[OpenSIPS-Users] Cannot get registration to work with v3.2.8??
Bob Atkins
bob at digilink.net
Wed Aug 31 01:31:08 UTC 2022
Hi.
Have been a long time OpenSER user in a production environment.
I managed to convert to OpenSIPS v3.2.8 on a CentOS 7 system and is
working based on IP authentication however, I just cannot get sip
registrations to work that used to work fine with OpenSER. I'm using a
SPA112 running 1.4.1(SR5) as a test device. This device registers just
fine with Asterisk and OpenSER v1.1 with exactly the same credentials
but no matter what I have tried it just won't register with OpenSIPS v3.2.8.
I am using auth_db and mysql. I have verified that all sql data is correct.
I have been banging my head against the screen for hours to no avail.
In reviewing the debug and log output I can clearly see that something
is wrong because the user name and domain are both <null>?
www_authorize returns [-4] which means (no credentials) - credentials
were not found in request.
There is no reason why the credentials should not be there - they have
certainly not been consumed before this point.
This same device registers just fine with /_*exactly *_/the same
credentials to both OpenSER v1.1 and asterisk servers.
Would be grateful if anyone can shed some light on this because it seems
to me that something inside auth or auth_db is broken and not extracting
the registration credentials from the REGISTER message.
This code worked just fine in OpenSER v1.1
if (method=="REGISTER") {
#xlog("L_INFO","[$rm][$ft][$tt] Processing registration");
if (!www_authorize("digilink.net", "subscriber")) {
#xlog("L_INFO","[$rm][$ft][$tt] Challenging peer");
www_challenge("digilink.net", "0");
exit;
};
xlog("L_INFO","[$rm][$ft][$tt] Registered $fu from $si");
save("location");
exit;
};
This is the code in the OpenSIPS 3.2.8 config that is failing:
Here are the module loads and various defines:
loadmodule "options.so"
loadmodule "textops.so"
#### SIGNALING module
loadmodule "signaling.so"
#### StateLess module
loadmodule "sl.so"
#### Transaction Module
loadmodule "tm.so"
modparam("tm", "enable_stats", 1)
modparam("tm", "fr_timeout", 9)
modparam("tm", "fr_inv_timeout", 120)
modparam("tm", "restart_fr_on_each_reply", 0)
modparam("tm", "onreply_avp_mode", 1)
#### Record Route Module
loadmodule "rr.so"
/* do not append from tag to the RR */
modparam("rr", "append_fromtag", 1)
loadmodule "uac.so"
#modparam("uac","restore_mode","auto")
modparam("uac","rr_from_store_param","dns_uac_param")
modparam("uac","restore_mode","none")
#### MAX ForWarD module
loadmodule "maxfwd.so"
#### SIP MSG OPerationS module
loadmodule "sipmsgops.so"
#### FIFO Management Interface
loadmodule "mi_fifo.so"
modparam("mi_fifo", "fifo_name", "/tmp/opensips_fifo")
modparam("mi_fifo", "fifo_mode", 0666)
#### USeR LOCation module
loadmodule "usrloc.so"
modparam("usrloc", "nat_bflag", "NAT")
modparam("usrloc", "working_mode_preset", "single-instance-sql-write-back")
modparam("usrloc", "db_url", "mysql://opensips:??????@localhost/opensips")
loadmodule "nathelper.so"
modparam("nathelper", "received_avp", "$avp(rcv)")
modparam("nathelper", "natping_interval", 30) # Ping interval 30 s
modparam("nathelper", "ping_nated_only", 1) # Ping only clients
behind NAT
#### MYSQL module
loadmodule "db_mysql.so"
loadmodule "avpops.so"
#### AUTH Db module
loadmodule "auth.so"
loadmodule "auth_db.so"
modparam("auth_db", "calculate_ha1", 1)
modparam("auth_db", "user_column", "username")
modparam("auth_db", "password_column", "password")
modparam("auth_db", "use_domain", 0)
modparam("auth_db", "db_url", "mysql://opensips:??????@localhost/opensips")
modparam("auth_db", "load_credentials", "")
#### REGISTRAR module
loadmodule "registrar.so"
modparam("registrar", "tcp_persistent_flag", "TCP_PERSISTENT")
modparam("registrar", "min_expires", 120)
modparam("registrar", "max_expires", 3600)
modparam("registrar", "default_expires", 3600)
modparam("registrar", "max_contacts", 5)
modparam("registrar", "received_avp", "$avp(rcv)")
#### Pike DOS protection
loadmodule "pike.so"
modparam("pike", "sampling_time_unit", 3)
modparam("pike", "reqs_density_per_unit", 20)
#### DIALOG module
loadmodule "dialog.so"
modparam("dialog", "dlg_match_mode", 1)
modparam("dialog", "default_timeout", 21600) # 6 hours timeout
modparam("dialog", "db_mode", 0)
modparam("dialog", "profiles_with_value", "trunkCalls")
#### ACCounting module
loadmodule "acc.so"
/* what special events should be accounted ? */
modparam("acc", "report_cancels", 1)
modparam("acc", "early_media", 1)
/* by default we do not adjust the direct of the sequential requests.
if you enable this parameter, be sure to enable "append_fromtag"
in "rr" module */
modparam("acc", "detect_direction", 0)
modparam("acc", "acc_callid_column", "sip_callid")
modparam("acc", "acc_sip_code_column", "sip_status")
modparam("acc", "acc_method_column", "sip_method")
modparam("acc", "acc_to_tag_column", "totag")
modparam("acc", "acc_from_tag_column", "fromtag")
modparam("acc", "extra_fields", "db:sip_from; sip_to; in_uri; out_uri;
username; from_uri; to_uri; domain; du")
modparam("acc", "db_url", "mysql://opensips:??????@localhost/opensips")
loadmodule "proto_udp.so"
---- [snip] ----
if (is_method("REGISTER")) {
xlog("L_INFO", "REGISTER: [$tu] request");
xlog("L_INFO","[$rm][$ft][$tt] Processing registration");
$var(x)=www_authorize("digilink.net", "subscriber");
xlog("L_INFO", "REGISTER: www_authorize returned [$var(x)] to
authenticate with [$rU]$ru credential");
if (!$var(x)) {
xlog("L_INFO","[$rm][$ft][$tt] Challenging peer");
www_challenge("digilink.net", "auth,auth-int",
"MD5,MD5-sess,SHA-256,SHA-256-sess");
exit;
} else {
xlog("L_ALERT", "REGISTER: URI [$tu] - FAILED");
xlog("L_ALERT", "REGISTER: URI [$tu] - FAILED! User is not
authorized to authenticate with [$rU]$ru credential");
exit;
}
xlog("L_INFO", "REGISTER: URI [$tu] - Succeeded");
xlog("L_INFO","[$rm][$ft][$tt] Registered $fu from $si");
save("location");
exit;
}
Debug out shows:
Aug 30 18:19:05 [17809] DBG:core:parse_msg: SIP Request:
Aug 30 18:19:05 [17809] DBG:core:parse_msg: method: <REGISTER>
Aug 30 18:19:05 [17809] DBG:core:parse_msg: uri: <sip:23.253.166.155>
Aug 30 18:19:05 [17809] DBG:core:parse_msg: version: <SIP/2.0>
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=ffffffffffffffff
Aug 30 18:19:05 [17809] DBG:core:parse_via_param: found param type 232,
<branch> = <z9hG4bK-18367abe>; state=16
Aug 30 18:19:05 [17809] DBG:core:parse_via: end of header reached, state=5
Aug 30 18:19:05 [17809] DBG:core:parse_headers: via found,
flags=ffffffffffffffff
Aug 30 18:19:05 [17809] DBG:core:parse_headers: this is the first via
Aug 30 18:19:05 [17809] DBG:core:_parse_to: end of header reached, state=10
Aug 30 18:19:05 [17809] DBG:core:_parse_to: display={"PPC Fax"},
ruri={sip:3105738133 at 23.253.166.155}
Aug 30 18:19:05 [17809] DBG:core:get_hdr_field: <To> [43];
uri=[sip:3105738133 at 23.253.166.155]
Aug 30 18:19:05 [17809] DBG:core:get_hdr_field: to body ["PPC Fax"
<sip:3105738133 at 23.253.166.155>
]
Aug 30 18:19:05 [17809] DBG:core:get_hdr_field: cseq <CSeq>: <86682>
<REGISTER>
Aug 30 18:19:05 [17809] DBG:core:get_hdr_field: content_length=0
Aug 30 18:19:05 [17809] DBG:core:get_hdr_field: found end of header
Aug 30 18:19:05 [17809] DBG:core:receive_msg: After parse_msg...
Aug 30 18:19:05 [17809] DBG:core:receive_msg: preparing to run routing
scripts...
Aug 30 18:19:05 [17809] DBG:pike:mark_node: search on branch 205
(top=0x7fde48de8f80)
Aug 30 18:19:05 [17809] DBG:pike:mark_node: only first 1 were matched!
Aug 30 18:19:05 [17809] DBG:pike:pike_check_req: src IP
[205.147.62.19],node=0x7fde48de8f80; hits=[3,1],[0,0] node_flags=2
func_flags=8
Aug 30 18:19:05 [17809] DBG:maxfwd:is_maxfwd_present: value = 70
Aug 30 18:19:05 [17809] DBG:core:parse_to_param: tag=1584d16f8a45809ao1
Aug 30 18:19:05 [17809] DBG:core:parse_to_param: end of header reached,
state=11
Aug 30 18:19:05 [17809] DBG:core:_parse_to: end of header reached, state=29
Aug 30 18:19:05 [17809] DBG:core:_parse_to: display={"PPC Fax"},
ruri={sip:3105738133 at 23.253.166.155}
Aug 30 18:19:05 [17809] SIP message size: 572 bytesAug 30 18:19:05
[17809] DBG:core:comp_scriptvar: int 27: 572 / 2048
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=78
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=200
Aug 30 18:19:05 [17809] DBG:rr:find_first_route: No Route headers found
Aug 30 18:19:05 [17809] DBG:rr:loose_route: There is no Route HF
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:comp_scriptvar: ip 20: 205.147.62.19
Aug 30 18:19:05 [17809] Unknown source [205.147.62.19]:
[sip:3105738133 at 23.253.166.155] request
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=ffffffffffffffff
Aug 30 18:19:05 [17809] DBG:core:parse_params: Parsing params
for:[expires=300]
Aug 30 18:19:05 [17809] REGISTER: [sip:3105738133 at 23.253.166.155]
request from sip:23.253.166.155 at 205.147.62.19
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=14000
Aug 30 18:19:05 [17809] DBG:core:pv_get_authattr: no
[Proxy-]Authorization header
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=14000
Aug 30 18:19:05 [17809] DBG:core:pv_get_authattr: no
[Proxy-]Authorization header
Aug 30 18:19:05 [17809] [REGISTER][1584d16f8a45809ao1][<null>]@[<null>]
- Processing registration
Aug 30 18:19:05 [17809] DBG:core:parse_headers: flags=4000
Aug 30 18:19:05 [17809] DBG:auth:pre_auth: credentials with given realm
not found
Aug 30 18:19:05 [17809] REGISTER: www_authorize returned [-4] to
authenticate with [<null>]sip:23.253.166.155 credential
Aug 30 18:19:05 [17809] REGISTER: URI [sip:3105738133 at 23.253.166.155] -
FAILEDAug 30 18:19:05 [17809] REGISTER: URI
[sip:3105738133 at 23.253.166.155] - FAILED! User is not authorized to
authenticate with [<null>]sip:23.253.166.155 credential
Aug 30 18:19:05 [17809] DBG:core:destroy_avp_list: destroying list (nil)
Aug 30 18:19:05 [17809] DBG:core:receive_msg: cleaning up
----
Thank you,
Bob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20220830/a4407224/attachment-0001.html>
More information about the Users
mailing list