19 Jun
2006
19 Jun
'06
4:31 p.m.
The client can't register, still it doesn't allow registration.
Attached is the ngrep output you mentioned.
Thanks,
Hamid
Ngrep Output:
#
U 85.15.7.17:3166 -> 85.15.7.18:5060
REGISTER sip:shatel.ir SIP/2.0..From: sip:101@shatel.ir;tag=5fa04040..To:
sip:101@shatel.ir..Call-Id: 9401fb256987b29da88b308b1
1ce64ed..Cseq: 1 REGISTER..Contact:
<sip:101@85.15.7.17;LINEID=6f5beb97d08670a1c8328ce1526ae928>..Expires:
300..Date: Mon, 19 J
un 2006 11:02:02 GMT..Max-Forwards: 20..User-Agent: sipX/2.5.2
(WinNT)..Accept-Language: en..Via: SIP/2.0/UDP 85.15.7.17;branch
=z9hG4bK-a4ba80ab4920a96042a782f74c40944d..Content-Length: 0....
#
U 85.15.7.17:3166 -> 85.15.7.18:5060
REGISTER sip:shatel.ir SIP/2.0..From: sip:101@shatel.ir;tag=5fa04040..To:
sip:101@shatel.ir..Call-Id: 9401fb256987b29da88b308b1
1ce64ed..Cseq: 1 REGISTER..Contact:
<sip:101@85.15.7.17;LINEID=6f5beb97d08670a1c8328ce1526ae928>..Expires:
300..Date: Mon, 19 J
un 2006 11:02:02 GMT..Max-Forwards: 20..User-Agent: sipX/2.5.2
(WinNT)..Accept-Language: en..Via: SIP/2.0/UDP 85.15.7.17;branch
=z9hG4bK-a4ba80ab4920a96042a782f74c40944d..Content-Length: 0....
#
U 85.15.7.17:3166 -> 85.15.7.18:5060
REGISTER sip:shatel.ir SIP/2.0..From: sip:101@shatel.ir;tag=5fa04040..To:
sip:101@shatel.ir..Call-Id: 9401fb256987b29da88b308b1
1ce64ed..Cseq: 1 REGISTER..Contact:
<sip:101@85.15.7.17;LINEID=6f5beb97d08670a1c8328ce1526ae928>..Expires:
300..Date: Mon, 19 J
un 2006 11:02:02 GMT..Max-Forwards: 20..User-Agent: sipX/2.5.2
(WinNT)..Accept-Language: en..Via: SIP/2.0/UDP 85.15.7.17;branch
=z9hG4bK-a4ba80ab4920a96042a782f74c40944d..Content-Length: 0....
#
U 85.15.7.18:5060 -> 85.15.7.17:5060
SIP/2.0 401 Unauthorized..From: sip:101@shatel.ir;tag=5fa04040..To:
sip:101@shatel.ir;tag=a2c1e7c3808498f2cb2d193cd520e0fc.60d6
..Call-Id: 9401fb256987b29da88b308b11ce64ed..Cseq: 1 REGISTER..Via:
SIP/2.0/UDP 85.15.7.17;branch=z9hG4bK-a4ba80ab4920a96042a78
2f74c40944d..WWW-Authenticate: Digest realm="shatel.ir",
nonce="449677461ef22770698d74f5dde4b0c2f00cf44f"..Server: OpenSer (1.0
.1 (i386/linux))..Content-Length: 0..Warning: 392 85.15.7.18:5060 "Noisy
feedback tells: pid=13352 req_src_ip=85.15.7.17 req_s
rc_port=3166 in_uri=sip:shatel.ir out_uri=sip:shatel.ir via_cnt==1"....
#
U 85.15.7.18:5060 -> 85.15.7.17:5060
SIP/2.0 401 Unauthorized..From: sip:101@shatel.ir;tag=5fa04040..To:
sip:101@shatel.ir;tag=a2c1e7c3808498f2cb2d193cd520e0fc.60d6
..Call-Id: 9401fb256987b29da88b308b11ce64ed..Cseq: 1 REGISTER..Via:
SIP/2.0/UDP 85.15.7.17;branch=z9hG4bK-a4ba80ab4920a96042a78
2f74c40944d..WWW-Authenticate: Digest realm="shatel.ir",
nonce="4496774acfd59b6e20c1968fc0bff804d526ce03"..Server: OpenSer (1.0
.1 (i386/linux))..Content-Length: 0..Warning: 392 85.15.7.18:5060 "Noisy
feedback tells: pid=13352 req_src_ip=85.15.7.17 req_s
rc_port=3166 in_uri=sip:shatel.ir out_uri=sip:shatel.ir via_cnt==1"....
-----Original Message-----
From: Daniel-Constantin Mierla [mailto:daniel@voice-system.ro]
Sent: Monday, June 19, 2006 4:32 PM
To: Hamid Ali Asgari
Cc: users(a)openser.org
Subject: Re: [Users] SIP Clients Can't REGISTER
Hello,
On 06/19/06 14:38, Hamid Ali Asgari wrote:
Hi,
Thanks for the reply.
I commented out the entry you mentioned:
#101(a)mydomain.com Auth-Type := Accept, Sip-Group == "suspended",
#Service-Type == "Group-Check"
What happens now is that the radius will check for a group named SUSPENDED
and will reject because it won't match the 101 user:
this is ok, it is the response that the user is not in the suspended
group. The processing should go further in openser configuration script.
Do you encounter other issues with calls/registrations?
Cheers,
Daniel
From RADIUS debug:
users: Matched entry
DEFAULT at line 152
users: Matched entry DEFAULT at line 255
-----------------------------------------------------------
Users:152: DEFAULT Auth-Type = System
Fall-Through = 1
Users:255: DEFAULT Auth-Type := Reject, Service-Type == "Group-Check"
Any thoughts?
Hamid
-----Original Message-----
From: Daniel-Constantin Mierla [mailto:daniel@voice-system.ro]
Sent: Monday, June 19, 2006 12:54 PM
To: Hamid Ali Asgari
Cc: 'Edson'; users(a)openser.org
Subject: Re: [Users] SIP Clients Can't REGISTER
If look carefully in the configuration file of the tutorial, it checks
for users belonging to "suspended" group. As you have in 'users' file:
101(a)mydomain.com Auth-Type := Accept, Sip-Group == "suspended",
Service-Type == "Group-Check"
Reply-Message = "Authorized"
means that user 101 is in suspended group and it is not allowed to
register or initiate calls. So remove this line for your 'users' file.
Also, when you test, just watch the network traffic on you sip server,
it will reveal the reply code so you can spot easily which statement was
hit in the config file: ngrep -d any port 5060
Cheers,
Daniel