTC_SIP_REALM",
>>>>>                     "$var(passwd)", "0", "$msrp(method)"))
>>>>>                             {
>>>>>                       if
>>>>>                     (auth_get_www_authenticate("WEBRTC_SIP_REALM",
>>>>>                     "0", "$var(wauth)"))
>>>>>                       {
>>>>>                     xlog("L_INFO", "Generated www authenticate
>>>>>                     header for MSRP is [$var(wauth)] \n");
>>>>>                     msrp_reply("401", "Unauthorized", "$var(wauth)");
>>>>>                       } else {
>>>>>                     msrp_reply("500", "Internal Server Error");
>>>>>                       };
>>>>>                       exit;
>>>>>                     };
>>>>>                     ...
>>>>>                     --
>>>>>
>>>>>                     However i see in logs following error message
>>>>>                     and authentication fails,
>>>>>
>>>>>                     --
>>>>>                     ERROR: auth [auth_mod.c:690]:
>>>>>                     pv_www_authenticate2(): failed to get method value
>>>>>                     --
>>>>>
>>>>>                     Which is indicates that value of $msrp(method)
>>>>>                     is null. However, as you can see in example
>>>>>                     code in URL provided above we have an IF
>>>>>                     condition which explicitly checks
>>>>>                     $msrp(method) == "AUTH".
>>>>>
>>>>>                     For the sake of testing i even replaced the
>>>>>                     variable with actual string value, and still
>>>>>                     get the same error. So i am guessing it is a bug.
>>>>>
>>>>>                     What do you guys suggest?
>>>>>
>>>>>                     Kamailio: v4.1.3 (i386/linux) 236326
>>>>>                     MSRP Lib: Crocodile MSRP - v1.0.0
>>>>>
>>>>>                     Thank you.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>                     _______________________________________________
>>>>>                     SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>>>>                     sr-users at lists.sip-router.org  <mailto:sr-users at lists.sip-router.org>
>>>>>                     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>>>                     -- 
>>>>                     Daniel-Constantin Mierla -http://www.asipto.com
>>>>                     http://twitter.com/#!/miconda  <http://twitter.com/#%21/miconda>  -http://www.linkedin.com/in/miconda
>>>>
>>>>
>>>>                     _______________________________________________
>>>>                     SIP Express Router (SER) and Kamailio (OpenSER)
>>>>                     - sr-users mailing list
>>>>                     sr-users at lists.sip-router.org
>>>>                     <mailto:sr-users at lists.sip-router.org>
>>>>                     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>>>
>>>
>>>                 -- 
>>>                 Daniel-Constantin Mierla -http://www.asipto.com
>>>                 http://twitter.com/#!/miconda  <http://twitter.com/#%21/miconda>  -http://www.linkedin.com/in/miconda
>>>
>>>
>>>
>>>
>>
>>     -- 
>>     Daniel-Constantin Mierla -http://www.asipto.com
>>     http://twitter.com/#!/miconda  <http://twitter.com/#%21/miconda>  -http://www.linkedin.com/in/miconda
>
>     -- 
>     Daniel-Constantin Mierla -http://www.asipto.com
>     http://twitter.com/#!/miconda  <http://twitter.com/#%21/miconda>  -http://www.linkedin.com/in/miconda
>
>

-- 
Daniel-Constantin Mierla - http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20140611/7ae0d63c/attachment.html>


More information about the sr-users mailing list