Re: [Freeswitch-users] [ERR] sofia_reg.c:2110 "some gateway" Registration Failed with status Unauthorized [401]. failure #37 (Snabel Kaabiya)
please see inline: _________________________________________________________________________
---------- Forwarded message ---------- From: Michael Jerris <mike@jerris.com> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Date: Tue, 8 Apr 2014 05:52:55 -0400 Subject: Re: [Freeswitch-users] [ERR] sofia_reg.c:2110 "some gateway" Registration Failed with status Unauthorized [401]. failure #37 (Snabel Kaabiya) That isn't the first register request.
*[SNABEL*] But in the logs i see Registering DIDLogic then the register request i sent. how did you know it's not the first request? Thanks, 2014-04-06 09:32:05.472850 [NOTICE] sofia_reg.c:423 *Registering DIDLogic* send 894 bytes to udp/[46.165.252.40]:5060 at 06:32:05.492557: ------------------------------ ------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 144.76.98.11:5080;rport;branch=z9hG4bKUZ0p2Fjget1KN Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net> Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892398 REGISTER Contact: <sip:gw+DIDLogic@144.76.98.11:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia /1.2.23+git~20140317T213443Z~769a03a629~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: path, replaces Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0DtvVNA7JFDwqn/iKN2y0i7jjJF/xDpK+45ZYA=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="8aaadef8769d2234def69a699c53f95c", qop=auth, nc=0000018e Content-Length: 0
On Apr 8, 2014, at 3:11 AM, Snabel Kabiya <snabel@lexifone.com> wrote:
Hi,
Thank you, but since it will be really difficult to convince our provider to change their response, I'm trying to resolve the issue from our side.
I've noticed that in the problematic servers this header:
Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0DtvVNA7JFDwqn/iKN2y0i7jjJF/xDpK+45ZYA=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="8aaadef8769d2234def69a699c53f95c", qop=auth, nc=0000018e
is sent in the first REGISTER request, could this cause the issue? any ideas?
why would freeswitch sometimes send this header in the first REGISTER request? is this related to the new version 1.2.23? is it configurable in freeswitch, when to add this header and when not?
Thanks, Snabel
/************************************************************************************************************** Working server
***************************************************************************************************************/ 2014-04-06 18:00:20.896614 [NOTICE] sofia_reg.c:418 Registering DIDLogic send 618 bytes to udp/[46.165.252.40]:5060 at 15:00:20.898875:
------------------------------------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 5.9.23.171:5080;rport;branch=z9hG4bKXrH2QjNrt081K Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=4eaeaXtSSUc3a To: <sip:95299@sip.de.didlogic.net> Call-ID: 2c4ba5f8-bd9c-11e3-8545-0d578f78ffdf CSeq: 58062146 REGISTER Contact: <sip:gw+DIDLogic@5.9.23.171:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia/1.2.12+git~20130806T202138Z~22ab34c507
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: precondition, path, replaces Content-Length: 0
------------------------------------------------------------------------ recv 444 bytes from udp/[46.165.252.40]:5060 at 15:00:20.912841: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 5.9.23.171:5080;rport=5080;branch=z9hG4bKXrH2QjNrt081K From: <sip:95299@sip.de.didlogic.net>;tag=4eaeaXtSSUc3a To: <sip:95299@sip.de.didlogic.net
;tag=b27e1a1d33761e85846fc98f5f3a7e58.c173 Call-ID: 2c4ba5f8-bd9c-11e3-8545-0d578f78ffdf CSeq: 58062146 REGISTER WWW-Authenticate: Digest realm="sip.de.didlogic.net", nonce="U0FtMFNBbARsF99U0eRscR/9s7cQ6Y2ULDJAKIA=", qop="auth" Content-Length: 0
------------------------------------------------------------------------ send 898 bytes to udp/[46.165.252.40]:5060 at 15:00:20.913382:
------------------------------------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 5.9.23.171:5080;rport;branch=z9hG4bKy1aUSD6UQ9ymF Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=4eaeaXtSSUc3a To: <sip:95299@sip.de.didlogic.net> Call-ID: 2c4ba5f8-bd9c-11e3-8545-0d578f78ffdf CSeq: 58062147 REGISTER Contact: <sip:gw+DIDLogic@5.9.23.171:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia/1.2.12+git~20130806T202138Z~22ab34c507
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: precondition, path, replaces Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0FtMFNBbARsF99U0eRscR/9s7cQ6Y2ULDJAKIA=", cnonce="A8sptzg/EjKkSwAejPT25g", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="42c896b44b2ed46127099aa90adf5c01", qop=auth, nc=00000001 Content-Length: 0
------------------------------------------------------------------------ recv 780 bytes from udp/[46.165.252.40]:5060 at 15:00:20.927553: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/UDP 5.9.23.171:5080;rport=5080;branch=z9hG4bKy1aUSD6UQ9ymF From: <sip:95299@sip.de.didlogic.net>;tag=4eaeaXtSSUc3a To: <sip:95299@sip.de.didlogic.net
;tag=b27e1a1d33761e85846fc98f5f3a7e58.dbc6 Call-ID: 2c4ba5f8-bd9c-11e3-8545-0d578f78ffdf CSeq: 58062147 REGISTER Contact: <sip:gw+DIDLogic@5.9.23.171:5080;transport=udp;gw=DIDLogic>;expires=3600, <sip:gw+DIDLogic@144.76.109.73:5080;transport=udp;gw=DIDLogic>;expires=3150, <sip:gw+DIDLogic@144.76.98.11:5080;transport=udp;gw=DIDLogic>;expires=3010, <sip:gw+DIDLogic@5.9.201.120:5080;transport=udp;gw=DIDLogic>;expires=2869, <sip:gw+DIDLogic@144.76.98.12:5080;transport=udp;gw=DIDLogic>;expires=1281, <sip:gw+DIDLogic@5.9.201.121:5080;transport=udp;gw=DIDLogic>;expires=2545 Content-Length: 0
/************************************************************************************************************** problematic server
***************************************************************************************************************/
2014-04-06 09:32:05.472850 [NOTICE] sofia_reg.c:423 Registering DIDLogic send 894 bytes to udp/[46.165.252.40]:5060 at 06:32:05.492557: ------------------------------------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 144.76.98.11:5080;rport;branch=z9hG4bKUZ0p2Fjget1KN Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net> Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892398 REGISTER Contact: <sip:gw+DIDLogic@144.76.98.11:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia /1.2.23+git~20140317T213443Z~769a03a629~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: path, replaces Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0DtvVNA7JFDwqn/iKN2y0i7jjJF/xDpK+45ZYA=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="8aaadef8769d2234def69a699c53f95c", qop=auth, nc=0000018e Content-Length: 0
------------------------------------------------------------------------ recv 446 bytes from udp/[46.165.252.40]:5060 at 06:32:05.520506: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 144.76.98.11:5080;rport =5080;branch=z9hG4bKUZ0p2Fjget1KN From: <sip:95299@sip.de.didlogic.net>;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net
;tag=b27e1a1d33761e85846fc98f5f3a7e58.437e Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892398 REGISTER WWW-Authenticate: Digest realm="sip.de.didlogic.net", nonce="U0D2EVNA9OVIqS6bUrch5649kHnuK6PXK/Fii4A=", qop="auth" Content-Length: 0
------------------------------------------------------------------------ send 894 bytes to udp/[46.165.252.40]:5060 at 06:32:05.520845: ------------------------------------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 144.76.98.11:5080;rport;branch=z9hG4bKv8SF4a3KB3Q6g Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net> Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892399 REGISTER Contact: <sip:gw+DIDLogic@144.76.98.11:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia /1.2.23+git~20140317T213443Z~769a03a629~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: path, replaces Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0D2EVNA9OVIqS6bUrch5649kHnuK6PXK/Fii4A=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="3dc99375cf925ad9af145899dcf83b1a", qop=auth, nc=0000018f Content-Length: 0
------------------------------------------------------------------------ recv 446 bytes from udp/[46.165.252.40]:5060 at 06:32:05.536657: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 144.76.98.11:5080;rport =5080;branch=z9hG4bKv8SF4a3KB3Q6g From: <sip:95299@sip.de.didlogic.net>;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net
;tag=b27e1a1d33761e85846fc98f5f3a7e58.b648 Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892399 REGISTER WWW-Authenticate: Digest realm="sip.de.didlogic.net", nonce="U0D2EVNA9OUTYGscaPkV4MvAB1IDDtpQK/FjjIA=", qop="auth" Content-Length: 0
------------------------------------------------------------------------ 2014-04-06 09:32:05.532842 [ERR] sofia_reg.c:2110 DIDLogic Registration Failed with status Unauthorized [401]. failure #72 2014-04-06 09:32:06.472844 [WARNING] sofia_reg.c:478 DIDLogic Failed Registration [904], setting retry to 2160 seconds.
---------- Forwarded message ---------- From: Brian West <brian@freeswitch.org> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Date: Mon, 7 Apr 2014 16:41:03 -0500 Subject: Re: [Freeswitch-users] [ERR] sofia_reg.c:2110 "some gateway" Registration Failed with status Unauthorized [401]. failure #37 (Snabel Kaabiya) (Brian West) THIS LINE:
WWW-Authenticate: Digest realm="sip.de.didlogic.net", nonce="U0FtMFNBbARsF99U0eRscR/9s7cQ6Y2ULDJAKIA=", qop="auth"
should read:
WWW-Authenticate: Digest realm="sip.de.didlogic.net", nonce="U0FtMFNBbARsF99U0eRscR/9s7cQ6Y2ULDJAKIA=", qop="auth", stale="true"
-- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
It's not the first request because it's sending a challenge response using a nonce, which it must have received in a previous challenge (401)... It can't just make that up. On Tuesday, April 8, 2014, Snabel Kabiya <snabel@lexifone.com> wrote:
please see inline:
_________________________________________________________________________
---------- Forwarded message ---------- From: Michael Jerris <mike@jerris.com<javascript:_e(%7B%7D,'cvml','mike@jerris.com');>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>
Cc: Date: Tue, 8 Apr 2014 05:52:55 -0400 Subject: Re: [Freeswitch-users] [ERR] sofia_reg.c:2110 "some gateway" Registration Failed with status Unauthorized [401]. failure #37 (Snabel Kaabiya) That isn't the first register request.
*[SNABEL*] But in the logs i see Registering DIDLogic then the register request i sent. how did you know it's not the first request?
Thanks,
2014-04-06 09:32:05.472850 [NOTICE] sofia_reg.c:423 *Registering DIDLogic* send 894 bytes to udp/[46.165.252.40]:5060 at 06:32:05.492557: ------------------------------ ------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 144.76.98.11:5080;rport;branch=z9hG4bKUZ0p2Fjget1KN Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net<javascript:_e(%7B%7D,'cvml','sip:95299@sip.de.didlogic.net');>
;tag=XK0KSD17jemDN To: <sip:95299@sip.de.didlogic.net<javascript:_e(%7B%7D,'cvml','sip:95299@sip.de.didlogic.net');>
Call-ID: de332712-ba83-11e3-b33f-0dc96adc5bb0 CSeq: 57892398 REGISTER Contact: <sip:gw+DIDLogic@144.76.98.11:5080;transport=udp;gw=DIDLogic> Expires: 3600 User-Agent: FreeSWITCH-mod_sofia /1.2.23+git~20140317T213443Z~769a03a629~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Supported: path, replaces Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0DtvVNA7JFDwqn/iKN2y0i7jjJF/xDpK+45ZYA=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="8aaadef8769d2234def69a699c53f95c", qop=auth, nc=0000018e Content-Length: 0
On Apr 8, 2014, at 3:11 AM, Snabel Kabiya <snabel@lexifone.com> wrote:
Hi,
Thank you, but since it will be really difficult to convince our provider to change their response, I'm trying to resolve the issue from our side.
I've noticed that in the problematic servers this header:
Authorization: Digest username="username", realm="sip.de.didlogic.net", nonce="U0DtvVNA7JFDwqn/iKN2y0i7jjJF/xDpK+45ZYA=", cnonce="tZUwATUmEjKDKHBU0sVf8A", algorithm=MD5, uri="sip:sip.de.didlogic.net;transport=udp", response="8aaadef8769d2234def69a699c53f95c", qop=auth, nc=0000018e
is sent in the first REGISTER request, could this cause the issue? any ideas?
why would freeswitch sometimes send this header in the first REGISTER request? is this related to the new version 1.2.23? is it configurable in freeswitch, when to add this header and when not?
Thanks, Snabel
/************************************************************************************************************** Working server
***************************************************************************************************************/ 2014-04-06 18:00:20.896614 [NOTICE] sofia_reg.c:418 Registering DIDLogic send 618 bytes to udp/[46.165.252.40]:5060 at 15:00:20.898875:
------------------------------------------------------------------------ REGISTER sip:sip.de.didlogic.net;transport=udp SIP/2.0 Via: SIP/2.0/UDP 5.9.23.171:5080;rport;branch=z9hG4bKXrH2QjNrt081K Max-Forwards: 70 From: <sip:95299@sip.de.didlogic.net>;tag=4eaeaXtSSUc3a To: <sip:95299@sip.de.didlogic.net> Call-ID: 2c4ba5f8-bd9c-11e3-8545-0d578f78ffdf CSeq: 58062146 REGISTER Contact: <sip:gw+DIDLogic@5.9.23.171:5080;transport=udp;gw=DIDLogic> Expires: 3
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
This is a bug in the provider, If they want to start auth over they should say stale=‘true’, this way the NC will start back at 1. not 18e -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Apr 8, 2014, at 7:07 AM, Steven Ayre <steveayre@gmail.com> wrote:
It's not the first request because it's sending a challenge response using a nonce, which it must have received in a previous challenge (401)... It can't just make that up.
participants (3)
-
Brian West
-
Snabel Kabiya
-
Steven Ayre