Hi Tulay!
For REGISTER requests, you should immediately reply with 100 Trying to
avoid retransmissions of REGISTER requests.
sl_send_reply("100","Stop retransmission");
The second thing is to find out why the authentication takes that much
time. If the username/password is wrong, the Radius server should reply
with Authentication-Reject, thus the sip proxy should reply with
401/403. This should not need more time then the reply for a successful
authentication.
I suggest using "ngrep -t port 5060 or port 1812" to watch the whole
authentication signaling. Analyze were the delay occours and dig into
the problem.
klaus
tulay sazak wrote:
Hello everybody,
I am using SER 0.9.3 and freeRADIUS 1.0.4 with digest authentication.
I am having problems when users with invalid credentials (wrong username
or password) try to register to SER. The same thing happens when I
insert some records to usergroup table as Reject type in Radius DB. SER
is becoming unfunctional in this case in our system. It cannot perform
registration and cannot make call for even valid subscribers.
SIP clients with invalid credentials try to register and send REGISTER
messages continuously. A SIP client sends 20 request/min and there are
7-8 clients available at the moment. i.e. it is not a big traffic. But
every client is tried to be authenticated using digest during
registration and at the beginning of the call.
In such a case, SER slows down very much. Retransmissions starts and SER
becomes unfunctional.
Did anyone experienced this problem?
D o you have any idea why does it happens?
Thanks in advance..
Regards,
Tulay Sazak
NGN, Borusan Telekom
------------------------------------------------------------------------
Yahoo! DSL
<http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=37474/*http://promo.yahoo.com/broadband/
Something to write home about. Just $16.99/mo. or
less
------------------------------------------------------------------------
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers