30 Aug
2006
30 Aug
'06
8:51 p.m.
Ok. I have two clients setup. One is X-Lite and the other is a polycom 601.
I am doing radius authentication, but for some reason it doesn't work with
the polycom 601 phone. In the debug the only thing that is different about
them is something in the uri.
Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
uri=[sip:311@voip.fasttrackcomm.net]
Works, but..
Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
<mailto:%5bsip:311@voip.fasttrackcomm.net;user=phone%5d>
Doesn't. Like it doesn't even send an authentication request to my radius
server. I think it is the ';user=phone' part that is confusing it? So what I
want to do is remove that part from the URI as a test. I just added a subst
to remove it, but still isn't working with radius. It acts like the realm is
no longer local.
Here is my config file:
http://www.natambu.com/serconf.html
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net
(970) 247-3366 office
(970) 247-2426 fax
31 Aug
31 Aug
8:57 a.m.
user=phone does not have anything to do with it. I think I remember
polycom being a bit ticklish when it comes to settings. Something about
a non-intuitive name on a setting related to domain? You see, the
calculation in the digest algorithm is based on both sides using the
same data... I don't have the polycom setup here, sorry. Take a look at
the authorization header in the challenge and reply.
If you debug your radius server, you will probably see wrong password
(i.e. wrong digest).
g-)
Natambu Obleton wrote:
Ok. I have two clients setup. One is X-Lite and the other is a polycom
601. I am doing radius authentication, but for some reason it doesn't
work with the polycom 601 phone. In the debug the only thing that is
different about them is something in the uri.
Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
uri=[sip:311@voip.fasttrackcomm.net]
Works, but..
Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
<mailto:%5bsip:311@voip.fasttrackcomm.net;user=phone%5d>
Doesn't. Like it doesn't even send an authentication request to my
radius server. I think it is the ';user=phone' part that is confusing
it? So what I want to do is remove that part from the URI as a test. I
just added a subst to remove it, but still isn't working with radius.
It acts like the realm is no longer local.
Here is my config file:
http://www.natambu.com/serconf.html
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net <mailto:nobleton@fasttrackcomm.net>
(970) 247-3366 office
(970) 247-2426 fax
------------------------------------------------------------------------
_______________________________________________
Serusers mailing list
Serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
6:40 p.m.
I did debug the radius server and it doesn't even get a hit from SER when
this happens. The phones can register with radius just fine too, but just
not make calls. They can receive calls.
It looks like I am getting the same error as the other guy who just emailed
the list.
Re: pre_auth(): Credentials with given realm not found.
Aug 31 08:40:57 laplata ser[26185]: SIP Request:
Aug 31 08:40:57 laplata ser[26185]: method: <INVITE>
Aug 31 08:40:57 laplata ser[26185]: uri:
<sip:311@voip.fasttrackcomm.net;user=phone>
Aug 31 08:40:57 laplata ser[26185]: version: <SIP/2.0>
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1
Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> =
<z9hG4bK7faba9a88AEB41B5>; state=16
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5
Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1
Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via
Aug 31 08:40:57 laplata ser[26185]: After parse_msg...
Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts...
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9
Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
] 31 08:40:57 laplata ser[26185]: DEBUG: to body
[<sip:311@voip.fasttrackcomm.net;user=phone>
Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1>
<INVITE>
Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present: value =
70
Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header: value
70 decreased to 16
Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param: tag=7B99ABF2-4A7C3F1
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256
Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body : content_length=251
Aug 31 08:40:57 laplata ser[26185]: found end of header
Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers found
Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF
Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm
'voip.fasttrackcomm.net' is local
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096
Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given realm
not found
Aug 31 08:40:57 laplata ser[26185]: build_auth_hf(): 'WWW-Authenticate:
Digest realm="voip.fasttrackcomm.net", nonce="44f6f625418a8 '
f0398a4c9e73850fef979dbf"
Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1
Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194,
192.168.1.195, 0)
Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying list
(nil)
Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net
(970) 247-3366 office
(970) 247-2426 fax
_____
From: Greger V. Teigre [mailto:greger@teigre.com]
Sent: Wednesday, August 30, 2006 11:57 PM
To: Natambu Obleton
Cc: serusers(a)lists.iptel.org
Subject: Re: [Serusers] extra things confusing auth_radius?
user=phone does not have anything to do with it. I think I remember polycom
being a bit ticklish when it comes to settings. Something about a
non-intuitive name on a setting related to domain? You see, the calculation
in the digest algorithm is based on both sides using the same data... I
don't have the polycom setup here, sorry. Take a look at the authorization
header in the challenge and reply.
If you debug your radius server, you will probably see wrong password (i.e.
wrong digest).
g-)
Natambu Obleton wrote:
Ok. I have two clients setup. One is X-Lite and the other is a polycom 601.
I am doing radius authentication, but for some reason it doesn't work with
the polycom 601 phone. In the debug the only thing that is different about
them is something in the uri.
Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
uri=[sip:311@voip.fasttrackcomm.net]
Works, but..
Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
<mailto:%5bsip:311@voip.fasttrackcomm.net;user=phone%5d>
Doesn't. Like it doesn't even send an authentication request to my radius
server. I think it is the ';user=phone' part that is confusing it? So what I
want to do is remove that part from the URI as a test. I just added a subst
to remove it, but still isn't working with radius. It acts like the realm is
no longer local.
Here is my config file:
http://www.natambu.com/serconf.html
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net
(970) 247-3366 office
(970) 247-2426 fax
_____
_______________________________________________
Serusers mailing list
Serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
1 Sep
1 Sep
10:42 a.m.
I saw in another post that you had solved it with fix_nated_contact. Good!
g-)
Natambu Obleton wrote:
I did debug the radius server and it doesn't even get a hit from SER
when this happens. The phones can register with radius just fine too,
but just not make calls. They can receive calls.
It looks like I am getting the same error as the other guy who just
emailed the list...
Re: pre_auth(): Credentials with given realm not found.
Aug 31 08:40:57 laplata ser[26185]: SIP Request:
Aug 31 08:40:57 laplata ser[26185]: method: <INVITE>
Aug 31 08:40:57 laplata ser[26185]: uri:
<sip:311@voip.fasttrackcomm.net;user=phone>
Aug 31 08:40:57 laplata ser[26185]: version: <SIP/2.0>
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1
Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> =
<z9hG4bK7faba9a88AEB41B5>; state=16
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5
Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1
Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via
Aug 31 08:40:57 laplata ser[26185]: After parse_msg...
Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts...
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9
Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
] 31 08:40:57 laplata ser[26185]: DEBUG: to body
[<sip:311@voip.fasttrackcomm.net;user=phone>
Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1>
<INVITE>
Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present:
value = 70
Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header:
value 70 decreased to 16
Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param:
tag=7B99ABF2-4A7C3F1
Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256
Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body :
content_length=251
Aug 31 08:40:57 laplata ser[26185]: found end of header
Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers
found
Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF
Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm
'voip.fasttrackcomm.net' is local
Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096
Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given
realm not found
Aug 31 08:40:57 laplata ser[26185]: build_auth_hf():
'WWW-Authenticate: Digest realm="voip.fasttrackcomm.net",
nonce="44f6f625418a8 ' f0398a4c9e73850fef979dbf"
Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1
Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194,
192.168.1.195, 0)
Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying
list (nil)
Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net <mailto:nobleton@fasttrackcomm.net>
(970) 247-3366 office
(970) 247-2426 fax
------------------------------------------------------------------------
*From:* Greger V. Teigre [mailto:greger@teigre.com]
*Sent:* Wednesday, August 30, 2006 11:57 PM
*To:* Natambu Obleton
*Cc:* serusers(a)lists.iptel.org
*Subject:* Re: [Serusers] extra things confusing auth_radius?
user=phone does not have anything to do with it. I think I remember
polycom being a bit ticklish when it comes to settings. Something
about a non-intuitive name on a setting related to domain? You see,
the calculation in the digest algorithm is based on both sides using
the same data... I don't have the polycom setup here, sorry. Take a
look at the authorization header in the challenge and reply.
If you debug your radius server, you will probably see wrong password
(i.e. wrong digest).
g-)
Natambu Obleton wrote:
Ok. I have two clients setup. One is X-Lite and the other is a polycom
601. I am doing radius authentication, but for some reason it doesn't
work with the polycom 601 phone. In the debug the only thing that is
different about them is something in the uri.
Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
uri=[sip:311@voip.fasttrackcomm.net
<mailto:sip:311@voip.fasttrackcomm.net>]
Works, but..
Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311@voip.fasttrackcomm.net;user=phone]
<mailto:%5bsip:311@voip.fasttrackcomm.net;user=phone%5d>
Doesn't. Like it doesn't even send an authentication request to my
radius server. I think it is the ';user=phone' part that is confusing
it? So what I want to do is remove that part from the URI as a test. I
just added a subst to remove it, but still isn't working with radius.
It acts like the realm is no longer local.
Here is my config file:
http://www.natambu.com/serconf.html
Natambu Obleton
Network Engineer
FastTrack Communications
nobleton(a)fasttrackcomm.net <mailto:nobleton@fasttrackcomm.net>
(970) 247-3366 office
(970) 247-2426 fax
------------------------------------------------------------------------
_______________________________________________
Serusers mailing list
Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org>
http://lists.iptel.org/mailman/listinfo/serusers
6657
days inactive
6659
days old
3 comments
2 participants
participants (2)
-
Greger V. Teigre -
Natambu Obleton