Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - Graham_M

Pages: [1]
1
Yate users hangout place / SIP line logon failure 401: Unauthorized
« on: September 06, 2017, 11:44:27 PM »
Hi,

I am fairly new to Yate and would like some guidance on debugging an issue I can not solve.

My setup: I have two instances of Yate running as SBCs; the first is using the standard package in Ubuntu (5.4.0 1 r5880) while the second I have compiled from source (5.5.1 devel1 r6255).  I have two upstream registrations to DID Logic on each.

This works correctly for some time.  Each registers without issue and is able to make calls until at some stage, when we attempt to renew the registration, I get a 401 Unauthorised.

I have spoke to DID Logic and they suggest the issue is with the way we are handling nonce.

The only recovery I can find is to stop and restart the yate daemon.  I have not been able to find any trigger for this and in fact, it can run for hours to days without issue.  But when it fails, it never recovers without intervention.

Additional details.  Each instance of Yate has two registrations to DID Logic (one is for domestic calls, the other International).  Both fail at the same time however do not fail on the other SBC at the same time.  The issue is also evident when only a single registration on a single instance of Yate is used (ie, it's not related to conflict between sessions).  The issue and recovery is the same on version 5.4.0 and 5.5.1.

Where and how do I begin to diagnose this please?

Regards,
Graham


2017-09-07_06:28:54.008123 <sip:INFO> 'udp:0.0.0.0:5060' sending 'REGISTER sip:sip.au.didlogic.net:5060' 0x7f0a60007950 to 119.9.12.222:5060 [0x21d3d70]
------
REGISTER sip:sip.au.didlogic.net:5060 SIP/2.0
Contact: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@103.233.yyy.yy:5060>
Expires: 600
To: <sip:xxxxx@sip.didlogic.net>
Call-ID: 173221880@sip.didlogic.net
Via: SIP/2.0/UDP 103.233.yyy.yy:5060;rport;branch=z9hG4bK247176001
From: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@sip.didlogic.net>;tag=1875382347
CSeq: 155 REGISTER
User-Agent: YATE/5.5.1
Max-Forwards: 70
Allow: ACK, INVITE, BYE, CANCEL, REGISTER, REFER, OPTIONS, INFO
Content-Length: 0
------
SIP/2.0 401 Unauthorized
To: <sip:xxxxx@sip.didlogic.net>;tag=b27e1a1d33761e85846fc98f5f3a7e58.4889
Call-ID: 173221880@sip.didlogic.net
Via: SIP/2.0/UDP 103.233.yyy.yy:5060;rport=5060;branch=z9hG4bK247176001;received=103.233.yyy.yy
From: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@sip.didlogic.net>;tag=1875382347
CSeq: 155 REGISTER
WWW-Authenticate: Digest realm="sip.didlogic.net", nonce="WbBbslmwWobEtIzCDtJooKG5bWSTpUPa3qzVIYA=", qop="auth"
Content-Length: 0
------
REGISTER sip:sip.au.didlogic.net:5060 SIP/2.0
Contact: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@103.233.yyy.yy:5060>
Expires: 600
To: <sip:xxxxx@sip.didlogic.net>
Call-ID: 173221880@sip.didlogic.net
Via: SIP/2.0/UDP 103.233.yyy.yy:5060;rport;branch=z9hG4bK1969978764
From: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@sip.didlogic.net>;tag=1875382347
User-Agent: YATE/5.5.1
Max-Forwards: 70
Allow: ACK, INVITE, BYE, CANCEL, REGISTER, REFER, OPTIONS, INFO
CSeq: 156 REGISTER
Authorization: Digest username="xxxxx", realm="sip.didlogic.net", nonce="WbBbslmwWobEtIzCDtJooKG5bWSTpUPa3qzVIYA=", uri="sip:sip.au.didlogic.net:5060", response="25751cd4d4cff6be877d7609fbc027f3", algorithm=MD5, qop=auth, nc=0000009c, cnonce="1e0fa4702bd9fa79d51f9c91f4be1dd8"
Content-Length: 0
------
SIP/2.0 200 OK
To: <sip:xxxxx@sip.didlogic.net>;tag=b27e1a1d33761e85846fc98f5f3a7e58.0b57
Call-ID: 173221880@sip.didlogic.net
Via: SIP/2.0/UDP 103.233.yyy.yy:5060;rport=5060;branch=z9hG4bK1969978764;received=103.233.yyy.yy
From: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@sip.didlogic.net>;tag=1875382347
CSeq: 156 REGISTER
Contact: <sip:xxxxx@103.233.yyy.yy:5060>;expires=600
Content-Length: 0
------
2017-09-07_06:28:54.153073 <sip:CALL> SIP line 'didlogic-au' logon success to 119.9.12.222:5060

[Time passes - calls flow normally]

------
SIP/2.0 401 Unauthorized
To: <sip:xxxxx@sip.didlogic.net>;tag=b27e1a1d33761e85846fc98f5f3a7e58.8503
Call-ID: 173221880@sip.didlogic.net
Via: SIP/2.0/UDP 103.233.yyy.yy:5060;rport=5060;branch=z9hG4bK1561434704;received=103.233.yyy.yy
From: "xxxxx to sip.au.didlogic.net" <sip:xxxxx@sip.didlogic.net>;tag=521812222
CSeq: 218 REGISTER
WWW-Authenticate: Digest realm="sip.didlogic.net", nonce="WbCST1mwkSNWre0SwUZarFKx2E+PTcdh4A0WA4A=", qop="auth"
Content-Length: 0

------
2017-09-07_10:21:55.126349 <sip:WARN> SIP line 'didlogic-au' logon failure 401: Unauthorized



Pages: [1]