[SR-Users] Kamailio 5.2.2 IMS authorization failed by the SCSCF

YASIN CANER caner_yaso at hotmail.com
Thu May 2 07:30:26 CEST 2019


Hello,

you should check


  *   check realm parameter on function
  *   check user information in hss

even if there is a nonce paremeter in auth header , it always gives this error.

Yasin CANER

________________________________
From: sr-users <sr-users-bounces at lists.kamailio.org> on behalf of Woscek, Martin W. <mwoscek at mitre.org>
Sent: Thursday, May 2, 2019 2:30 AM
To: Kamailio (SER) - Users Mailing List
Subject: [SR-Users] Kamailio 5.2.2 IMS authorization failed by the SCSCF


Hi,



We are getting a SIP 401 Unauthorized -Challenging the UE error originating by the SCSCF.  It looks to be related to the nonce/cnonce.

Is there something we have misconfigured in our SCSCF module?



Log output:



May  1 14:01:45 imskamailio /usr/local/sbin/kamailio[18489]: DEBUG: ims_auth [authorize.c:786]: authenticate(): Nonce or response missing: nonce len [-108158976], response16 len[1873606560]

May  1 14:01:45 imskamailio /usr/local/sbin/kamailio[18492]: DEBUG: ims_auth [utils.c:168]: get_nonce_response(): Calling find_credentials with realm [ims522.irisims.org]

May  1 14:01:45 imskamailio /usr/local/sbin/kamailio[18492]: DEBUG: ims_auth [utils.c:195]: get_nonce_response(): Found nonce response

May  1 14:01:45 imskamailio /usr/local/sbin/kamailio[18492]: INFO: ims_auth [authorize.c:827]: authenticate(): uri=sip:irisims.org nonce=9863c63855c8dd888c5c18e79fc61156 response=ce7ce73872b92aff2defa76dd1aff1ac qop=auth-int nc=00000001 cnonce=4fe4daacd69fa3d609c8b396d331eae6 hbody=d41d8cd98f00b204e9800998ecf8427e

May  1 14:01:45 imskamailio /usr/local/sbin/kamailio[18492]: DEBUG: ims_auth [rfc2617.c:135]: calc_response(): calc_response(_ha1=7a1b479a0513914e71bcd6d005b3e17d, _nonce=9863c63855c8dd888c5c18e79fc61156, _nc=00000001,_cnonce=4fe4daacd69fa3d609c8b396d331eae6, _qop=auth-int, _auth_int=1,_method=REGISTER,_uri=sip:irisims.org,_hentity=d41d8cd98f00b204e9800998ecf8427e)



Thanks,

Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20190502/90de87b5/attachment.html>


More information about the sr-users mailing list