[OpenSIPS-Users] b2b authentication
Ovidiu Sas
osas at voipembedded.com
Sat Jul 9 21:03:12 CEST 2011
Try to use "top hiding" scenario and let me know if it works.
Regards,
Ovidiu Sas
On Fri, Jul 8, 2011 at 6:13 AM, Jayesh Nambiar <jayesh.voip at gmail.com> wrote:
> Hi Ovidiu,
> Thanks for your reply. I don't see any errors in the syslog after raising
> the debug level to 5. They are mainly informational about bridging and
> relaying. The loadmodules sections is pasted below:
> loadmodule "db_mysql.so"
> loadmodule "signaling.so"
> loadmodule "sl.so"
> loadmodule "tm.so"
> loadmodule "rr.so"
> loadmodule "maxfwd.so"
> loadmodule "textops.so"
> loadmodule "mi_fifo.so"
> loadmodule "uac_auth.so"
> loadmodule "b2b_entities.so"
> loadmodule "b2b_logic.so"
> loadmodule "uac.so"
> loadmodule "uri.so"
> relevant parameters are :
> modparam("tm", "pass_provisional_replies", 1)
> modparam("uac_auth", "credential", "1000146:203.XXX.XXX.189:ede788")
> modparam("b2b_logic", "db_mode", 0)
> modparam("b2b_logic", "script_scenario",
> "/usr/local/opensips/etc/opensips/refer.xml")
> modparam("b2b_logic", "b2bl_from_spec_param", "$avp(b2bl_from)")
> modparam("b2b_entities", "db_mode", 0)
> The relevant part in route block is:
> $avp(b2bl_from) = "<sip:1000146 at 203.XXX.XXX.189>";
> rewritehost("203.XXX.XXX.189");
> b2b_init_request("refer");
> exit;
> Let me know if you have some more points that I should look at. I am using
> revision 8135 which I beleive is the latest !!
> Thanks,
> --- Jayesh
>
>
>>
>> Do you see any errors in the logs?
>> Can you raise the logs to DEBUG level and post the logs somewhere?
>> Also, please post the loadmodule section of your config file.
>>
>> Regards,
>> Ovidiu Sas
>>
>> On Thu, Jul 7, 2011 at 7:26 AM, Jayesh Nambiar <jayesh.voip at gmail.com>
>> wrote:
>> > Hi Ovidiu,
>> > Thanks for the reply. I still dont get the expected behaviour, may be I
>> > am
>> > missing something obvious. Below is the trace of my call:
>> > 203.XXX.XXX.186 is the caller; 203.XXX.XXX.188 is the B2B Opensips and
>> > 203.XXX.XXX.189 is the upstream proxy which asks for Proxy
>> > Authentication.
>> > U 203.XXX.XXX.186:5035 -> 203.XXX.XXX.188:5060
>> > INVITE sip:9212121212 at 203.XXX.XXX.188 SIP/2.0.
>> > Via: SIP/2.0/UDP 203.XXX.XXX.186:5035;rport;branch=z9hG4bK105036.
>> > From: <sip:1000146 at 203.XXX.XXX.186>;tag=57086.
>> > To: <sip:9212121212 at 203.XXX.XXX.188>.
>> > Call-ID: 554fd84d69db52b2aec859f2beb0ba30 at 203.XXX.XXX.186.
>> > CSeq: 20 INVITE.
>> > Contact: <sip:1000146 at 203.XXX.XXX.186:5035>.
>> > Content-Type: application/sdp.
>> > Max-Forwards: 70.
>> > User-Agent: Novanet C2D.
>> > Subject: click2call.
>> > X-Src-IP: 203.153.53.222.
>> > Content-Length: 180.
>> > .
>> > v=0.
>> > o=click2dial 0 0 IN IP4 203.XXX.XXX.186.
>> > s=click2dial call.
>> > c=IN IP4 203.XXX.XXX.186.
>> > t=0 0.
>> > m=audio 8000 RTP/AVP 0 8 18 3 4 97 98.
>> > a=rtpmap:0 PCMU/8000.
>> > a=rtpmap:18 G729/8000.
>> >
>> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.189:5060
>> > INVITE sip:9212121212 at 203.XXX.XXX.189 SIP/2.0.
>> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
>> > To: sip:9212121212 at 203.XXX.XXX.189.
>> > From:
>> > <sip:1000146 at 203.XXX.XXX.189>;tag=3302461778a934c5cb938a0d66c7bfc5.
>> > CSeq: 21 INVITE.
>> > Call-ID: B2B.236.911335.
>> > Content-Length: 180.
>> > User-Agent: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
>> > Content-Type: application/sdp.
>> > Max-Forwards: 69.
>> > Contact: <sip:203.XXX.XXX.188:5060>.
>> > .
>> > v=0.
>> > o=click2dial 0 0 IN IP4 203.XXX.XXX.186.
>> > s=click2dial call.
>> > c=IN IP4 203.XXX.XXX.186.
>> > t=0 0.
>> > m=audio 8000 RTP/AVP 0 8 18 3 4 97 98.
>> > a=rtpmap:0 PCMU/8000.
>> > a=rtpmap:18 G729/8000.
>> >
>> > U 203.XXX.XXX.189:5060 -> 203.XXX.XXX.188:5060
>> > SIP/2.0 407 Proxy Authentication Required.
>> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
>> > To:
>> >
>> > sip:9212121212 at 203.XXX.XXX.189;tag=7dbab1763f29ae55bdba397633ed7fa1.cc60.
>> > From:
>> > <sip:1000146 at 203.XXX.XXX.189>;tag=3302461778a934c5cb938a0d66c7bfc5.
>> > CSeq: 21 INVITE.
>> > Call-ID: B2B.236.911335.
>> > Proxy-Authenticate: Digest realm="203.XXX.XXX.189",
>> > nonce="4e1592530000000af0fc7ee76e7c0844c564a2dcbaf21e00".
>> > Server: SipTrunk 1.6.4.6.
>> > Content-Length: 0.
>> > .
>> >
>> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.189:5060
>> > ACK sip:9212121212 at 203.XXX.XXX.189 SIP/2.0.
>> > Via: SIP/2.0/UDP 203.XXX.XXX.188;branch=z9hG4bK0d56.a7833ad2.0.
>> > From:
>> > <sip:1000146 at 203.XXX.XXX.189>;tag=3302461778a934c5cb938a0d66c7bfc5.
>> > Call-ID: B2B.236.911335.
>> > To:
>> >
>> > sip:9212121212 at 203.XXX.XXX.189;tag=7dbab1763f29ae55bdba397633ed7fa1.cc60.
>> > CSeq: 21 ACK.
>> > User-Agent: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
>> > Content-Length: 0.
>> > .
>> >
>> > U 203.XXX.XXX.188:5060 -> 203.XXX.XXX.186:5035
>> > SIP/2.0 407 Proxy Authentication Required.
>> > Via: SIP/2.0/UDP 203.XXX.XXX.186:5035;rport=5035;branch=z9hG4bK105036.
>> > From: <sip:1000146 at 203.XXX.XXX.186>;tag=57086.
>> > To: <sip:9212121212 at 203.XXX.XXX.188>;tag=B2B.151.477.
>> > Call-ID: 554fd84d69db52b2aec859f2beb0ba30 at 203.XXX.XXX.186.
>> > CSeq: 20 INVITE.
>> > Proxy-Authenticate: Digest realm="203.XXX.XXX.189",
>> > nonce="4e1592530000000af0fc7ee76e7c0844c564a2dcbaf21e00".
>> > Contact: <sip:203.XXX.XXX.188:5060>.
>> > Server: OpenSIPS (1.7.0-beta-notls (x86_64/linux)).
>> > Content-Length: 0.
>> > My uac_auth is loaded before the b2b modules and the paramter in it is
>> > as
>> > follows:
>> > modparam("uac_auth", "credential", "1000146:203.XXX.XXX.189:ede488")
>> > The realm sent in Proxy Authenticate is 203.XXX.XXX.189 only but still
>> > 203.XXX.XXX.188 relays the 407 back to 203.XXX.XXX.186 :(
>> > Any pointers to figure this out?
>> > Thanks in advance !!
>> > --- Jayesh
>> >
>> >>
>> >> If ?no credentials are found, then the 407 is relayed back to the
>> >> caller.
>> >> Make sure that the realm in the challenge matches the realm in
>> >> uac_auth credentials list.
>> >> Also make sure that uac_auth is loaded before the b2b modules.
>> >>
>> >>
>> >> Regards,
>> >> Ovidiu Sas
>> >>
>> >> On Thu, Jul 7, 2011 at 5:34 AM, Jayesh Nambiar <jayesh.voip at gmail.com>
>> >> wrote:
>> >> > Hi,
>> >> > I was referring to the email posted by Ovidiu
>> >> > here?http://lists.opensips.org/pipermail/news/2011-June/000142.html.
>> >> > I
>> >> > am
>> >> > trying this but the b2b opensips does not reply back with credentials
>> >> > to
>> >> > the
>> >> > 407 response. It just proxies back the 407 to the call initiator. I
>> >> > have
>> >> > downloaded the latest revision from the SVN. Am i missing something
>> >> > here?
>> >> > Just for information, I have loaded the refer scenario in the
>> >> > b2b_init_request. The upstream proxy replies back with 407 Proxy
>> >> > Authentication Required and I expected the client side of B2B to
>> >> > reply
>> >> > back
>> >> > with the credentials mentioned in the uac_auth parameter list.
>> >> > Any help in regards to testing this will be very useful.
>> >> > Thanks,
>> >> > --- Jayesh
>> >> > _______________________________________________
>> >> > Users mailing list
>> >> > Users at lists.opensips.org
>> >> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> >> >
>> >> >
>> >>
>> >>
>> >>
>> >> ------------------------------
>> >>
>> >> _______________________________________________
>> >> Users mailing list
>> >> Users at lists.opensips.org
>> >> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> >>
>> >>
>> >> End of Users Digest, Vol 36, Issue 15
>> >> *************************************
>> >
>> >
>> > _______________________________________________
>> > Users mailing list
>> > Users at lists.opensips.org
>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> >
>> >
>>
>>
>>
>> ------------------------------
>>
>> Message: 2
>> Date: Thu, 7 Jul 2011 08:54:23 -0500
>> From: Duane Larson <duane.larson at gmail.com>
>> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
>> on subscribers client
>> To: OpenSIPS users mailling list <users at lists.opensips.org>
>> Message-ID:
>>
>> <CAFcM1EqHiooquxhSvF_=e0GRstBqajO9ummyb0UKZDjwnTXHhQ at mail.gmail.com>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> No. All that I see are the publish messages being sent from my proxy to
>> my
>> proxy. Nothing else is generated after that. My presence config is
>> pretty
>> basic for testing purposes
>>
>>
>> route[Pres] {
>> # absorb retransmissions
>> if (! t_newtran())
>> {
>> xlog("L_INFO", "Presence: Call [$rm] Not newtran \n");
>> sl_reply_error();
>> exit;
>> };
>>
>> if(is_method("NOTIFY"))
>> {
>> if (!t_relay()) {
>> sl_reply_error();
>> };
>> exit;
>> }
>> #handle presence requests
>> if(is_method("PUBLISH"))
>> {
>> handle_publish();
>> }
>> else if( is_method("SUBSCRIBE")) {
>> handle_subscribe();
>> };
>> exit;
>> }
>>
>>
>>
>> On Jul 7, 2011 1:11 AM, "Sa?l Ibarra Corretg?" <saul at ag-projects.com>
>> wrote:
>> > Hi,
>> >
>> > On Jul 6, 2011, at 11:07 PM, duane.larson at gmail.com wrote:
>> >
>> >> I have two users that are on each others buddy list. When I first set
>> >> my
>> picture for each account the other client received the update and shows
>> the
>> picture for the buddy. Yet when I change one of the buddy's pictures the
>> other client doesn't see the update at all. I have to restart the client
>> in
>> order to see the new picture. Shouldn't the client get a notify that the
>> picture has been changed?
>> >>
>> >> Here is what I see with a sip trace and in the logs for
>> >> opensips-mi-proxy
>>
>> >>
>> >
>> > Does the client receive the corresponding NOTIFY?
>> >
>> > --
>> > Sa?l Ibarra Corretg?
>> > AG Projects
>> >
>> >
>> >
>> >
>> > _______________________________________________
>> > Users mailing list
>> > Users at lists.opensips.org
>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL:
>> <http://lists.opensips.org/pipermail/users/attachments/20110707/0fe02447/attachment-0001.htm>
>>
>> ------------------------------
>>
>> Message: 3
>> Date: Thu, 7 Jul 2011 17:01:26 +0200
>> From: Sa?l Ibarra Corretg? <saul at ag-projects.com>
>> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
>> on subscribers client
>> To: OpenSIPS users mailling list <users at lists.opensips.org>
>> Message-ID: <3878AEB0-8662-4D28-830E-F01CF3A72BCD at ag-projects.com>
>> Content-Type: text/plain; charset=iso-8859-1
>>
>> Hi,
>>
>> On Jul 7, 2011, at 3:54 PM, Duane Larson wrote:
>>
>> > No. All that I see are the publish messages being sent from my proxy to
>> > my proxy. Nothing else is generated after that. My presence config is
>> > pretty basic for testing purposes
>> >
>>
>> That would be the problem. Your proxy knows that the picture changed, but
>> it doesn't tell it to the endpoints. Have you enabled the presence_xcapdiff
>> module? Your endpoints needs to subscribe to the xcap-diff event so that it
>> gets notify requests with the changes.
>>
>> --
>> Sa?l Ibarra Corretg?
>> AG Projects
>>
>>
>>
>>
>>
>>
>> ------------------------------
>>
>> Message: 4
>> Date: Thu, 07 Jul 2011 15:14:41 +0000
>> From: duane.larson at gmail.com
>> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
>> on subscribers client
>> To: OpenSIPS users mailling list <users at lists.opensips.org>
>> Message-ID: <20cf307f370e1d586904a77c2d80 at google.com>
>> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed";
>> DelSp="yes"
>>
>> I do have presence_xcapdiff enabled. I have a separate Presence Route in
>> my
>> config that I am not using since I was testing. It is just like the config
>> on
>> http://openxcap.org/wiki/Configuration
>>
>> So if I use that route instead I am guessing the picture update will work?
>> I will have to test.
>>
>> On Jul 7, 2011 10:01am, Sa?l Ibarra Corretg? <saul at ag-projects.com> wrote:
>> > Hi,
>>
>>
>>
>>
>>
>> > On Jul 7, 2011, at 3:54 PM, Duane Larson wrote:
>>
>>
>>
>>
>>
>> > > No. All that I see are the publish messages being sent from my proxy
>> > > to
>> > my proxy. Nothing else is generated after that. My presence config is
>> > pretty basic for testing purposes
>>
>>
>> > >
>>
>>
>>
>>
>>
>> > That would be the problem. Your proxy knows that the picture changed,
>> > but
>> > it doesn't tell it to the endpoints. Have you enabled the
>> > presence_xcapdiff module? Your endpoints needs to subscribe to the
>> > xcap-diff event so that it gets notify requests with the changes.
>>
>>
>>
>>
>>
>> > --
>>
>>
>> > Sa?l Ibarra Corretg?
>>
>>
>> > AG Projects
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> > _______________________________________________
>>
>>
>> > Users mailing list
>>
>>
>> > Users at lists.opensips.org
>>
>>
>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL:
>> <http://lists.opensips.org/pipermail/users/attachments/20110707/d9db9acc/attachment-0001.htm>
>>
>> ------------------------------
>>
>> Message: 5
>> Date: Thu, 7 Jul 2011 17:22:35 +0200
>> From: Sa?l Ibarra Corretg? <saul at ag-projects.com>
>> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
>> on subscribers client
>> To: OpenSIPS users mailling list <users at lists.opensips.org>
>> Message-ID: <11B0862E-2388-4B5D-BBD4-7ADE2B8C0EB3 at ag-projects.com>
>> Content-Type: text/plain; charset=iso-8859-1
>>
>>
>> On Jul 7, 2011, at 5:14 PM, duane.larson at gmail.com wrote:
>>
>> > I do have presence_xcapdiff enabled. I have a separate Presence Route in
>> > my config that I am not using since I was testing. It is just like the
>> > config on
>> > http://openxcap.org/wiki/Configuration
>> >
>> > So if I use that route instead I am guessing the picture update will
>> > work? I will have to test.
>> >
>>
>> Run a SIP packet capture on the server and check that the client is
>> sending the SUBSCRIBE requests and that the server is generating the
>> NOTIFYs.
>>
>> --
>> Sa?l Ibarra Corretg?
>> AG Projects
>>
>>
>>
>>
>>
>>
>> ------------------------------
>>
>> Message: 6
>> Date: Thu, 07 Jul 2011 15:44:27 +0000
>> From: duane.larson at gmail.com
>> Subject: Re: [OpenSIPS-Users] OpenXCAP - Picture change isn't updated
>> on subscribers client
>> To: OpenSIPS users mailling list <users at lists.opensips.org>
>> Message-ID: <20cf303a2b878a3c3804a77c97cb at google.com>
>> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed";
>> DelSp="yes"
>>
>> Saul,
>>
>> Here is a trace of the Jitsi client logging in, registering and
>> subscribing.
>> http://pastebin.com/5GX2Pv8F
>>
>> Correct me if I am wrong but shouldn't I see a subscribe come from Jitsi
>> that is for "Event: xcap-diff"?
>>
>> Could it be a client issue?
>>
>> On Jul 7, 2011 10:22am, Sa?l Ibarra Corretg? <saul at ag-projects.com> wrote:
>>
>>
>>
>> > On Jul 7, 2011, at 5:14 PM, duane.larson at gmail.com wrote:
>>
>>
>>
>>
>>
>> > > I do have presence_xcapdiff enabled. I have a separate Presence Route
>> > in my config that I am not using since I was testing. It is just like
>> > the
>> > config on
>>
>>
>> > > http://openxcap.org/wiki/Configuration
>>
>>
>> > >
>>
>>
>> > > So if I use that route instead I am guessing the picture update will
>> > work? I will have to test.
>>
>>
>> > >
>>
>>
>>
>>
>>
>> > Run a SIP packet capture on the server and check that the client is
>> > sending the SUBSCRIBE requests and that the server is generating the
>> > NOTIFYs.
>>
>>
>>
>>
>>
>> > --
>>
>>
>> > Sa?l Ibarra Corretg?
>>
>>
>> > AG Projects
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> > _______________________________________________
>>
>>
>> > Users mailing list
>>
>>
>> > Users at lists.opensips.org
>>
>>
>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL:
>> <http://lists.opensips.org/pipermail/users/attachments/20110707/b7b7a4ee/attachment.htm>
>>
>> ------------------------------
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>> End of Users Digest, Vol 36, Issue 17
>> *************************************
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
More information about the Users
mailing list