I don't believe the ACL works for registrations, only for phone calls. You'll still need to auth for the registration part. For the ACL, though, you can do "reloadacl" and confirm that your CIDR is getting added. When you send calls from TB to FS they should be let in via the ACL without an auth challenge. -MC On Tue, Feb 22, 2011 at 11:30 AM, Johannes Jakob <jjj@3js.de> wrote:
Fellow FreeSWITCH Admins,
I'm having a hard time, getting a Trixbox 2.8 box to register with our FreeSWITCH SBCs.
The FreeSWITCHes are running FreeSWITCH-mod_sofia/1.0.head-git-7847289, the asterisk on the trixbox is Asterisk 1.6.0.22-samy-r60.
The user's directory entry looks like this:
<include> <user id="748732" cidr="10.16.153.163/32"> <params> <!-- <param name="password" value="Idsd67Hsa"/> --> <param name="t38-passthru" value="true"/> </params> <variables> <variable name="client_asserted_identity" value="03023671836"/> <variable name="accountcode" value="748732"/> <variable name="contract" value="2253"/> <variable name="nibble_rate" value="1"/> <variable name="nibble_account" value="2253"/>
<variable name="proxy_media" value="true"/> <variable name="bypass_media" value="false"/> <variable name="user_context" value="mysip.net"/> <variable name="default_language" value="de"/> <variable name="language" value="de"/> </variables> </user> </include>
Asterisk's register string: 748732@mysip.net@sbc1.mysip.net/748732
I'm getting the "normal" FS errors for wrong credentials:
2011-02-22 18:03:57.484939 [WARNING] sofia_reg.c:1246 SIP auth challenge (REGISTER) on sofia profile 'internal' for [748732@mysip.net] from ip 10.16.153.163 2011-02-22 18:03:57.491471 [WARNING] sofia_reg.c:1204 SIP auth failure (REGISTER) on sofia profile 'internal' for [748732@mysip.net] from ip 10.16.153.163
but why am I getting these? I specified the right address in the cidr statement! Why is it even bothering with anything else but the right user@domain and IP-address?
There are some other asterisk boxes (> 1.8.2) registering to this SBC with equal settings just fine, what's wrong with this little trixbox system? ;)
Of course I did get you some SIP traces as well:
18:00:37.063410 IP 10.16.153.163.5060 > 10.16.133.66.5060: UDP, length: 419 E`..f...>.7.^...^..B.......-REGISTER sip:mysip.net SIP/2.0 Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK3e70680b;rport Max-Forwards: 70 From: <sip:748732@mysip.net>;tag=as77c8852d To: <sip:748732@mysip.net> Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163 CSeq: 102 REGISTER User-Agent: Asterisk PBX 1.6.0.22-samy-r60 Expires: 1800 Contact: <sip:748732@10.16.153.163> Event: registration Content-Length: 0
18:00:37.074085 IP 10.16.133.66.5060 > 10.16.153.163.5060: UDP, length: 657 E...F...?.Vc^..B^...........SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK3e70680b;rport=5060 From: <sip:748732@mysip.net>;tag=as77c8852d To: <sip:748732@mysip.net>;tag=5jD9Qcg3N9S6p Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163 CSeq: 102 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-7847289 2011-02-19 23-38-04 +0100 Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, precondition, path, replaces WWW-Authenticate: Digest realm="mysip.net", nonce="ce2bccbf-a27b-43c8-b7b0-a89ab429d8a7", algorithm=MD5, qop="auth" Content-Length: 0
18:00:37.074969 IP 10.16.153.163.5060 > 10.16.133.66.5060: UDP, length: 672 E`..f...>.6.^...^..B........REGISTER sip:mysip.net SIP/2.0 Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK30df5010;rport Max-Forwards: 70 From: <sip:748732@mysip.net>;tag=as03431ba4 To: <sip:748732@mysip.net> Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163 CSeq: 103 REGISTER User-Agent: Asterisk PBX 1.6.0.22-samy-r60 Authorization: Digest username="748732@mysip.net", realm="mysip.net", algorithm=MD5, uri="sip:mysip.net", nonce="ce2bccbf-a27b-43c8-b7b0-a89ab429d8a7", response="133a0ba843fe9f5afba67d1377fa8c11", qop=auth, cnonce="119cf18c", nc=00000001 Expires: 1800 Contact: <sip:748732@10.16.153.163> Event: registration Content-Length: 0
18:00:37.081517 IP 10.16.133.66.5060 > 10.16.153.163.5060: UDP, length: 532 E..0F...?.V.^..B^.........1.SIP/2.0 403 Forbidden Via: SIP/2.0/UDP 10.16.153.163:5060;branch=z9hG4bK30df5010;rport=5060 From: <sip:748732@mysip.net>;tag=as03431ba4 To: <sip:748732@mysip.net>;tag=6U61S706jjgSj Call-ID: 53d04cc277cfe60301bddb6d79033420@10.16.153.163 CSeq: 103 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-7847289 2011-02-19 23-38-04 +0100 Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, precondition, path, replaces Content-Length: 0
Can somebody point me in the right direction?
Thanks and best regards,
John
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org