[Freeswitch-users] 401 Unauthorized in iptel external gateway

Anita Hall anita.hall at simmortel.com
Mon Feb 27 01:11:24 MSK 2012


I could register using credentials shared by Denis from an Amazon EC2
instance (which is on public IP) but not from my local home machine which
has a dynamic IP (behind the broadband provider's NAT).

The scenario where it worked went like this:

FS -> IPTEL SIP Request: REGISTER sip:sip.iptel.org;transport=udp
IPTEL -> FS  SIP Status: 401 Unauthorized    (0 bindings)
FS -> IPTEL SIP Request: REGISTER sip:sip.iptel.org;transport=udp
IPTEL -> FS SIP Status: 200 OK    (1 bindings)


Siptrace for scenario where it is not working:

   ------------------------------------------------------------------------
   REGISTER sip:sip.iptel.org;transport=udp SIP/2.0
   Via: SIP/2.0/UDP 122.176.168.104:5080;rport;branch=z9hG4bKjS09v88N9p59K
   Max-Forwards: 70
   From: <sip:xxxxx at sip.iptel.org;transport=udp>;tag=mr5aK9Kae2NUc
   To: <sip:xxxxxx at sip.iptel.org;transport=udp>
   Call-ID: 8a54537e-60c5-11e1-bad3-d7306514fb4e
   CSeq: 24810914 REGISTER
   Contact: <sip:gw+iptel at 122.176.168.104:5080;transport=udp;gw=iptel>
   Expires: 3600
   User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-0c715f1 2012-02-24
15-41-16 -0800
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO,
REGISTER, REFER, NOTIFY
   Supported: timer, precondition, path, replaces
   Content-Length: 0

   ------------------------------------------------------------------------
nta: resent REGISTER (24810914) to udp/217.9.36.145:5060
tport_pend(0x96a8c98): pending 0x983f808 for udp/192.168.1.2:5080 (already
0)
nta_outgoing_timer: 1/1 resent, 0/1 tout, 0/0 term, 0/1 free
nta: timer set next to 4000 ms
tport_wakeup_pri(0x96a8c98): events IN
tport_recv_event(0x96a8c98)
tport_recv_iovec(0x96a8c98) msg 0x970e400 from (udp/192.168.1.2:5080) has
719 bytes, veclen = 1
recv 719 bytes from udp/[217.9.36.145]:5060 at 22:06:19.632972:
   ------------------------------------------------------------------------
   SIP/2.0 401 Unauthorized
   Via: SIP/2.0/UDP 192.168.1.2:5080
:5080;rport=14802;branch=z9hG4bKjS09v88N9p59K
   From: <sip:xxxxxx at sip.iptel.org;transport=udp>;tag=mr5aK9Kae2NUc
   To: <sip:xxxxxx at sip.iptel.org
;transport=udp>;tag=f18024bbca64dd60f33bcd92c390ee0f-cdb3
   Call-ID: 8a54537e-60c5-11e1-bad3-d7306514fb4e
   CSeq: 24810914 REGISTER
   Expires: 600
   Min-Expires: 240
   WWW-Authenticate: Digest realm="iptel.org",
nonce="T0quXk9KriLfzN6ysUPoBERFuiQMzRs+"
   Server: ser (3.3.0-dev0 (i386/linux))
   Content-Length: 0
   Warning: 392 217.9.36.145:5060 "Noisy feedback tells:  pid=868
req_src_ip=122.176.168.104 req_src_port=14802
in_uri=sip:sip.iptel.org;transport=udp
out_uri=sip:sip.iptel.org;transport=udp via_cnt==1"

   ------------------------------------------------------------------------
tport_deliver(0x96a8c98): msg 0x970e400 (719 bytes) from udp/
217.9.36.145:5080/sip next=(nil)
nta: received 401 Unauthorized for REGISTER (24810914)
nta: 401 Unauthorized has fatal syntax errors
nta: timer E fired, retransmit REGISTER (24810914)
tport_release(0x96a8c98): 0x983f808 by 0x971ccd8 with (nil)
tport_tsend(0x96a8c98) tpn = udp/217.9.36.145:5060
tport_resolve addrinfo = 217.9.36.145:5060
tport_by_addrinfo(0x96a8c98): not found by name udp/217.9.36.145:5060
tport_vsend(0x96a8c98): 657 bytes of 657 to udp/217.9.36.145:5060
tport_vsend returned 657
send 657 bytes to udp/[217.9.36.145]:5060 at 22:06:23.387211:
   ------------------------------------------------------------------------
   REGISTER sip:sip.iptel.org;transport=udp SIP/2.0
   Via: SIP/2.0/UDP 122.176.168.104:5080;rport;branch=z9hG4bKjS09v88N9p59K
   Max-Forwards: 70
   From: <sip:xxxxxx at sip.iptel.org;transport=udp>;tag=mr5aK9Kae2NUc
   To: <sip:xxxxxxxx at sip.iptel.org;transport=udp>
   Call-ID: 8a54537e-60c5-11e1-bad3-d7306514fb4e
   CSeq: 24810914 REGISTER
   Contact: <sip:gw+iptel at 122.176.168.104:5080;transport=udp;gw=iptel>
   Expires: 3600
   User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-0c715f1 2012-02-24
15-41-16 -0800
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO,
REGISTER, REFER, NOTIFY
   Supported: timer, precondition, path, replaces
   Content-Length: 0

   ------------------------------------------------------------------------
nta: resent REGISTER (24810914) to udp/217.9.36.145:5060
tport_pend(0x96a8c98): pending 0x983f808 for udp/192.168.1.2:5080 (already
0)
nta_outgoing_timer: 1/1 resent, 0/1 tout, 0/0 term, 0/1 free
nta: timer set next to 4000 ms
tport_wakeup_pri(0x96a8c98): events IN
tport_recv_event(0x96a8c98)
tport_recv_iovec(0x96a8c98) msg 0x96a8e88 from (udp/192.168.1.2:5080) has
719 bytes, veclen = 1
recv 719 bytes from udp/[217.9.36.145]:5060 at 22:06:23.911598:
   ------------------------------------------------------------------------
   SIP/2.0 401 Unauthorized
   Via: SIP/2.0/UDP 192.168.1.2:5080
:5080;rport=14802;branch=z9hG4bKjS09v88N9p59K
   From: <sip:xxxxxxx at sip.iptel.org;transport=udp>;tag=mr5aK9Kae2NUc
   To: <sip:xxxxxxx at sip.iptel.org
;transport=udp>;tag=f18024bbca64dd60f33bcd92c390ee0f-cdb3
   Call-ID: 8a54537e-60c5-11e1-bad3-d7306514fb4e
   CSeq: 24810914 REGISTER
   Expires: 600
   Min-Expires: 240
   WWW-Authenticate: Digest realm="iptel.org",
nonce="T0quXk9KriLfzN6ysUPoBERFuiQMzRs+"
   Server: ser (3.3.0-dev0 (i386/linux))
   Content-Length: 0
   Warning: 392 217.9.36.145:5060 "Noisy feedback tells:  pid=868
req_src_ip=122.176.168.104 req_src_port=14802
in_uri=sip:sip.iptel.org;transport=udp
out_uri=sip:sip.iptel.org;transport=udp via_cnt==1"

   ------------------------------------------------------------------------
tport_deliver(0x96a8c98): msg 0x96a8e88 (719 bytes) from udp/217.9.36

Denis, are you behind a NAT?

@Brian, you better take some rest.

regards,
Anita



On Mon, Feb 27, 2012 at 3:24 AM, Brian West <brian at freeswitch.org> wrote:

> SIP TRACE please.
>
> /b
> Sent from my Hospital bed.
>
> On Feb 26, 2012, at 2:14 PM, Vitalie Colosov wrote:
>
> BTW, can you post all 4 queries of one register attempt (1,2,3,4)?
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120227/53567ea0/attachment-0001.html 


Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list