24 Aug
2012
24 Aug
'12
3:41 p.m.
The Route and Record-route headers are identical.
From debug (when alias=domain.ch:5060):
----authentication of INVITE:
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: NOTICE: : ---------------------- In
route(AUTH), just before from_uri==myself ----------------------
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==9 && [domain.ch] == [127.0.0.1]
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==15 && [domain.ch] == []
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==9 && [domain.ch] == [127.0.0.1]
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==15 && [domain.ch] == []
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:44 server /usr/sbin/kamailio[8588]: NOTICE: : ----------------------
from_uri==myself evaluated as TRUE!! ----------------------
----same dialog, routing of ACK (response to 200 OK for invite):
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: INFO: : ========== ACK MSG, NEXT
function: LOOSE_ROUTE() ============
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: rr [loose.c:85]: is_preloaded:
No
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==9 && [domain.ch] == [127.0.0.1]
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==15 && [domain.ch] == []
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==9 && [domain.ch] == [127.0.0.1]
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:583]:
grep_sock_info - checking if host==us: 10==15 && [domain.ch] == []
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [socket_info.c:587]:
grep_sock_info - checking if port 5060 (advertise 0) matches port 5060
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: rr [loose.c:591]: Next hop:
'sip:;lr=on' is loose router
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: rr [loose.c:641]: The last route
URI: 'sip:;lr=on'
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: NOTICE: : ============LOOSE_ROUTE
RETURNED TRUE ===============
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: tm [t_lookup.c:1379]: DEBUG:
t_newtran: msg id=3 , global msg id=2 , T on entrance=(nil)
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: tm [t_lookup.c:527]:
t_lookup_request: start searching: hash=15611, isACK=1
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: tm [t_lookup.c:485]: DEBUG:
RFC3261 transaction matching failed
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: tm [t_lookup.c:709]: DEBUG:
t_lookup_request: no transaction found
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: tm [t_funcs.c:315]: SER:
forwarding ACK statelessly
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [msg_translator.c:206]:
check_via_address(, domain.ch, 0)
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [forward.c:609]: Sending: ACK
sip:;lr=on SIP/2.0^M Via: SIP/2.0/UDP ;branch=z9hG4bKcydzigwkX^M Via: SIP/2.0/UDP
domain.ch;received=;branch=z9hG4bKac1441389717^M Max-Forwards: 69^M From: "acc2"
;tag=1c254829012^M To: ;tag=1c423881657^M Call-ID: 2547879162482012122242@^M CSeq: 2 ACK^M
Contact: ^M Supported: em,timer,replaces,path,resource-priority^M Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUBSCRIBE,UPDATE^M
User-Agent: SBCdevice Content-Length: 0^M ^M .
Aug 24 14:22:47 server /usr/sbin/kamailio[8588]: DEBUG: [forward.c:611]: orig. len=590,
new_len=636, proto=1
...
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/msg_parser.c:626]:
method:
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/msg_parser.c:628]: uri:
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/msg_parser.c:630]:
version:
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/parse_via.c:1286]: Found
param type 232,
= ; state=16
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/parse_via.c:2561]: end of
header reached, state=5
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/msg_parser.c:511]:
parse_headers: Via found, flags=2
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: [parser/msg_parser.c:513]:
parse_headers: this is the first via
...
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: sl [sl_funcs.c:396]: DEBUG :
sl_filter_ACK: to late to be a local ACK!
...
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: sanity [mod_sanity.c:255]: sanity
checks result: 1
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: siputils [checks.c:106]: totag
found
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: INFO: : ========== ACK MSG, NEXT
function: LOOSE_ROUTE() ============
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: rr [loose.c:108]: No Route headers
found
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: DEBUG: rr [loose.c:829]: There is no
Route HF
Aug 24 14:22:47 server /usr/sbin/kamailio[8589]: INFO: : ============LOOSE_ROUTE RETURNED
FALSE ===============
When I set alias=server.domain.ch:5060, from_uri==myself returns false (when determining
if INVITE should be authenticated,resulting in replying 100 trying instead of 407 Proxy
Auth Req) and loose_route() starts returning true and relays the ACK correctly.
I can post more debug from this case also, but I didn't want to spam so much in one
message.
If you would like to see it, please let me know.
So .. Shall I consider the loose_route() part fixed and assume that there MUST be a full
name (hostname.domain:port) in the alias, when Kamailio is not used as a primary proxy for
the domain?
What about the from_uri==myself part?
Martin
______________________________________________________________
Od: "Klaus Darilion"
Komu: "SIP Router - Kamailio (OpenSER) and SIP Express Router (SER) - Users Mailing
List"
Dátum: 23.08.2012 15:04
Predmet: Re: [SR-Users] Possible bug in authentication
CC: miconda(a)gmail.com
The Route URI (sent by SBC) must be identical to the
Record-Route URI
(inserted by Kamailio).
To find out why loose_route returns FALSE increase log-level.
loose_route uses the "ismyself" function to evaluate if the Route header
addresses this Kamailio server. And the "ismyself" is very verbose when
doing this check.
regards
Klaus
On 23.08.2012 13:51, martian(a)centrum.sk wrote:
Ok, so .. I have a session border controller device
that is a contact
point for my SIP domain (SRV record in DNS set to its IP). All the
trafic goes through it and it does things like topology hiding etc.. The
device forwards the INVITE messages to Kamailio, because of the routing.
The loose_route was working strangely, because it did not behave as
described in the documentation.
Here is the sip message that it was suppose to pass:
ACK sip:acc1@domain.ch:5060 SIP/2.0
Via: SIP/2.0/UDP domain.ch;branch=z9hG4bKac386033013
Max-Forwards: 70
From: "acc2" ;tag=1c1749458918
To: ;tag=1c1892801634
Call-ID: 17494024742382012111116@
CSeq: 2 ACK
Contact:
Route:
Supported: em,timer,replaces,path,resource-priority
Allow:
REGISTER,OPTIONS,INVITE,ACK,CANCEL,BYE,NOTIFY,PRACK,REFER,INFO,SUBSCRIBE,UPDATE
User-Agent: SBC_DEVICE
Content-Length: 0
As you can see, there is a Route header and a To_tag .. so the
loose_route function should return true. But instead, it returned false,
then t_check_trans() also returned false and the routing logic exited
(exit;).
This happens when the value of alias is not enclosed in double quotes.
PS.: There is a "-" symbol in the domain name. Can't that be a problem
causing the need for the double quotes?
PS2: Should there be only a domain name in the alias? or also the
hostname part? ... for example: domain.ch:5060 or server.domain.ch:5060
Martin
______________________________________________________________
Od: "Daniel-Constantin Mierla"
Komu: "SIP Router - Kamailio (OpenSER) and SIP Express Router (SER) -
Users
Mailing List"
Dátum: 23.08.2012 12:21
Predmet: Re: [SR-Users] Possible bug in authentication
Hello,
On 8/23/12 11:54 AM, martian(a)centrum.sk wrote:
Hello to everybody.
I am currently working with Kamailio 3.3.1 on RedHat.
The "loose_route" function was not working correctly and I observed
some very strange behaviour (not as one described in the
documentation of the function).
I have found that there needs to be a port included in the "alias"
variable for the loose_route function to work correctly.
However, upon adding the port to alias, the INVITE messages were no
longer authenticated (Kamailio just accepted them and didn't send
proxy-auth header in 407 message).
My alias:
alias="domain.ch:5060"
Examining default routing logic, I found the problem here:
if (is_method("REGISTER") || from_uri==myself)
{
# authenticate requests
...
}
The "from_uri==myself" was no longer evaluated as true, because
there was a port at the end of the alias.
The FROM Header of the INVITE messages looks like:
From: "acc1" ;tag=12345
..so .. no port number there.
Btw, I have fixed this with replacing the "myself" list with my own
defined variable MY_DOMAIN.
#!define MY_DOMAIN ".*(a)domain.ch"
So now the condition looks like this:
if (is_method("REGISTER") || from_uri=~MY_DOMAIN)
{
...
}
I am not sure if this is a bug that needs to be fixed or not. I am
just pointing my finger at it and I hope it will contribute to the
development.
Also, a valid description of this behavior (when using port in
alias) would be appreciated.
if you enclose the value of the alias parameter in double quotes, then
it is taken as string value. If you want to set it to a host:port, then
remove the double quotes:
alias=domain.ch:5060
Why do you say the loose_route() was working strangely? Do you add the
hostname as record-route, not the IP address? Detail more about what you
think is wrong with record routing/loose routing.
Cheers,
Daniel
-- Daniel-Constantin Mierla -http://www.asipto.comhttp://twitter.com/#!/miconda
-http://www.linkedin.com/in/micondaKamailio Advanced Training, Berlin, Nov 5-8, 2012
-http://asipto.com/u/kat
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users