No subject


Thu Jan 29 11:41:19 CET 2009


                xlog ("REGISTER $fu");
                # authenticate the REGISTER requests (uncomment to enable
auth)
                if (!www_authorize("", "subscriber"))
                {
                        xlog ("Not authorized - challenging, error:
$retcode");
                        www_challenge("", "1");
                        exit;
                }

Then in the log:

Apr  2 13:49:38 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:49:38 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: Not
authorized - challenging, error: 4294967293
Apr  2 13:49:38 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:49:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:50:18 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:50:18 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: Not
authorized - challenging, error: 4294967292
Apr  2 13:50:18 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:50:38 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:50:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>
Apr  2 13:50:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: Not
authorized - challenging, error: 4294967292
Apr  2 13:50:58 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER
sip:1001 at vidtel.com <sip%3A1001 at vidtel.com>

Also I'm running 1.6.2-tls compiled today from latest 1_6 branch in SVN.

-dg


On Fri, Apr 2, 2010 at 1:40 PM, Daniel Goepp <dan at goepp.net> wrote:

> I'm having some trouble with nonce expiring I believe.  The problem is that
> every other one of my endpoint registrations is doing an auth challenge
> w/401.
>
> From my config:
> modparam("registrar", "default_expires", 60)
> modparam("registrar", "min_expires", 60)
> modparam("registrar", "max_expires", 60
>
> modparam("auth", "nonce_expire", 3600)
>
> From this I would expect the devices to try to register every 60 seconds,
> and get challenged every hour with a new nonce.
>
> Comments on why OpenSIPS is challenging every other registration?
>
> Thanks
>
> -dg
>

--001636e0b1baad15220483472098
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

A quick follow up on this, I enabled some logging, but the retcode is not m=
aking any sense to me (probably because I&#39;m using it wrong).=A0 <br><br=
>From my config:<br><br>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 xlog =
(&quot;REGISTER $fu&quot;);<br>
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 # authenticate the REGISTER r=
equests (uncomment to enable auth)<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0 if (!www_authorize(&quot;&quot;, &quot;subscriber&quot;))<br>=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 {<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 xlog (&quot;Not authorized - cha=
llenging, error: $retcode&quot;);<br>
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 www_c=
hallenge(&quot;&quot;, &quot;1&quot;);<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 exit;<br>=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0 }<br><br>Then in the log:<br><br>Apr=A0 2 13:49:38 ip-10=
-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER <a href=3D"mailto:sip%=
3A1001 at vidtel.com">sip:1001 at vidtel.com</a><br>
Apr=A0 2 13:49:38 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: Not auth=
orized - challenging, error: 4294967293<br>Apr=A0 2 13:49:38 ip-10-160-23-4=
7 /usr/local/sbin/opensips[30182]: REGISTER <a href=3D"mailto:sip%3A1001 at vi=
dtel.com">sip:1001 at vidtel.com</a><br>
Apr=A0 2 13:49:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER=
 <a href=3D"mailto:sip%3A1001 at vidtel.com">sip:1001 at vidtel.com</a><br>Apr=A0=
 2 13:50:18 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER <a hr=
ef=3D"mailto:sip%3A1001 at vidtel.com">sip:1001 at vidtel.com</a><br>
Apr=A0 2 13:50:18 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: Not auth=
orized - challenging, error: 4294967292<br>Apr=A0 2 13:50:18 ip-10-160-23-4=
7 /usr/local/sbin/opensips[30180]: REGISTER <a href=3D"mailto:sip%3A1001 at vi=
dtel.com">sip:1001 at vidtel.com</a><br>
Apr=A0 2 13:50:38 ip-10-160-23-47 /usr/local/sbin/opensips[30182]: REGISTER=
 <a href=3D"mailto:sip%3A1001 at vidtel.com">sip:1001 at vidtel.com</a><br>Apr=A0=
 2 13:50:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: REGISTER <a hr=
ef=3D"mailto:sip%3A1001 at vidtel.com">sip:1001 at vidtel.com</a><br>
Apr=A0 2 13:50:58 ip-10-160-23-47 /usr/local/sbin/opensips[30180]: Not auth=
orized - challenging, error: 4294967292<br>Apr=A0 2 13:50:58 ip-10-160-23-4=
7 /usr/local/sbin/opensips[30182]: REGISTER <a href=3D"mailto:sip%3A1001 at vi=
dtel.com">sip:1001 at vidtel.com</a><br>
<br>Also I&#39;m running 1.6.2-tls compiled today from latest 1_6 branch in=
 SVN.<br><br>-dg<br>
<br><br><div class=3D"gmail_quote">On Fri, Apr 2, 2010 at 1:40 PM, Daniel G=
oepp <span dir=3D"ltr">&lt;<a href=3D"mailto:dan at goepp.net">dan at goepp.net</=
a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin: =
0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left:=
 1ex;">
I&#39;m having some trouble with nonce expiring I believe.=A0 The problem i=
s that every other one of my endpoint registrations is doing an auth challe=
nge w/401.<br><br>From my config:<br>modparam(&quot;registrar&quot;, &quot;=
default_expires&quot;, 60)<br>

modparam(&quot;registrar&quot;, &quot;min_expires&quot;, 60)<br>modparam(&q=
uot;registrar&quot;, &quot;max_expires&quot;, 60<br><br>modparam(&quot;auth=
&quot;, &quot;nonce_expire&quot;, 3600)<br><br>From this I would expect the=
 devices to try to register every 60 seconds, and get challenged every hour=
 with a new nonce.<br>

<br>Comments on why OpenSIPS is challenging every other registration?<br><b=
r>Thanks<br><font color=3D"#888888"><br>-dg<br>
</font></blockquote></div><br>

--001636e0b1baad15220483472098--



More information about the Users mailing list