sr-users

sr-users@lists.kamailio.org

4 participants
37456 discussions

[Serusers] Radius Authenication Problems...
by Natambu Obleton 21 Jul '06

21 Jul '06

I am new to SER and radius and I am having a digest problem. My ser.cfg section: if (method=="REGISTER" || method=="INVITE") { log("**************************WTF mate?"); if (!radius_www_authorize("voip.fasttrackcomm.net")) { log("WTF mate auth?"); www_challenge("voip.fasttrackcomm.net", "0"); break; }; My users file: Line 50- 9703751000(a)voip.fasttrackcomm.net Auth-Type := Digest, User-Password == "5321" Reply-Message = "Authenticated" Radius_logging: --- Walking the entire request list --- Cleaning up request 96 ID 55 with timestamp 44be52aa Sending Access-Reject of id 56 to 127.0.0.1 port 34690 Reply-Message = "Authenticated" Waking up in 4 seconds... rad_recv: Access-Request packet from host 127.0.0.1:34691, id=57, length=247 User-Name = "9703751000(a)voip.fasttrackcomm.net" Digest-Attributes = 0x0a0c39373033373531303030 Digest-Attributes = 0x0118766f69702e66617374747261636b636f6d6d2e6e6574 Digest-Attributes = 0x022a3434626535336361303461366438663636346561346630313231303134366630366531 6361316333 Digest-Attributes = 0x04207369703a35303040766f69702e66617374747261636b636f6d6d2e6e6574 Digest-Attributes = 0x0308494e56495445 Digest-Response = "e311972978c1d06b6341c18aba7373c7" Service-Type = Sip-Session Sip-Uri-User = "9703751000" NAS-Port = 5060 NAS-IP-Address = 127.0.0.1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 98 modcall[authorize]: module "preprocess" returns ok for request 98 rlm_digest: Adding Auth-Type = DIGEST modcall[authorize]: module "digest" returns ok for request 98 rlm_realm: Looking up realm "voip.fasttrackcomm.net" for User-Name = "9703751000(a)voip.fasttrackcomm.net" rlm_realm: Found realm "voip.fasttrackcomm.net" rlm_realm: Proxying request from user 9703751000 to realm voip.fasttrackcomm.net rlm_realm: Adding Realm = "voip.fasttrackcomm.net" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 98 users: Matched entry 9703751000(a)voip.fasttrackcomm.net at line 50 modcall[authorize]: module "files" returns ok for request 98 modcall: leaving group authorize (returns ok) for request 98 rad_check_password: Found Auth-Type Digest auth: type "digest" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 98 rlm_digest: Converting Digest-Attributes to something sane... Digest-User-Name = "9703751000" Digest-Realm = "voip.fasttrackcomm.net" Digest-Nonce = "44be53ca04a6d8f664ea4f01210146f06e1ca1c3" Digest-URI = "sip:500@voip.fasttrackcomm.net" Digest-Method = "INVITE" A1 = 9703751000:voip.fasttrackcomm.net:5321 A2 = INVITE:sip:500@voip.fasttrackcomm.net KD = bde2dd5ada6b4377bf8167616c47236f:44be53ca04a6d8f664ea4f01210146f06e1ca1c3:d9 ed5d99fee1e1f435339ff6f206edac rlm_digest: FAILED authentication modcall[authenticate]: module "digest" returns reject for request 98 modcall: leaving group authenticate (returns reject) for request 98 auth: Failed to validate the user. Delaying request 98 for 1 seconds Finished request 98

2 1

Re: [Users] Bye problem
by raviprakash sunkara 21 Jul '06

21 Jul '06

I didn't any Bye request in ngrep and ethereal, That Bye Request is not forwarding to server. On 7/21/06, raviprakash sunkara <sunkara.raviprakash.feb14(a)gmail.com> wrote: > > Hi Klaus, > > What U 'd told , I did it. > > but i didn't see the Bye Request to server , By using both ngrep and > ethereal.. > > > > > On 7/21/06, Klaus Darilion <klaus.mailinglists(a)pernau.at> wrote: > > > > How should I know? > > > > Do what I suggested. Use ngrep (or any other packet sniffer like tcpdump > > or ethereal/whireshark) to watch where the BYE gets lost. Then I can > > help. > > > > btw: please send emails to the list > > > > regards > > Klaus > > > > raviprakash sunkara wrote: > > > Hello Klaus, > > > thank U..... for replying to me.. > > > CAN help On Bye Problem > > > > > > is openser is problem or network problem.. > > > > > > can do that... > > > Bye > > > > > > On 7/20/06, * Klaus Darilion* <klaus.mailinglists(a)pernau.at > > > <mailto: klaus.mailinglists(a)pernau.at>> wrote: > > > > > > raviprakash sunkara wrote: > > > > > > > > Hi Users > > > > > > > > I'm Using the openser with Nat Bu using the RTP.. > > > > > > > > After invite method rtp is also established between the > > caller and > > > > callee ... > > > > Audio is clear.. > > > > But when I send Bye request to Callee , it not hung upping to > > > callee it > > > > still estallishing the call... > > > > > > > > I think that .... > > > > 1) openSER server is not getting the > > > request from > > > > callee or caller > > > > 2) OPenser is respones the BYE .. > > > > 3) Router(firewall) gateways is > > blocking the > > > > Bye request , to pass the request to openser, > > > > 4) Route behind the UA's > > isbloacking.... > > > > > > > > > You have to check which one of this is the real case. > > > > > > Use ngrep at the SIP proxy to verify if the BYE is received and > > forward. > > > Take a look at the IP addresses and ports in the Route headers and > > > request URI and Contact headers. Make sure the BYE is sent to the > > proper > > > IPaddress:socket. > > > > > > regards > > > klaus > > > > > > > > > > > > > > > -- > > > Thanks and Regards with cheers > > > Sunkara Ravi Prakash (Voip Developer) > > > Hyperion Technology > > > Kondapur, Hi-tech city, > > > Hyderabad. > > > www.hyperion-tech.com <http://www.hyperion-tech.com> > > > +91-9985077535 > > > > > > > -- > Thanks and Regards with cheers > Sunkara Ravi Prakash (Voip Developer) > Hyperion Technology > Kondapur, Hi-tech city, > Hyderabad. > www.hyperion-tech.com > +91-9985077535 > -- Thanks and Regards with cheers Sunkara Ravi Prakash (Voip Developer) Hyperion Technology Kondapur, Hi-tech city, Hyderabad. www.hyperion-tech.com +91-9985077535

1 0

[Users] Re: [Devel] Please help for TLS testing..
by Klaus Darilion 21 Jul '06

21 Jul '06

Hi Feriante! Please Cc: the list too. To test TLS you have choose where you want to use TLS: - between the SIP clients and the SIP proxy - between SIP proxies and to gateways - both between the SIP clients and the SIP proxy: get a SIP client which Supports TLS (eyebeam, minisip, SNOM phones (maybe also the SNOM softphone?)) between SIP proxies: get 2 domain names for each proxy (they can be hosted on the same PC with different ports). make NAPTR and SRV (RFC3263) entries with TLS as preferred protocol configure both proxies with the same rootCA configure both proxies with a client certificate and key use t_relay(). This should check NAPTR records and use tls as protocol. regards klaus Ferianto siregar wrote: > > Dear Klaus Darilion, > > Thank you very much for your kind-hearted to reply my message.Thanks > I have tried your suggestion and it works. Thanks > But, would you mind if I ask you a question anymore? > How can I test my TLS configuration, so It can run as a security in voip > communication? > What should I prepare, Klaus? Would you mind.. > Please help me.. > > Thanks with all regards, > > > Ferianto > > */Klaus Darilion <klaus.mailinglists(a)pernau.at>/* wrote: > > Hi Feriante! > > The TLS syntax has changed and we have forgotten to update the default > config file. As I sad, read the TLS tutorial > (http://openser.org/docs/tls.html) and also the Wiki describes the new > syntax > (http://openser.org/dokuwiki/doku.php?id=migrating_openser_v1.0.x_to_v1.1.x). > > In your case: > tls_verify_server = on > tls_verify_client = on > tls_require_client_certificate = on > > regards > klaus > > On Fri, July 21, 2006 5:40, Ferianto siregar said: > > Dear all, > > > > First of all I would like to say thanks to all of you who has > given me > > some helps and suggestions to solve my problem in configuring my > openser > > system. Thank you very much. > > I have some questions in configuring the TLS now, I do hope > anybody can > > help me. These are the questions: > > 1. Now, I try to configure the openser system for using the TLS. > So, as > > Klaus Darilion said before, I must configure openser.cfg file > first. So, > > I uncomment (enable) the TLS by deleting "#" in openser.cfg file. > After > > that, I try to restart the openser again. But, when I run it again > > (after restarting), I get 3 error messages. Here are the error > message: > > [root@localhost openser]# openser restart > > 0(5783) parse error (27,12-13): parse error > > 0(5783) parse error (27,12-13): unknown config > > variable > > 0(5783) parse error (27,14-15): > > ERROR: bad config file (3 errors) > > 0(5783) destroy_tls: Entered > > 0(5783) shm_mem_destroy > > [root@localhost openser]# > > > > As I see, the error is at line 27. I see that it contain > "tls_verify=1" > > and "tls_require_certificate=0". I don`t know what is wrong with this > > line because As I see from all mailinglist`s messages, they didn`t > > change this line and if they change it, they just change the > value, for > > example : > > tls_verify = on > > tls_require_certificate = on > > > > I have tried this effort, but I get the same error message. > > Does anybody can give me a suggestion what sould i do? Please... > > > > 2. If the error can be solved, how can I test my TLS configuration? I > > mean how I can test whether it can run correctly ( It can secure the > > communication system in openser)? > > > > Please help me..I do hope anyone can help me to solve this problem. > > Thank you. > > > > > > Regards with cheers, > > > > > > > > Ferianto > > > > > > > > > > --------------------------------- > > Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US > (and 30+ > > countries) for 2¢/min or > > less._______________________________________________ > > Devel mailing list > > Devel(a)openser.org > > http://openser.org/cgi-bin/mailman/listinfo/devel > > > > > > ------------------------------------------------------------------------ > See the all-new, redesigned Yahoo.com. Check it out. > <http://us.rd.yahoo.com/evt=40762/*http://www.yahoo.com/preview>

1 0

[Users] provisional response management ( 100 Trying )
by T.R. Missner 21 Jul '06

21 Jul '06

Hello, I want to send an immediate 100 trying message when an Invite is received, then I do a DB lookup, then I rewrite the RURI and forward the message using t_relay. Since I have already sent a 100 trying manually I'd like to short circuit the 100 t_relay sends so multiple 100 trying messages aren't sent. Does anyone know of a way to do this? Thanks, T.R.

6 10

Re: [Serusers] Multiple PSTN Gateways
by Jon Farmer 21 Jul '06

21 Jul '06

Ezequiel Colombo wrote: > Hi Jon, you can use DNS SRV records pointing to your gateways and use > something like t_relay_to("pool.yourgateways.com"). Hi Thanks for that. I have only ever seen t_relay_to() examples using IP addresses so was not sure if they also supported DNS. However what is the advantage to using DNS SRV as opposed to normal DNS round robin i.e. A records with the same priority? Regards Jon -- Jon Farmer Telford, Shropshire, UK

1 0

[Users] Please help for TLS testing..
by Ferianto siregar 21 Jul '06

21 Jul '06

Dear all, First of all I would like to say thanks to all of you who has given me some helps and suggestions to solve my problem in configuring my openser system. Thank you very much. I have some questions in configuring the TLS now, I do hope anybody can help me. These are the questions: 1. Now, I try to configure the openser system for using the TLS. So, as Klaus Darilion said before, I must configure openser.cfg file first. So, I uncomment (enable) the TLS by deleting "#" in openser.cfg file. After that, I try to restart the openser again. But, when I run it again (after restarting), I get 3 error messages. Here are the error message: [root@localhost openser]# openser restart 0(5783) parse error (27,12-13): parse error 0(5783) parse error (27,12-13): unknown config variable 0(5783) parse error (27,14-15): ERROR: bad config file (3 errors) 0(5783) destroy_tls: Entered 0(5783) shm_mem_destroy [root@localhost openser]# As I see, the error is at line 27. I see that it contain "tls_verify=1" and "tls_require_certificate=0". I don`t know what is wrong with this line because As I see from all mailinglist`s messages, they didn`t change this line and if they change it, they just change the value, for example : tls_verify = on tls_require_certificate = on I have tried this effort, but I get the same error message. Does anybody can give me a suggestion what sould i do? Please... 2. If the error can be solved, how can I test my TLS configuration? I mean how I can test whether it can run correctly ( It can secure the communication system in openser)? Please help me..I do hope anyone can help me to solve this problem. Thank you. Regards with cheers, Ferianto --------------------------------- Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.

2 1

[Users] using of openser
by unplug 21 Jul '06

21 Jul '06

Hi, I would like to know the typical design to use openser in order to increase the performance. Since openser is a proxy server and it can be used together with another sip server to provide more function such as asterisk. As I have tested using sipp in a normal PC, only openser can handle about 60 concurrent calls. I have no idea where is the bottleneck. I have searched that someone will use openser with asterisk to provide a complete (nearly) solution in voip system. I want to have more information about that combination, such as the design, performance after integration, etc. Does anyone can give me some idea if you are using such combination? unplug

2 1

Re: [Users] SMS using USB Modem
by Klaus Darilion 21 Jul '06

21 Jul '06

On Thu, July 20, 2006 21:50, JThompson(a)westell.com said: > > Hi > I am trying to use the SMS module with a Motorola V600 phone attached via > USB. Linux sees the phone as ttyACM0. In the config file i set the > device > as "d=/dev/ttyACM0". When the module loads it says "NOTICE:initmodem: > Waiting 2 sec. before retrying" then it says the modem is not connected > to > the network. Is it possible to use a USB modem with the SMS module? What > do I need to do? Thank you. > ~Jacob > You can try if it works with the nowsms gateway under Windows. If this doesn't work too, maybe there is a problem with the phone. You can also try minicom and test if you can set up the typical modem commands (AT..., ) regards klaus > > > _______________________________________________ > Users mailing list > Users(a)openser.org > http://openser.org/cgi-bin/mailman/listinfo/users >

1 0

Re: [Serusers] Presence issue with SER
by Andrey Kouprianov 21 Jul '06

21 Jul '06

Hi, As far as i know, there are mostly commercial SIP presence servers available, but not open source. One open source presence (old one) is written in java JAIN-SIP api called JAIN-PRESENCE-SERVER or smth. I dont know what your objective is, but you can try a client-to-client (mesh, peer-to-peer) presence instead of server presence. If you are making a client on your own, then you'll have a hard time, if you dont need to make a client, just use new version of X-Lite for Win. It has a presence built it for both peer-to-peer and server-side. Alternatevly, you can use Jabber presence instead of SIP presence. There are plenty of resources available for Jabber already as opposed to SIP. Moreover, SER has a jabber module to function as a gateway when subscribtions and notifications arrive from SIP clients (I dont know if it works fine, because I havent tried it yet myself). So, you can have registrations and calls handled by SIP and presence and IM handled by Jabber. Bests, Andrey. On 7/21/06, Jason Terry <jterry(a)airvana.com> wrote: > Hi Andrey, > > I'm having a rough time installing this version of SER. Do you know of another good free presence server? > > Thanks, > Jason > > -----Original Message----- > From: serusers-bounces(a)lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Andrey Kouprianov > Sent: Thursday, July 20, 2006 11:04 AM > To: serusers(a)iptel.org > Subject: Re: [Serusers] Presence issue with SER > > Hi, > > SER 0.9.6 is not a presence server and pa.so is an incomplete module. > You can try installing test persence version of CVS or FTP under > /pub/ser/presence directory. > > Andrey. > > On 7/20/06, Jason Terry <jterry(a)airvana.com> wrote: > > > > > > > > Hi, > > > > > > > > I am testing a sip application and I'm using SER as a presence server. > > I see two issues in notifies generated by SER. Here is the actual notify > > that I receive after my app sends a subscribe: > > > > > > > > > > > > NOTIFY sip:Google@10.4.12.10:50600 SIP/2.0 > > > > Via: SIP/2.0/UDP 10.4.12.11;branch=z9hG4bK6c01.a4670966.0 > > > > To: <sip:Google@127.0.0.1>;tag=2cb6000467458b6bc623 > > > > From: > > sip:test@10.4.12.11;tag=5e359e0a74af9df0dcf075250e57d0d9-d5fe > > > > CSeq: 1 NOTIFY > > > > Call-ID: 2cb6000567458b6bc623 > > > > Content-Length: 240 > > > > User-Agent: Sip EXpress router(0.9.6 (i386/linux)) > > > > Event: presence ß The ID from the subscribe is missing > > > > Content-Type: application/pidf+xml > > > > Subscription-State: active;expires=597 > > > > > > > > <?xml version="1.0"?> > > > > <!DOCTYPE presence PUBLIC "//IETF//DTD RFCxxxx PIDF 1.0//EN" > > "pidf.dtd"> > > > > <presence entity="sip:test@10.4.12.11"> > > > > <tuple id="9r28r49">ser"> ß XML Error > > > > <status> > > > > <basic>closed</basic> > > > > </status> > > > > </tuple> > > > > </presence> > > > > > > > > Are these known issues? If so can someone point me to where I can get a > > fix? > > > > > > > > Regards, > > > > Jason > > _______________________________________________ > > Serusers mailing list > > Serusers(a)lists.iptel.org > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > _______________________________________________ > Serusers mailing list > Serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

2 1

[Users] Please help for TLS testing..
by Ferianto siregar 21 Jul '06

21 Jul '06

Dear all, First of all I would like to say thanks to all of you who has given me some helps and suggestions to solve my problem in configuring my openser system. Thank you very much. I have some questions in configuring the TLS now, I do hope anybody can help me. These are the questions: 1. Now, I try to configure the openser system for using the TLS. So, as Klaus Darilion said before, I must configure openser.cfg file first. So, I uncomment (enable) the TLS by deleting "#" in openser.cfg file. After that, I try to restart the openser again. But, when I run it again (after restarting), I get 3 error messages. Here are the error message: [root@localhost openser]# openser restart 0(5783) parse error (27,12-13): parse error 0(5783) parse error (27,12-13): unknown config variable 0(5783) parse error (27,14-15): ERROR: bad config file (3 errors) 0(5783) destroy_tls: Entered 0(5783) shm_mem_destroy [root@localhost openser]# As I see, the error is at line 27. I see that it contain "tls_verify=1" and "tls_require_certificate=0". I don`t know what is wrong with this line because As I see from all mailinglist`s messages, they didn`t change this line and if they change it, they just change the value, for example : tls_verify = on tls_require_certificate = on I have tried this effort, but I get the same error message. Does anybody can give me a suggestion what sould i do? Please... 2. If the error can be solved, how can I test my TLS configuration? I mean how I can test whether it can run correctly ( It can secure the communication system in openser)? Please help me..I do hope anyone can help me to solve this problem. Thank you. Regards with cheers, Ferianto --------------------------------- Do you Yahoo!? Next-gen email? Have it all with the all-new Yahoo! Mail Beta.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users