19 Mar
2013
19 Mar
'13
8:08 p.m.
okay the problem here has to do with your config file:
your config should rather look something like this:
route[register]
{
if (!t_newtran()) { #absorb retransmissions
sl_reply("500","Could not create transaction");
exit;
}
if (!ims_www_authenticate(NETWORKNAME)) {
if ($? == -2) {
t_reply("403", "Authentication Failed");
exit;
} else if ($? == -3) {
t_reply("400", "Bad Request");
exit;
} else {
#user has not been authenticated. Lets send a
challenge via 401 Unauthorized
xlog("L_DBG","About to challenge!
auth_ims\n");
ims_www_challenge("$td");
#this is async so to know status we have to check
the reply avp
xlog("L_DBG","maa_return code is
$avp(s:maa_return_code)\n");
switch ($avp(s:maa_return_code)){
case 1: #success
xlog("L_DBG", "MAR success -
401/407 response sent from module");
break;
case -1: #failure
xlog("L_ERR", "MAR failure - error
response sent from module");
break;
case -2: #error
xlog("L_ERR", "MAR error - sending
error response now");
t_reply("500", "MAR failed");
break;
default:
xlog("L_ERR", "Unknown return code
from MAR, value is [$avp(s:uaa_return_code)]");
t_reply("500", "Unknown response
code from MAR");
break;
}
exit;
}
}
else {
#HERE YOU ARE AUTHENTICATED
}
On Mon, Mar 18, 2013 at 4:30 PM, mrichardson <
matt.richardson(a)interoptechnologies.com> wrote:
Date: Fri, 15 Mar 2013 08:44:13 +0100
From: Daniel-Constantin Mierla <miconda(a)gmail.com> <miconda(a)gmail.com>
Subject: Re: [SR-Users] Problems with Mar portion of registration
[IMS]
To: "Kamailio (SER) - Users Mailing List"
<sr-users(a)lists.sip-router.org> <sr-users(a)lists.sip-router.org>
Message-ID: <5142D14D.7080808(a)gmail.com> <5142D14D.7080808(a)gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hello,
I haven't played with IMS modules, but you said is causing scscf to die
-- is that a kamailio instance? What means 'to die' -- does it crash? If
yes, can you get the syslog messages and the gdb backtrace?
Cheers,
Daniel
============================================
*Response:*
============================================
It appears any way we force the scscf to process a mar causes a crash.
Core was generated by `/usr/sbin/kamailio -P /var/run/kamailio.pid -m 64
-M 4 -u kamailio -g kamailio'.
Program terminated with signal 11, Segmentation fault.
#0 async_cdp_callback (is_timeout=<value optimized out>,
param=0x7f641b158e70, maa=0x7f641b159040,
elapsed_msecs=<value optimized out>) at cxdx_mar.c:414
414 start_reg_await_timer(avlist[0]); //start the timer to remove
stale or unused Auth Vectors
Missing separate debuginfos, use: debuginfo-install
glibc-2.12-1.107.el6.x86_64 libxml2-2.7.6-8.el6_3.4.x86_64
nss-pam-ldapd-0.7.5-18.el6.x86_64 pcre-7.8-6.el6.x86_64
zlib-1.2.3-29.el6.x86_64
(gdb)
syslog:
7(2211) DEBUG: tm [t_lookup.c:1657]: DEBUG: t_lookup_ident: transaction
found
7(2211) INFO: ims_auth [cxdx_avp.c:139]:
cxdx_get_experimental_result_code: Failed finding avp
7(2211) INFO: ims_auth [cxdx_avp.c:139]: cxdx_get_sip_number_auth_items:
Failed finding avp
7(2211) DEBUG: <core> [msg_translator.c:206]:
check_via_address(10.12.92.191, 10.12.92.191, 0)
7(2211) DEBUG: <core> [mem/shm_mem.c:111]: WARNING:vqm_resize: resize(0)
called
7(2211) DEBUG: tm [t_reply.c:1547]: DEBUG: cleanup_uac_timers: RETR/FR
timers reset
7(2211) DEBUG: tm [t_reply.c:706]: DEBUG: reply sent out.
buf=0x7f64e586b950: SIP/2.0 403 Forbidde..., shmem=0x7f64de66c1b0: SIP/2.0
403 Forbidde
7(2211) DEBUG: tm [t_reply.c:716]: DEBUG: _reply_light: finished
0(2204) DEBUG: <core> [parser/msg_parser.c:623]: SIP Request:
0(2204) DEBUG: <core> [parser/msg_parser.c:625]: method: <REGISTER>
0(2204) DEBUG: <core> [parser/msg_parser.c:627]: uri: <sip:
scscf.somecompany.com:6060>
0(2204) DEBUG: <core> [parser/msg_parser.c:629]: version: <SIP/2.0>
0(2204) DEBUG: <core> [parser/msg_parser.c:170]: get_hdr_field: cseq
<CSeq>: <5> <REGISTER>
0(2204) DEBUG: <core> [parser/parse_to.c:799]: end of header reached,
state=10
0(2204) DEBUG: <core> [parser/msg_parser.c:190]: DEBUG: get_hdr_field:
<To> [34]; uri=[sip:bob@somecompany.com]
0(2204) DEBUG: <core> [parser/msg_parser.c:192]: DEBUG: to body ["bob"
<sip:bob@somecompany.com> <sip:bob@somecompany.com>
]
0(2204) DEBUG: <core> [parser/parse_via.c:1284]: Found param type 232,
<branch> = <z9hG4bK1bd1.929b9c33.1>; state=16
0(2204) DEBUG: <core> [parser/parse_via.c:2672]: end of header reached,
state=5
0(2204) DEBUG: <core> [parser/msg_parser.c:513]: parse_headers: Via
found, flags=2
0(2204) DEBUG: <core> [parser/msg_parser.c:515]: parse_headers: this is
the first via
0(2204) DEBUG: <core> [receive.c:149]: After parse_msg...
0(2204) DEBUG: <core> [receive.c:190]: preparing to run routing scripts...
0(2204) DEBUG: maxfwd [mf_funcs.c:85]: value = 15
0(2204) DEBUG: <core> [parser/parse_via.c:1284]: Found param type 232,
<branch> = <z9hG4bK1bd1.a11580a2575452ad784ca00f869952fb.0>; state=16
0(2204) DEBUG: <core> [parser/parse_via.c:2672]: end of header reached,
state=5
0(2204) DEBUG: <core> [parser/msg_parser.c:513]: parse_headers: Via
found, flags=1000
0(2204) DEBUG: <core> [parser/msg_parser.c:526]: parse_headers: this is
the second via
0(2204) DEBUG: <core> [parser/parse_via.c:1284]: Found param type 232,
<branch> = <z9hG4bK-333530-035cb8a7773aa017e8e89aa8db3c4f01>; state=16
0(2204) DEBUG: <core> [parser/parse_via.c:2672]: end of header reached,
state=5
0(2204) DEBUG: <core> [parser/msg_parser.c:513]: parse_headers: Via
found, flags=1000
0(2204) DEBUG: <core> [parser/msg_parser.c:204]: DEBUG: get_hdr_body :
content_length=0
0(2204) DEBUG: <core> [parser/msg_parser.c:106]: found end of header
0(2204) DEBUG: <core> [parser/parse_to.c:176]: DEBUG: add_param:
tag=1f9be4d3
0(2204) DEBUG: <core> [parser/parse_to.c:799]: end of header reached,
state=29
0(2204) DEBUG: sanity [mod_sanity.c:255]: sanity checks result: 1
0(2204) DEBUG: siputils [checks.c:103]: no totag
0(2204) DEBUG: <core> [select.c:425]: Calling SELECT 0x7f64e5839ea0
0(2204) DEBUG: tm [t_lookup.c:1095]: DEBUG: t_check_msg: msg id=5 global
id=4 T start=0xffffffffffffffff
0(2204) DEBUG: tm [t_lookup.c:534]: t_lookup_request: start searching:
hash=7601, isACK=0
0(2204) DEBUG: tm [t_lookup.c:492]: DEBUG: RFC3261 transaction matching
failed
0(2204) DEBUG: tm [t_lookup.c:716]: DEBUG: t_lookup_request: no
transaction found
0(2204) DEBUG: tm [t_lookup.c:1164]: DEBUG: t_check_msg: msg id=5 global
id=5 T end=(nil
0(2204) ERROR: <script>: Enter register block 0(2204) DEBUG: tm
[t_lookup.c:1395]: DEBUG: t_newtran: msg id=5 , global msg id=5 , T on
entrance=(nil)
0(2204) DEBUG: tm [t_lookup.c:534]: t_lookup_request: start searching:
hash=7601, isACK=0
0(2204) DEBUG: tm [t_lookup.c:492]: DEBUG: RFC3261 transaction matching
failed
0(2204) DEBUG: tm [t_lookup.c:716]: DEBUG: t_lookup_request: no
transaction found
0(2204) DEBUG: tm [t_hooks.c:374]: DBG: trans=0x7f64de66c4d0, callback
type 1, id 0 entered
0(2204) DEBUG: ims_auth [authorize.c:567]: Checking if REGISTER is
authorized for realm [somecompany.com]...
0(2204) DEBUG: ims_auth [authorize.c:597]: Nonce or response missing:
nonce len [1910316154], response16 len[-440163170]
0(2204) INFO: ims_auth [cxdx_mar.c:81]: created AVP successfully :
[maa_return_code] - [-2]
0(2204) DEBUG: ims_auth [authorize.c:298]: Need to challenge for realm [
somecompany.com]
0(2204) DEBUG: ims_auth [authorize.c:305]: Checking if REGISTER is
authorized for realm [somecompany.com]...
0(2204) DEBUG: ims_auth [authorize.c:435]: Suspending SIP TM transaction
0(2204) DEBUG: ims_auth [authorize.c:1271]: Sending MAR
0(2204) DEBUG: cdp [session.c:276]: adding a session with id
scscf.somecompany.com;1782936534;5
0(2204) DEBUG: cdp [routing.c:80]: get_first_connected_route in list
0x7f64de63dbc0 for app_id 16777216 and vendor_id 10415
0(2204) DEBUG: cdp [routing.c:88]: The peer hss.somecompany.com state is
opened
0(2204) DEBUG: cdp [routing.c:63]: Checking if peer hss.somecompany.comhandles
application 16777216 for vendord 10415
0(2204) DEBUG: cdp [routing.c:90]: The peer hss.somecompany.com matches
- will forward there
0(2204) DEBUG: cdp [peerstatemachine.c:91]: sm_process(): Peer
hss.somecompany.com State I_Open Event Send_Message
0(2204) DEBUG: cdp [peerstatemachine.c:1096]: Snd_Message called to peer [
hss.somecompany.com] for request with code 303
0(2204) DEBUG: cdp [session.c:297]: called get session with id
scscf.somecompany.com;1782936534;5 and hash 111
0(2204) DEBUG: cdp [session.c:306]: no session found
0(2204) DEBUG: cdp [diameter_msg.c:83]: AAABuildMsgBuffer(): len=348
0(2204) DEBUG: cdp [receiver.c:967]: peer_send_msg(): Pipe push
[0x7f64de66edd0]
0(2204) DEBUG: ims_auth [cxdx_mar.c:516]: Successfully sent async diameter
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [usr_avp.c:644]: DEBUG:destroy_avp_list: destroying
list (nil)
0(2204) DEBUG: <core> [xavp.c:447]: destroying xavp list (nil)
0(2204) DEBUG: <core> [receive.c:293]: receive_msg: cleaning up
10(2214) DEBUG: cdp [receiver.c:743]: select_recv(): There is something on
the send pipe
10(2214) DEBUG: cdp [receiver.c:756]: select_recv(): Send pipe says
[0x7f64de66edd0] 8
10(2214) DEBUG: cdp [diameter_msg.c:412]: AAAFreeMessage: Freeing message
(0x7f64de66edd0) 303
10(2214) DEBUG: cdp [receiver.c:104]: --- Receiver [cdp_receiver_peer=
hss.somecompany.com] Serviced Peers: ---
10(2214) DEBUG: cdp [receiver.c:110]: Peer: [hss.somecompany.com] TCP
Socket: [15] Recv.State: [0]
10(2214) DEBUG: cdp [receiver.c:112]:
--------------------------------------------------------
10(2214) DEBUG: cdp [receiver.c:104]: --- Receiver [cdp_receiver_peer=
hss.somecompany.com] Serviced Peers: ---
10(2214) DEBUG: cdp [receiver.c:110]: Peer: [hss.somecompany.com] TCP
Socket: [15] Recv.State: [1]
10(2214) DEBUG: cdp [receiver.c:112]:
--------------------------------------------------------
10(2214) DEBUG: cdp [receiver.c:567]: receive_loop(): [hss.somecompany.com]
Recv Version 1 Length 172
10(2214) DEBUG: cdp [receiver.c:104]: --- Receiver [cdp_receiver_peer=
hss.somecompany.com] Serviced Peers: ---
10(2214) DEBUG: cdp [receiver.c:110]: Peer: [hss.somecompany.com] TCP
Socket: [15] Recv.State: [2]
10(2214) DEBUG: cdp [receiver.c:112]:
--------------------------------------------------------
10(2214) DEBUG: cdp [receiver.c:1061]: receive_message(): [
hss.somecompany.com] Recv msg 303
10(2214) DEBUG: cdp [peerstatemachine.c:91]: sm_process(): Peer
hss.somecompany.com State I_Open Event I_Rcv_Message
10(2214) DEBUG: cdp [session.c:297]: called get session with id
scscf.somecompany.com;1782936534;5 and hash 111
10(2214) DEBUG: cdp [session.c:306]: no session found
10(2214) DEBUG: cdp [receiver.c:104]: --- Receiver [cdp_receiver_peer=
hss.somecompany.com] Serviced Peers: ---
10(2214) DEBUG: cdp [receiver.c:110]: Peer: [hss.somecompany.com] TCP
Socket: [15] Recv.State: [0]
10(2214) DEBUG: cdp [receiver.c:112]:
--------------------------------------------------------
0(2204) ALERT: <core> [main.c:788]: child process 2212 exited by a signal
11
0(2204) ALERT: <core> [main.c:791]: core was generated
0(2204) INFO: <core> [main.c:800]: INFO: dont_fork turned on, living on
0(2204) ALERT: <core> [main.c:788]: child process 2211 exited by a signal
11
0(2204) ALERT: <core> [main.c:791]: core was generated
0(2204) INFO: <core> [main.c:800]: INFO: dont_fork turned on, living on
This is the modified register block to get a 401 unauthorized to even be
generated (probably broken)….
route[REGISTER] {
xlog("L_ERR", "Enter register block");
t_newtran();
if (!ims_www_authenticate(NETWORKNAME)) {
ims_www_challenge("$td");
exit;
}
if ($avp(maa_return_code) != 1 ) {
if (!impu_registered("location")) {
save("location");
if ($avp(saa_return_code) == 1) {
isc_match_filter_reg("0","location");
exit;
}
} else {
save("location");
if($avp(saa_return_code) == 1) {
isc_match_filter_reg("1","location");
exit;
}
}
}
}
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
--
Jason Penton
Senior Manager: Applications and Services
Smile Communications
Johannesburg, South Africa
Phone: +27 83 283 7000
This email is subject to the disclaimer of Smile Communications (PTY) Ltd. at
http://www.smilecoms.com/disclaimer