[OpenSIPS-Users] b2b authentication
Jayesh Nambiar
jayesh.voip at gmail.com
Fri Jul 8 12:13:16 CEST 2011
Hi Ovidiu,
Thanks for your reply. I don't see any errors in the syslog after raising
the debug level to 5. They are mainly informational about bridging and
relaying. The loadmodules sections is pasted below:
loadmodule "db_mysql.so"
loadmodule "signaling.so"
loadmodule "sl.so"
loadmodule "tm.so"
loadmodule "rr.so"
loadmodule "maxfwd.so"
loadmodule "textops.so"
loadmodule "mi_fifo.so"
loadmodule "uac_auth.so"
loadmodule "b2b_entities.so"
loadmodule "b2b_logic.so"
loadmodule "uac.so"
loadmodule "uri.so"
relevant parameters are :
modparam("tm", "pass_provisional_replies", 1)
modparam("uac_auth", "credential", "1000146:203.XXX.XXX.189:ede788")
modparam("b2b_logic", "db_mode", 0)
modparam("b2b_logic", "script_scenario",
"/usr/local/opensips/etc/opensips/refer.xml")
modparam("b2b_logic", "b2bl_from_spec_param", "$avp(b2bl_from)")
modparam("b2b_entities", "db_mode", 0)
The relevant part in route block is:
$avp(b2bl_from) = "<sip:1000146 at 203.XXX.XXX.189>";
rewritehost("203.XXX.XXX.189");
b2b_init_request("refer");
exit;
Let me know if you have some more points that I should look at. I am using
revision 8135 which I beleive is the latest !!
Thanks,
--- Jayesh
> Do you see any errors in the logs?
> Can you raise the logs to DEBUG level and post the logs somewhere?
> Also, please post the loadmodule section of your config file.
>
> Regards,
> Ovidiu Sas
>
> On Thu, Jul 7, 2011 at 7:26 AM, Jayesh Nambiar <jayesh.voip at gmail.com>
> wrote:
> > Hi Ovidiu,
> > Thanks for the reply. I still dont get the expected behaviour, may be I
> am
> > missing something obvious. Below is the trace of my call:
> > 203.XXX.XXX.186 is the caller; 203.XXX.XXX.188 is the B2B Opensips and
> > 203.XXX.XXX.189 is the upstream proxy which asks for Proxy
> Authentication.
> > U 203.XXX.XXX.186:5035 -> 203.XXX.XXX.188:5060
> > INVITE sip:9212121212 at 203.XXX.XXX.188 SIP/2.0.
> > Via: SIP/2.0/UDP 203.XXX.XXX.186:5035;rport;branch=z9hG4bK105036.
> > From: <sip:1000146 at 203.XXX.XXX.186>;tag=57086.
> > To: <sip:9212121212 at 203.XXX.XXX.188>.
> > Call-ID: 554fd84d69db52b2aec859f2beb0ba30 at 203.XXX.XXX.186.
> > CSeq: 20 INVITE.
> > Contact: <sip:1000146 at 203.XXX.XXX.186:5035>.
> > Content-Type: application/sdp.
> > Max-Forwards: 70.
> > User-Agent: Novanet C2D.
> > Subject: click2call.
> > X-Src-IP: 203.153.53.222.
> > Content-Length: 180.
> > .
> > v=0.
> > o=click2dial 0 0 IN IP4 203.XXX.XXX.186.
> > s=click2dial call.
> > c=IN IP4 203.XXX.XXX.186.
> > t=0 0.
> > m=audio 8000 RTP/AVP 0 8 18 3 4 97 98.
> > a=rtpmap:0 PCMU/8000.
> > a=rtpmap:18 G729/8000.
> >
> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.189:5060
> > INVITE sip:9212121212 at 203.XXX.XXX.189 SIP/2.0.
> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
> > To: sip:9212121212 at 203.XXX.XXX.189.
> > From: <sip:1000146 at 203.XXX.XXX.189
> >;tag=3302461778a934c5cb938a0d66c7bfc5.
> > CSeq: 21 INVITE.
> > Call-ID: B2B.236.911335.
> > Content-Length: 180.
> > User-Agent: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
> > Content-Type: application/sdp.
> > Max-Forwards: 69.
> > Contact: <sip:203.XXX.XXX.188:5060>.
> > .
> > v=0.
> > o=click2dial 0 0 IN IP4 203.XXX.XXX.186.
> > s=click2dial call.
> > c=IN IP4 203.XXX.XXX.186.
> > t=0 0.
> > m=audio 8000 RTP/AVP 0 8 18 3 4 97 98.
> > a=rtpmap:0 PCMU/8000.
> > a=rtpmap:18 G729/8000.
> >
> > U 203.XXX.XXX.189:5060 -> 203.XXX.XXX.188:5060
> > SIP/2.0 407 Proxy Authentication Required.
> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
> > To:
> > sip:9212121212 at 203.XXX.XXX.189
> ;tag=7dbab1763f29ae55bdba397633ed7fa1.cc60.
> > From: <sip:1000146 at 203.XXX.XXX.189
> >;tag=3302461778a934c5cb938a0d66c7bfc5.
> > CSeq: 21 INVITE.
> > Call-ID: B2B.236.911335.
> > Proxy-Authenticate: Digest realm="203.XXX.XXX.189",
> > nonce="4e1592530000000af0fc7ee76e7c0844c564a2dcbaf21e00".
> > Server: SipTrunk 1.6.4.6.
> > Content-Length: 0.
> > .
> >
> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.189:5060
> > ACK sip:9212121212 at 203.XXX.XXX.189 SIP/2.0.
> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
> > From: <sip:1000146 at 203.XXX.XXX.189
> >;tag=3302461778a934c5cb938a0d66c7bfc5.
> > Call-ID: B2B.236.911335.
> > To:
> > sip:9212121212 at 203.XXX.XXX.189
> ;tag=7dbab1763f29ae55bdba397633ed7fa1.cc60.
> > CSeq: 21 ACK.
> > User-Agent: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
> > Content-Length: 0.
> > .
> >
> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.186:5035
> > SIP/2.0 407 Proxy Authentication Required.
> > Via: SIP/2.0/UDP 203.XXX.XXX.186:5035;rport=5035;branch=z9hG4bK105036.
> > From: <sip:1000146 at 203.XXX.XXX.186>;tag=57086.
> > To: <sip:9212121212 at 203.XXX.XXX.188>;tag=B2B.151.477.
> > Call-ID: 554fd84d69db52b2aec859f2beb0ba30 at 203.XXX.XXX.186.
> > CSeq: 20 INVITE.
> > Proxy-Authenticate: Digest realm="203.XXX.XXX.189",
> > nonce="4e1592530000000af0fc7ee76e7c0844c564a2dcbaf21e00".
> > Contact: <sip:203.XXX.XXX.188:5060>.
> > Server: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
> > Content-Length: 0.
> > My uac_auth is loaded before the b2b modules and the paramter in it is as
> > follows:
> > modparam("uac_auth", "credential", "1000146:203.XXX.XXX.189:ede488")
> > The realm sent in Proxy Authenticate is 203.XXX.XXX.189 only but still
> > 203.XXX.XXX.188 relays the 407 back to 203.XXX.XXX.186 :(
> > Any pointers to figure this out?
> > Thanks in advance !!
> > --- Jayesh
> >
> >>
> >> If ?no credentials are found, then the 407 is relayed back to the
> caller.
> >> Make sure that the realm in the challenge matches the realm in
> >> uac_auth credentials list.
> >> Also make sure that uac_auth is loaded before the b2b modules.
> >>
> >>
> >> Regards,
> >> Ovidiu Sas
> >>
> >> On Thu, Jul 7, 2011 at 5:34 AM, Jayesh Nambiar <jayesh.voip at gmail.com>
> >> wrote:
> >> > Hi,
> >> > I was referring to the email posted by Ovidiu
> >> > here?http://lists.opensips.org/pipermail/news/2011-June/000142.html.
> I
> >> > am
> >> > trying this but the b2b opensips does not reply back with credentials
> to
> >> > the
> >> > 407 response. It just proxies back the 407 to the call initiator. I
> have
> >> > downloaded the latest revision from the SVN. Am i missing something
> >> > here?
> >> > Just for information, I have loaded the refer scenario in the
> >> > b2b_init_request. The upstream proxy replies back with 407 Proxy
> >> > Authentication Required and I expected the client side of B2B to reply
> >> > back
> >> > with the credentials mentioned in the uac_auth parameter list.
> >> > Any help in regards to testing this will be very useful.
> >> > Thanks,
> >> > --- Jayesh
> >> > _______________________________________________
> >> > Users mailing list
> >> > Users at lists.opensips.org
> >> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >> >
> >> >
> >>
> >>
> >>
> >> ------------------------------
> >>
> >> _______________________________________________
> >> Users mailing list
> >> Users at lists.opensips.org
> >> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >>
> >>
> >> End of Users Digest, Vol 36, Issue 15
> >> *************************************
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >
> >
>
>
>
> ------------------------------
>
> Message: 2
> Date: Thu, 7 Jul 2011 08:54:23 -0500
> From: Duane Larson <duane.larson at gmail.com>
> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
> on subscribers client
> To: OpenSIPS users mailling list <users at lists.opensips.org>
> Message-ID:
> <CAFcM1EqHiooquxhSvF_=e0GRstBqajO9ummyb0UKZDjwnTXHhQ at mail.gmail.com
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> No. All that I see are the publish messages being sent from my proxy to my
> proxy. Nothing else is generated after that. My presence config is pretty
> basic for testing purposes
>
>
> route[Pres] {
> # absorb retransmissions
> if (! t_newtran())
> {
> xlog("L_INFO", "Presence: Call [$rm] Not newtran \n");
> sl_reply_error();
> exit;
> };
>
> if(is_method("NOTIFY"))
> {
> if (!t_relay()) {
> sl_reply_error();
> };
> exit;
> }
> #handle presence requests
> if(is_method("PUBLISH"))
> {
> handle_publish();
> }
> else if( is_method("SUBSCRIBE")) {
> handle_subscribe();
> };
> exit;
> }
>
>
>
> On Jul 7, 2011 1:11 AM, "Sa?l Ibarra Corretg?" <saul at ag-projects.com>
> wrote:
> > Hi,
> >
> > On Jul 6, 2011, at 11:07 PM, duane.larson at gmail.com wrote:
> >
> >> I have two users that are on each others buddy list. When I first set my
> picture for each account the other client received the update and shows the
> picture for the buddy. Yet when I change one of the buddy's pictures the
> other client doesn't see the update at all. I have to restart the client in
> order to see the new picture. Shouldn't the client get a notify that the
> picture has been changed?
> >>
> >> Here is what I see with a sip trace and in the logs for
> opensips-mi-proxy
>
> >>
> >
> > Does the client receive the corresponding NOTIFY?
> >
> > --
> > Sa?l Ibarra Corretg?
> > AG Projects
> >
> >
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.opensips.org/pipermail/users/attachments/20110707/0fe02447/attachment-0001.htm
> >
>
> ------------------------------
>
> Message: 3
> Date: Thu, 7 Jul 2011 17:01:26 +0200
> From: Sa?l Ibarra Corretg? <saul at ag-projects.com>
> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
> on subscribers client
> To: OpenSIPS users mailling list <users at lists.opensips.org>
> Message-ID: <3878AEB0-8662-4D28-830E-F01CF3A72BCD at ag-projects.com>
> Content-Type: text/plain; charset=iso-8859-1
>
> Hi,
>
> On Jul 7, 2011, at 3:54 PM, Duane Larson wrote:
>
> > No. All that I see are the publish messages being sent from my proxy to
> my proxy. Nothing else is generated after that. My presence config is
> pretty basic for testing purposes
> >
>
> That would be the problem. Your proxy knows that the picture changed, but
> it doesn't tell it to the endpoints. Have you enabled the presence_xcapdiff
> module? Your endpoints needs to subscribe to the xcap-diff event so that it
> gets notify requests with the changes.
>
> --
> Sa?l Ibarra Corretg?
> AG Projects
>
>
>
>
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 07 Jul 2011 15:14:41 +0000
> From: duane.larson at gmail.com
> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
> on subscribers client
> To: OpenSIPS users mailling list <users at lists.opensips.org>
> Message-ID: <20cf307f370e1d586904a77c2d80 at google.com>
> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed";
> DelSp="yes"
>
> I do have presence_xcapdiff enabled. I have a separate Presence Route in my
> config that I am not using since I was testing. It is just like the config
> on
> http://openxcap.org/wiki/Configuration
>
> So if I use that route instead I am guessing the picture update will work?
> I will have to test.
>
> On Jul 7, 2011 10:01am, Sa?l Ibarra Corretg? <saul at ag-projects.com> wrote:
> > Hi,
>
>
>
>
>
> > On Jul 7, 2011, at 3:54 PM, Duane Larson wrote:
>
>
>
>
>
> > > No. All that I see are the publish messages being sent from my proxy to
> > my proxy. Nothing else is generated after that. My presence config is
> > pretty basic for testing purposes
>
>
> > >
>
>
>
>
>
> > That would be the problem. Your proxy knows that the picture changed, but
> > it doesn't tell it to the endpoints. Have you enabled the
> > presence_xcapdiff module? Your endpoints needs to subscribe to the
> > xcap-diff event so that it gets notify requests with the changes.
>
>
>
>
>
> > --
>
>
> > Sa?l Ibarra Corretg?
>
>
> > AG Projects
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > _______________________________________________
>
>
> > Users mailing list
>
>
> > Users at lists.opensips.org
>
>
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.opensips.org/pipermail/users/attachments/20110707/d9db9acc/attachment-0001.htm
> >
>
> ------------------------------
>
> Message: 5
> Date: Thu, 7 Jul 2011 17:22:35 +0200
> From: Sa?l Ibarra Corretg? <saul at ag-projects.com>
> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
> on subscribers client
> To: OpenSIPS users mailling list <users at lists.opensips.org>
> Message-ID: <11B0862E-2388-4B5D-BBD4-7ADE2B8C0EB3 at ag-projects.com>
> Content-Type: text/plain; charset=iso-8859-1
>
>
> On Jul 7, 2011, at 5:14 PM, duane.larson at gmail.com wrote:
>
> > I do have presence_xcapdiff enabled. I have a separate Presence Route in
> my config that I am not using since I was testing. It is just like the
> config on
> > http://openxcap.org/wiki/Configuration
> >
> > So if I use that route instead I am guessing the picture update will
> work? I will have to test.
> >
>
> Run a SIP packet capture on the server and check that the client is sending
> the SUBSCRIBE requests and that the server is generating the NOTIFYs.
>
> --
> Sa?l Ibarra Corretg?
> AG Projects
>
>
>
>
>
>
> ------------------------------
>
> Message: 6
> Date: Thu, 07 Jul 2011 15:44:27 +0000
> From: duane.larson at gmail.com
> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
> on subscribers client
> To: OpenSIPS users mailling list <users at lists.opensips.org>
> Message-ID: <20cf303a2b878a3c3804a77c97cb at google.com>
> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed";
> DelSp="yes"
>
> Saul,
>
> Here is a trace of the Jitsi client logging in, registering and
> subscribing.
> http://pastebin.com/5GX2Pv8F
>
> Correct me if I am wrong but shouldn't I see a subscribe come from Jitsi
> that is for "Event: xcap-diff"?
>
> Could it be a client issue?
>
> On Jul 7, 2011 10:22am, Sa?l Ibarra Corretg? <saul at ag-projects.com> wrote:
>
>
>
> > On Jul 7, 2011, at 5:14 PM, duane.larson at gmail.com wrote:
>
>
>
>
>
> > > I do have presence_xcapdiff enabled. I have a separate Presence Route
> > in my config that I am not using since I was testing. It is just like the
> > config on
>
>
> > > http://openxcap.org/wiki/Configuration
>
>
> > >
>
>
> > > So if I use that route instead I am guessing the picture update will
> > work? I will have to test.
>
>
> > >
>
>
>
>
>
> > Run a SIP packet capture on the server and check that the client is
> > sending the SUBSCRIBE requests and that the server is generating the
> > NOTIFYs.
>
>
>
>
>
> > --
>
>
> > Sa?l Ibarra Corretg?
>
>
> > AG Projects
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> > _______________________________________________
>
>
> > Users mailing list
>
>
> > Users at lists.opensips.org
>
>
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://lists.opensips.org/pipermail/users/attachments/20110707/b7b7a4ee/attachment.htm
> >
>
> ------------------------------
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
> End of Users Digest, Vol 36, Issue 17
> *************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20110708/c4600126/attachment-0001.htm>
More information about the Users
mailing list