<div dir="ltr">Why not just authenticate on Kamailio in that case? <div><br></div><div>Also, be aware that the Authorization Username ($au) is included in SIP digest authentication. $au and $fu aren't necessarily the same, but on most end points the default is to use the same value for both. If you manipulate $fu or $au it may cause auth issues.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 31, 2016 at 9:49 AM, Alberto Sagredo <span dir="ltr"><<a href="mailto:alberto.sagredo@avanzada7.com" target="_blank">alberto.sagredo@avanzada7.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Marrold. I want to authenticate user on Kamailio but want Asterisk to see them registered with kamailio ip as contact.<br><div><br></div><div>I making also some manipulations in $fu as users are different (emp_xxx_ext) in kamailio than in Asterisk xxx_ext</div><div><br></div><div>Thanks</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2016-03-31 10:48 GMT+02:00 Marrold <span dir="ltr"><<a href="mailto:kamailio@marrold.co.uk" target="_blank">kamailio@marrold.co.uk</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Why not just relay the registration messages to Asterisk itself? What's the use case?<div><br></div><div>Cheers</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Thu, Mar 31, 2016 at 9:34 AM, Alberto Sagredo <span dir="ltr"><<a href="mailto:alberto.sagredo@avanzada7.com" target="_blank">alberto.sagredo@avanzada7.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi<div><br></div><div>Im trying to modify example for Asterisk/Kamailio integration that miconda did, and trying to handle Forwarded register to Asterisk in an authenticated way instead removing secret in asterisk.</div><div><br></div><div>I have made this changes</div><div><br></div><div><br></div><div><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>route[REGFWD] {</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> if(!is_method("REGISTER"))</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> {</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> return; </span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> }</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span> </span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $var(rip) = $var(astip);</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(method)="REGISTER";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(ruri)="sip:" + $var(rip) + ":" + $var(astport);</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(furi)="sip:" + $(au{s.substr,8,0}) + "@" + $var(rip);</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(turi)="sip:" + $(au{s.substr,8,0}) + "@" + $var(rip);</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(hdrs)="Contact: <sip:" + $au + "@"</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> + $sel(cfg_get.kamailio.bindip)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> + ":" + $sel(cfg_get.kamailio.bindport) + ">\r\n";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> if($sel(contact.expires) != $null)</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(hdrs)= $uac_req(hdrs) + "Expires: " + $sel(contact.expires) + "\r\n";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> else </span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $uac_req(hdrs)= $uac_req(hdrs) + "Expires: " + $hdr(Expires) + "\r\n";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> xlog("Dentro de REGFWD");</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> t_on_failure("REG_AST");</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> uac_req_send();</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>}</span></p></div><div><span><br></span></div><div><span><br></span></div><div><span><br></span></div><div><br></div><div> <span style="font-family:Menlo;font-size:11px">failure_route[REG_AST] {</span></div>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> if (t_is_canceled()) {</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> exit;</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> }</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> xlog("Dentro de REG AST");</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> if(t_check_status("401|407")) {</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> xlog("Dentro de 401");</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $avp(auser) = "test";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> $avp(apass) = "test";</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> uac_auth();</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> t_relay();</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> exit;</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span> }</span></p>
<p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>}</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span><br></span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>What i see on traces:</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span><br></span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>U x.x.x..240:5060 -> x.x.x..56:5060</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>REGISTER sip:x.x.x.56:5060 SIP/2.0.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Via: SIP/2.0/UDP x.x.x.240;branch=z9hG4bKfb46.a47535d4000000000000000000000000.0.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>To: <sip:200@x.x.x.56>.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>From: <sip:200@x.x.x.56>;tag=533cb9e91f4b999cf76861cbb9ed54ed-6a4f.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>CSeq: 10 REGISTER.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Call-ID: <a href="mailto:09dc120d65932ed7-16044@127.0.0.1" target="_blank">09dc120d65932ed7-16044@127.0.0.1</a>.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Max-Forwards: 70.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Content-Length: 0.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>User-Agent: ANY.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Contact: <sip:emp_001_200@x.x.x.240:5060>.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Expires: 3600.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;min-height:13px"><span></span><br></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>#</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>U x.x.x.56:5060 -> </span>x.x.x..240<span>:5060</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>SIP/2.0 401 Unauthorized.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Via: SIP/2.0/UDP </span>x.x.x..240<span>;branch=z9hG4bKfb46.a47535d4000000000000000000000000.0;received=</span>x.x.x..240<span>;rport=5060.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>From: <sip:200@x.x.x.56>;tag=533cb9e91f4b999cf76861cbb9ed54ed-6a4f.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>To: <sip:200@x.x.x.56>;tag=as62b47138.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Call-ID: <a href="mailto:09dc120d65932ed7-16044@127.0.0.1" target="_blank">09dc120d65932ed7-16044@127.0.0.1</a>.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>CSeq: 10 REGISTER.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Server: FPBX-2.11.0(11.17.1).</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Supported: replaces, timer.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="59e39692".</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>Content-Length: 0.</span></p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo">
</p><p style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo"><span>.</span></p><div><span><br></span></div><div><span><br></span></div><div><span>But Kamailio is not sending authentication .</span></div><div><span><br></span></div><div><span>Any idea what could be wrong? Or any tip to do what i try.</span></div><div><span><br></span></div><div><span>The idea is that a sip endpoint register with authentication on kamailio and it sends register with authentication to asterisk.</span></div><div><span><br></span></div><div><span>Thanks in advance</span></div><div><span><br></span></div><div><span><br></span></div></div>
<br></div></div>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br></div>