Hi all, I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:
AnalogPhone (GW) is the Transferee IP Phone1, registred to SER, is the Transferor IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060 INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. Route: sip:10.28.19.202;ftag=1c1272914830;lr=on. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Contact: sip:06XXXXXX14@10.28.19.124;user=phone. Supported: replaces. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. User-Agent: Grandstream BT110 1.0.8.12. Max-Forwards: 70. Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE. Content-Type: application/sdp. Content-Length: 206. . v=0. o=0660522014 8000 8001 IN IP4 10.28.19.124. s=SIP Call. c=IN IP4 0.0.0.0. t=0 0. m=audio 5004 RTP/AVP 8 18 0. a=sendonly. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=rtpmap:0 PCMU/8000. a=ptime:20.
# U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. Proxy-Authenticate: Digest realm="10.28.19.202", nonce="464c4fa95f251088d01666190944e53313bab22e". Server: Sip EXpress router (0.9.6 (i386/linux)). Content-Length: 0. Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940 req_src_ip=10.28.19.124 req_src_port=5060 in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230 via_cnt==1".
My question is: why SER reply with an authentication request to INVITE, if the Transferor party is a registred user? Have you any suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); }
Thanks for support,
Flavio
Looks like you have an auth request block in your INVITE block.
Do you?
flavio wrote:
Hi all, I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:
AnalogPhone (GW) is the Transferee IP Phone1, registred to SER, is the Transferor IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060 INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. Route: sip:10.28.19.202;ftag=1c1272914830;lr=on. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Contact: sip:06XXXXXX14@10.28.19.124;user=phone. Supported: replaces. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. User-Agent: Grandstream BT110 1.0.8.12. Max-Forwards: 70. Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE. Content-Type: application/sdp. Content-Length: 206. . v=0. o=0660522014 8000 8001 IN IP4 10.28.19.124. s=SIP Call. c=IN IP4 0.0.0.0. t=0 0. m=audio 5004 RTP/AVP 8 18 0. a=sendonly. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=rtpmap:0 PCMU/8000. a=ptime:20.
# U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. Proxy-Authenticate: Digest realm="10.28.19.202", nonce="464c4fa95f251088d01666190944e53313bab22e". Server: Sip EXpress router (0.9.6 (i386/linux)). Content-Length: 0. Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940 req_src_ip=10.28.19.124 req_src_port=5060 in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230 via_cnt==1".
My question is: why SER reply with an authentication request to INVITE, if the Transferor party is a registred user? Have you any suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); }
Thanks for support,
Flavio
Yes I do, accordig example in Getting Started (Chapter 7), in order to avoid my SER becomes an open relay. What do you think about?
Thanks, f.
2007/5/17, SIP sip@arcdiv.com:
Looks like you have an auth request block in your INVITE block.
Do you?
flavio wrote:
Hi all, I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:
AnalogPhone (GW) is the Transferee IP Phone1, registred to SER, is the Transferor IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060 INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. Route: sip:10.28.19.202;ftag=1c1272914830;lr=on. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Contact: sip:06XXXXXX14@10.28.19.124;user=phone. Supported: replaces. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. User-Agent: Grandstream BT110 1.0.8.12. Max-Forwards: 70. Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE. Content-Type: application/sdp. Content-Length: 206. . v=0. o=0660522014 8000 8001 IN IP4 10.28.19.124. s=SIP Call. c=IN IP4 0.0.0.0. t=0 0. m=audio 5004 RTP/AVP 8 18 0. a=sendonly. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=rtpmap:0 PCMU/8000. a=ptime:20.
# U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. Proxy-Authenticate: Digest realm="10.28.19.202", nonce="464c4fa95f251088d01666190944e53313bab22e". Server: Sip EXpress router (0.9.6 (i386/linux)). Content-Length: 0. Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940 req_src_ip=10.28.19.124 req_src_port=5060 in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230 via_cnt==1".
My question is: why SER reply with an authentication request to INVITE, if the Transferor party is a registred user? Have you any suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); }
Thanks for support,
Flavio
Well... if you have an authentication requirement in your INVITE block, then you're going to get authentication requests as a response to an INVITE.
If you understand this, then, well... then I'm just not sure I understand your question.
N.
flavio wrote:
Yes I do, accordig example in Getting Started (Chapter 7), in order to avoid my SER becomes an open relay. What do you think about?
Thanks, f.
2007/5/17, SIP sip@arcdiv.com:
Looks like you have an auth request block in your INVITE block.
Do you?
flavio wrote:
Hi all, I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:
AnalogPhone (GW) is the Transferee IP Phone1, registred to SER, is the Transferor IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060 INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. Route: sip:10.28.19.202;ftag=1c1272914830;lr=on. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Contact: sip:06XXXXXX14@10.28.19.124;user=phone. Supported: replaces. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. User-Agent: Grandstream BT110 1.0.8.12. Max-Forwards: 70. Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE. Content-Type: application/sdp. Content-Length: 206. . v=0. o=0660522014 8000 8001 IN IP4 10.28.19.124. s=SIP Call. c=IN IP4 0.0.0.0. t=0 0. m=audio 5004 RTP/AVP 8 18 0. a=sendonly. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=rtpmap:0 PCMU/8000. a=ptime:20.
# U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. Proxy-Authenticate: Digest realm="10.28.19.202", nonce="464c4fa95f251088d01666190944e53313bab22e". Server: Sip EXpress router (0.9.6 (i386/linux)). Content-Length: 0. Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940 req_src_ip=10.28.19.124 req_src_port=5060 in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230 via_cnt==1".
My question is: why SER reply with an authentication request to INVITE, if the Transferor party is a registred user? Have you any suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); }
Thanks for support,
Flavio
In pratice, proxy_authorize function ALWAYS requires INVITE message to have digest credentials included.
If they lack, proxy_authorize does not check from user into subcriber table, but sends 407 Authentication Request message: is correct so?
txs, f.
2007/5/17, SIP sip@arcdiv.com:
Well... if you have an authentication requirement in your INVITE block, then you're going to get authentication requests as a response to an INVITE.
If you understand this, then, well... then I'm just not sure I understand your question.
N.
flavio wrote:
Yes I do, accordig example in Getting Started (Chapter 7), in order to avoid my SER becomes an open relay. What do you think about?
Thanks, f.
2007/5/17, SIP sip@arcdiv.com:
Looks like you have an auth request block in your INVITE block.
Do you?
flavio wrote:
Hi all, I'm testing Blind Trasfer with my IP Phones, SER and GW, in this scenario:
AnalogPhone (GW) is the Transferee IP Phone1, registred to SER, is the Transferor IP Phone 2, registred to SER, is the Transfer Target
When the Transferor send INVITE to put on hold the Trasferee, SER reply with 407 Proxy Authentication Requrire, as follow reported:
2007/05/17 12:45:49.370808 10.28.19.124:5060 -> 10.28.19.202:5060 INVITE sip:06XXXXXX15@10.28.19.230 SIP/2.0. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. Route: sip:10.28.19.202;ftag=1c1272914830;lr=on. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Contact: sip:06XXXXXX14@10.28.19.124;user=phone. Supported: replaces. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. User-Agent: Grandstream BT110 1.0.8.12. Max-Forwards: 70. Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE. Content-Type: application/sdp. Content-Length: 206. . v=0. o=0660522014 8000 8001 IN IP4 10.28.19.124. s=SIP Call. c=IN IP4 0.0.0.0. t=0 0. m=audio 5004 RTP/AVP 8 18 0. a=sendonly. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=rtpmap:0 PCMU/8000. a=ptime:20.
# U 2007/05/17 12:45:49.371204 10.28.19.202:5060 -> 10.28.19.124:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 10.28.19.124;branch=z9hG4bKc442076492fe9954. From: sip:06XXXXXX14@10.28.19.202;tag=9bb7a2279efa8707. To: sip:06XXXXXX15@10.28.19.230;tag=1c1272914830. Call-ID: 127291448221200023114@10.28.19.230. CSeq: 21593 INVITE. Proxy-Authenticate: Digest realm="10.28.19.202", nonce="464c4fa95f251088d01666190944e53313bab22e". Server: Sip EXpress router (0.9.6 (i386/linux)). Content-Length: 0. Warning: 392 10.28.19.202:5060 "Noisy feedback tells: pid=15940 req_src_ip=10.28.19.124 req_src_port=5060 in_uri=sip:0660522015@10.28.19.230 out_uri=sip:0660522015@10.28.19.230 via_cnt==1".
My question is: why SER reply with an authentication request to INVITE, if the Transferor party is a registred user? Have you any suggestion about?
I verify user subscribtion in my ser.cfg file as follow:
if (!allow_trusted()) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); }
Thanks for support,
Flavio
-
flavio -
SIP