[Serusers] extra things confusing auth_radius?

Thu Aug 31 17:40:59 CEST 2006

I did debug the radius server and it doesn't even get a hit from SER when
this happens. The phones can register with radius just fine too, but just
not make calls. They can receive calls.

It looks like I am getting the same error as the other guy who just emailed
the list. 

Re: pre_auth(): Credentials with given realm not found.

Aug 31 08:40:57 laplata ser[26185]: SIP Request: 

Aug 31 08:40:57 laplata ser[26185]:  method:  <INVITE> 

Aug 31 08:40:57 laplata ser[26185]:  uri:
<sip:311 at voip.fasttrackcomm.net;user=phone> 

Aug 31 08:40:57 laplata ser[26185]:  version: <SIP/2.0> 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=1 

Aug 31 08:40:57 laplata ser[26185]: Found param type 232, <branch> =
<z9hG4bK7faba9a88AEB41B5>; state=16 

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=5 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: Via found, flags=1 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: this is the first via 

Aug 31 08:40:57 laplata ser[26185]: After parse_msg... 

Aug 31 08:40:57 laplata ser[26185]: preparing to run routing scripts... 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=128 

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=9 

Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311 at voip.fasttrackcomm.net;user=phone]  

 ]  31 08:40:57 laplata ser[26185]: DEBUG: to body
[<sip:311 at voip.fasttrackcomm.net;user=phone>

Aug 31 08:40:57 laplata ser[26185]: get_hdr_field: cseq <CSeq>: <1> <INVITE>

Aug 31 08:40:57 laplata ser[26185]: DEBUG:maxfwd:is_maxfwd_present: value =
70  

Aug 31 08:40:57 laplata ser[26185]: DBG:maxfwd:process_maxfwd_header: value
70 decreased to 16 

Aug 31 08:40:57 laplata ser[26185]: DEBUG: add_param: tag=7B99ABF2-4A7C3F1 

Aug 31 08:40:57 laplata ser[26185]: end of header reached, state=29 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=256 

Aug 31 08:40:57 laplata ser[26185]: DEBUG: get_hdr_body : content_length=251

Aug 31 08:40:57 laplata ser[26185]: found end of header 

Aug 31 08:40:57 laplata ser[26185]: find_first_route: No Route headers found

Aug 31 08:40:57 laplata ser[26185]: loose_route: There is no Route HF 

Aug 31 08:40:57 laplata ser[26185]: is_local(): Realm
'voip.fasttrackcomm.net' is local 

Aug 31 08:40:57 laplata ser[26185]: parse_headers: flags=4096 

Aug 31 08:40:57 laplata ser[26185]: pre_auth(): Credentials with given realm
not found 

Aug 31 08:40:57 laplata ser[26185]: build_auth_hf(): 'WWW-Authenticate:
Digest realm="voip.fasttrackcomm.net", nonce="44f6f625418a8 '
f0398a4c9e73850fef979dbf"

Aug 31 08:40:58 laplata ser[26185]: parse_headers: flags=-1 

Aug 31 08:40:58 laplata ser[26185]: check_via_address(206.123.202.194,
192.168.1.195, 0) 

Aug 31 08:40:58 laplata ser[26185]: DEBUG:destroy_avp_list: destroying list
(nil) 

Aug 31 08:40:58 laplata ser[26185]: receive_msg: cleaning up

Natambu Obleton

Network Engineer

FastTrack Communications

nobleton at fasttrackcomm.net

(970) 247-3366 office

(970) 247-2426 fax

  _____  

From: Greger V. Teigre [mailto:greger at teigre.com] 
Sent: Wednesday, August 30, 2006 11:57 PM
To: Natambu Obleton
Cc: serusers at lists.iptel.org
Subject: Re: [Serusers] extra things confusing auth_radius?

user=phone does not have anything to do with it. I think I remember polycom
being a bit ticklish when it comes to settings. Something about a
non-intuitive name on a setting related to domain?  You see, the calculation
in the digest algorithm is based on both sides using the same data... I
don't have the polycom setup here, sorry. Take a look at the authorization
header in the challenge and reply.
If you debug your radius server, you will probably see wrong password (i.e.
wrong digest).
g-)

Natambu Obleton wrote: 

Ok. I have two clients setup. One is X-Lite and the other is a polycom 601.
I am doing radius authentication, but for some reason it doesn't work with
the polycom 601 phone. In the debug the only thing that is different about
them is something in the uri.

Aug 30 09:16:51 laplata ser[25968]: DEBUG: get_hdr_field: <To> [72];
uri=[sip:311 at voip.fasttrackcomm.net]  

Works, but..

Aug 30 09:17:53 laplata ser[25970]: DEBUG: get_hdr_field: <To> [45];
uri=[sip:311 at voip.fasttrackcomm.net;user=phone]
<mailto:%5bsip:311 at voip.fasttrackcomm.net;user=phone%5d> 

Doesn't. Like it doesn't even send an authentication request to my radius
server. I think it is the ';user=phone' part that is confusing it? So what I
want to do is remove that part from the URI as a test. I just added a subst
to remove it, but still isn't working with radius. It acts like the realm is
no longer local.

Here is my config file:

http://www.natambu.com/serconf.html

Natambu Obleton

Network Engineer

FastTrack Communications

nobleton at fasttrackcomm.net

(970) 247-3366 office

(970) 247-2426 fax

  _____  

_______________________________________________
Serusers mailing list
Serusers at lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20060831/84bd6219/attachment.htm>