[SR-Users] SIP Autentication Failed
Daniel-Constantin Mierla
miconda at gmail.com
Wed Mar 9 10:52:39 CET 2016
Hello,
do you have WITH_ASTERISK defined? If yes, is the asterisk database
having a subscriber table where you keep the usernames and passwords?
Cheers,
Daniel
On 09/03/16 09:09, Bruno Henrique Gomes Gouvêa wrote:
>
> Hello,
>
> Params here:
>
> # ----- auth_db params -----
> #!ifdef WITH_AUTH modparam("auth_db", "calculate_ha1", yes)
> modparam("auth_db", "load_credentials", "")
> #!ifdef WITH_ASTERISK
> # subscriber table is actually a view in DBASTURL
> modparam("auth_db", "use_domain", 1)
> modparam("auth_db", "db_url", DBASTURL)
> modparam("auth_db", "version_table", 0) #!else
> modparam("auth_db", "db_url", DBURL) modparam("auth_db",
> "password_column", "password") modparam("auth_db", "use_domain",
> MULTIDOMAIN)
> #!endif
>
> Call auth function:
>
> if (!auth_check("$fd", "subscriber", "0")) {
> auth_challenge("$fd", "0")
>
> Thank you
>
> Em 9 de mar de 2016 03:56, "Daniel-Constantin Mierla"
> <miconda at gmail.com <mailto:miconda at gmail.com>> escreveu:
>
> Hello,
>
> apparently it is ok in database table -- can you send here the
> modparams for auth_db module and the piece of config how you
> execute the auth_check() function?
>
> Cheers,
> Daniel
>
> On 08/03/16 20:33, Bruno Henrique Gomes Gouvêa wrote:
>> Hello,
>>
>>
>> Record in subscriber table, i cant see any problem:
>> +-----------------------------+---------------------+---------------+------+
>> | username | domain |
>> ha1| ha1b |
>> +-----------------------------+---------------------+---------------+------+
>> |101_pabx999999.ligou.me
>> <http://101_pabx999999.ligou.me/>|pabx999999.ligou.me
>> <http://pabx999999.ligou.me/>|xyz|NULL|
>>
>>
>> Thank you.
>>
>> --------------------------------------------
>>
>> Bruno H. G. Gouvêa
>>
>> CEO - CiberCloud LTDA
>> http://cibercloud.com.br <http://cibercloud.com.br/>
>> http://ligou.me <http://ligou.me/>
>>
>>
>> ---
>> Bruno H. G. Gouvêa
>>
>>
>> Tel.: (31)99554646 <tel:%2831%2999554646>
>> ---
>>
>>
>> 2016-03-08 12:36 GMT-03:00 Daniel-Constantin Mierla
>> <miconda at gmail.com <mailto:miconda at gmail.com>>:
>>
>> Hello,
>>
>> On 08/03/16 09:27, Bruno Henrique Gomes Gouvêa wrote:
>>> Hello,
>>>
>>> Here new debug:
>>>
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: ERROR: ***
>>> cfgtrace: c=[//etc/kamailio/kamailio.cfg] l=946 a=25 n=xlog
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: ERROR: <script>:
>>> ==== handling REGISTER
>>> (MmQwNzk0ZGFlNjhkYzRkNWY5ZjNhNTk3MGRjZTk2MzE.) for
>>> authorization: Digest username="101_pabx999999.ligou.me
>>> <http://101_pabx999999.ligou.me>",realm="pabx999999.ligou.me
>>> <http://pabx999999.ligou.me>",nonce="Vt6NklbejGavaQRaSAso12UuHhzekp65",uri="sip:pabx999999.ligou.me
>>> <http://pabx999999.ligou.me>;transport=UDP",response="09b0c6dbd9776505fd9592b224234033",algorithm=MD5
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: ERROR: ***
>>> cfgtrace: c=[//etc/kamailio/kamailio.cfg] l=954 a=16 n=if
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: ERROR: ***
>>> cfgtrace: c=[//etc/kamailio/kamailio.cfg] l=947 a=27
>>> n=auth_check
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: auth_db
>>> [authorize.c:486]: auth_check(): realm [pabx999999.ligou.me
>>> <http://pabx999999.ligou.me>] table [subscriber] flags [0]
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: auth
>>> [api.c:96]: pre_auth(): auth: digest-algo: MD5 parsed value: 1
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: <core>
>>> [db_res.c:118]: db_new_result(): allocate 56 bytes for
>>> result set at 0x7fa80fa86148
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG:
>>> db_unixodbc [res.c:63]: db_unixodbc_get_columns(): 1 columns
>>> returned from the query
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: <core>
>>> [db_res.c:155]: db_allocate_columns(): allocate 8 bytes for
>>> result names at 0x7fa80fa730a0
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: <core>
>>> [db_res.c:165]: db_allocate_columns(): allocate 4 bytes for
>>> result types at 0x7fa80fa72de8
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG:
>>> db_unixodbc [res.c:80]: db_unixodbc_get_columns(): allocate
>>> 16 bytes for RES_NAMES[0] at 0x7fa80fa84400
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG:
>>> db_unixodbc [res.c:100]: db_unixodbc_get_columns():
>>> RES_NAMES(0x7fa80fa84400)[0]=[ha1]
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG:
>>> db_unixodbc [res.c:139]: db_unixodbc_get_columns(): use
>>> DB1_STRING result type
>>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: auth_db
>>> [authorize.c:184]: get_ha1(): no result for user
>>> '101_pabx999999.ligou.me at pabx999999.ligou.me
>>> <mailto:101_pabx999999.ligou.me at pabx999999.ligou.me>'
>>
>> the last log message is now relevant, respectively:
>>
>> Mar 8 03:25:10 p /usr/sbin/kamailio[1681]: DEBUG: auth_db
>> [authorize.c:184]: get_ha1(): no result for user
>> '101_pabx999999.ligou.me at pabx999999.ligou.me
>> <mailto:101_pabx999999.ligou.me at pabx999999.ligou.me>'
>>
>> Meaning that the record for that user was not found in
>> subscriber table. Can you share the record in subscriber
>> table for this user (replace the password fields with xyz)?
>>
>> Cheers,
>> Daniel
>>
>> --
>> Daniel-Constantin Mierla
>> http://www.asipto.comhttp://twitter.com/#!/miconda
>> <http://twitter.com/#%21/miconda> -
>> http://www.linkedin.com/in/miconda
>> Kamailio World Conference, Berlin, May 18-20, 2016 - http://www.kamailioworld.com
>>
>>
>
> --
> Daniel-Constantin Mierla
> http://www.asipto.com
> http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
> Kamailio World Conference, Berlin, May 18-20, 2016 - http://www.kamailioworld.com
>
--
Daniel-Constantin Mierla
http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio World Conference, Berlin, May 18-20, 2016 - http://www.kamailioworld.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160309/20bf1fbb/attachment.html>
More information about the sr-users
mailing list