- sr-users - kamailio.org

[OpenSER-Users] Openser working with REFER (Transfer)
by Thiago Maluf 05 Jun '08

05 Jun '08

Hi List, I am research in Brazil University and in our system we have several User Agents in SIP. We have the openser working as Sip Proxy and Asterisk or Cisco Routers as Gateway with PSTN or PBX. We have too Hardphone Cisco IP Phone and Polycom IP Pphone and Softphone X-Lite, Eyebeam and Ekiga. Just now our system is working to all users, but I found one problem. When the user, work with BlindTransfer* the call is transfered no problem. But when the user (no matter if is Hardphone or Softphone) try transfer** the call, it don't work. In my OpenSER, when I receive one REFER without LOOSE_ROUTE I just end the request. While if this request have LOOSE_ROUTE I send this request to route defined in dialog. I would like if you can I help me, if I can insert one logical in OpenSER to do it work. is it possible? Very thanks for everybody, Thiago! (!) * BLINDTRANSFER: UA1 call to UA2 and when the call is established, UA1 for example send one request REFER to UA2 to this user call UA3. Then UA2 hangup call with UA1, and make one call to UA3. ** TRANSFER: UA1 call to UA2 and when the call is established, UA1 for example put this call in hold on, and make one call to UA3. When this last call is established, UA1 send one request REFER to UA2 to get the call with UA3. Then UA2 will talk with UA3, and UA1 is hangup its calls. -- ---------------------------------------------------------------- THIAGO MALUF RESENDE Consultor Voip e Programador WEB (Voip Developer and Web Developer) Tel: +55 21 86042100 e-mail: malufrj(a)gmail.com

2 1

[OpenSER-Users] t_replicate function`s doubt??
by Marcio 04 Jun '08

04 Jun '08

Hi, Someone would know if t_replicate() function....perform a t_relay() of the REGISTER....and carry the "credentials" of the UAc to slave or remote UAs? And the reply of the UAs(remote or slvae) is "200, ok" to UAs (fork`s origin) or not a reply?? best regards, Marcio

1 0

[Serusers] SER 0.10.x AVP syntax documentation
by Steven C. Blair 04 Jun '08

04 Jun '08

I'm trying to convert my SER 0.9.x config file to a 0.10.x file. I need some help converting AVPs. I use to use rules such as " if (avp_db_load("$ruri/username", "s:callfwdall"))..." however this now generates a syntax error. Is there a how-to which describes how to convert these types of statements to the new format? Thanks,steve Senior Network Engineer, Information Systems and Computing Networking and Telecommunications , Suite 221A /6228 University of Pennsylvania Voice:215-573-8396 FAX:215-898-9348

2 1

[Serusers] SER 0.10 AVPs
by Steven C. Blair 04 Jun '08

04 Jun '08

Hello: I saw your post on the iptel.org web site about SER 0.10 and AVPs. I'm trying to convert a SER 0.9.x system to SER 0.10.x and the AVPOPS are giving me the most trouble. Did you find any documentation on how to implement the new avpops to do MySQL queries ? Thanks,Steve Senior Network Engineer, Information Systems and Computing Networking and Telecommunications , Suite 221A /6228 University of Pennsylvania Voice:215-573-8396 FAX:215-898-9348

2 3

[OpenSER-Users] Accept-Contact not in NOTIFY request ?
by KevinKinnan 04 Jun '08

04 Jun '08

I am using N95 to test SUBSCRIBE request with openser that dedicates as presence server. According to nokia notes, in nokia java sip stack, the accept-contact header is mandatory in all requests. Any request without this header will not be recognized by sip stack in N95. The NOTIFY request from openser seems not add this header in itself. Or maybe I omit some configurations. Please give me some clue, thank you. Regards, Kevin _________________________________________________________________ 新年换新颜，快来妆扮自己的MSN给心仪的TA一个惊喜！ http://im.live.cn/emoticons/?ID=18

4 3

[Serusers] Gentilini, Paul is out of the office.
by PGentilini＠intellicare.com 04 Jun '08

04 Jun '08

I will be out of the office starting Mon 06/02/2008 and will not return until Mon 06/09/2008. I will have very limited access to mail, so please contact the CSC at 888-899-4227 if you need immediate assistance.

1 0

[OpenSER-Users] Accept-Contact not in NOTIFY request ?
by KevinKinnan 04 Jun '08

04 Jun '08

It is not the matter of rfc3261, the nokia sip stack force any request adding this header. Without it, the test will not be going on. Regards, Kevin _________________________________________________________________ 新年换新颜，快来妆扮自己的MSN给心仪的TA一个惊喜！ http://im.live.cn/emoticons/?ID=18

1 0

Re: [OpenSER-Users] [OpenSER-Devel] OpenSER usrloc timeouts
by Henning Westerholt 04 Jun '08

04 Jun '08

On Wednesday 04 June 2008, Jason Penton wrote: > Hi Henning > > would you mind elaborating a little? Hi Jason, please always CC to the user list. First of all you need to define a failure_route in your config. After the lookup() to your location database you arm this with t_on_failure. In the failure route you check with t_check_status("408") the error code and forward then to your voicemail. Cheers, Henning

2 1

Re: [OpenSER-Users] [OpenSER-Devel] OpenSER usrloc timeouts
by Henning Westerholt 04 Jun '08

04 Jun '08

On Wednesday 04 June 2008, Jason Penton wrote: > yes, but maybe instead of deregistering the user, it could foeard to > voicemail or similar instead of the callee just hearing 'nothing' and not > knowing what is going on????? (moved to the user list) Hi Jason, normally you just setup a prober INVITE timeout, and forward on the 408 that is generated to voicemail. Cheers, Henning

1 0

[OpenSER-Users] T_replicate Bad Request Issue
by Ali Jawad 04 Jun '08

04 Jun '08

Hi All I have the following setup Openser Server A --> Uses Localhost MySQL Server Openser Server B --> Uses ServerA MySQL server Each server is in a different location. Both servers share the same database. I.e. in other words a user can successfully logon to either server. Both servers have a similar configuration file. My problem at hand is the following User A and User C logon to Server A User B logs on to Server B I need user A or user C to be able to call user B. I am using t_replicate for this setup. The relevant config section is found below: if(src_ip == OTHERSERVER) { xlog("L_INFO","PACKET FROM 9 PEER SERVER"); save("location"); }else{ xlog("L_INFO","NORMAL Packet"); if(is_method("REGISTER")){ if(!www_authorize("sero.test.net", "subscriber")){ www_challenge("sero.ahwar.net", "1"); return; } save("location"); t_replicate("sip:OTHERSERVER:5060"); return; } I have looked at traces and it seems to me that if a user logs on to a server t_replcicate forwards those register packets to the second server. However the second server is not reponding to those register packets it is replying with Bad Request replies U OriginatingServer:5060 -> Target_of_Treplicate:5060 REGISTER sip:OriginatingServer SIP/2.0. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bKe47f.4bd99ca4.0. Via: SIP/2.0/UDP 192.168.0.176:45374;received=193.227.186.146;branch=z9hG4bK-d87543-00509 f6c6f4a047f-1--d87543-;rport=45374. Max-Forwards: 69. Contact: <sip:9613041705@193.227.186.146:45374;rinstance=1367153d6d22ca20>;expire s=0. To: "9613041705"<sip:9613041705@OriginatingServer>. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7d242230. Call-ID: MmE3MTlmZDhiYWI0NjNmZjI5NWU5Njg1MmNhNDUwMDU.. CSeq: 6 REGISTER. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. User-Agent: X-Lite release 1006e stamp 34025. Authorization: Digest username="9613041705",realm="sero.ahwar.net",nonce="484653b8b642971aef30 31dfa8d894fa90a4faf3",uri="sip:OriginatingServer",response="fd7943d66556 832aff9abcba071a9d85",cnonce="4f6aa73e9cba374f",nc=00000001,qop=auth,alg orithm=MD5. Content-Length: 0. . U Target_of_Treplicate:5060 -> OriginatingServer:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bKe47f.4bd99ca4.0. Via: SIP/2.0/UDP 192.168.0.176:45374;received=193.227.186.146;branch=z9hG4bK-d87543-00509 f6c6f4a047f-1--d87543-;rport=45374. To: "9613041705"<sip:9613041705@OriginatingServer>;tag=991a35e6ab26c1f4ea62d e8176a0818c.502f. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7d242230. Call-ID: MmE3MTlmZDhiYWI0NjNmZjI5NWU5Njg1MmNhNDUwMDU.. CSeq: 6 REGISTER. Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U OriginatingServer:5060 -> Target_of_Treplicate:5060 REGISTER sip:OriginatingServer SIP/2.0. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK4cef.3d1bfc.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-221288 3e6a0dc710-1--d87543-;rport=7988. Max-Forwards: 69. Contact: <sip:9613041705@192.168.0.176:7988;rinstance=c1ac0eda25c39951>. To: "9613041705"<sip:9613041705@OriginatingServer>. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 2 REGISTER. Expires: 3600. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. User-Agent: X-Lite release 1006e stamp 34025. Authorization: Digest username="9613041705",realm="sero.ahwar.net",nonce="484653c5b066afdc9b4d 3bc20faa9e549e1bbe93",uri="sip:OriginatingServer",response="fc7ee7ed4e3c 68f85de2a298f7579421",cnonce="42f3c2c5b71b4623",nc=00000001,qop=auth,alg orithm=MD5. Content-Length: 0. . U Target_of_Treplicate:5060 -> OriginatingServer:5060 SIP/2.0 400 Bad Request. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK4cef.3d1bfc.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-221288 3e6a0dc710-1--d87543-;rport=7988. To: "9613041705"<sip:9613041705@OriginatingServer>;tag=991a35e6ab26c1f4ea62d e8176a0818c.7860. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 2 REGISTER. Contact: <sip:9613041705@192.168.0.176:7988;rinstance=c1ac0eda25c39951>;expires=5 67. P-Registrar-Error: Invalid CSeq number. Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U OriginatingServer:5060 -> Target_of_Treplicate:5060 REGISTER sip:OriginatingServer SIP/2.0. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK5cef.dfe76626.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-022b94 01307f967e-1--d87543-;rport=7988. Max-Forwards: 69. Contact: <sip:9613041705@192.168.0.176:7988;rinstance=c1ac0eda25c39951>;expires=0 . To: "9613041705"<sip:9613041705@OriginatingServer>. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 3 REGISTER. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. User-Agent: X-Lite release 1006e stamp 34025. Authorization: Digest username="9613041705",realm="sero.ahwar.net",nonce="484653c5b066afdc9b4d 3bc20faa9e549e1bbe93",uri="sip:OriginatingServer",response="9ded822006fa 51735838d3fdea96800b",cnonce="68a12fcb5c00aeaf",nc=00000002,qop=auth,alg orithm=MD5. Content-Length: 0. . U Target_of_Treplicate:5060 -> OriginatingServer:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK5cef.dfe76626.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-022b94 01307f967e-1--d87543-;rport=7988. To: "9613041705"<sip:9613041705@OriginatingServer>;tag=991a35e6ab26c1f4ea62d e8176a0818c.93c8. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 3 REGISTER. Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U OriginatingServer:5060 -> Target_of_Treplicate:5060 REGISTER sip:OriginatingServer SIP/2.0. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK2cef.bec40741.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-ea14ff 1ac524e10c-1--d87543-;rport=7988. Max-Forwards: 69. Contact: <sip:9613041705@193.227.186.146:7988;rinstance=7d4ba8842a9e4a7e>. To: "9613041705"<sip:9613041705@OriginatingServer>. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 4 REGISTER. Expires: 3600. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. User-Agent: X-Lite release 1006e stamp 34025. Authorization: Digest username="9613041705",realm="sero.ahwar.net",nonce="484653c5b066afdc9b4d 3bc20faa9e549e1bbe93",uri="sip:OriginatingServer",response="f126d934be4b 12c32a8ec783097a2ff6",cnonce="e3d03c6f36863764",nc=00000003,qop=auth,alg orithm=MD5. Content-Length: 0. . U Target_of_Treplicate:5060 -> OriginatingServer:5060 SIP/2.0 400 Bad Request. Via: SIP/2.0/UDP OriginatingServer;branch=z9hG4bK2cef.bec40741.0. Via: SIP/2.0/UDP 192.168.0.176:7988;received=193.227.186.146;branch=z9hG4bK-d87543-ea14ff 1ac524e10c-1--d87543-;rport=7988. To: "9613041705"<sip:9613041705@OriginatingServer>;tag=991a35e6ab26c1f4ea62d e8176a0818c.5d32. From: "9613041705"<sip:9613041705@OriginatingServer>;tag=7f0b7450. Call-ID: MGJhNmM1ZDdlZmNmNWQ2ODZkOWE4YWEwNzkzNmEzMzA.. CSeq: 4 REGISTER. Contact: <sip:9613041705@193.227.186.146:7988;rinstance=7d4ba8842a9e4a7e>;expires =566. P-Registrar-Error: Invalid CSeq number. Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. .

1 0

Re: [OpenSER-Users] compilation on solaris 10
by Bogdan-Andrei Iancu 04 Jun '08

04 Jun '08

Hi Eric, To be honest, no, I haven;t, because I do not have access to such a machine. Could you post the errors you get now? Regards, Bogdan wliangy(a)gmail.com wrote: > Thanks! > But there is still problem. > May I ask whether you have compiled successfully on Solaris 8 or 10? > > 2008/5/26 Bogdan-Andrei Iancu <bogdan(a)voice-system.ro>: > >> Hi Eric, >> >> use "gmake" and not "make" on Solaris. >> >> Regards, >> Bogdan >> >> wliangy(a)gmail.com wrote: >> >>> Hi experts, >>> I am start user of openser and need use openser to support sctp. >>> now I have download the source codes of openser-1.3.1-tls. >>> then I compiled it, there have many errors that need your supports. >>> >>> e.g. >>> openser-1.3.1-tls> make all >>> Makefile.defs:717: *** missing separator. Stop. >>> >>> then I commented Makefile.defs line717 and 718. >>> # $(warning Old gcc detected ($(CC_SHORTVER)), use >>> gcc >= 3.1 \ >>> # for better results) >>> >>> Errors were still there. >>> >>> openser-1.3.1-tls> make all >>> Makefile:402: warning: overriding commands for target >>> `/opt/CiscoMGC$(DESTDIR)' >>> Makefile:393: warning: ignoring old commands for target >>> `/opt/CiscoMGC$(DESTDIR)' >>> yacc -d -b cfg cfg.y >>> "cfg.y", line 391: warning: redeclaration of precedence of SLASH. >>> >>> conflicts: 1 shift/reduce >>> flex cfg.lex >>> statistics.c:58: warning: #warning STATISTICS: Architecture with no >>> support for atomic operations. Using Locks!! >>> Makefile:402: warning: overriding commands for target >>> `/opt/CiscoMGC$(DESTDIR)' >>> Makefile:393: warning: ignoring old commands for target >>> `/opt/CiscoMGC$(DESTDIR)' >>> Compiling action.c >>> gcc -g -O9 -funroll-loops -Wall -mv8 -DNAME='"openser"' >>> -DVERSION='"1.3.1-notls"' -DARCH='"sparc64"' -DOS='"solaris"' >>> -DCOMPILER='"gcc 2.91.66"' -D__CPU_sparc64 -D__OS_solaris -D__SMP_no >>> -DCFG_DIR='"$(DESTDIR)/etc/openser/"' -DPKG_MALLOC -DSHM_MEM >>> -DSHM_MMAP -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE >>> -DHAVE_RESOLV_RES -DSTATISTICS -DCHANGEABLE_DEBUG_LEVEL -DF_MALLOC >>> -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 >>> -DHAVE_GETIPNODEBYNAME -DHAVE_SYS_SOCKIO_H -DHAVE_SCHED_YIELD >>> -DHAVE_ALLOCA_H -DUSE_SIGACTION -D_POSIX_PTHREAD_SEMANTICS >>> -DHAVE_DEVPOLL -DHAVE_SELECT -c action.c -o action.o >>> parser/msg_parser.h: In function `char_msg_val': >>> In file included from action.h:27, >>> from action.c:44: >>> parser/msg_parser.h:300: parse error before `)' >>> forward.h: In function `msg_send': >>> In file included from action.c:49: >>> forward.h:95: parse error before `)' >>> forward.h:103: parse error before `)' >>> forward.h:107: parse error before `)' >>> mem/../lock_alloc.h: In function `lock_set_alloc': >>> In file included from mem/../locking.h:66, >>> from mem/../statistics.h:115, >>> from mem/shm_mem.h:33, >>> from ut.h:52, >>> from action.c:54: >>> mem/../lock_alloc.h:68: parse error before `)' >>> ut.h: In function `int2bstr': >>> In file included from action.c:54: >>> ut.h:172: parse error before `)' >>> ut.h: In function `un_escape': >>> ut.h:365: parse error before `)' >>> ut.h: In function `shm_str_dup': >>> ut.h:498: parse error before `)' >>> ut.h: In function `pkg_str_dup': >>> ut.h:515: parse error before `)' >>> ut.h: In function `str_strcmp': >>> ut.h:532: parse error before `)' >>> ut.h:535: parse error before `int' >>> ut.h:539: `minlen' undeclared (first use in this function) >>> ut.h:539: (Each undeclared identifier is reported only once >>> ut.h:539: for each function it appears in.) >>> ut.h:547: `alen' undeclared (first use in this function) >>> ut.h:547: `blen' undeclared (first use in this function) >>> ut.h: In function `str_strcasecmp': >>> ut.h:563: parse error before `)' >>> ut.h:566: parse error before `int' >>> ut.h:570: `minlen' undeclared (first use in this function) >>> ut.h:578: `alen' undeclared (first use in this function) >>> ut.h:578: `blen' undeclared (first use in this function) >>> action.c: In function `run_action_list': >>> action.c:140: parse error before `)' >>> action.c: In function `do_assign': >>> action.c:193: parse error before `)' >>> action.c:202: parse error before `)' >>> action.c:222: parse error before `)' >>> action.c:228: parse error before `)' >>> action.c: In function `do_action': >>> action.c:302: parse error before `)' >>> action.c:309: parse error before `)' >>> action.c:335: parse error before `)' >>> action.c:498: parse error before `)' >>> action.c:524: parse error before `)' >>> action.c:682: parse error before `)' >>> action.c:710: parse error before `)' >>> action.c:723: parse error before `)' >>> action.c:757: parse error before `)' >>> action.c:763: parse error before `)' >>> action.c:807: parse error before `)' >>> action.c:819: parse error before `)' >>> action.c:870: parse error before `)' >>> action.c:896: parse error before `)' >>> action.c:904: parse error before `)' >>> action.c:930: parse error before `)' >>> action.c:939: parse error before `)' >>> action.c:945: parse error before `)' >>> action.c:966: parse error before `)' >>> make: *** [action.o] Error 1 >>> >>> Your any help is much appreciated! >>> >>> BR, >>> Eric >>> >>> _______________________________________________ >>> Users mailing list >>> Users(a)lists.openser.org >>> http://lists.openser.org/cgi-bin/mailman/listinfo/users >>> >>> >>> >> > >

4 5

[OpenSER-Users] Why can't I "append_branch()" in FAILURE_ROUTE if reply is 6XX ??
by Zappasodi Daniele 03 Jun '08

03 Jun '08

Hello, If I want to have the ability to add a new branch for every negative response, included the 6xx (and despite what is written in the RFC3261), where should I change? It is enough to remove the following code in t_should_relay_response function? 783 if (new_code>=600) { 784 /* this is a winner and close all branches */ 785 which_cancel( Trans, cancel_bitmap ); 786 picked_branch=branch; 787 /* no more new branches should be added to this transaction */ 788 Trans->flags |= T_NO_NEW_BRANCHES_FLAG; ********************************************************************** The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message inerror. **********************************************************************

1 0

[OpenSER-Users] Problem using path module
by Thomas Mangin 03 Jun '08

03 Jun '08

Hello, I am trying to configure a number of openser servers. I have the following testbed: Phone1 + Proxy - Registrar - out proxy Phone2/ The Proxy acts as outbound proxy for customers and uses ienum to route messages to the right registrar (using user@domain), the registrar then figures out where the destination is and sends the packet out to ENUM/PSTN or in my case back to the same proxy. The proxy is running nathelper (and redirects rtp to an rtp proxy) and performs route-recording. The proxy configuration has: modparam("path", "use_received", 0) and the registrar configuration contains: modparam("registrar", "use_path", 1) modparam("registrar", "path_mode", 0) modparam("registrar", "path_use_received", 1) When registering all is fine and well and the packet flows like: Phone<X> -> Proxy -> Registrar (storing in DB) -> Proxy -> Phone<X> and the DB contains in path: <sip:ProxyIP;lr;received=sip:PhoneIP:PhonePort> However, when performing an invite the ACK packet (INVITE/OK/ACK) can not be routed properly as it is not part of the transaction, which causes the call to be cancelled after a few seconds (as it should be given the constance). The ACK packet starts as URI: <sip:user@<Registrar IP>:5060;rinstance=xxxxxx> Contact: <sip:user@PhoneIP:PhonePort> with the IP and Port correctly translated from the internal to the firewall external. It then travels like this: Phone1 -> Proxy -> Registrar > Proxy <stop here> When leaving Registrar the ACK URI has been changed to the one stored in the DB path field ie: <sip:ProxyIP;lr;ftag=yyyyyy> at that point the Proxy is not able to figure out where to forward the packet even if the Contact field of the packet is still correctly set to the IP:Port of the phone to be reached. I was wondering if I am missing some understanding of how RFC3327 is working. I can see a few possible solutions: - generate a first Path header with the Phone information on the proxy before the current one. - try to catch those 'out of transaction ACK' and set the URI to the contact But before doing anything I would appreciate if someone could let me know if I am attempting something idiotic from a design point of view and tell me why what I expected to 'just work' does not behave as expected. Thank you very much your your time and help. Thomas

1 1

[OpenSER-Users] NEW FUNCTIONALITY: secure nonce in auth module
by Bogdan-Andrei Iancu 03 Jun '08

03 Jun '08

Hi, Thanks to Anca Vamanu < anca at voice-system dot ro> , the auth module has a new mechanism for protecting the nonce against third party attacks. So far, the auth module provided only nonce lifetime limitation to prevent re-usage of the nonce. The new mechanism offers protection against sniffing intrusion. The module generates and verifies the nonces so that they can be used only once (in an auth response). This is done by having a lifetime value and an index associated with every nonce. Using only an expiration value is not good enough because,as this value has to be of few tens of seconds, it is possible for someone to sniff on the network, get the credentials and then reuse them in another packet with which to register a different contact or make calls using the other's account. The index ensures that this will never be possible since it is generated as unique through the lifetime of the nonce. What problem is solved: ======================== Typical intrusion scenario is: 1) UAC sends INVITE with no credentials 2) openser sends challenge to UAC 3) UAC sends INVITE with credentials (lifetime 1 minute) 4) the credentials (auth response) are exposed on the net, so anybody can grab them (lets assume by person X) 5) openser accepts the credentials and call is establish 6) person X injects (by sending to openser) an re-INVITE (to change the media destination, for example) by re-using the credentials that he grabbed from the net. 7) credentials are accepted by openser if the lifetime is not expired. So, third parties can modify (or even initiate) dialogs by re-using the credentials they captures from a previous authentication. The only limitation is the nonce lifetime which is about 30 - 60 seconds, long enough for allowing such an atack. The new mechanism, by blocking the re-usage of the same nonce (even if the lifetime is still valid), will block step 7) as the same nonce was used in step 5) (by UAC). Technical details: ================== The auth module keeps state for each nonce - to validate it only on the first usage. A binary array (which can by default accomodate 100K nonces) is used to keep the state. An index in this array is allocated when the challenge is generated; this index in kept for the whole life duration of the nonce. After the first auth result (for the nonce), the following auth results for that nonce are discarded and re-challenged. As nonce can be generated and later checked from different processes, the nonce state (binary array) is kept in shm memory and the access to it is synchronized via locking. The see what is the overhead added by the computation time (keeping the nonce state) and locking (sharing between processes), Anca run several of tests : - openser single process - openser multiple processes, single processor machine - openser multiple processes, multi processor machine For tests we were using authentication via PV (for password and username) to avoid using any slow data backend (radius or DB) that might eclipse the overhead. The measured overhead is 4% - 7% (from the original version). Regards, Bogdan

1 0

[OpenSER-Users] how to configure to support PRACK
by Steven Wu 03 Jun '08

03 Jun '08

Hi All, Could someone tell me how to config openser 1.3.x route to support PRACK? I had installed openser 1.3.x and didn't change any route configuration. My scenario is: A openser B | --> INVITE (with 100rel) -> | --> INVITE (with 100rel) --> | | | | | <--183 <-- | <-- 183 <-- | | | --> PRACK --> | | <-- 404 Not here <--- | For the default the openser reply the "404 Not here" to A. I found the '404' was replied here: if (has_totag()) { # sequential request withing a dialog should # take the path determined by record-routing if (loose_route()) { if (is_method("BYE")) { setflag(1); # do accouting ... setflag(3); # ... even if the transaction fails } route(1); } else { /* !loose_route */ /* uncomment the following lines if you want to enable presence */ ##if (is_method("SUBSCRIBE") && $rd == "your.server.ip.address") { ## # in-dialog subscribe requests ## route(2); ## exit; ##} if ( is_method("ACK") ) { if ( t_check_trans() ) { # non loose-route, but stateful ACK; must be an ACK after a 487 or e.g. 404 from upstream server t_relay(); exit; } else { # ACK without matching transaction ... ignore and discard.\n"); exit; } ## These code will cause openser reply 483 response to PRACK if ( is_method("PRACK") ) { t_relay(); exit; } } ## Here reply me the 404 sl_send_reply("404","Not here"); } exit; } Than I added the green code to route the PRACK, But I received "483","Too Many Hops" from openser. And I found the Max-Forward is 70 not a wrong value. Does anyone can help me? Best regards, Steven Wu

2 1

Re: [OpenSER-Users] Trouble with RADIUS Accounting
by Dmitry Lyubimkov 03 Jun '08

03 Jun '08

But we did it!!! I don't need to remove this attributes. We need User-Name, Called-Station-Id, Calling-Station-Id, etc for billing purpose. But our RADIUS server does not receive them from OpenSER! Look at our Start/Stop messages. There are not such important attributes as User-Name, etc. Is this bug of OpenSER or bug of our script? If it is bug of script, then what commands, what modules, what modparam can lead to such result? Dmitry -----Original Message----- From: Mike O'Connor [mailto:mike@pineview.net] Sent: Monday, June 02, 2008 1:07 PM To: Dmitry Lyubimkov Subject: Re: [OpenSER-Users] Trouble with RADIUS Accounting Hi Dmitry You not can remove them from OpenSER with out adjusting the code, instead you need to put the radius packets thought something like a radius proxy which removes them. Mike Dmitry Lyubimkov wrote: > Hi. > We have new installation of OpenSER V.1.3.1 with new script. All work fine > except RADIUS accounting. Accounting Start and Stop records come to RADIUS > server, but there are no some attributes in them - User-Name, > Called-Station-Id, Calling-Station-Id,... > Example of Start and Stop records (FreeRADIUS log): > Acct-Status-Type = Start > Service-Type = IAPP-Register > Sip-Response-Code = 200 > Sip-Method = 1 > Event-Timestamp = "Jun 2 2008 10:34:05 MSD" > Sip-From-Tag = "5d12c92c" > Sip-To-Tag = "6845627C-1EF5" > Acct-Session-Id = "ODhmMjE4MmUxNzc3ZmZjN2U3MjJlM2I4NzQ0MjMzNTU." > NAS-Port = 5060 > Acct-Delay-Time = 0 > NAS-IP-Address = 172.16.2.10 > Client-IP-Address = 172.16.2.10 > Timestamp = 1212388445 > > Acct-Status-Type = Stop > Service-Type = IAPP-Register > Sip-Response-Code = 200 > Sip-Method = 8 > Event-Timestamp = "Jun 2 2008 10:34:12 MSD" > Sip-From-Tag = "5d12c92c" > Sip-To-Tag = "6845627C-1EF5" > Acct-Session-Id = "ODhmMjE4MmUxNzc3ZmZjN2U3MjJlM2I4NzQ0MjMzNTU." > NAS-Port = 5060 > Acct-Delay-Time = 0 > NAS-IP-Address = 172.16.2.10 > Client-IP-Address = 172.16.2.10 > Timestamp = 1212388452 > > Where is trouble? Required attributes are described in dictionary file. If I > remove it then OpenSER says > Jun 2 11:02:23 [4064] ERROR:auth_radius:mod_init: auth_radius: can't get > code for the User-Name attribute > Jun 2 11:02:23 [4064] ERROR:core:init_mod: failed to initialize module > auth_radius > Jun 2 11:02:23 [4064] ERROR:core:main: error while initializing modules > > How and where in script we can prohibit send of some attributes? > > Dmitry > > > > _______________________________________________ > Users mailing list > Users(a)lists.openser.org > http://lists.openser.org/cgi-bin/mailman/listinfo/users >

2 3

[OpenSER-Users] Can't get sipping working in nathelper module
by Pablo Guijarro Enríquez 03 Jun '08

03 Jun '08

Hi, Im using OpenSER v1.3.1 and sipping does not work with my configuration. Here is a sample: loadmodule "usrloc.so" loadmodule "nathelper.so" modparam("nathelper", "natping_interval", 10) #modparam("nathelper", "ping_nated_only", 1) modparam("nathelper", "sipping_bflag", 7) modparam("nathelper", "sipping_from", "sip:pinger@cmovil.net") modparam("nathelper", "received_avp", "$avp(i:801)") modparam("registrar", "received_avp", "$avp(i:801)") modparam("usrloc", "db_mode", 2) modparam("usrloc", "nat_bflag", 6) route { if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); exit; } # for clients behind nats if ( nat_uac_test("1") ) { if (method=="REGISTER") { fix_nated_register(); setbflag(6); setbflag(7); } else if ( method=="SUBSCRIBE" || method=="PUBLISH ) { fix_nated_contact(); setbflag(6); setbflag(7); }; }; ... } ... TCP clients register without problems and NAT users are identified properly. Routing for them works fine and so on, but I cannot see any ping packet leaving OpenSER to keep the TCP connection alive. Is there something missing? Thank in advance. Pablo

2 1

[OpenSER-Users] Register Distributed
by Marcio 02 Jun '08

02 Jun '08

Hi, Someone could have tips on how to register in local domain a UAc mobility of another domain (federation) using the OpenSER's config....when one of the INVITE's UAc have to be verified as valid in the home domain and the answer would be allowed its domain registration in place, with a pointer/indicator in the home domain...where he was as that moment?? UAs(local) (accept register after validation on UAs(home) \ \ (Invite/register) \ UAc (mobility)-- -- -- -- -- UAs(home Thx for any help... Marcio

2 2

[OpenSER-Users] setting up radius accounting
by Pete Kay 02 Jun '08

02 Jun '08

Hi, I am trying to set up using Radius for accounting. As a newbie, I am simply following the standard configuration from the menu. Here is where I put my flags in openser.cfg: if(method=="BYE") { setflag(2); }; if (method=="INVITE") { # Account INVITE packets setflag(2); # Account Missed calls setflag(3); }; The cdr is successfully logged to the database via radius, but the starttime and endtime are incorrect. The starting time and ending time being recorded is the same. Also, I noticed that Openser only sends the message (both INSERT and UPDATE cdr) to radius when the BYE method is received. I was expecting Openser to instruct Radius to create a new record ( INSERT ) during the INVITE method and update the stoptime during the BYE method. Here is the SQL Query log i extracted from mysql: 80603 4:38:06 6481 Query UPDATE radacct SET acctstoptime = '2008-06-03 04:38:06', acctsessiontime = '', acctinputoctets = '0' << 32 | '0', acctoutputoctets = '0' << 32 | '0', acctterminatecause = '', acctstopdelay = '0', connectinfo_stop = '' WHERE acctsessionid = 'NWQyZGI1ZTkzNGM5ZjMzZTg5ZGQ2OGVmZDY5MjYxMGE.' AND username = '1005' AND nasipaddress = '127.0.0.1' 6481 Query INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('NWQyZGI1ZTkzNGM5ZjMzZTg5ZGQ2OGVmZDY5MjYxMGE.', '1412cd5bf3dd4a31', '1005', '192.168.1.104', ' 127.0.0.1', '5060', '', DATE_SUB('2008-06-03 04:38:06', INTERVAL (0 + 0) SECOND), '2008-06-03 04:38:06', '', '', '', '', '0' << 32 | '0', '0' << 32 | '0', 'sip:1006@192.168.1.104<sip%3A1006(a)192.168.1.104>', 'sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>', '', 'IAPP-Register', '', '', '0', '0') I would appreciate any help on getting the radius accounting to work. Thanks alot in advance. Pete

1 0

[OpenSER-Users] Question about proxy_authorization
by mark morreny 02 Jun '08

02 Jun '08

Hi, I am not able to proxy_authorize a INVITE request from UA if the US connects to Opnerser using Openser's public IP. I am wonering if there is any additional setting I need to enable that? From the log, Openser does recognize '88,251.97.47' as a local domain. I did not hard-code the private ip anywhere in openser.cfg. Tue Jun 3 03:20:05 2008-58.251.97.17::method <INVITE> r-uri < sip:1005@58.251.97.17 <sip%3A1005(a)58.251.97.17>> to-tag <<null>> 2nd via <<null>> to-header <sip:1005@58.251.97.17 <sip%3A1005(a)58.251.97.17>> from-header <sip:1006@58.251.97.17 <sip%3A1006(a)58.251.97.17>> auth-user <1006> Jun 3 03:20:05 [27566] DBG:maxfwd:is_maxfwd_present: value = 70 before fix nated contact Jun 3 03:20:05 [27566] DBG:core:parse_headers: flags=80 checking to see if setflag should do or not Jun 3 03:20:05 [27566] DBG:uri:has_totag: no totag Jun 3 03:20:05 [27566] DBG:core:parse_headers: flags=78 Jun 3 03:20:05 [27566] DBG:tm:t_lookup_request: start searching: hash=29544, isACK=0 Jun 3 03:20:05 [27566] DBG:tm:matching_3261: RFC3261 transaction matching failed Jun 3 03:20:05 [27566] DBG:tm:t_lookup_request: no transaction found it is not a REGISTER, so going to route 3 Jun 3 03:20:05 [27566] DBG:domain:is_domain_local: Realm '88,251.97.47' is local Jun 3 03:20:05 [27566] DBG:core:db_free_rows: freeing 1 rows Jun 3 03:20:05 [27566] DBG:core:db_free_rows: row[0]=0x81a1e18 Jun 3 03:20:05 [27566] DBG:core:db_free_rows: 0x81a1e18=pkg_free() RES_ROWS request is from a non-trusted domain Jun 3 03:20:05 [27566] DBG:auth:check_nonce: comparing [4844491107980b084e3d5d3a283446ad02324d49] and [4844491107980b084e3d5d3a283446ad02324d49] Jun 3 03:20:05 [27566] DBG:auth:check_response: our result = '578a6ec1af28eed79329ed5414313f43' Jun 3 03:20:05 [27566] DBG:auth:check_response: authorization failed Thanks in advance for your help. Regards, Mark

2 2

[OpenSER-Users] Mediaproxy + XLite RTCP timeout
by Dmitry Lyubimkov 02 Jun '08

02 Jun '08

OpenSER v.1.3.1 We use Mediaproxy for NAT traversal purpose. All work fine except one feature. XLite has option to hangup call after RTCP inactivity. When call is not proxied this option work right. But when call is proxied by Nediaproxy it cannot be longer than 54 second + RTCP timeout in XLite. Xlite cannot see RTCP activity and hangup the call. Does anybody meet with this trouble? Dmitry

1 0

[OpenSER-Users] Problem authenticating Xlite or Zoiper in Openser
by voipanywhere 02 Jun '08

02 Jun '08

Hi All, After doing ngrep teste(a)xxx.xxx.xxx.xxx -lqtt -W byline port 5060 xlite somehow is sending wrong information. my subscriber is teste(a)xxx.xxx.xxx.xxx, i put it on xlite but on sip messages i get teste%40xxx.xxx.xxx.xxx and then of course the 401 error. something is changing the @ in the username to %40. i've been trying to change locales in debian, still didn't figure it out what the problem really is. i had the console with wrong code support for portuguese language, and could be it (i tought) now it's ok. tried to check /etc/environment and /etc/locales.gen to see if everything is okay, and it is now. Can be some strange stuff because of utf, unicode etc? Thanks Regards from Portugal, Helder -- View this message in context: http://www.nabble.com/Problem-authenticating-Xlite-or-Zoiper-in-Openser-tp1… Sent from the OpenSER Users Mailing List mailing list archive at Nabble.com.

1 0

[OpenSER-Users] Trouble with RADIUS Accounting
by Dmitry Lyubimkov 02 Jun '08

02 Jun '08

Hi. We have new installation of OpenSER V.1.3.1 with new script. All work fine except RADIUS accounting. Accounting Start and Stop records come to RADIUS server, but there are no some attributes in them - User-Name, Called-Station-Id, Calling-Station-Id,... Example of Start and Stop records (FreeRADIUS log): Acct-Status-Type = Start Service-Type = IAPP-Register Sip-Response-Code = 200 Sip-Method = 1 Event-Timestamp = "Jun 2 2008 10:34:05 MSD" Sip-From-Tag = "5d12c92c" Sip-To-Tag = "6845627C-1EF5" Acct-Session-Id = "ODhmMjE4MmUxNzc3ZmZjN2U3MjJlM2I4NzQ0MjMzNTU." NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 172.16.2.10 Client-IP-Address = 172.16.2.10 Timestamp = 1212388445 Acct-Status-Type = Stop Service-Type = IAPP-Register Sip-Response-Code = 200 Sip-Method = 8 Event-Timestamp = "Jun 2 2008 10:34:12 MSD" Sip-From-Tag = "5d12c92c" Sip-To-Tag = "6845627C-1EF5" Acct-Session-Id = "ODhmMjE4MmUxNzc3ZmZjN2U3MjJlM2I4NzQ0MjMzNTU." NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 172.16.2.10 Client-IP-Address = 172.16.2.10 Timestamp = 1212388452 Where is trouble? Required attributes are described in dictionary file. If I remove it then OpenSER says Jun 2 11:02:23 [4064] ERROR:auth_radius:mod_init: auth_radius: can't get code for the User-Name attribute Jun 2 11:02:23 [4064] ERROR:core:init_mod: failed to initialize module auth_radius Jun 2 11:02:23 [4064] ERROR:core:main: error while initializing modules How and where in script we can prohibit send of some attributes? Dmitry

1 0

[OpenSER-Users] rtpproxy
by Pezhman Lali 02 Jun '08

02 Jun '08

Dear, I found using rtpproxy on different machine is really more useful, for solving nat problems, but I don't know the reseon. good help for setting rtpproxy on different mach : http://www.iptel.org/rtpproxy_on_different_machine Best Mani

1 0

[OpenSER-Users] how to drop sip call when i receive ring
by abo 02 Jun '08

02 Jun '08

Dear sir: i am trying openser 1.2.0 version.and now i want to drop call when i got 180 or 183.this is my openser.cfg.can you help me. thanks a lot! # ----------- global configuration parameters ------------------------ debug=9 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=yes # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 #fifo="/tmp/openser_fifo" listen=192.168.1.254 alias=openser.org # Uncomment this to prevent the blacklisting of temporary not available destinations disable_dns_blacklist=yes # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database # - MySQL loaded for accounting as well loadmodule "/usr/local/lib/openser/modules/mysql.so" loadmodule "/usr/local/lib/openser/modules/xlog.so" loadmodule "/usr/local/lib/openser/modules/uri.so" loadmodule "/usr/local/lib/openser/modules/uri_db.so" loadmodule "/usr/local/lib/openser/modules/sl.so" loadmodule "/usr/local/lib/openser/modules/tm.so" loadmodule "/usr/local/lib/openser/modules/rr.so" loadmodule "/usr/local/lib/openser/modules/maxfwd.so" loadmodule "/usr/local/lib/openser/modules/usrloc.so" loadmodule "/usr/local/lib/openser/modules/registrar.so" loadmodule "/usr/local/lib/openser/modules/textops.so" loadmodule "/usr/local/lib/openser/modules/acc.so" loadmodule "/usr/local/lib/openser/modules/avpops.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/openser/modules/auth.so" loadmodule "/usr/local/lib/openser/modules/auth_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- #modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # -- acc params -- modparam("acc", "db_url", "mysql://openser:openserrw@localhost/openser") modparam("acc", "db_flag", 7) modparam("acc", "db_missed_flag", 8) modparam("acc", "log_level", 3) modparam("acc", "log_flag", 2) modparam("acc", "log_missed_flag", 8) modparam("acc", "report_ack", 1) modparam("acc", "report_cancels", 1) modparam("acc", "failed_transaction_flag", 1) modparam("acc", "early_media", 1) modparam("acc", "db_extra", "src_ip=$si;dst_user=$tU;dst_domain=$du;src_user=$hdr(User-Agent)") # -- avpops params -- # avp aliases - define c_uri (canonical uri) as AVP ID 888 and s_ip as ID 999 avp_aliases="c_uri=i:888;s_ip=i:999" #tm timeout for voicemail params modparam("tm", "fr_timer", 2) modparam("tm", "fr_inv_timer", 35) modparam("tm", "noisy_ctimer", 1) # ------------------------- request routing logic ------------------- # main routing logic #Routing Script route { #check for old messages: could mean a problem with the DNS entries or some other loop-causer... if (!mf_process_maxfwd_header("10")) { xlog("L_WARN", "WARNING: Too many hops\n"); sl_send_reply("483", "Too many hops, forward count exceeded limit\n"); return; }; #check for extremely large messages; we don't need a sip dos attack if (msg:len >= 2048) { xlog("L_WARN", "WARNING: Message too large, >= 12048 bytes\n"); sl_send_reply("513", "Message too large, exceeded limit\n"); return; }; #record everything besides registers and acks if(method!="REGISTER" && method!="ACK") { setflag(1); }; #do not send to voicemail if BYE or CANCEL #is used to end call before user pickup or timeout if(method=="CANCEL" || method=="BYE") { setflag(7); setflag(8); }; #grant route if route headers already present if (loose_route()) { route(1); return; }; #Always require authentication, which could result in a PSTN, ie $$$ if (method=="REGISTER") { # if(!www_authorize("openser.org", "subscriber")) # { # www_challenge("openser.org", "0"); # return; # } # else # { # if (!check_to()) # { # sl_send_reply("401", "Unauthorized"); # return; # }; #Save into user database, used below when checking if user is available xlog("L_INFO", "REGISTER: User Authenticated Correctly\n"); save("location"); return; # }; }; if (method=="INVITE") { setflag(2); setflag(7); setflag(8); route(1); } } route[1] { #send the call outward if(uri=~"sip:[0-9]+@.*") { rewritehostport("192.168.1.100:5070"); #record_route(); t_on_reply("1"); # t_relay(); } if (!t_relay()) { xlog("L_WARN", "ERROR: t_relay failed"); sl_reply_error(); }; } onreply_route[1] { xlog("----------aaaaaaaaaa-------\n"); if (t_check_status("183")||t_check_status("180")){ exit; xlog("------------bbbbbbb------- \n"); } }

1 0

[OpenSER-Users] Please help with "auth:pre_auth: credentials with given realm not found" error
by mark morreny 31 May '08

31 May '08

Hi, I have found a few posts on this error from Google but none of the solutions works. I am able to use radius_proxy_authorize for REGISTER request without problem. But when I use radius_proxy_authorize for INVITE, Opensers can't authroize it. I have tried: radius_proxy_authorize("192.168.1.104")) proxy_authorize("192.168.1.104","subscriber") radius_proxy_authorize("")) proxy_authorize("","subscriber") I have been stuck with this for days already and I truely hope someone can tell me what could be wrong with my setup. I am pretty much in a stage of desperation right now. Thanks in advance for all your help. Here are the relevant lines in openser.cfg: #if (!radius_proxy_authorize("192.168.1.104")) { if (!proxy_authorize("192.168.1.104","subscriber")) { www_challenge("192.168.1.104","1"); exit; } Here is the openser debug log, I have highlighted the part that proxy_authorize throws error: Jun 1 05:37:16 [29028] DBG:core:parse_msg: SIP Request: Jun 1 05:37:16 [29028] DBG:core:parse_msg: method: <INVITE> Jun 1 05:37:16 [29028] DBG:core:parse_msg: uri: < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> Jun 1 05:37:16 [29028] DBG:core:parse_msg: version: <SIP/2.0> Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_via_param: found param type 232, <branch> = <z9hG4bK-f072f593>; state=16 Jun 1 05:37:16 [29028] DBG:core:parse_via: end of header reached, state=5 Jun 1 05:37:16 [29028] DBG:core:parse_headers: via found, flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_headers: this is the first via Jun 1 05:37:16 [29028] DBG:core:receive_msg: After parse_msg... Jun 1 05:37:16 [29028] DBG:core:receive_msg: preparing to run routing scripts... Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=8 Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=10 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1006"}, ruri={ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: <To> [33]; uri=[ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>] Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: to body ["1006" < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> ] Jun 1 05:37:16 [29028] DBG:core:pv_get_to_attr: no To tag Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=ffffffffffffffff Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: cseq <CSeq>: <101> <INVITE> Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: content_length=393 Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: found end of header Jun 1 05:37:16 [29028] DBG:core:parse_to_param: tag=39a9124ca59076d9o0 Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=29 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1005"}, ruri={ sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=14000 Jun 1 05:37:16 [29028] DBG:core:pv_get_authattr: no [Proxy-]Authorization header Sun Jun 1 05:37:16 2008-192.168.1.101::method <INVITE> r-uri < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> to-tag <<null>> 2nd via <<null>> to-header <sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> from-header <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>> auth-user <<null>> Jun 1 05:37:16 [29028] DBG:maxfwd:is_maxfwd_present: value = 70 Jun 1 05:37:16 [29028] DBG:core:check_via_address: params 192.168.1.101, 192.168.1.101, 0 Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=80 before fix nated contact Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=80 Jun 1 05:37:16 [29028] DBG:uri:has_totag: no totag Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=78 Jun 1 05:37:16 [29028] DBG:tm:t_lookup_request: start searching: hash=59293, isACK=0 Jun 1 05:37:16 [29028] DBG:tm:matching_3261: RFC3261 transaction matching failed Jun 1 05:37:16 [29028] DBG:tm:t_lookup_request: no transaction found Jun 1 05:37:16 [29028] DBG:domain:is_domain_local: Realm '192.168.1.104' is local Jun 1 05:37:16 [29028] DBG:core:db_free_rows: freeing 1 rows Jun 1 05:37:16 [29028] DBG:core:db_free_rows: row[0]=0x81a1c28 Jun 1 05:37:16 [29028] DBG:core:db_free_rows: 0x81a1c28=pkg_free() RES_ROWS Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=10000 Jun 1 05:37:16 [29028] DBG:auth:pre_auth: credentials with given realm not found Jun 1 05:37:16 [29028] DBG:auth:build_auth_hf: 'WWW-Authenticate: Digest realm="192.168.1.104", nonce="4841c6380fa8573a4e9794b1a0a2df9f3e53cb49", qop="auth" ' Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=ffffffffffffffff Jun 1 05:37:16 [29028] DBG:core:check_via_address: params 192.168.1.101, 192.168.1.101, 0 Jun 1 05:37:16 [29028] DBG:core:destroy_avp_list: destroying list 0xb5bf9be0 Jun 1 05:37:16 [29028] DBG:core:receive_msg: cleaning up Jun 1 05:37:16 [29028] DBG:core:parse_msg: SIP Request: Jun 1 05:37:16 [29028] DBG:core:parse_msg: method: <ACK> Jun 1 05:37:16 [29028] DBG:core:parse_msg: uri: < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> Jun 1 05:37:16 [29028] DBG:core:parse_msg: version: <SIP/2.0> Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_via_param: found param type 232, <branch> = <z9hG4bK-f072f593>; state=16 Jun 1 05:37:16 [29028] DBG:core:parse_via: end of header reached, state=5 Jun 1 05:37:16 [29028] DBG:core:parse_headers: via found, flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_headers: this is the first via Jun 1 05:37:16 [29028] DBG:core:receive_msg: After parse_msg... Jun 1 05:37:16 [29028] DBG:core:receive_msg: preparing to run routing scripts... Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=8 Jun 1 05:37:16 [29028] DBG:core:parse_to_param: tag=026ab2c49274b4e0186dd72188f7d50a.939a Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=29 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1006"}, ruri={ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: <To> [75]; uri=[ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>] Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: to body ["1006" < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>>] Jun 1 05:37:16 [29028] DBG:sl:sl_filter_ACK: local ACK found -> dropping it! Jun 1 05:37:16 [29028] DBG:core:destroy_avp_list: destroying list (nil) Jun 1 05:37:16 [29028] DBG:core:receive_msg: cleaning up Jun 1 05:37:16 [29028] DBG:core:parse_msg: SIP Request: Jun 1 05:37:16 [29028] DBG:core:parse_msg: method: <INVITE> Jun 1 05:37:16 [29028] DBG:core:parse_msg: uri: < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> Jun 1 05:37:16 [29028] DBG:core:parse_msg: version: <SIP/2.0> Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_via_param: found param type 232, <branch> = <z9hG4bK-dc12d56c>; state=16 Jun 1 05:37:16 [29028] DBG:core:parse_via: end of header reached, state=5 Jun 1 05:37:16 [29028] DBG:core:parse_headers: via found, flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_headers: this is the first via Jun 1 05:37:16 [29028] DBG:core:receive_msg: After parse_msg... Jun 1 05:37:16 [29028] DBG:core:receive_msg: preparing to run routing scripts... Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=8 Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=10 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1006"}, ruri={ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: <To> [33]; uri=[ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>] Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: to body ["1006" < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> ] Jun 1 05:37:16 [29028] DBG:core:pv_get_to_attr: no To tag Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=ffffffffffffffff Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: cseq <CSeq>: <102> <INVITE> Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: content_length=393 Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: found end of header Jun 1 05:37:16 [29028] DBG:core:parse_to_param: tag=39a9124ca59076d9o0 Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=29 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1005"}, ruri={ sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=14000 Sun Jun 1 05:37:16 2008-192.168.1.101::method <INVITE> r-uri < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> to-tag <<null>> 2nd via <<null>> to-header <sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> from-header <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>> auth-user <1005> Jun 1 05:37:16 [29028] DBG:maxfwd:is_maxfwd_present: value = 70 Jun 1 05:37:16 [29028] DBG:core:check_via_address: params 192.168.1.101, 192.168.1.101, 0 Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=80 Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=80 Jun 1 05:37:16 [29028] DBG:uri:has_totag: no totag Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=78 Jun 1 05:37:16 [29028] DBG:tm:t_lookup_request: start searching: hash=59290, isACK=0 Jun 1 05:37:16 [29028] DBG:tm:matching_3261: RFC3261 transaction matching failed Jun 1 05:37:16 [29028] DBG:tm:t_lookup_request: no transaction found Jun 1 05:37:16 [29028] DBG:domain:is_domain_local: Realm '192.168.1.104' is local Jun 1 05:37:16 [29028] DBG:core:db_free_rows: freeing 1 rows Jun 1 05:37:16 [29028] DBG:core:db_free_rows: row[0]=0x81a1c28 Jun 1 05:37:16 [29028] DBG:core:db_free_rows: 0x81a1c28=pkg_free() RES_ROWS Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=10000 Jun 1 05:37:16 [29028] DBG:auth:pre_auth: credentials with given realm not found Jun 1 05:37:16 [29028] DBG:auth:build_auth_hf: 'WWW-Authenticate: Digest realm="192.168.1.104", nonce="4841c6380fa8573a4e9794b1a0a2df9f3e53cb49", qop="auth" ' Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=ffffffffffffffff Jun 1 05:37:16 [29028] DBG:core:check_via_address: params 192.168.1.101, 192.168.1.101, 0 Jun 1 05:37:16 [29028] DBG:core:destroy_avp_list: destroying list 0xb5bf9be0 Jun 1 05:37:16 [29028] DBG:core:receive_msg: cleaning up Jun 1 05:37:16 [29028] DBG:core:parse_msg: SIP Request: Jun 1 05:37:16 [29028] DBG:core:parse_msg: method: <ACK> Jun 1 05:37:16 [29028] DBG:core:parse_msg: uri: < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>> Jun 1 05:37:16 [29028] DBG:core:parse_msg: version: <SIP/2.0> Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_via_param: found param type 232, <branch> = <z9hG4bK-dc12d56c>; state=16 Jun 1 05:37:16 [29028] DBG:core:parse_via: end of header reached, state=5 Jun 1 05:37:16 [29028] DBG:core:parse_headers: via found, flags=2 Jun 1 05:37:16 [29028] DBG:core:parse_headers: this is the first via Jun 1 05:37:16 [29028] DBG:core:receive_msg: After parse_msg... Jun 1 05:37:16 [29028] DBG:core:receive_msg: preparing to run routing scripts... Jun 1 05:37:16 [29028] DBG:core:parse_headers: flags=8 Jun 1 05:37:16 [29028] DBG:core:parse_to_param: tag=026ab2c49274b4e0186dd72188f7d50a.6388 Jun 1 05:37:16 [29028] DBG:core:parse_to: end of header reached, state=29 Jun 1 05:37:16 [29028] DBG:core:parse_to: display={"1006"}, ruri={ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>} Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: <To> [75]; uri=[ sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>] Jun 1 05:37:16 [29028] DBG:core:get_hdr_field: to body ["1006" < sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104>>] Jun 1 05:37:16 [29028] DBG:sl:sl_filter_ACK: local ACK found -> dropping it! Jun 1 05:37:16 [29028] DBG:core:destroy_avp_list: destroying list (nil) Jun 1 05:37:16 [29028] DBG:core:receive_msg: cleaning up Here is the SIP trace: U 192.168.1.101:5062 -> 192.168.1.104:5060 INVITE sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-d392c9a5. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>>. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 101 INVITE. Max-Forwards: 70. Contact: "1005" <sip:1005@192.168.1.101:5062>. Expires: 240. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 395. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Content-Type: application/sdp. . v=0. o=- 36185 36185 IN IP4 192.168.1.101. s=-. c=IN IP4 192.168.1.101. t=0 0. m=audio 16424 RTP/AVP 0 2 4 8 18 96 97 98 101. a=rtpmap:0 PCMU/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729a/8000. a=rtpmap:96 G726-40/8000. a=rtpmap:97 G726-24/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv. U 192.168.1.104:5060 -> 192.168.1.101:5062 SIP/2.0 401 Unauthorized. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-d392c9a5;rport=5062. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.f608. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 101 INVITE. WWW-Authenticate: Digest realm="192.168.1.104", nonce="4841caae665a98cec71734a5cf84c70d10ac8f63", qop="auth". Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U 192.168.1.101:5062 -> 192.168.1.104:5060 ACK sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-d392c9a5. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.f608. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 101 ACK. Max-Forwards: 70. Contact: "1005" <sip:1005@192.168.1.101:5062>. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 0. . U 192.168.1.101:5062 -> 192.168.1.104:5060 INVITE sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-4cf05fb6. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>>. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 102 INVITE. Max-Forwards: 70. Authorization: Digest username="1005",realm="192.168.1.104 ",nonce="4841caae665a98cec71734a5cf84c70d10ac8f63",uri=" sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> ",algorithm=MD5,response="e39bd9dc46a72ea191fca87e98cf9136",qop=auth,nc=00000001,cnonce="9d027a79". Contact: "1005" <sip:1005@192.168.1.101:5062>. Expires: 240. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 395. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Content-Type: application/sdp. . v=0. o=- 36185 36185 IN IP4 192.168.1.101. s=-. c=IN IP4 192.168.1.101. t=0 0. m=audio 16424 RTP/AVP 0 2 4 8 18 96 97 98 101. a=rtpmap:0 PCMU/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729a/8000. a=rtpmap:96 G726-40/8000. a=rtpmap:97 G726-24/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv. U 192.168.1.104:5060 -> 192.168.1.101:5062 SIP/2.0 401 Unauthorized. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-4cf05fb6;rport=5062. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.218e. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 102 INVITE. WWW-Authenticate: Digest realm="192.168.1.104", nonce="4841caae665a98cec71734a5cf84c70d10ac8f63", qop="auth". Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U 192.168.1.101:5062 -> 192.168.1.104:5060 ACK sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-4cf05fb6. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.218e. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 102 ACK. Max-Forwards: 70. Authorization: Digest username="1005",realm="192.168.1.104 ",nonce="4841caae665a98cec71734a5cf84c70d10ac8f63",uri=" sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> ",algorithm=MD5,response="dc66b568ed8ec48f0f405aa063156eaa",qop=auth,nc=00000001,cnonce="9d027a79". Contact: "1005" <sip:1005@192.168.1.101:5062>. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 0. . U 192.168.1.101:5062 -> 192.168.1.104:5060 INVITE sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-e2c260be. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>>. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 103 INVITE. Max-Forwards: 70. Authorization: Digest username="1005",realm="192.168.1.104 ",nonce="4841caae665a98cec71734a5cf84c70d10ac8f63",uri=" sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> ",algorithm=MD5,response="8d2b52278a72326a57361ec1ca2601c3",qop=auth,nc=00000001,cnonce="f4b6f3a0". Contact: "1005" <sip:1005@192.168.1.101:5062>. Expires: 240. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 395. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Content-Type: application/sdp. . v=0. o=- 36185 36185 IN IP4 192.168.1.101. s=-. c=IN IP4 192.168.1.101. t=0 0. m=audio 16424 RTP/AVP 0 2 4 8 18 96 97 98 101. a=rtpmap:0 PCMU/8000. a=rtpmap:2 G726-32/8000. a=rtpmap:4 G723/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729a/8000. a=rtpmap:96 G726-40/8000. a=rtpmap:97 G726-24/8000. a=rtpmap:98 G726-16/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv. U 192.168.1.104:5060 -> 192.168.1.101:5062 SIP/2.0 401 Unauthorized. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-e2c260be;rport=5062. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.8d8a. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 103 INVITE. WWW-Authenticate: Digest realm="192.168.1.104", nonce="4841caae665a98cec71734a5cf84c70d10ac8f63", qop="auth". Server: OpenSER (1.3.2-notls (i386/linux)). Content-Length: 0. . U 192.168.1.101:5062 -> 192.168.1.104:5060 ACK sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.101:5062;branch=z9hG4bK-e2c260be. From: "1005" <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=131fa1047c30f2a4o0. To: <sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> >;tag=026ab2c49274b4e0186dd72188f7d50a.8d8a. Call-ID: a3888884-92d13124(a)192.168.1.101. CSeq: 103 ACK. Max-Forwards: 70. Authorization: Digest username="1005",realm="192.168.1.104 ",nonce="4841caae665a98cec71734a5cf84c70d10ac8f63",uri=" sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> ",algorithm=MD5,response="8ebde837f7c7c49f721d9f2c44b3797d",qop=auth,nc=00000001,cnonce="f4b6f3a0". Contact: "1005" <sip:1005@192.168.1.101:5062>. User-Agent: Sipura/SPA921-4.1.10(b). Content-Length: 0.

1 0

[Serusers] (no subject)
by Bin Zhang 31 May '08

31 May '08

-- Bin Zhang

1 0

[OpenSER-Users] Hints about to capture codes negative www_authorize??
by Marcio 30 May '08

30 May '08

Hi, Who would have tips on how to capture the return codes negative of the function "www_authorize" ??? I read somewhere that said to use $retval........but ...How can I to use it ("$retval") ?? -1 - Non existent user; -2 - invalid passwd; -3 - stale nonce; -4 - no credentials; -5 - error; Any help will be greatly appreciated. thx, Marcio

3 5

[OpenSER-Users] Fwd: Re: Installing perl module
by Henning Westerholt 30 May '08

30 May '08

---------- Forward message ---------- Subject: Re: [OpenSER-Users] Installing perl module Date: Freitag, 30. Mai 2008 From: "Yazid Hadj Said" <yazid.hadjsaid(a)gmail.com> Tp: "Henning Westerholt" <henning.westerholt(a)1und1.de> Hi Henning, I think that the problem is in openser ebuild, so I do this modifications: # diff openser-1.3.1.ebuild openser-1.3.1.ebuild.old 7c7 < IUSE="ipv6 mysql radius postgres jabber ssl odbc perl perlvdb" --- 58,63d57 < use perl && < modules="${modules} perl" < < use perlvdb && < modules="${modules} perlvdb" < --------------------------------------- Hi Yazid, please always CC at the list, so that others can read the resolution too. Great that it works now for you. I'm not sure if the ebuild that is included in the openser distribution is also used in gentoo. Perhaps you can file a bug against the gentoo package (on gentoo.org), and attach your patch, so that the maintainer could fix this? Cheers, Henning

2 1

[OpenSER-Users] Installing perl module
by Yazid Hadj Said 30 May '08

30 May '08

Hi, I use 1.3.1 openser version, and i don't find perl module (I don't know Why). My question is if I can add perl module without recompiling openser. (I use Gentoo distribution) Regards Yazid

2 1

[OpenSER-Users] variables in regexp
by Yazid Hadj Said 30 May '08

30 May '08

Hi, please I want to know: If and How I can use variables in "regexp" . example: avp_subst("avp(s:var1)/$avp(s:var2)","/(.*)$avp(s:var3)(.*)/\1/") In this example, simply the "$avp(s:var3)" string is matched, not the $avp(s:var3)'s content. I am very need this function. Thanks in advance, Yazid

3 2

[OpenSER-Users] Correction in documentation of tm module(version 1.2.X)
by Ruchir Brahmbhatt 30 May '08

30 May '08

Hi, The following sentence in section 1.4.8. t_flush_flags() of tm module documentation(version 1.2.X) has several spelling mistakes. Incorrect Flush the flags from current request into the already created transaction. It make sens only in routing block if the trnasaction was created via t_newtran() and the flags have been altered since. Correct Flush the flags from current request into the already created transaction. It make sense only in routing block if the transaction was created via t_newtran() and the flags have been altered since. Thanks, Ruchir

3 3

[OpenSER-Users] Openser not processing requests at rate being sent to it
by Brian Peters 30 May '08

30 May '08

I am doing what I thought was a simple volume test that OpenSER should be able to handle, but the results I am getting so far show it is not handling the load I'm sending it. Here is my configuration: - OpenSER 1.3.1 - Simple script that uses OpenSER as a proxy to forward requests to a carrier. All it does is rewrite the host and port of the R-URI and relays to the carrier. - children=16 - shared memory set to 1 G. (-m 1000) - using transaction module to handle the requests. - Sending 10 INVITE requests per second to OpenSER using Asterisk. When I do a "tcpdump" trace of the network traffic to/from OpenSER, it is clear that a large percentage of the INVITE requests sent to OpenSER were not handled. Asterisk needed to resend the INVITE requests several times before OpenSER would handle them, and in about 20% of the cases Asterisk terminated the INVITES because it reached the timeout of 30 seconds without any response. If I go directly from asterisk to the carrier, this test works without any issues. I'm not sure what the limitations are of OpenSER, but this seems like something it should be able to handle. Any help or information on how to configure OpenSER so it will work would be appreciated. Thanks, Brian.

6 17

[OpenSER-Users] openser trunk performance
by jh＠tutpro.com 30 May '08

30 May '08

also i did some performance tests on openser trunk in order to clear doubt that has been expressed recently. with only 4 child processes and several radius/mysql queries per invite, i was able to achieve 50 new calls per second using sipp including radius accounting to database of each call. this was on my two years old laptop and everything was running on the same host. i didn't try yet how many calls i could have achieved before retransmissions. i'm satisfied with the result and don't think that there are any performance issues with openser trunk. -- juha

3 2

[OpenSER-Users] Corrections in rr module documentation version 1.2.X
by Ruchir Brahmbhatt 30 May '08

30 May '08

Hi, I've noticed some mistakes in documentation of rr module in version 1.2.X. 1.5.6. is_direction(dir): Incorrect sentence: As for checking it's used the "ftag" Route header parameter, the append_fromtag (see Section 1.4.2 module parameter must be enables. Also this must be call only after loose_route() (see Section 1.5.1). Correct sentence: As for checking it's used the "ftag" Route header parameter, the append_fromtag (see Section 1.4.2 module parameter must be enabled. Also this must be called only after loose_route() (see Section 1.5.1). Thanks, Ruchir Brahmbhatt Director Ecosmob Technologies Pvt. Ltd.

2 1

[OpenSER-Users] Scrolling through resultset
by mark morreny 30 May '08

30 May '08

Hi, If I want to walk through a resultset of numbers, how can I do that? I have tried: $var(index) = 1 while (is_avp_set($var(i:$index) ) $var(index) = $var(index) +1; However $var(i:$index) won't work. I am wondering if someone can tell me how I can correct it. The other question I have is about psuedo-variable. Is there any psuedo-variable can give me the IP of the Openser server? Thanks, Mark

2 1

[OpenSER-Users] Explanation of 0x02 in "t_relay()" ?
by Iñaki Baz Castillo 30 May '08

30 May '08

Hi. I read in "t_relay" doc: -------- 0x02 - do not internally send a negative reply in case of failure. It applies only when the transaction is created. By default one is sent. Useful if you want to implement a serial forking in case of failure. -------- Could you please explain it a little more? I use failure_route with append_branch and before it OpenSer doesn't send back a negative reply to caller (in fct it would end the transaction). What the purpose of this bit option? Thanks a lot. -- Iñaki Baz Castillo ibc(a)in.ilimit.es

3 3

[OpenSER-Users] Need help with proxy_authorize for NATed UA
by mark morreny 30 May '08

30 May '08

Hi, I am using the same UA and Openser to do two tests. For the first case, UA is pointing to the external IP of openser.; the other test points the UA to openser's local ip. Registering is ok for both cases, but when I try to do an INVITE, the UA pointing to the local IP works whereas the one pointing to the external IP fails during proxy_authorize. 88.251.45.4 -> external ip of the entire network 192.168.1.104 -> openser's local ip 192.168.1.100 -> UA's local ip Here is the INVITE with authentication digest from the UA pointing to the external IP address of openser: U 88.251.45.4:59864 -> 192.168.1.104:5060 INVITE sip:1005@88.251.45.4 <sip%3A1005(a)88.251.45.4> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.100:17480 ;branch=z9hG4bK-d87543-ea31ca6af52bd14c-1--d87543-;rport. Max-Forwards: 70. Contact: <sip:1006@88.251.45.4:59864>. To: "1005"<sip:1005@88.251.45.4 <sip%3A1005(a)88.251.45.4>>. From: "1006"<sip:1006@88.251.45.4 <sip%3A1006(a)88.251.45.4>>;tag=d21e4745. Call-ID: NGFlOTRmNTg3ZDFlYzJlYzdhNTlhNzZmMDRlOTJmOGY.. CSeq: 2 INVITE. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. Content-Type: application/sdp. Proxy-Authorization: Digest username="1006",realm="88.251.45.4 ",nonce="483edcaf82beda80a0c91fc75f486b8fd3f7bbc3",uri="sip:1005@88.251.45.4<sip%3A1005(a)88.251.45.4> ",response="4423a99e44bb7266912de3a4af752b3f",cnonce="ece582bf4b1708b67bd1e86952313a63",nc=00000001,qop=auth,algorithm=MD5. User-Agent: X-Lite release 1011s stamp 41150. Content-Length: 423. . v=0. o=- 1 2 IN IP4 192.168.1.100. s=CounterPath X-Lite 3.0. c=IN IP4 192.168.1.100. t=0 0. m=audio 34842 RTP/AVP 107 119 100 106 0 105 98 8 101. a=alt:1 1 : bIn/n4cp vm9zXwFh 192.168.1.100 34842. a=fmtp:101 0-15. a=rtpmap:107 BV32/16000. a=rtpmap:119 BV32-FEC/16000. a=rtpmap:100 SPEEX/16000. a=rtpmap:106 SPEEX-FEC/16000. a=rtpmap:105 SPEEX-FEC/8000. a=rtpmap:98 iLBC/8000. a=rtpmap:101 telephone-event/8000. a=sendrecv. Here is the INVITE resend from the UA pointing to openser's local IP: U 192.168.1.100:50314 -> 192.168.1.104:5060 INVITE sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> SIP/2.0. Via: SIP/2.0/UDP 192.168.1.100:50314 ;branch=z9hG4bK-d87543-c34be44e3704d673-1--d87543-;rport. Max-Forwards: 70. Contact: <sip:1006@192.168.1.100:50314>. To: "1005"<sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104>>. From: "1006"<sip:1006@192.168.1.104 <sip%3A1006(a)192.168.1.104> >;tag=d4048226. Call-ID: YTc4OTE2NmIyMWRkMjk3ZGNmYmY4OTg3NTQ5NWRhZDI.. CSeq: 2 INVITE. Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO. Content-Type: application/sdp. Proxy-Authorization: Digest username="1006",realm="192.168.1.104 ",nonce="483ede954fef336afd24141e99d516b0b7d9091a",uri=" sip:1005@192.168.1.104 <sip%3A1005(a)192.168.1.104> ",response="1b77bf191fef631049bd6d6b7dcc9094",cnonce="e96a7e7d9677c4c41952bce7ac2a36e2",nc=00000001,qop=auth,algorithm=MD5. User-Agent: X-Lite release 1011s stamp 41150. Content-Length: 423. . v=0. o=- 7 2 IN IP4 192.168.1.100. s=CounterPath X-Lite 3.0. c=IN IP4 192.168.1.100. t=0 0. m=audio 14816 RTP/AVP 107 119 100 106 0 105 98 8 101. a=alt:1 1 : SP8QJ5e9 96jlnBkg 192.168.1.100 14816. a=fmtp:101 0-15. a=rtpmap:107 BV32/16000. a=rtpmap:119 BV32-FEC/16000. a=rtpmap:100 SPEEX/16000. a=rtpmap:106 SPEEX-FEC/16000. a=rtpmap:105 SPEEX-FEC/8000. a=rtpmap:98 iLBC/8000. a=rtpmap:101 telephone-event/8000. a=sendrecv. The openser script associated wit proxy_authorize is : if (!proxy_authorize("","subscriber")) { xlog("not authorize need to do proxy challenge\n"); proxy_challenge("","1"); exit; } What could be wrong with my setup? Thanks in advance for your help. Thanks, Mark

2 1

[OpenSER-Users] Problems with (RE-)REGISTER
by Lucio Maciel 30 May '08

30 May '08

Hi, I am having a situation where the client sends each RE-REGISTER with a new Call-ID, causing it to create a new entry in the location table. The problem is that this client sends the Re-REGISTER in a Expires/2 time, and as the RFC says, the 200ok is sent with the 2 contacts, with each expire, then the client receive this 2 contacts with 2 expires and "thinks" that it should renew the REGISTER for the old contact and sends a new REGISTER, with a new Call-ID, and adds another entry in the location table, which causes the response returns 3 contacts with 3 expires, and so on... There is some way to handle this issue? Thanks Lucio

2 1

[OpenSER-Users] how to use AVP variables in regular expressions
by Yazid Hadj Said 30 May '08

30 May '08

Hi, Please, I want to know how to use AVP variables in regular expressions with avp_subst? Thanks Yazid

2 1

[OpenSER-Users] Question about proxy_authenticate
by mark morreny 30 May '08

30 May '08

Hi, I am wondering if someone could help me to understand a bit more about the internal mechanism of proxy_challenge? If the UA is connecting to the server using the external ip, proxy_challenge fails, but if the UA is connecting to the server using the lan ip, proxy_challenge succeeds. What is the reason why this is happening? How does proxy_challenge work exactly? Thanks in advance for your help. Regards, Mark

2 1

[OpenSER-Users] Unable to t_relay (ERROR:tm:update_uac_dst)
by Pete Kay 30 May '08

30 May '08

Hi, After next_gw(), openser appends "64.231.23.234:5060;transport=tcp" as the domain of th ruri. When doing a t_relay with that ruri, I am getting ERROR:tm:update_uac_dst. before relay ruri = sip:86143455048@64.231.23.234:5060;transport=tcp starting to relay May 29 21:18:04 [12107] ERROR:tm:update_uac_dst: failed to fwd to af 2, proto 2 (no corresponding listening socket) May 29 21:18:04 [12107] ERROR:tm:t_forward_nonack: failure to add branches However, if I do a t_relay with ruri= "sip:86143455048@64.231.23.234<sip%3A86143455048(a)64.231.23.234>", then the call can go through. Could anyone tell me why? A workaround that I can think of is to reconstruct the ruri to get rid of the port and the "transport=tcp" with something like: rewriteuri("sip:$rU@$rd"); But, the above line gives "sip:$rU@$rd" instead of the desired " sip:86143455048@64.231.23.234 <sip%3A86143455048(a)64.231.23.234>". Is there anyway of using psuedo variable in rewriteuri? Thanks alot in advance for your help. Regards, Pete

5 4

[OpenSER-Users] Managing MSILO responses
by Saúl Ibarra 30 May '08

30 May '08

Hi all, I'm having a little trouble setting up msilo: When I send a MESSAGE to an offline user, MSILO does it's job and stores it, and when the other user gets registered, he sees the MESSAGES. But if I enable onification, by putting: modparam("msilo", "registrar", "sip:softswitch@OPENSER_IP") MSILO repplies me sayng the user is offline, but hten I can't continue sending MESSAGEs, because they will be directed to the URI indicated by the registyrar parameter instead of the original user I wanted to send the MESSAGE. I'm using Twinkle 1.2. Thanks in advance!! -- Saúl -- "Nunca subestimes el ancho de banda de un camión lleno de disketes." ---------------------------------------------------------------- http://www.saghul.net/

2 2

[OpenSER-Users] BYE not relaying properly
by Ruchir Brahmbhatt 30 May '08

30 May '08

Hi All, I have OpenSER 1.2.3(previously it was 1.2.1 but installed latest version to make sure that it is not an OpenSER bug) configured and running for following features: * Registrar * Proxy * Media proxy for NAT traversal * LCR module for PSTN termination * SEMS for voicemail * Multi-leg accounting with Radiator radius * Call forwarding using user_preferences I'm having one really strange issue. My OpenSER is configured to listen on particular IP address say 1.2.3.4. I've added alias for the domain name say voip.domain.com. User agent register to OpenSER using voip.domain.com as a proxy. They can call each other & pstn. I'm using Media Proxy for handling media in case of clients behind NAT. Audio & signaling seems to be working fine in case of internal and pstn calling. I have configured call forwarding unconditional, no answer & busy. In case of unconditional call forwarding, audio and signaling works fine. But when I test call forwarding on no answer or busy, audio is proper but signaling doesn't work properly. Specially BYE. Here is my setup: * 3 users configured; 1000, 2000 & 3000. * 2000 has no answer forwarding to pstn number. * 3000 has busy forwarding to 2000 If 1000 calls 2000 and 2000 doesn't pickup the phone in 30 seconds(configured using fr_inv_timer param of tm module), the pstn number is pushed in request uri and request is sent to gateway for pstn termination. Audio works fine. If caller(1000) hangs up, the callee is hung up properly. However if callee (pstn number) hangs up the call, the caller doesn't receive the BYE message and hence stays connected. Media Proxy session is closed properly but in OpenSER, BYE request is not sent to caller but keeps looping in OpenSER instead. I have several doubts about this issue. One thing is that the pstn gateway is sending BYE to OpenSER IP address instead of domain name. I know this kind of problem can occur if we haven't configured alias parameter properly. Reference: http://www.openser.org/mos/view/-OpenSER-Installation-Notes/ (Section 4. Troubleshooting) I have added ip and domain in domain table as well but still no change. I've been facing this issue since several days and still not able to solve. I've done many OpenSER setups but having such issue for the first time. I've compared the OpenSER config file to my older setups but it seems proper. Can anyone please guide me in correct direction? Thanks, Ruchir Brahmbhatt

1 2

[OpenSER-Users] Can openser auto-retry if a call fails?
by Pete Kay 29 May '08

29 May '08

Hi, I know this kind of function exists in Asterisk, but I want to know if Openser can do it as well. Let's say there are two fail-over numbers(DID-b,DID-c) that associates with a DID(DID-a), if the original number(DID-a) that get dailed can't rearch the destination due to BUSY, NO RESPONSE, etc, is there anyway of having Openser to auto-retry with the next DID(DID-b)? If the next one fails, try the next next one(DID-c). One way I can think of is to do a lookup from DB for the alias in the fail_on_route section, but if I have multiple aliases, then I will have no way of *remembering* which alias has been tried unless I store it in the DB which is not a good solution. I am wondering if there any other way of doing it? Thanks in advance for all your kind suggestion. Regards, Pete

4 6

[OpenSER-Users] OPENSER Dinner Berlin, May 28
by Daniel-Constantin Mierla 29 May '08

29 May '08

Hello, bound to Asterisk Tag (http://www.asterisk-tag.org) and Linux Tag (http://www.linuxtag.org) events, Henning Westerholt and I will take care of an OPENSER group meeting in Berlin, Germany, May 28 at 20:00. The place is a small brewery next to Chartlottenburg Castle in Berlin, named Lusinen Brau, the website: http://www.luisenbraeu.com/ Organized in same idea of casual community meeting, everybody is welcome to join at any time. It is recommended to contact me or Henning to announce your participation so you got your seat reserved. Cheers, Daniel -- http://www.asipto.com

2 1

[OpenSER-Users] t_relay() issue when bad host name
by Iñaki Baz Castillo 29 May '08

29 May '08

Hi, perhaps I missing something but AFAIK if I do: rewritehostport("kk.kkkkkkkkkkaaa.bad"); append_branch(); xlog("L_INFO", "1111111111\n"); if (!t_relay()) { xlog("L_ERROR","222222222222\n"); } xlog("L_ERROR","3333333333\n"); Then, since "kk.kkkkkkkkkkaaa.bad" is a non existing domain I expect to see "222222222" because t_relay should reply a negative value: -4 bad destination (unresolvable address) But the fact is that I don't see that "2222222222", neither "3333333333" but this error: ---------- May 29 10:38:32 [16795] CRITICAL:core:mk_proxy: could not resolve hostname: "kk.kkkkkkkkkkaaa.bad" May 29 10:38:32 [16795] ERROR:tm:uri2proxy: bad host name in URI <sip:number_doesnt_exist@kk.kkkkkkkkkkaaa.new;transport=UDP;user=phone> May 29 10:38:32 [16795] ERROR:tm:t_forward_nonack: failure to add branches ----------- Why? Thanks a lot. -- Iñaki Baz Castillo ibc(a)in.ilimit.es

2 2

[OpenSER-Users] Variables in regular expression
by Yazid Hadj Said 29 May '08

29 May '08

Hi Can I use AVP variables in regular expression? regards Yazid.

2 1

[OpenSER-Users] presence module - force subscription termination
by Sigrid Thijs 29 May '08

29 May '08

Hi, is it possible to terminate all presence subscriptions for a certain presentity through the current config script (1.3.x branch)? Or is there another easy way to accomplish this, without modifying the authorization rules? kind regards, Sigrid

2 1

[Serusers] Presence-rule handling in SER2.0
by pravin.swami＠wipro.com 29 May '08

29 May '08

Dear All, We are having problems with presence-rules handling of SER 2.0 Presence Server. +------+ +----------+ +------+ | | | Presence | | | | UE1 |--------------| Server |--------------| UE2 | | | | (PS) | | | +------+ +----------+ +------+ 1. UE1 & UE2 subscribe to "watcher-info". 2. UE1 SUBSCRIBEs to UE2's "presence" information. 3. PS sends info winfo-NOTIFY to UE2 (with UE1 status as pending). 4. UE2 fetches its presence-rules.xml document(from path /var/simulated-xcap-root/pres-rules/users/UE2/presence-rules.xml) 5. UE2 updates presence-rules.xml by adding UE1 into ALLOWLIST section & PUTs the document back to PS. 6. User changes presence status at UE2. UE2 sends PUBLISH request to PS. At this stage, PS should trigger presence NOTIFY to UE1. This isn't happening. (Another thing we observe is: Everytime watcher subscription is refreshed, UE2 receives NOTIFY with UE1 status as pending) Are we missing something in the above callflow? Should UE2 send any SIP/HTTP request after HTTP PUT presence-rules.xml ? Are we missing something when building presence-rules.xml ? We have modified the ser.cfg for presence authorization as per ser presence Handbook. modparam("pa", "auth", "xcap") modparam("xcap", "xcap_root", "http://localhost/xcap-root") Should I make any more changes to ser.cfg We have attached the ser.cfg & presence-rules.xml file that we are using. Please help us in solving this problem. Regards, -Pravin Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

1 0

[OpenSER-Users] how to force free-radius to use my own database
by Do Nguyen Ha 29 May '08

29 May '08

hi i have question on freeRadius i create my own database and now i want to use my own database instead of Openser database if yes, please show me which file i should edit Thanks Ha`

2 1

[OpenSER-Users] multiples rows in avp_db_query
by Yazid Hadj Said 29 May '08

29 May '08

Hi, When I use avp_db_query(), I only can access to to the first row by using simply the name of my variable ($avp(s:example)), but if I try to use for example ($avp(s:example[1],$avp(s:example[2]) , it indicate me that this variables isn't set. Regards Yazid

2 1

Re: [OpenSER-Users] Problem with Openser-freeradius communication [SOLVED]
by Pete Kay 29 May '08

29 May '08

Hi, I just figured it out. In the radgroupcheck, I had Local as my Value and then I changed it to "Digest", it is working fine now. Thanks a million for all of your help. Regards, Pete

2 1

Re: [OpenSER-Users] Problem with Openser-freeradius communication
by Dan-Cristian Bogos 29 May '08

29 May '08

Hi Pete, the Service-Type does matter only if u use it in your auth part. The reason you see "IAPP-Register" is due to radius dictionaries, responsible for translating between numbers and attributes (radius only transports numbers). Regarding the problem of FreeRADIUS not authorizing the requests I think it is a matter of which module do u want to perform that and configure that properly. I would recomed you should running freeradius in debug mode (-X ) and post more info here. Cheers, DanB On Wed, May 28, 2008 at 10:02 AM, Pete Kay <petedao(a)gmail.com> wrote: > Hi, > I am having problem with configuring FreeRadius to authenticate suername > and password. I have tried to test freeradius with a test client and it > works by sending the following message: > Ready to process requests. > User-Name = "1005(a)192.168.1.104" > User-Password = "1234" > Service-Type = Authenticate-Only > NAS-Port = 0 > NAS-IP-Address = 127.0.0.1 > > The message that is sent by Openser is as follows: > Waking up in 1.9 seconds. > User-Name = "1005(a)192.168.1.104" > Digest-Attributes = 0x0a0631303036 > Digest-Attributes = 0x010f3139322e3136382e312e313034 > Digest-Attributes = > 0x022a34383364376265396630623738663734363935343562386366373865303561316161623032633366 > Digest-Attributes = 0x04137369703a3139322e3136382e312e313034 > Digest-Attributes = 0x030a5245474953544552 > Digest-Response = "eb5f24a5563e9c1096855ef8b2c72d2b" > Service-Type = IAPP-Register > X-Ascend-PW-Lifetime = 825241654 > NAS-Port = 5060 > NAS-IP-Address = 127.0.0.1 > > Freeradius can't find the password and is reject users as a result of > that. Also, is the Service-Type supposed to be Authenticate-Only instead? > Is this something to do with my openser.cfg setup that is causing the > problem? > > Thanks in advance for your help. > > Regards, > Pete > > > > _______________________________________________ > Users mailing list > Users(a)lists.openser.org > http://lists.openser.org/cgi-bin/mailman/listinfo/users > >

3 9

[OpenSER-Users] Problem with t_relay after next_gw()
by Pete Kay 29 May '08

29 May '08

Hi, After running next_gw(), I can see that the ruri is being modified with the gateway ip as the domain. However, when doing a t_relay, I am getting the following error. From ngrep, I don't see any going package to the gateway ip address, so I am suspecting that the error is internal. before relay ruri = sip:86143455048@64.231.23.234:5060;transport=tcp starting to relay May 29 21:18:04 [12107] ERROR:tm:update_uac_dst: failed to fwd to af 2, proto 2 (no corresponding listening socket) May 29 21:18:04 [12107] ERROR:tm:t_forward_nonack: failure to add branches Could someone tell me what could be the problem? Thenks in advance for all your help. Regards, Pete

1 0

[OpenSER-Users] How to differentiate auth level for gateway
by mark morreny 28 May '08

28 May '08

Hi, Assuming I have 3 gateways, GW-a, GW-b, and GW-c. All of them can REGISTER without username and password by having an entry in the trusted table. Is it possible to config Opernser so that GW-a and GW-b can route to GW-c (using INVITE) without username and password, but any INVITEs from GW-c will not be accepted? Thanks in advance for your suggestion. Regards, Mark

2 1

[OpenSER-Users] CDRTool question - ShowPrice command changes
by Adrian Georgescu 28 May '08

28 May '08

Dan, you are right and I found the problem. The fix will be available with the next CDRTool release due next week together with Mediaproxy 2.0 Adrian If you need a fix now for your 6.4.1: --- rating_lib-6.4.1.phtml 2008-05-28 18:25:18.000000000 +0200 +++ rating_lib.phtml 2008-05-28 18:27:00.000000000 +0200 @@ -6078,26 +6078,28 @@ $timestamp=time(); } - $application="audio"; - if ($NetFields['application']) $application=$NetFields ['application']; + $CDRStructure=array ( + $this->CDRS->CDRFields ['callId'] => $NetFields['callid'], + $this->CDRS->CDRFields ['aNumber'] => $NetFields['from'], + $this->CDRS->CDRFields ['CanonicalURI'] => $NetFields['to'], + $this->CDRS->CDRFields ['duration'] => $NetFields['duration'], + $this->CDRS->CDRFields ['timestamp'] => time() + ); + + $CDR = new $this->CDRS->CDR_class(&$this->CDRS, & $CDRStructure); + $CDR->normalize(); $Rate = new Rate($this->settings, $this->db); $RateDictionary=array( - 'callId' => $NetFields ['callid'], - 'timestamp' => $timestamp, - 'duration' => $NetFields ['duration'], - 'inputTraffic' => $NetFields ['inputtraffic'], - 'outputTraffic' => $NetFields ['outputtraffic'], - 'DestinationId' => $NetFields ['destinationid'], - 'BillingPartyId' => $NetFields ['from'], - 'domain' => $NetFields ['domain'], - 'gateway' => $NetFields ['gateway'], - 'aNumber' => $NetFields ['from'], - 'cNumber' => $NetFields ['to'], - 'ENUMtld' => $NetFields ['enumtld'], - 'applicationType' => $application, - 'RatingTables' => &$this->CDRS- >RatingTables, + 'duration' => $CDR->duration, + 'callId' => $CDR->callId, + 'timestamp' => $CDR->timestamp, + 'DestinationId' => $CDR- >DestinationId, + 'domain' => $CDR->domain, + 'BillingPartyId' => $CDR- >BillingPartyId, + 'ENUMtld' => $CDR->ENUMtld, + 'RatingTables' => &$this->CDRS- >RatingTables ); $Rate->calculate($RateDictionary);

2 1

[OpenSER-Users] CDRTool question - ShowPrice command changes
by Adrian Georgescu 28 May '08

28 May '08

Dan I have no changed anything related to this. Usually I write in the changelog about such dramatic changes. What did you notice and between which versions? Adrian >>>>>>>>> I have noticed that recently ShowPrice behavior has changed, and since did not find it in Changelog I decided to try my shoot over here . There are no more queries based on destination number but DestinationId. Was the support for destination number lost for good, or only temporarily? If that was done, why is "To=" parameter still mandatory? The presence or absence of it does not make any different in queries, as far as I can see. My version: version CDRTool version 6.4.1 Ta, DanB

2 1

[Serusers] ser_ctl question
by Steven C. Blair 28 May '08

28 May '08

Hello: I'm just starting to make a serious attempt to build a SER v2 system. SER is built, ser_mysql has been executed and the MySQL tables defined. With mysql -user -p I can access the database with ser_ctl add domain I cannot. I get the following error. DB_URI in serctl.conf was changed to reflect the new password for the ser user. Yet I still get the following error. Any ideas why? ser_ctl domain add myschool.edu ser_ctl: (1045, "Access denied for user 'ser'@'localhost' (using password: YES)"): OperationalError Thanks,steve Senior Network Engineer, Information Systems and Computing Networking and Telecommunications , Suite 221A /6228 University of Pennsylvania Voice:215-573-8396 FAX:215-898-9348

1 1

[OpenSER-Users] Save Contact List in Server
by Habib, Yeasin 28 May '08

28 May '08

Hi Everybody, Is there any plug-in available for SIP Communicator to save contact list in the server side. I mean when the SIP Communicator register itself to server the server will save to contact list to its own persistence storage. So the client doesn't need a local copy of contact list. I am using OpenIMSCore and OpenSER. I am just wondering whether this functionality is already available in SIP Communicator or not? If not then how much work has to be done to implement in properly? I am just looking for some idea about this. So that I can make an estimation about this implementation. I am looking forward to hearing from all of you. Best regards Yeasin Habib

2 1

[OpenSER-Users] CDRTool question - ShowPrice command changes
by Dan-Cristian Bogos 28 May '08

28 May '08

Guys, I have noticed that recently ShowPrice behavior has changed, and since did not find it in Changelog I decided to try my shoot over here . There are no more queries based on destination number but DestinationId. Was the support for destination number lost for good, or only temporarily? If that was done, why is "To=" parameter still mandatory? The presence or absence of it does not make any different in queries, as far as I can see. My version: version CDRTool version 6.4.1 Ta, DanB

2 1

[OpenSER-Users] New tables in openser DB
by Yazid Hadj Said 28 May '08

28 May '08

Hi, If I add tables to openser database with an other tool (e.g phpMyAdmin), is it possible to create me some problems? Regards, Yazid

2 1

[Serusers] presence status - issue when Authorization is enabled in SER 2.0.
by pravin.swami＠wipro.com 28 May '08

28 May '08

Hi... All , I am facing problem with SER presence status, when authorization is enabled. B elow is the scenario of my test. 1) PUA1 & PUA2 are two user agents subscribed to SER (2.0) presence server. 2) PUA1 adds PUA2 into its buddly list . PUA2 gets Watcher-info notification from PUA1 with subscription - state pending. 3) PUA2 accepts PUA1 and presence-rules.xml file is updated for PUA2 . In whitelist (Allow List)," <id PUA1(a)ser.org <mailto:PUA1@ser.org> <id> " is added successfully. problem statement : PUA2 status is offline in PUA1 's buddy list. I f PUA2 changes its status (sends PUBLISH with away/on phone/busy activity ) , SER presence sends 200 OK success response , but no notifcation will be generated from server to watcher PUA1. - also when PUA2 logs out and logs in again Wathcer-info subscription will be generated with pending state though presence-rules.xml document was already updated for this. I have modified the ser.cfg for presence authorization below as per ser presence Handbook . modparam("pa", "auth", "xcap") modparam("xcap", "xcap_root", "http://localhost/xcap-root <http://localhost/xcap-root> ") I have attached the ser.cfg file. which i tried ... but doesn't work out. let me know any of your comments. regards, Pravin . Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

1 0

[OpenSER-Users] Problem with Openser-freeradius communication
by Pete Kay 28 May '08

28 May '08

Hi, I am having problem with configuring FreeRadius to authenticate suername and password. I have tried to test freeradius with a test client and it works by sending the following message: Ready to process requests. User-Name = "1005(a)192.168.1.104" User-Password = "1234" Service-Type = Authenticate-Only NAS-Port = 0 NAS-IP-Address = 127.0.0.1 The message that is sent by Openser is as follows: Waking up in 1.9 seconds. User-Name = "1005(a)192.168.1.104" Digest-Attributes = 0x0a0631303036 Digest-Attributes = 0x010f3139322e3136382e312e313034 Digest-Attributes = 0x022a34383364376265396630623738663734363935343562386366373865303561316161623032633366 Digest-Attributes = 0x04137369703a3139322e3136382e312e313034 Digest-Attributes = 0x030a5245474953544552 Digest-Response = "eb5f24a5563e9c1096855ef8b2c72d2b" Service-Type = IAPP-Register X-Ascend-PW-Lifetime = 825241654 NAS-Port = 5060 NAS-IP-Address = 127.0.0.1 Freeradius can't find the password and is reject users as a result of that. Also, is the Service-Type supposed to be Authenticate-Only instead? Is this something to do with my openser.cfg setup that is causing the problem? Thanks in advance for your help. Regards, Pete

1 0

[OpenSER-Users] Question on modification A-number & B-number
by Do Nguyen Ha 28 May '08

28 May '08

hi all i read several docs of Openser, i didnt find the information to modify the A-number & B-number does openser have the ability to modify A-number & B-number if yes, please send me the link to this Thanks Ha`

2 1

[OpenSER-Users] SIP Text Message to SMSC
by Dome Charoenyost 27 May '08

27 May '08

Dear All, I use Openser for test SIP Text Message from IP phone to IP phone. it's work perfect :) Look like only openser support this feature light now. Asterisk not support and Freeswitch fail also. (I use yealink ip phone). So now my customer want to relay SIP text Message to PSTN via SMSC Can someone tell me is posible to use openser SMS module send SIP text Message to SMSC ? Best Regards. Dome C.

1 0

[OpenSER-Users] Me too: OpenSER 1.3.2 is unusually slow
by Peter Lemenkov 27 May '08

27 May '08

Hello All! After upgrading to 1.3.2 from 1.3.1 I'm encountered (similar to described in that list already) issue, e.g. openser answers unreliably slow to all messages (~40 seconds delay). DNS lookup related fix doesn't helps. I'll try to find what exactly caused this delay (if it's openser-related issue and not something else). -- With best regards!

3 4

[OpenSER-Users] OpenSER corrects the "Contact" field only one way.
by Höskuldur 27 May '08

27 May '08

Hi I have two user clients behind separate NAT networks. My OpenSER is directly connected to the Internet and has it's own external IP address. Both clients are using STUN to get their external IP address and correct port for SIP messages. They successfully register with Openser, which is using Nathelper module and Mediaproxy. In this case, since the client is behind NAT, it puts the wrong port in the Contact field of a SIP message. As a result, SOME SIP messages from OpenSER are never received by the client. But with the help of Nathelper, OpenSER should correct the port in Contact field, by replacing the NAT port with the src port of a SIP message (UDP pack). The problem is, that it looks like OpenSER only corrects the port in Contact field for client A (The one who initiates the call) but not Client B(The one who's called). For a better explaination, please check out my logs from ngrep. CLIENT A to OPENSER U 2008/05/26 16:53:26.285586 157.157.78.173:54182 -> 212.50.206.33:5060 INVITE sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33> SIP/2.0. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33>>. Via: SIP/2.0/UDP 157.157.78.173:62356 ;branch=z9hG4bKc0a8150a10007e0026261023. Contact: 1006<sip:1006@157.157.78.173:62356>. !!!NB!!! <-- This is the WRONG reply port. OPENSER RELAYS TO CLIENT B U 2008/05/26 16:53:26.301864 212.50.206.33:5060 -> 130.208.183.251:49211 INVITE sip:1001@130.208.183.251:49208 SIP/2.0. Record-Route: <sip:212.50.206.33;lr;ftag=10007500-26260f5b;nat=yes>. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33>>. Via: SIP/2.0/UDP 212.50.206.33;branch=z9hG4bK5db1.ce9aea2.0;rport. Via: SIP/2.0/UDP 157.157.78.173:62356 ;rport=54182;branch=z9hG4bKc0a8150a10007e0026261023. Contact: 1006<sip:1006@157.157.78.173:54182>. !!!NB!!! <-- OpenSER detects it and changes it to correct reply port. Works great. CLIENT B ANSWERS TO OPENSER U 2008/05/26 16:53:27.301368 130.208.183.251:49211 -> 212.50.206.33:5060 SIP/2.0 200 OK. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33> >;tag=10007900-26261046. Via: SIP/2.0/UDP 212.50.206.33;branch=z9hG4bK5db1.ce9aea2.0. Via: SIP/2.0/UDP 157.157.78.173:62356 ;branch=z9hG4bKc0a8150a10007e0026261023. Contact: 1001<sip:1001@130.208.183.251:49208>. !!!NB!!! <-- Now lets try Client B. Wrong reply port. OPENSER TO CLIENT A U 2008/05/26 16:53:27.305241 212.50.206.33:5060 -> 157.157.78.173:54182 SIP/2.0 200 OK. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33> >;tag=10007900-26261046. Via: SIP/2.0/UDP 157.157.78.173:62356 ;branch=z9hG4bKc0a8150a10007e0026261023. Contact: 1001<sip:1001@130.208.183.251:49208>. !!!NB!!! <-- OpenSER didn't change the port like before, so now Client B never receives ACK from Client A. CLIENT A TO OPENSER U 2008/05/26 16:53:27.518621 157.157.78.173:54182 -> 212.50.206.33:5060 ACK sip:1001@130.208.183.251:49208 SIP/2.0. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33> >;tag=10007900-26261046. Via: SIP/2.0/UDP 157.157.78.173:62356 ;branch=z9hG4bKc0a8150a10007e0026261505. Contact: 1006<sip:1006@157.157.78.173:62356>. Route: <sip:212.50.206.33;lr;ftag=10007500-26260f5b;nat=yes>. OPENSER TO CLIENT B U 2008/05/26 16:53:27.519192 212.50.206.33:5060 -> 130.208.183.251:49208 !!!NB!!! <-- OpenSER sends to the WRONG port! ACK sip:1001@130.208.183.251:49208 SIP/2.0. Record-Route: <sip:212.50.206.33;lr;ftag=10007500-26260f5b;nat=yes>. From: 1006<sip:1006@212.50.206.33 <sip%3A1006(a)212.50.206.33> >;tag=10007500-26260f5b. To: <sip:1001@212.50.206.33 <sip%3A1001(a)212.50.206.33> >;tag=10007900-26261046. CSeq: 101 ACK. Via: SIP/2.0/UDP 212.50.206.33;branch=z9hG4bK5db1.ce9aea2.2;rport. Via: SIP/2.0/UDP 157.157.78.173:62356 ;rport=54182;branch=z9hG4bKc0a8150a10007e0026261505. This last ACK message is never received by Client B because the client isn't listening on port 49208. If I manually use rewriteport("49211") it works, because obviously this last package is then forced to port 49211 which the client listening on. Also, the first line in my main route is force_rport(); but that still doesn't do it. I've been struggling with this problem for a few weeks now so all comments and suggestions are very welcome. My OpenSER config file can be found here: http://hoski.public.is/openser.cfg Best regards, Höskuldur

2 4

[OpenSER-Users] need help on Radius --
by Do Nguyen Ha 27 May '08

27 May '08

Hi all i am intent to use Radius for prepaid but i need more information of RADIUS, how to limit the call, how the RADIUS work together with Openser could you suggest where i got it Thanks Ha

3 2

[OpenSER-Users] How to set the "radius.seq" file (posible bug) ?
by Iñaki Baz Castillo 27 May '08

27 May '08

Hi, I use FRadius accounting. OpenSer tries to use a file /var/run/radius.seq but it fails when restarting computer since OpenSer init script creates this file as: /var/run/openser/openser_radius.seq create_radius_seqfile () { # Create a radius sequence file to be used by the radius client if # radius accounting is enabled. This is needed to avoid any issue # with the file not being writable if openser first starts as user # root because DUMP_CORE is enabled and creates this file as user # root and then later it switches back to user openser and cannot # write to the file. If the file exists before openser starts, it # won't change it's ownership and will be writable for both root # and openser, no matter what options are chosen at install time RADIUS_SEQ_FILE=/var/run/openser/openser_radius.seq I don't find where to change this file in OpenSer script. Isn't a bug if default value is: /var/run/radius.seq but OpenSer init script (Debian Etch) creates it in: /var/run/openser/openser_radius.seq ? -- Iñaki Baz Castillo ibc(a)in.ilimit.es

1 1

[OpenSER-Users] bridging two existing channels
by mark morreny 27 May '08

27 May '08

Hi, In my scenario, I have UA1 -> Openser -> B2BUA -> Openser -> UA2. The reason why I need B2BUA to originate the channel to UA2 is because it is going to play a wav file when UA2 answers the call. After the call has been answered by UA2 and dialog is in progress, is it possible for B2BUA to notify Openser that it wants to be out of the look, so the scenario can before: UA1 -> Openser -> UA2 without UA2 hanging up? How would I be able to config that? Any help will be greatly appreciated. Thanks, Mark

2 1

[OpenSER-Users] obtain content of header dynamically
by Yazid Hadj Said 27 May '08

27 May '08

Hi, I try to obtain content of header dynamically, but with $hdr(...) i can't do this because it accept only static parameters. For example I try to use: $avp(s:body)=$mb; $avp(s:HdName)="To"; avp_subst("$avp(s:corps)/$avp(s:HdContent)","/^$avp(s:HdName):(.*)\r\n(.*)/\1/"); With this manner, i can change header name ($avp(s:HdName) )dynamically from data source (e.g database) and use his content in my script. But until now i don't obtain what i want. Regards, Yazid

2 1

[OpenSER-Users] Fixing wrong SDP with "textutils" module (LF -> CRLF)
by Iñaki Baz Castillo 27 May '08

27 May '08

Hi, I'm handling with a Nortel CS2K softswitch that sends me incorrect SDP's since it uses LF at the end of each line in SDP instead of CRLF (as it's mandatory according to the SDP grammar). AFAIK some phones can fail when receiving this incorrect SDP. Unfortunatelly I can't try a workaround now but I'm thinkink about using "textmodules" in this way: if ($si == NORTEL_CS2K_IP) replace_body("\n$", "\r\n"); By your experience, should it work? I assume that "Content-Length" is automatically updated before the message leaves OpenSer. So just it, should it work? Thanks a lot. -- Iñaki Baz Castillo ibc(a)in.ilimit.es

3 6

[OpenSER-Users] lcr problem - openser 1.3
by Ion Minzu 27 May '08

27 May '08

hello i use openser 1.3 But I have trouble NOTICE:core:main: version: openser 1.3.2-notls (i386/freebsd) ERROR:lcr:reload_gws: Unknown or unsupported transport <0> CRITICAL:lcr:mod_init: Failed to reload gateways and routes ERROR:core:init_mod: failed to initialize module lcr ERROR:core:main: error while initializing modules ####config openser.cfg##### loadmodule "lcr.so" modparam("lcr", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("lcr", "gw_table", "gw") modparam("lcr", "gw_name_column", "gw_name") modparam("lcr", "ip_addr_column", "ip_addr") modparam("lcr", "port_column", "port") modparam("lcr", "uri_scheme_column", "uri_scheme") modparam("lcr", "transport_column", "transport") modparam("lcr", "grp_id_column", "grp_id") modparam("lcr", "lcr_table", "lcr") modparam("lcr", "strip_column", "strip") modparam("lcr", "prefix_column", "prefix") modparam("lcr", "from_uri_column", "from_uri") modparam("lcr", "priority_column", "priority") modparam("lcr", "gw_uri_avp", "$avp(i:709)") modparam("lcr", "ruri_user_avp", "$avp(i:500)") modparam("lcr", "contact_avp", "$avp(i:711)") modparam("lcr", "fr_inv_timer_avp", "$avp(i:704)") modparam("lcr", "fr_inv_timer", 90) modparam("lcr", "fr_inv_timer_next", 30) modparam("lcr", "rpid_avp", "$avp(i:302)") modparam("lcr", "dm_flag", 25) ################## What is problem? Thanks

2 1

[OpenSER-Users] problem nat, openser 1.3 + mediaproxy +gateway
by Ion Minzu 27 May '08

27 May '08

Hello, I use openser 1.3 + mediaproxy and all work ok. But I have trouble calling to PSTN gateway, where is no voice both ways. route[7] is the route to gateway Thanks ############################################## listen = udp:my.openser.server:5060 mpath = "/usr/local/lib/openser/modules" children = 8 debug = 3 fork = yes #group = "openser" #user = "openser" disable_tcp = no log_facility = LOG_DAEMON log_stderror = no tcp_children = 4 mhomed = no server_signature = yes #sock_group = "openser" #sock_mode = 0600 #sock_user = "openser" #unix_sock = "/tmp/openser.sock" #unix_sock_children = 1 #reply_to_via = no sip_warning = no check_via = no dns = no rev_dns = no disable_core_dump = no dns_try_ipv6 = no dns_use_search_list = yes loadmodule "usrloc.so" modparam("usrloc", "user_column", "username") modparam("usrloc", "domain_column", "domain") modparam("usrloc", "contact_column", "contact") modparam("usrloc", "expires_column", "expires") modparam("usrloc", "q_column", "q") modparam("usrloc", "callid_column", "callid") modparam("usrloc", "cseq_column", "cseq") modparam("usrloc", "methods_column", "methods") modparam("usrloc", "flags_column", "flags") modparam("usrloc", "user_agent_column", "user_agent") modparam("usrloc", "received_column", "received") modparam("usrloc", "socket_column", "socket") modparam("usrloc", "use_domain", 0) modparam("usrloc", "desc_time_order", 0) modparam("usrloc", "timer_interval", 60) modparam("usrloc", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("usrloc", "db_mode", 1) modparam("usrloc", "matching_mode", 0) modparam("usrloc", "cseq_delay", 20) modparam("usrloc", "nat_bflag", 6) loadmodule "textops.so" loadmodule "rr.so" modparam("rr", "enable_full_lr", 0) modparam("rr", "append_fromtag", 1) modparam("rr", "enable_double_rr", 1) modparam("rr", "add_username", 0) loadmodule "tm.so" modparam("tm", "fr_timer", 30) modparam("tm", "fr_inv_timer", 120) modparam("tm", "wt_timer", 5) modparam("tm", "delete_timer", 2) modparam("tm", "noisy_ctimer", 0) modparam("tm", "ruri_matching", 1) modparam("tm", "via1_matching", 1) modparam("tm", "unix_tx_timeout", 2) modparam("tm", "restart_fr_on_each_reply", 1) modparam("tm", "pass_provisional_replies", 0) loadmodule "xlog.so" modparam("xlog", "buf_size", 4096) modparam("xlog", "force_color", 0) loadmodule "mi_fifo.so" modparam("mi_fifo", "fifo_name", "/tmp/openser_fifo") modparam("mi_fifo", "fifo_mode", 0660) #modparam("mi_fifo", "fifo_group", "openser") #modparam("mi_fifo", "fifo_user", "openser") modparam("mi_fifo", "reply_dir", "/tmp/") modparam("mi_fifo", "reply_indent", "\t") loadmodule "domain.so" modparam("domain", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("domain", "db_mode", 1) modparam("domain", "domain_table", "domain") modparam("domain", "domain_col", "domain") loadmodule "nathelper.so" modparam("nathelper", "natping_interval", 30) #modparam("nathelper", "ping_nated_only", 1) #modparam("nathelper", "rtpproxy_sock", "unix:/var/run/rtpproxy.sock") #modparam("nathelper", "rtpproxy_disable", 1) #modparam("nathelper", "rtpproxy_disable_tout", 60) #modparam("nathelper", "rtpproxy_tout", 1) #modparam("nathelper", "rtpproxy_retr", 5) #modparam("nathelper", "sipping_method", "OPTIONS") modparam("nathelper", "received_avp", "$avp(i:801)") loadmodule "sl.so" modparam("sl", "enable_stats", 1) loadmodule "mediaproxy.so" modparam("mediaproxy", "mediaproxy_socket", "/var/run/proxydispatcher.sock") #modparam("mediaproxy", "sip_asymmetrics", "/etc/openser/sip-asymmetric-clients") #modparam("mediaproxy", "rtp_asymmetrics", "/etc/openser/rtp-asymmetric-clients") modparam("mediaproxy", "natping_interval", 60) loadmodule "uri.so" loadmodule "registrar.so" modparam("registrar", "default_expires", 3600) modparam("registrar", "min_expires", 60) modparam("registrar", "max_expires", 0) modparam("registrar", "default_q", 0) modparam("registrar", "append_branches", 1) modparam("registrar", "case_sensitive", 0) modparam("registrar", "received_param", "received") modparam("registrar", "max_contacts", 0) modparam("registrar", "retry_after", 0) modparam("registrar", "method_filtering", 0) modparam("registrar", "path_mode", 2) modparam("registrar", "path_use_received", 0) modparam("registrar", "received_avp", "$avp(i:801)") loadmodule "maxfwd.so" modparam("maxfwd", "max_limit", 256) loadmodule "mysql.so" modparam("mysql", "ping_interval", 300) modparam("mysql", "auto_reconnect", 1) loadmodule "auth.so" modparam("auth", "nonce_expire", 300) modparam("auth", "rpid_suffix", ";party=calling;id-type=subscriber;screen=yes") modparam("auth", "rpid_avp", "$avp(s:rpid)") loadmodule "auth_db.so" modparam("auth_db", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("auth_db", "user_column", "username") modparam("auth_db", "domain_column", "domain") modparam("auth_db", "password_column", "password") modparam("auth_db", "password_column_2", "ha1b") modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "use_domain", 0) modparam("auth_db", "load_credentials", "rpid") loadmodule "uri_db.so" modparam("uri_db", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("uri_db", "uri_table", "uri") modparam("uri_db", "uri_user_column", "username") modparam("uri_db", "uri_domain_column", "domain") modparam("uri_db", "uri_uriuser_column", "uri_user") modparam("uri_db", "subscriber_table", "subscriber") modparam("uri_db", "subscriber_user_column", "username") modparam("uri_db", "subscriber_domain_column", "domain") modparam("uri_db", "use_uri_table", 0) modparam("uri_db", "use_domain", 0) #for accounting loadmodule "acc.so" modparam("acc", "log_flag", 1) modparam("acc", "log_level", 2) modparam("acc", "db_flag", 1) modparam("acc", "db_missed_flag", 3) modparam("acc", "log_missed_flag", 3) modparam("acc", "db_url", "mysql://sqluser:ser@localhost/openser") modparam("acc", "report_ack", 0) ######################################################################## # Request route 'main' ######################################################################## route[0] { xlog("L_INFO", "New request - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); force_rport(); if(msg:len > max_len) { xlog("L_INFO", "Message too big - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("513", "Message Too Big"); exit; } if (!mf_process_maxfwd_header("10")) { xlog("L_INFO", "Too many hops - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("483", "Too Many Hops"); exit; } if(!is_method("REGISTER")) { if(nat_uac_test("19")) { record_route(";nat=yes"); } else { record_route(); } } if(is_method("CANCEL") || is_method("BYE")) { end_media_session(); } if(loose_route()) { if(!has_totag()) { xlog("L_INFO", "Initial loose-routing rejected - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("403", "Initial Loose-Routing Rejected"); exit; } if(nat_uac_test("19") || search("^Route:.*;nat=yes")) { fix_nated_contact(); setbflag(6); } route(3); } if(is_method("REGISTER")) { route(2); } if(is_method("INVITE")) { route(4); } if(is_method("CANCEL") || is_method("ACK")) { route(8); } route(9); } ######################################################################## # Request route 'stop-media-proxy' ######################################################################## route[1] { if(isflagset(22)) { end_media_session(); } } ######################################################################## # Request route 'base-route-register' ######################################################################## route[2] { sl_send_reply("100", "Trying"); if(!www_authorize("", "subscriber")) { xlog("L_INFO", "Register authentication failed - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); www_challenge("", "0"); exit; } if(!check_to()) { xlog("L_INFO", "Spoofed To-URI detected - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("403", "Spoofed To-URI Detected"); exit; } consume_credentials(); if(!search("^Contact:[ ]*\*") && nat_uac_test("19")) { fix_nated_register(); setbflag(6); } if(!save("location")) { xlog("L_ERR", "Saving contact failed - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_reply_error(); exit; } xlog("L_INFO", "Registration successful - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); exit; } ######################################################################## # Request route 'base-outbound' ######################################################################## route[3] { if(isbflagset(6)) { if(!isflagset(22) && !search("^Content-Length:[ ]*0")) { setflag(22); use_media_proxy(); } t_on_reply("2"); } else { t_on_reply("1"); } if(!isflagset(21)) { t_on_failure("1"); } if(isflagset(29)) { append_branch(); } if(is_present_hf("Proxy-Authorization")) { consume_credentials(); } xlog("L_INFO", "Request leaving server, D-URI='$du' - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); # no 100 (we already sent it) and no DNS blacklisting if(!t_relay("0x05")) { sl_reply_error(); if(is_method("INVITE") && isbflagset(6)) { end_media_session(); } } exit; } ######################################################################## # Request route 'base-route-invite' ######################################################################## route[4] { sl_send_reply("100", "Trying"); if(!proxy_authorize("", "subscriber")) { xlog("L_INFO", "Proxy authentication failed - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); proxy_challenge("", "0"); exit; } if(!check_from()) { xlog("L_INFO", "Spoofed From-URI detected - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("403", "Spoofed From-URI Detected"); exit; } if(nat_uac_test("19")) { fix_nated_contact(); setbflag(6); } route(5); } ######################################################################## # Request route 'invite-find-callee' ######################################################################## route[5] { if(!is_domain_local("$rd")) { setflag(20); route(7); } if(does_uri_exist()) { xlog("L_INFO", "Callee is local - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(6); } else { xlog("L_INFO", "Callee is not local - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(7); } exit; } ######################################################################## # Request route 'invite-to-internal' ######################################################################## route[6] { if(!lookup("location")) { xlog("L_INFO", "Local user offline - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("404", "User Offline"); } else { xlog("L_INFO", "Local user online - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(3); } exit; } ######################################################################## # Request route 'invite-to-external' ######################################################################## route[7] { if(isflagset(20)) { xlog("L_INFO", "Call to foreign domain - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(3); exit; } #go to pstn if (uri=~"sip:[2-8][0-9][0-9][0-9][0-9][0-9]+@.*") { prefix("400"); t_relay("my.pstn.gateway:5060"); end_media_session(); exit; } #finish xlog("L_INFO", "Call to unknown user - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("404", "User Not Found"); exit; } ######################################################################## # Request route 'base-route-local' ######################################################################## route[8] { t_on_reply("1"); if(t_check_trans()) { xlog("L_INFO", "Request leaving server - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); if(!t_relay()) { sl_reply_error(); } } else { xlog("L_INFO", "Dropping mis-routed request - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); } exit; } ######################################################################## # Request route 'base-route-generic' ######################################################################## route[9] { xlog("L_INFO", "Method not supported - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); sl_send_reply("501", "Method Not Supported Here"); exit; } ######################################################################## # Request route 'base-filter-failover' ######################################################################## route[10] { if(!t_check_status("408|500|503")) { xlog("L_INFO", "No failover routing needed for this response code - M=$rm RURI=$ru F=$fu T=$tu IP=$si ID=$ci\n"); route(1); exit; } } ######################################################################## # Reply route 'base-standard-reply' ######################################################################## onreply_route[1] { xlog("L_INFO", "Reply - S=$rs D=$rr F=$fu T=$tu IP=$si ID=$ci\n"); exit; } ######################################################################## # Reply route 'base-nat-reply' ######################################################################## onreply_route[2] { xlog("L_INFO", "NAT-Reply - S=$rs D=$rr F=$fu T=$tu IP=$si ID=$ci\n"); if(nat_uac_test("1")) { fix_nated_contact(); } if(isbflagset(6) && status=~"(180)|(183)|2[0-9][0-9]") { if(!search("^Content-Length:[ ]*0")) { use_media_proxy(); } } exit; } ######################################################################## # Failure route 'base-standard-failure' ######################################################################## failure_route[1] { route(10); route(1); }

1 0

[OpenSER-Users] Res: Hiding the config code
by Bruno Machado 26 May '08

26 May '08

Hi Andel Yes, it would be possible. But I'd like to hide the code even the root user. Like Bogdan said, I want "way to run OpenSER with script that it is not plain text or accessible for humans". Your suggest works as well when the another users do not have the root password. Anyway, thanks for your comment, Andel. ----- Mensagem original ---- De: Ladislav Andel <ladia6(a)centrum.cz> Para: Bruno Machado <bsmufu(a)yahoo.com.br> Cc: users(a)lists.openser.org Enviadas: Segunda-feira, 26 de Maio de 2008 7:18:00 Assunto: Re: [OpenSER-Users] Hiding the config code How about setting the user rights in your unix-based system ? Lada Bruno Machado wrote: > Hi all > > I have been wondering if is possible to hide the Openser's config file > or do anything else to avoid reading by another people. Possible? > > Tks > > Bruno > > ------------------------------------------------------------------------ > Abra sua conta no Yahoo! Mail > <http://br.rd.yahoo.com/mail/taglines/mail/*http://br.mail.yahoo.com/>, > o único sem limite de espaço para armazenamento! > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users(a)lists.openser.org > http://lists.openser.org/cgi-bin/mailman/listinfo/users > Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento! http://br.mail.yahoo.com/

1 0

[OpenSER-Users] Res: Hiding the config code
by Bruno Machado 26 May '08

26 May '08

Exactly, Bogdan. It would be a good feature for OpenSER considering security purposes. Sometimes, you need to hide the script from some people, even from the same company. I think that it would be a good feature. Thanks Bogdan ----- Mensagem original ---- De: Bogdan-Andrei Iancu <bogdan(a)voice-system.ro> Para: Ladislav Andel <ladia6(a)centrum.cz> Cc: Bruno Machado <bsmufu(a)yahoo.com.br>; users(a)lists.openser.org Enviadas: Segunda-feira, 26 de Maio de 2008 7:48:41 Assunto: Re: [OpenSER-Users] Hiding the config code Well, that's a limited hiding - I understood the question as "if it a way to run OpenSER with script that it is not plain text or accessible for humans. Regards, Bogdan Ladislav Andel wrote: > How about setting the user rights in your unix-based system ? > Lada > > Bruno Machado wrote: > >> Hi all >> >> I have been wondering if is possible to hide the Openser's config file >> or do anything else to avoid reading by another people. Possible? >> >> Tks >> >> Bruno >> >> ------------------------------------------------------------------------ >> Abra sua conta no Yahoo! Mail >> <http://br.rd.yahoo.com/mail/taglines/mail/*http://br.mail.yahoo.com/>, >> o único sem limite de espaço para armazenamento! >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Users mailing list >> Users(a)lists.openser.org >> http://lists.openser.org/cgi-bin/mailman/listinfo/users >> >> > > > _______________________________________________ > Users mailing list > Users(a)lists.openser.org > http://lists.openser.org/cgi-bin/mailman/listinfo/users > Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento! http://br.mail.yahoo.com/

1 0

Re: [OpenSER-Users] Possible problem with script presence-create.sql
by Florent Le Saout 26 May '08

26 May '08

Hello all, I also found the reason reading precisely the documentation. I use the line modparam("presence_xml", "xcap_table", "xcaps") in my configuration as Anca Vamanu said. All is clear now. Thank for your help. Florent. > Message du 26/05/08 12:20 > De : "Henning Westerholt" <henning.westerholt(a)1und1.de> > A : "Anca Vamanu" <anca(a)voice-system.ro> > Copie à : "Florent Le Saout" <le-saout.florent(a)laposte.net>, users(a)lists.openser.org > Objet : Re: [OpenSER-Users] Possible problem with script presence-create.sql > > On Monday 26 May 2008, Anca Vamanu wrote: > > Indeed the name of the script was wrong in the documentation and I have > > fixed it. > > The name of the xcap table was not misspelled as 'xcaps'. > > /The module requires 1 table in OpenSER database: xcap. / > > You probably refer to the line with the example of how to set the xcap > > table name module parameter: > > / 'modparam("presence_xml", "xcap_table", "xcaps")'. / > > This should be used if you what the table to have a different name, and > > of course, you should use the same when creating the database table. > > Thank you Anca for the clarification, and the fix. > > Henning > >

1 0

[OpenSER-Users] openSER with freeRADIUS
by Patrick Pichler 26 May '08

26 May '08

Hi everybody, does anyone has got a tested documention on setting up freeRADIUS to work together with openSER. I'm currently having problems with the authentication via a MySQL DB. I didn't get it how to tell freeRADIUS to take the users credentials from the "subscribers" table. Could anybody help me dealing eith this problem? My environment: openSER with radiusclient-ng, mysql and freeradius on a single machine, all are up and running so far. Without RADIUS it's prossible for a UAC to register...but with RADIUS authentication via MySQL the UAC just gets a "401 unauthorized". Thanks in advance. Patrick

2 3

[OpenSER-Users] [OT] Why the project name in SourceForge is "Scalable SIP server"?
by Iñaki Baz Castillo 26 May '08

26 May '08

Hi, if you get into: https://sourceforge.net/projects/openser/ you won't read the word "OpenSER" but "Scalable SIP server". Also, in the "location" line we read: SF.net > Projects > Scalable SIP server > Summary Scalable SIP server I wonder: why not name it as OpenSER? -- Iñaki Baz Castillo ibc(a)in.ilimit.es

3 4

[OpenSER-Users] Hiding the config code
by Bruno Machado 26 May '08

26 May '08

Hi all I have been wondering if is possible to hide the Openser's config file or do anything else to avoid reading by another people. Possible? Tks Bruno Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento! http://br.mail.yahoo.com/

3 3

[OpenSER-Users] serweb-0.9.6 on openser-1.3.2
by Zen Kato 26 May '08

26 May '08

I installed serweb-0.9.6 on openser-1.3.2, but when I enter username and password, the following Warning comes out. How should I solve this problem? -------------------------------------------- http://localhost/openserweb/user/index.php username:0103@192.168.0.3 password:xxxxx --------------------------------------------- ----------------------------------------------------------------------------- http://localhost/openserweb/user/my_account.php?kvrk=483a8e78876b5 ( ! ) Warning: fopen(/tmp/openser_fifo) [function.fopen]: failed to open stream: Permission denied in /var/www/openserweb/serweb-0.9.6/html/functions.php on line 345 ----------------------------------------------------------------------------- /var/www/openserweb/serweb-0.9.6/html/functions.php (L:344-348) /* open fifo now */ $fifo_handle=fopen( $config->fifo_server, "w" ); if (!$fifo_handle) { $errors[]="sorry -- cannot open write fifo"; return false; } -- Zen Kato

1 0

[OpenSER-Users] Possible problem with script presence-create.sql
by Florent Le Saout 26 May '08

26 May '08

Hello, I'm a new user of openser. (I use openser 1.3.1-3+b1 from package of debian testing) I want to use the module of presence. If I refer to documentation I read that I have to use presence_xml-create.sql to create the tables. But I can't find it. I use the script presence-create.sql which seems to replace it. I create a table named xcap but the module need xcaps, if I create the same table renamed xcaps that work well. I think there is a mistake of naming of the table xcap(s). I take a look to 1.3.x of your repository and I see the same thing in the sql script. Thank you for your job. Best regards. Florent le Saout. Créez votre adresse électronique prénom.nom(a)laposte.net 1 Go d'espace de stockage, anti-spam et anti-virus intégrés.

3 3

[OpenSER-Users] Acceptor peer failed establishing state[3003], closing
by bhargav.b＠renovau.com 26 May '08

26 May '08

actually i am authenticating a user using openser and opendiameters NASREQ application as the client and server.at present the openser is sending the all needed avp's to opendiameter client.i can see all the avp code and avp data on the client side. my problem is that the on the diameter server side the avp,s are not transferred by the client. the client is giving something like (6372|1698151312) Acceptor peer failed establishing state [3003], closing i am confused about it.by reading some drafts i came to know that the error is due to realm mismatch.but i am sending the same realm as the opendiameter's realm.in both the cases it is [bhargav.s]. before i sent the avp's from openser side there was no such problem showing on the client side.if anybody know the solution please help me regards bhargav.b(a)renovau.com

2 1

[OpenSER-Users] How to determine that a reply is a retransmission?
by Jon Steer 26 May '08

26 May '08

Environment: Openser 1.3.1-TLS Fedora 7 I have a module that performs a heavyweight operation on Invites and their respective Replys. I would prefer not to do the operation again if there is a retranmission of the Reply. How can I determine in a REPLY-ROUTE if a reply has already been seen? $T_reply_code would work, if on entry to the first reply route it was zero, but I suspect it is the value of the current reply. thanks, jon

2 1

[OpenSER-Users] Centos 5.1 or Debian4.0.r0 for Openser server
by fatmeh fatah 26 May '08

26 May '08

Hello: May you comparison Centos 5.1 and Debian4.0.r0 for Openser server? Thank you.

3 2

[OpenSER-Users] Click to Call functionality
by Darren Sessions 26 May '08

26 May '08

Quick question . . >From what I've been able to gather, the fifo db functionality has been removed since 1.2.x. What is another easy way to do click-to-call functionality now that it is gone? Thanks, - Darren

2 1

Re: [OpenSER-Users] Problems with sl module in openser1.3.1
by Arturo Ochoa 26 May '08

26 May '08

On Friday 23 May 2008, arturo arturo wrote: > Could some help me with this problem, I'm trying to run openser 1.3.1, but > it dies complaining about the sl module. I issued just 'make all' command > before this > > root@zeus:/home/aochoa/openser/openser-1.3.1-notls > # ./openser > May 22 15:57:16 [4482] DBG:core:yyparse: loading module > /usr/local/lib/openser/modules/mysql.so > May 22 15:57:16 [4482] DBG:core:yyparse: loading module > /usr/local/lib/openser/modules/sl.so > May 22 15:57:16 [4482] ERROR:core:version_control: *module compile flags > mismatch for* /usr/local/lib/openser/modules/sl.so > core: STATS: Off, USE_IPV6, USE_TCP, DISABLE_NAGLE, USE_MCAST, SHM_MEM, > SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT > module: STATS: Off, EXTRA_DEBUG, USE_IPV6, USE_TCP, DISABLE_NAGLE, > USE_MCAST, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT Hi Arturo, the version of the sl module installed on your machine don't match the one of your server in the home directory. Do a make distclean; make all in the source directory, and install again. Cheers, Henning Thanks for your response Henning, I've already do what you mention, but the problem persists. I tried also with openser 1.3.2, and the same thing. Also I noted that there are different linked libs on the same module but compiled on different machines: Fedora: [root@apolo] /usr/local/lib/openser/modules # ldd sl.so linux-gate.so.1 => (0x0028b000) libc.so.6 => /lib/libc.so.6 (0x00111000) /lib/ld-linux.so.2 (0x0028c000) Centos: (this is the one with the problem) root@zeus:/home/aochoa/openser # ldd /usr/local/lib/openser/modules/sl.so libc.so.6 => /lib/tls/libc.so.6 (0x00149000) /lib/ld-linux.so.2 (0x003f7000) Any comments?

2 1

[OpenSER-Users] CANCEL not always beeing relayed
by Tobias Lindgren 26 May '08

26 May '08

Hi all, I have some problems with CANCELs not always beeing relayed from A to B via an OpenSER 1.3.1. When I try to make a call and CANCEL it with my own equipment, everything works just fine. OpenSER receives CANCEL and passes it on to the PBX. However, some customer calls that are beeing CANCELed are not always relayed by OpenSER and I cannot find out why. They are received by OpenSER but never sent forward. I have sip-logs and OpenSER debugs, are there someone with more understanding of the OpenSER-code that can take a look at them? Br, /Tobias

2 1

Re: [OpenSER-Users] call failed 403 forbiden
by luzango mfupe 26 May '08

26 May '08

Hi mates, I still need your pointers regarding my problem in this post, today i have attached the routes suspected to be involved in this saga. From my config file plz see below. # ----------------------------------------------------------------- # Unauthorized relay # ----------------------------------------------------------------- if (!is_uri_host_local()) { if (is_from_local()) { # We prevent unauthorised relays "clever guys we got u" append_hf("P-hint: outbound\r\n"); route(10); # need to be authenticated } else { sl_send_reply("403", "Forbidden"); }; return; }; route[10] { #------------------------------------------------------------- # Default Message Handler with Proxy Authentication # ----------------------------------------------------------------- if(method=="ACK") { #these you never proxy authenticate route(1); return; }; if(method=="BYE" || method=="CANCEL") { #these you never proxy authenticate route(1); return; }; xlog("L_INFO", "Proxy auth $fd $dP destination:$du $dd $ds");# if (!route(7)) { #verify the user return(0); }; if (!is_user_in("From", "noauth")) { #no authentication required if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); return; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); return; }; # consume_credentials(); }; # if (is_user_in("Credentials", "local")) { # Uncomment to use the group options route(1); # }else{ # sl_send_reply("403", "Busted!!!, you are not allowed this route"); # }; return; } With Best Regards, LU. > > Message: 3 > Date: Tue, 20 May 2008 17:38:50 +0200 > From: "luzango mfupe" <luzango.mfupe(a)gmail.com> > Subject: [OpenSER-Users] Call failed 403 Forbiden > To: users(a)lists.openser.org > Message-ID: > <9cdd611a0805200838oc11cfedg9762b7451bf543c4(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hi mates, > Everytime i do try to make my 2 xlite clients talk (which i correctly added > them into the database), i encountered with the same problm, Openser > perfoms > authentication and return call failed 403 forbiden signal. > > My setup comprise of the first box with openser 1.3 and mediaproxy the > second box with Mysql and two Xlite clients in two other boxes all are in > an > internal network, as far as am concerned my NetAdmin have already opened > ports 5060 and 3306 for me. I need your right direction on this probm. > below is my ngrep snapshot > > mzee:/# ngrep -d eth1 -W byline port 5060 > interface: eth1 (168.172.200.0/255.255.255.0) > filter: (ip or ip6) and ( port 5060 ) > # > U 168.172.200.70:1824 -> 168.172.200.87:5060 > INVITE sip:musketeerm@168.172.200.87 <sip%3Amusketeerm(a)168.172.200.87> < > sip%3Amusketeerm(a)168.172.200.87 <sip%253Amusketeerm(a)168.172.200.87> > >SIP/2.0. > Via: SIP/2.0/UDP 168.172.200.70:1824 > ;branch=z9hG4bK-d87543-ef08fb62b30f1a54-1--d87543-. > Max-Forwards: 70. > Contact: <sip:dreamteam@168.172.200.70:1824>. > To: "musk"<sip:musketeerm@168.172.200.87 <sip%3Amusketeerm(a)168.172.200.87>< > sip%3Amusketeerm(a)168.172.200.87 <sip%253Amusketeerm(a)168.172.200.87>>>. > From: "dream"<sip:dreamteam@168.172.200.87<sip%3Adreamteam(a)168.172.200.87>< > sip%3Adreamteam(a)168.172.200.87 <sip%253Adreamteam(a)168.172.200.87>> > >;tag=af4bd714. > Call-ID: OTAyNWJhOTdiZjBlNmUwNDYyZWI0YzdkM2JhZTUxMTU.. > CSeq: 1 INVITE. > Session-Expires: 95. > Min-SE: 90. > Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, > SUBSCRIBE, > INFO. > Content-Type: application/sdp. > Supported: timer. > User-Agent: X-Lite release 1011s stamp 41150. > Content-Length: 426. > . > v=0. > o=- 9 2 IN IP4 168.172.200.70. > s=CounterPath X-Lite 3.0. > c=IN IP4 168.172.200.70. > t=0 0. > m=audio 52166 RTP/AVP 107 119 100 106 0 105 98 8 101. > a=alt:1 1 : uZB2dYm+ NKBRK8Ep 168.172.200.70 52166. > a=fmtp:101 0-15. > a=rtpmap:107 BV32/16000. > a=rtpmap:119 BV32-FEC/16000. > a=rtpmap:100 SPEEX/16000. > a=rtpmap:106 SPEEX-FEC/16000. > a=rtpmap:105 SPEEX-FEC/8000. > a=rtpmap:98 iLBC/8000. > a=rtpmap:101 telephone-event/8000. > a=sendrecv. > # > U 168.172.200.87:5060 -> 168.172.200.70:1824 > SIP/2.0 403 Forbidden. > Via: SIP/2.0/UDP 168.172.200.70:1824 > ;branch=z9hG4bK-d87543-ef08fb62b30f1a54-1--d87543-. > To: "musk"<sip:musketeerm@168.172.200.87 <sip%3Amusketeerm(a)168.172.200.87>< > sip%3Amusketeerm(a)168.172.200.87 <sip%253Amusketeerm(a)168.172.200.87>> > >;tag=9a17bd4180f96d7136f8b30b25c6947e.d7e9. > From: "dream"<sip:dreamteam@168.172.200.87<sip%3Adreamteam(a)168.172.200.87>< > sip%3Adreamteam(a)168.172.200.87 <sip%253Adreamteam(a)168.172.200.87>> > >;tag=af4bd714. > Call-ID: OTAyNWJhOTdiZjBlNmUwNDYyZWI0YzdkM2JhZTUxMTU.. > CSeq: 1 INVITE. > Server: OpenSER (1.3.0-notls (i386/linux)). > Content-Length: 0. > . > # > U 168.172.200.70:1824 -> 168.172.200.87:5060 > ACK sip:musketeerm@168.172.200.87 <sip%3Amusketeerm(a)168.172.200.87> < > sip%3Amusketeerm(a)168.172.200.87 <sip%253Amusketeerm(a)168.172.200.87>> > SIP/2.0. > Via: SIP/2.0/UDP 168.172.200.70:1824 > ;branch=z9hG4bK-d87543-ef08fb62b30f1a54-1--d87543-. > To: "musk"<sip:musketeerm@168.172.200.87 <sip%3Amusketeerm(a)168.172.200.87>< > sip%3Amusketeerm(a)168.172.200.87 <sip%253Amusketeerm(a)168.172.200.87>> > >;tag=9a17bd4180f96d7136f8b30b25c6947e.d7e9. > From: "dream"<sip:dreamteam@168.172.200.87<sip%3Adreamteam(a)168.172.200.87>< > sip%3Adreamteam(a)168.172.200.87 <sip%253Adreamteam(a)168.172.200.87>> > >;tag=af4bd714. > Call-ID: OTAyNWJhOTdiZjBlNmUwNDYyZWI0YzdkM2JhZTUxMTU.. > CSeq: 1 ACK. > Content-Length: 0. > > WBR, > LU. > >

2 1

[OpenSER-Users] Problem with BYE signaling during no answer call forward to PSTN
by Krunal Patel 26 May '08

26 May '08

Hi, Here is the scenario of the call. 12345 ---> 56565656 ----> PSTN I have registered user 12345 using sjphone. Dialing 56565656 which is registered to the same openser. Now i let the call ring & after timeout call is transffered to PSTN number. Which is terminated by PSTN gateway. I am using mediaproxy for audio signaling & getting audio properly both side. Now the problem is when PSTN number hangsup the call,it should send BYE signal to the domain name. But instead of sending BYE signal to domain name it sends it to the IP. & because of that the UA can't acknowledge the BYE signal & stay connected. & BYE keeps looping in openser. As the pstn number sends BYE to IP , I have tried by setting alias=xxx.xxx.xxx.xxx . Eventhough it was not solved. Thanks in advance -- Regards, Krunal Patel

2 1

[OpenSER-Users] compilation on solaris 10
by wliangy＠gmail.com 26 May '08

26 May '08

Hi experts, I am start user of openser and need use openser to support sctp. now I have download the source codes of openser-1.3.1-tls. then I compiled it, there have many errors that need your supports. e.g. openser-1.3.1-tls> make all Makefile.defs:717: *** missing separator. Stop. then I commented Makefile.defs line717 and 718. # $(warning Old gcc detected ($(CC_SHORTVER)), use gcc >= 3.1 \ # for better results) Errors were still there. openser-1.3.1-tls> make all Makefile:402: warning: overriding commands for target `/opt/CiscoMGC$(DESTDIR)' Makefile:393: warning: ignoring old commands for target `/opt/CiscoMGC$(DESTDIR)' yacc -d -b cfg cfg.y "cfg.y", line 391: warning: redeclaration of precedence of SLASH. conflicts: 1 shift/reduce flex cfg.lex statistics.c:58: warning: #warning STATISTICS: Architecture with no support for atomic operations. Using Locks!! Makefile:402: warning: overriding commands for target `/opt/CiscoMGC$(DESTDIR)' Makefile:393: warning: ignoring old commands for target `/opt/CiscoMGC$(DESTDIR)' Compiling action.c gcc -g -O9 -funroll-loops -Wall -mv8 -DNAME='"openser"' -DVERSION='"1.3.1-notls"' -DARCH='"sparc64"' -DOS='"solaris"' -DCOMPILER='"gcc 2.91.66"' -D__CPU_sparc64 -D__OS_solaris -D__SMP_no -DCFG_DIR='"$(DESTDIR)/etc/openser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DHAVE_RESOLV_RES -DSTATISTICS -DCHANGEABLE_DEBUG_LEVEL -DF_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETIPNODEBYNAME -DHAVE_SYS_SOCKIO_H -DHAVE_SCHED_YIELD -DHAVE_ALLOCA_H -DUSE_SIGACTION -D_POSIX_PTHREAD_SEMANTICS -DHAVE_DEVPOLL -DHAVE_SELECT -c action.c -o action.o parser/msg_parser.h: In function `char_msg_val': In file included from action.h:27, from action.c:44: parser/msg_parser.h:300: parse error before `)' forward.h: In function `msg_send': In file included from action.c:49: forward.h:95: parse error before `)' forward.h:103: parse error before `)' forward.h:107: parse error before `)' mem/../lock_alloc.h: In function `lock_set_alloc': In file included from mem/../locking.h:66, from mem/../statistics.h:115, from mem/shm_mem.h:33, from ut.h:52, from action.c:54: mem/../lock_alloc.h:68: parse error before `)' ut.h: In function `int2bstr': In file included from action.c:54: ut.h:172: parse error before `)' ut.h: In function `un_escape': ut.h:365: parse error before `)' ut.h: In function `shm_str_dup': ut.h:498: parse error before `)' ut.h: In function `pkg_str_dup': ut.h:515: parse error before `)' ut.h: In function `str_strcmp': ut.h:532: parse error before `)' ut.h:535: parse error before `int' ut.h:539: `minlen' undeclared (first use in this function) ut.h:539: (Each undeclared identifier is reported only once ut.h:539: for each function it appears in.) ut.h:547: `alen' undeclared (first use in this function) ut.h:547: `blen' undeclared (first use in this function) ut.h: In function `str_strcasecmp': ut.h:563: parse error before `)' ut.h:566: parse error before `int' ut.h:570: `minlen' undeclared (first use in this function) ut.h:578: `alen' undeclared (first use in this function) ut.h:578: `blen' undeclared (first use in this function) action.c: In function `run_action_list': action.c:140: parse error before `)' action.c: In function `do_assign': action.c:193: parse error before `)' action.c:202: parse error before `)' action.c:222: parse error before `)' action.c:228: parse error before `)' action.c: In function `do_action': action.c:302: parse error before `)' action.c:309: parse error before `)' action.c:335: parse error before `)' action.c:498: parse error before `)' action.c:524: parse error before `)' action.c:682: parse error before `)' action.c:710: parse error before `)' action.c:723: parse error before `)' action.c:757: parse error before `)' action.c:763: parse error before `)' action.c:807: parse error before `)' action.c:819: parse error before `)' action.c:870: parse error before `)' action.c:896: parse error before `)' action.c:904: parse error before `)' action.c:930: parse error before `)' action.c:939: parse error before `)' action.c:945: parse error before `)' action.c:966: parse error before `)' make: *** [action.o] Error 1 Your any help is much appreciated! BR, Eric

2 1

[OpenSER-Users] Need help to solve BYE signalling problem
by Krunal Patel 26 May '08

26 May '08

Hi, ++ I have registered 3 UACs to the same openser server which are behind NAT. UAC 1 -- 111111 UAC 2 -- 222222 UAC 3 -- 333333 ++ So in location table , I am getting : ------------------------------------------------+-----------------------+-------------------------- Contact | Received | ------------------------------------------------+-----------------------+-------------------------- 111111@<private-IP>:5060 | sip:public-IP : 5060| 222222@<private-IP>:5060 | sip:public-IP : 5060| 333333@<private-IP>:5060 | sip:public-IP : 5060| ++ I have set user preferences : +------+------------------+-------------------------+-------------+------+------------------------------------------------------+ | uuid | username | domain | attribute | type | value | +------+------------------+-------------------------+-------------+------+------------------------------------------------------+ | | 222222 | domainname.com | fwdbusy | 0 | fwdbusy:sip:333333@domainname.com <fwdbusy%3Asip%3A333333(a)domainname.com> | | 222222 | domainname.com | noanscfwd | 0 | noanscfwd:sip:333333@domainname.com<noanscfwd%3Asip%3A333333(a)domainname.com> +------+------------------+-------------------------+--------------+------+------------------------------------------------------+ ++ I am using mediaproxy for audio signaling. ++ Now I am dialing 222222 using 111111 & keeps 222222 ringing until it stops automatically. So call is being forwarded to 333333. 111111 ---------------> 222222---------------> 333333 ++ I pick up the call . So 111111 & 333333 is connected. ++ Now I hangup 333333 , so it sends BYE request to 111111. + Now the problem is 111111 do not accept the BYE request. So it stays connected. & the BYE request keeps looping infinitly in openser. Here is the BYE request : Message Body: BYE sip:111111@<server-IP>:5060 SIP/2.0 Via: SIP/2.0/UDP <111111's Private IP>:5060;branch=z9hG4bK-ed33673a;rport From: <sip:222222@domainname.com <sip%3A222222(a)domainname.com> >;tag=632a4773b79ebfa8i1 To: Anonymous <sip:111111@domainname.com <sip%3A111111(a)domainname.com> >;tag=26190b20d13c8197o0 Call-ID: 4d753c94-f366deb3@localhost CSeq: 101 BYE Max-Forwards: 70 Route: <sip:[SERVER'sIP]:5060;nat=yes;ftag=26190b20d13c8197o0;lr=on>, <sip:[SERVER's IP]:5060;nat=yes;ftag=26190b20d13c8197o0;lr=on> User-Agent: Linksys/PAP2T-3.1.15(LS) Content-Length: 0 0(5877) DEBUG:maxfwd:is_maxfwd_present: value = 70 0(5877) #############################record_route############################### 0(5877) #######################After record_route########################3 0(5877) ------ ------ bye ---call tear down --- 0(5877) parse_headers: flags=78 0(5877) ##################################Before loose_route########################## 0(5877) parse_headers: flags=200 0(5877) is_preloaded: No 0(5877) grep_sock_info - checking if host==us: 13==13 && [SERVER IP] == [SERVER IP] 0(5877) grep_sock_info - checking if port 5060 matches port 5060 0(5877) after_strict: Next hop: 'sip:SERVER IP:5060;nat=yes;ftag=26190b20d13c8197o0;lr=on' is loose router 0(5877) parse_headers: flags=ffffffffffffffff 0(5877) rewrite_uri: Rewriting Request-URI with 'sip:SERVER IP:5060;nat=yes;ftag=26190b20d13c8197o0;lr=on' 0(5877) after_strict: The last route URI: 'sip:SERVER IP:5060;nat=yes;ftag=26190b20d13c8197o0;lr=on' 0(5877) ##################################into loose_route########################## 0(5877) DEBUG: has_totag: totag found 0(5877) DEBUG: has_totag: totag found 0(5877) check_via_address(PUBLIC IP of 111111, PRIVATE IP of 111111, 0) 0(5877) ##############################client_nat_test or search #########BYE############################## 0(5877) ###########################setbflag6################################# 0(5877) ------ ------ bye - loose route ----- 0(5877) DEBUG: t_newtran: T on entrance=0xffffffff 0(5877) parse_headers: flags=ffffffffffffffff 0(5877) parse_headers: flags=78 0(5877) t_lookup_request: start searching: hash=16425, isACK=0 0(5877) DEBUG: RFC3261 transaction matching failed 0(5877) DEBUG: t_lookup_request: no transaction found 0(5877) DBG: trans=0xb612d7f8, callback type 1, id 0 entered 0(5877) DEBUG: mk_proxy: doing DNS lookup... 0(5877) check_via_address(PUBLIC IP of 111111, PRIVATE IP of 111111, 0) 0(5877) DBG:check_against_rule_list: using list dns 0(5877) DEBUG:tm:set_timer: relative timeout is 500000 0(5877) DEBUG: add_to_tail_of_timer[4]: 0xb612d944 (401700000) 0(5877) DEBUG:tm:set_timer: relative timeout is 20 0(5877) DEBUG: add_to_tail_of_timer[0]: 0xb612d960 (421) 0(5877) DEBUG:tm:t_relay_to: new transaction fwd'ed 0(5877) -------------- cheked t reply --- 0(5877) DEBUG:tm:UNREF_UNSAFE: after is 0 0(5877) DEBUG:destroy_avp_list: destroying list (nil) 0(5877) receive_msg: cleaning up ++ From the parsing of BYE request , I found evenif I am doing loose route in cfg , It is doing strict route. Can you please help me to solve this. Thanks in advance. -- Regards, Krunal Patel

1 1

[OpenSER-Users] Need help with buffer overflow error
by Pete Kay 25 May '08

25 May '08

Hi, When I run a *long* sql query in openser.cfg using avp_db_query, I am getting the following error: May 26 02:52:15 [13784] ERROR:core:pv_printf: no more space for text [584] May 26 02:52:15 [13784] ERROR:core:pv_printf: buffer overflow -- increase the buffer size... May 26 02:52:15 [13784] ERROR:avpops:ops_dbquery_avps: cannot print the query How can I increase the buffer size? Thanks in advance for your help. Regards, Pete

2 1

[OpenSER-Users] DISC
by Patrick Pichler 25 May '08

25 May '08

Hi everybody, does anyone have a tested documentation (on installing, configuring or setting up DISC to work together with openSER) ... the DISC (DIameter Server Client) ? On http://developer.berlios.de/projects/disc/ and after searching the web I couldn't find anything except the tarball... thanks in advance regards Patrick

1 0

[OpenSER-Users] MediaProxy or RTPProxy
by MagoDaViola 25 May '08

25 May '08

Untitled Document Hi... What´s the best system in performance question, to use NAT MediaProxy or RTPProxy? -------------------------------------------------------------------------- Alcindo Schleder Sistema Processa Acessoria e Comunicações Ltda. a.. MSN: a_schleder(a)hotmail.com b.. Skipe: alcindo_schleder Demétrio P. dos Santos, 705 - 95670-000 - Gramado-RS-Brasil Celular + 55 54 9966 7591 alcindo(a)processa.org Fone +55 54 3286-1738 comercial(a)processa.org

4 4

[OpenSER-Users] serMyAdmin-0.5-BETA.war on FC5.tomcat5
by Zen Kato 24 May '08

24 May '08

Hi, I tried to install serMyAdmin-0.5-BETA.war on FC5, tomcat5-5.5.15-1jpp_6fc. I did the following, but http://localhost:8080/serMyAdmin does not work. Please let me know how to install sermyadmin on fedora. (1)# cp mysql-connector-java-5.1.6-bin.jar /usr/share/tomcat5/common/lib (2)/usr/share/tomcat5/conf/context.xml <?xml version="1.0" encoding="UTF-8"?> <Context path="/serMyAdmin"> <Resource auth="Container" driverClassName="com.mysql.jdbc.Driver" maxActive="20" maxIdle="10" maxWait="-1" name="jdbc/openser_MySQL" type="javax.sql.DataSource" url="jdbc:mysql://localhost:3306/openser" username="sermyadmin" password="secret"/> </Context> (3)# mysql>grant all privileges on openser.* to sermyadmin@'%' identified by 'sercret'; (4)# cp serMyAdmin-0.5.war /usr/share/tomcat5/webapps/serMyAdmin.war /var/log/tomcat5/catalina.out ....(snip)......... 2008/05/24 7:10:39 org.apache.catalina.startup.HostConfig deployWAR 情報: Webアプリケーションアーカイブ serMyAdmin.war を配備します log4j:ERROR setFile(null,true) call failed. java.io.FileNotFoundException: stacktrace.log (Permission denied) at java.io.FileOutputStream.openAppend(Native Method) at java.io.FileOutputStream.<init>(FileOutputStream.java:177) at java.io.FileOutputStream.<init>(FileOutputStream.java:102) at org.apache.log4j.FileAppender.setFile(FileAppender.java:290) at org.apache.log4j.FileAppender.activateOptions(FileAppender.java:164) at org.apache.log4j.config.PropertySetter.activate(PropertySetter.java:257) at org.apache.log4j.config.PropertySetter.setProperties(PropertySetter.java:133) at org.apache.log4j.config.PropertySetter.setProperties(PropertySetter.java:97) at org.apache.log4j.PropertyConfigurator.parseAppender(PropertyConfigurator.java:689) at org.apache.log4j.PropertyConfigurator.parseCategory(PropertyConfigurator.java:647) at org.apache.log4j.PropertyConfigurator.parseCatsAndRenderers(PropertyConfigurator.java:568) at org.apache.log4j.PropertyConfigurator.doConfigure(PropertyConfigurator.java:442) .......(snip)........ -- Zen Kato

1 0

[OpenSER-Users] sermyadmin: problems with tomcat6 automatic initialization
by Robson Souza 23 May '08

23 May '08

Hello, I got a openser 1.3.2 working with sermyadmin 0.5 installed in a Debian 4.0 OS. After some tests, everything is working fine except for one problem. By the time I start or restart the server, the tomcat spends approximately 15 min to start as follows (catalina.out file): May 23, 2008 4:10:47 PM org.apache.catalina.core.AprLifecycleListener init INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/lib/jvm/java-1.5.0-sun-1.5.0.14/jre/lib/i386/client:/usr/lib/jvm/java-1.5.0-sun-1.5.0.14/jre/lib/i386:/usr/lib/jvm/java-1.5.0-sun-1.5.0.14/jre/../lib/i386 May 23, 2008 4:10:48 PM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-8080 May 23, 2008 4:10:48 PM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 3111 ms May 23, 2008 4:10:48 PM org.apache.catalina.core.StandardService start INFO: Starting service Catalina May 23, 2008 4:10:48 PM org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine: Apache Tomcat/6.0.16 May 23, 2008 4:10:48 PM org.apache.catalina.startup.HostConfig deployWAR INFO: Deploying web application archive serMyAdmin.war May 23, 2008 4:10:54 PM org.apache.catalina.core.StandardContext addApplicationListener INFO: The listener "org.springframework.web.util.Log4jConfigListener" is already configured for this context. The duplicate definition has been ignored. May 23, 2008 4:10:54 PM org.apache.catalina.core.StandardContext addApplicationListener INFO: The listener "org.codehaus.groovy.grails.web.context.GrailsContextLoaderListener" is already configured for this context. The duplicate definition has been ignored. [0] spring.GrailsWebApplicationContext Refreshing org.codehaus.groovy.grails.commons.spring.GrailsWebApplicationContext@1d6c336: display name [org.codehaus.groovy.grails.commons.spring.GrailsWebApplicationContext@1d6c336]; startup date [Fri May 23 16:26:43 BRT 2008]; parent: org.springframework.web.context.support.XmlWebApplicationContext@e61a35 [0] spring.GrailsWebApplicationContext Bean factory for application context [org.codehaus.groovy.grails.commons.spring.GrailsWebApplicationContext@1d6c336]: org.springframework.beans.factory.support.DefaultListableBeanFactory@baa573 May 23, 2008 4:26:49 PM org.apache.catalina.core.StandardContext addApplicationListener INFO: The listener "listeners.ContextListener" is already configured for this context. The duplicate definition has been ignored. May 23, 2008 4:26:49 PM org.apache.catalina.core.StandardContext addApplicationListener INFO: The listener "listeners.SessionListener" is already configured for this context. The duplicate definition has been ignored. May 23, 2008 4:26:49 PM org.apache.coyote.http11.Http11Protocol start INFO: Starting Coyote HTTP/1.1 on http-8080 May 23, 2008 4:26:49 PM org.apache.jk.common.ChannelSocket init INFO: JK: ajp13 listening on /0.0.0.0:8009 May 23, 2008 4:26:49 PM org.apache.jk.server.JkMain start INFO: Jk running ID=0 time=0/40 config=null May 23, 2008 4:26:49 PM org.apache.catalina.startup.Catalina start INFO: Server startup in 960673 ms In order to start faster (10 sec) after the server restart, I have to kill the java process (in CPU 99%) and start tomcat manually by performing "/etc/init.d/tomcat6 start". I'm using the tomcat6 init file provided in www.sermyadmin.org such as its instructions. How can I solve that? Robson --------------------------------- Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento!

2 2

Re: [OpenSER-Users] Problems with sl module in openser1.3.1
by Arturo Ochoa 23 May '08

23 May '08

-----Mensaje original----- De: Henning Westerholt [mailto:henning.westerholt@1und1.de] Enviado el: Friday, May 23, 2008 8:52 AM Para: users(a)lists.openser.org CC: arturo arturo Asunto: Re: [OpenSER-Users] Problems with sl module in openser1.3.1 On Friday 23 May 2008, arturo arturo wrote: > Could some help me with this problem, I'm trying to run openser 1.3.1, but > it dies complaining about the sl module. I issued just 'make all' command > before this > > root@zeus:/home/aochoa/openser/openser-1.3.1-notls > # ./openser > May 22 15:57:16 [4482] DBG:core:yyparse: loading module > /usr/local/lib/openser/modules/mysql.so > May 22 15:57:16 [4482] DBG:core:yyparse: loading module > /usr/local/lib/openser/modules/sl.so > May 22 15:57:16 [4482] ERROR:core:version_control: *module compile flags > mismatch for* /usr/local/lib/openser/modules/sl.so > core: STATS: Off, USE_IPV6, USE_TCP, DISABLE_NAGLE, USE_MCAST, SHM_MEM, > SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT > module: STATS: Off, EXTRA_DEBUG, USE_IPV6, USE_TCP, DISABLE_NAGLE, > USE_MCAST, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT Hi Arturo, the version of the sl module installed on your machine don't match the one of your server in the home directory. Do a make distclean; make all in the source directory, and install again. Cheers, Henning Thanks for your response Henning, I've already do what you mention, but the problem persists. I tried also with openser 1.3.2, and the same thing. Also I noted that there are different linked libs on the same module but compiled on different machines: Fedora: [root@apolo] /usr/local/lib/openser/modules # ldd sl.so linux-gate.so.1 => (0x0028b000) libc.so.6 => /lib/libc.so.6 (0x00111000) /lib/ld-linux.so.2 (0x0028c000) Centos: (this is the one with the problem) root@zeus:/home/aochoa/openser # ldd /usr/local/lib/openser/modules/sl.so libc.so.6 => /lib/tls/libc.so.6 (0x00149000) /lib/ld-linux.so.2 (0x003f7000) Any comments?

1 0

[OpenSER-Users] Help - As I picked up codes negative www_authorize()
by Marcio 23 May '08

23 May '08

Hi... Anybody could me help, I'm doing some tests and would like to pick up negative codes of the return www_authorize.... I trying with ($retcode) ($?) I've not had success..... Does anyone know how...? Any hints.....?? thx...

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users