[SR-Users] UAC authentication

Daniel-Constantin Mierla miconda at gmail.com
Fri Jan 20 16:28:32 CET 2017


To understand properly -- you don't have access to the user profile at
all? The server where the registration is forwarded is not managed by you?

Cheers,
Daniel


On 20/01/2017 13:50, anfecora wrote:
> Thank you Daniel. It will work if i have username and password in db
> or something else.
>
> In this case i am getting the register from the sip client and i dont
> have the passwd but i need to forward it somehow via uac and on
> challenge pass it back to the sip client.
>
> I have done this with $du and works but when an invite comes from the
> b side(sbc) to the a side(thesip client) there is no aor or anything i
> can lookup to pass it along. Which is what i am trying to resolve.
>
> The sbc do not support path and ob header correctly. And cries when it
> gets any ipv6 address.
>
> On Jan 20, 2017 12:41 AM, "Daniel-Constantin Mierla"
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     Hello,
>
>     you have to set authentication username and password inside the
>     $uac_req(...) -- see the attributes for it at:
>
>       -
>     https://www.kamailio.org/wiki/cookbooks/4.4.x/pseudovariables#uac_req_key
>     <https://www.kamailio.org/wiki/cookbooks/4.4.x/pseudovariables#uac_req_key>
>
>     Cheers,
>     Daniel
>
>
>     On 20/01/2017 07:26, anfecora wrote:
>>     can someone please guide me where to find the usage of auc
>>     module, thanks in advance.
>>
>>     I am registering the uac in one end then i want to forward that
>>     registration to an external registrar, if i use $du some domain,
>>     some of the ipv6 info is going to be forwarded, i need to make it
>>     look more like an a b2bua than a outbound proxy therefore i need
>>     to use the auc module(also i need to cover all ipv6 info since i
>>     am proxying from ipv4 to ipv6).
>>
>>     i am able to register the client to kamailio, then kamailio send
>>     the registration to the external registrar, but when the
>>     registrar sends back the challenge uac does not reply, any ideas
>>     how can achieve this.
>>
>>     uac(linphone etc) --registration--->kamailio(registrar
>>     module)------register(uac)--->SBC
>>
>>     sbc----invite---->kamailio(lookup)---------invite---->uac(linphone
>>     etc)
>>
>>     this is the code i am using.
>>
>>
>>
>>     # Handle SIP registrations
>>     route[REGISTRAR] {
>>     xlog("REGISTERING ");
>>             if (is_method("REGISTER"))
>>             {
>>                     if(isflagset(FLT_NATS))
>>                     {
>>                             setbflag(FLB_NATB);
>>                             # uncomment next line to do SIP NAT pinging
>>                             ## setbflag(FLB_NATSIPPING);
>>                     }
>>                     if(af==INET6)
>>                             setbflag(FLB_IPV6);
>>     xlog("IT IS  IPV6");
>>                     if (!save("location"))
>>                             sl_reply_error();
>>     route(REGSBCFWD);
>>             exit;
>>             }
>>     }
>>
>>     route[REGSBCFWD]{
>>     xlog("CREATING OTHER LEG TO THE SBC");
>>     if(!is_method("REGISTER"))
>>             {
>>                     return;
>>             }
>>     xlog("CREATING PACKAGE $si -- $fU-- $au--$du-- $tU --$ru");
>>
>>             $var(rip) = "sip.somedomain.com <http://sip.somedomain.com>";
>>             $uac_req(method)="REGISTER";
>>             $uac_req(ruri)="sip:" + $var(rip) + ":" + "5060";
>>             $uac_req(furi)="sip:" + $tU + "@" + $var(rip);
>>             $uac_req(turi)="sip:" + $tU + "@" + $var(rip);
>>             $uac_req(hdrs)="Contact: <sip:" + $tU + "@"
>>                                     + "10.0.0.222"
>>                                     + ":" "5060" + ">\r\n";
>>             if($sel(contact.expires) != $null)
>>                     $uac_req(hdrs)= $uac_req(hdrs) + "Expires: " +
>>     $sel(contact.expires) + "\r\n";
>>             else
>>                     $uac_req(hdrs)= $uac_req(hdrs) + "Expires: " +
>>     $hdr(Expires) + "\r\n";
>>             uac_req_send();
>>
>>
>>
>>                     }
>>
>>
>>
>>
>>
>>     REGISTER sip:sip.somedomain.com:5060
>>     <http://sip.somedomain.com:5060> SIP/2.0.
>>     Via: SIP/2.0/UDP
>>     10.0.0.222:5060;branch=z9hG4bK285f.13a7f0c0000000000000000000000000.0.
>>     To: <sip:14052423 at sip.somedomain.com
>>     <mailto:sip%3A14052423 at sip.somedomain.com>>.
>>     From: <sip:14052423 at sip.somedomain.com
>>     <mailto:sip%3A14052423 at sip.somedomain.com>>;tag=a82eaf71666096790d1397845fbd3254-ebaa.
>>     CSeq: 10 REGISTER.
>>     Call-ID: 357e21ae51d8416d-26605 at 10.0.0.222
>>     <mailto:357e21ae51d8416d-26605 at 10.0.0.222>.
>>     Max-Forwards: 70.
>>     Content-Length: 0.
>>     User-Agent: kamailio (4.4.4 (x86_64/linux)).
>>     Contact: <sip:140524 at 10.0.0.222:5060
>>     <http://sip:140524@10.0.0.222:5060>>.
>>     Expires: 3600.
>>     .
>>
>>
>>
>>     SIP/2.0 401 Unauthorized.
>>     Via: SIP/2.0/UDP
>>     10.0.0.222:5060;branch=z9hG4bK4b53.ad842757000000000000000000000000.0.
>>     To: <sip:14052423 at sip.somedomain.com
>>     <mailto:sip%3A14052423 at sip.somedomain.com>>.
>>     From: <sip:14052423 at sip.somedomain.com
>>     <mailto:sip%3A14052423 at sip.somedomain.com>>;tag=a82eaf71666096790d1397845fbd3254-37da.
>>     Call-ID: 357e21ae51d8416d-26603 at 10.0.0.222
>>     <mailto:357e21ae51d8416d-26603 at 10.0.0.222>.
>>     CSeq: 10 REGISTER.
>>     WWW-Authenticate: Digest realm="sip.somedomain.com
>>     <http://sip.somedomain.com>",
>>     nonce="f5831435-3e69-4b78-ab6d-dcb0897e477b", algorithm=MD5,
>>     qop="auth".
>>     User-Agent: somedomain.com <http://somedomain.com> Host:some proxy.
>>     Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,
>>     REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE.
>>     Content-Length: 0.
>>     .
>>
>>
>>     _______________________________________________
>>     SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>     sr-users at lists.sip-router.org <mailto:sr-users at lists.sip-router.org>
>>     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>     <http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users>
>
>     -- 
>     Daniel-Constantin Mierla
>     www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>     Kamailio World Conference - May 8-10, 2017 - www.kamailioworld.com <http://www.kamailioworld.com>
>
>     _______________________________________________ SIP Express Router
>     (SER) and Kamailio (OpenSER) - sr-users mailing list
>     sr-users at lists.sip-router.org
>     <mailto:sr-users at lists.sip-router.org>
>     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>     <http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users> 
>
-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - Mar 6-8 (Europe) and Mar 20-22 (USA) - www.asipto.com
Kamailio World Conference - May 8-10, 2017 - www.kamailioworld.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20170120/d62f31a6/attachment.html>


More information about the sr-users mailing list