RE: [Serusers] extra things confusing auth_radius?

I did debug the radius server and it doesn't even get a hit from SER when this happens. The phones can register with radius just fine too, but just not make calls. They can receive calls. It looks like I am getting the same error as the other guy who just emailed the list. Re: pre_auth(): Credentials with given realm not found. Aug 31 08:40:57 laplata ser[26185]: SIP Request: Aug 31 08:40:57 laplata ser[26185]: method: <INVITE> Aug 31 08:40:57 laplata ser[26185]: uri: <sip:311@voip.fasttrackcomm.net;user=phone> Aug 31 08:40:57 laplata ser[26185]: version: <SIP/2.0> Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1 Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> = <z9hG4bK7faba9a88AEB41B5>; state=16 Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5 Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1 Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via Aug 31 08:40:57 laplata ser[26185]: After parse_msg... Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts... Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128 Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9 Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45]; uri=[sip:311@voip.fasttrackcomm.net;user=phone] ] 31 08:40:57 laplata ser[26185]: DEBUG: to body [<sip:311@voip.fasttrackcomm.net;user=phone> Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1> <INVITE> Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present: value = 70 Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header: value 70 decreased to 16 Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param: tag=7B99ABF2-4A7C3F1 Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29 Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256 Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body : content_length=251 Aug 31 08:40:57 laplata ser[26185]: found end of header Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers found Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm 'voip.fasttrackcomm.net' is local Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096 Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given realm not found Aug 31 08:40:57 laplata ser[26185]: build_auth_hf(): 'WWW-Authenticate: Digest realm="voip.fasttrackcomm.net", nonce="44f6f625418a8 ' f0398a4c9e73850fef979dbf" Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1 Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194, 192.168.1.195, 0) Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying list (nil) Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up Natambu Obleton Network Engineer FastTrack Communications nobleton(a)fasttrackcomm.net (970) 247-3366 office (970) 247-2426 fax _____ From: Greger V. Teigre [mailto:greger@teigre.com] Sent: Wednesday, August 30, 2006 11:57 PM To: Natambu Obleton Cc: serusers(a)lists.iptel.org Subject: Re: [Serusers] extra things confusing auth_radius? user=phone does not have anything to do with it. I think I remember polycom being a bit ticklish when it comes to settings. Something about a non-intuitive name on a setting related to domain? You see, the calculation in the digest algorithm is based on both sides using the same data... I don't have the polycom setup here, sorry. Take a look at the authorization header in the challenge and reply. If you debug your radius server, you will probably see wrong password (i.e. wrong digest). g-) Natambu Obleton wrote: Ok. I have two clients setup. One is X-Lite and the other is a polycom 601. I am doing radius authentication, but for some reason it doesn't work with the polycom 601 phone. In the debug the only thing that is different about them is something in the uri. Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72]; uri=[sip:311@voip.fasttrackcomm.net] Works, but.. Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45]; uri=[sip:311@voip.fasttrackcomm.net;user=phone] <mailto:%5bsip:311@voip.fasttrackcomm.net;user=phone%5d> Doesn't. Like it doesn't even send an authentication request to my radius server. I think it is the ';user=phone' part that is confusing it? So what I want to do is remove that part from the URI as a test. I just added a subst to remove it, but still isn't working with radius. It acts like the realm is no longer local. Here is my config file: http://www.natambu.com/serconf.html Natambu Obleton Network Engineer FastTrack Communications nobleton(a)fasttrackcomm.net (970) 247-3366 office (970) 247-2426 fax _____ _______________________________________________ Serusers mailing list Serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers